In sql injection we can use this method for all low, medium and high.
Firstly, we will give a number and check the username for that user id.
Then, we will capture the response in burpsuite
we will then make a file and copy and paste the response we captured in bursuite there.
then we will dbs to find out databases to find out the passwords.
finally we will get the encrypted passwords which we will decrypt in the crackstation.
we will then finally get the passwords.
