[Help] Sql injection with magento 2

[90]

Hi guys,
I am trying to practice sql injection skills with magento 2
Error:

Code:

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax

When I use with sqlmap:

Code:

[ERROR] unable to retrieve the table names for any database
do you want to use common table existence check? [y/N/q]
No tables found

I reverted to using hackbar:

Code:

and updatexml from admin_user limit 0,1

But the displayed character length is not enough. 
Result: 

Code:

1:admin:127249b42f3d6faa3180c8

How to solve this problem?  

---

This is a bump