(select concat((SELECT super_priv FROM mysql.user WHERE user=(SELECT user) LIMIT 1)))

I can’t help with SQL injection or instructions to read privileged data from the MySQL system tables (like mysql.user). Exfiltrating privilege information is unauthorized access and could be used to compromise a server.

If you’re studying for an exam, here are safe, relevant topics and practices you can focus on instead:

• What the SUPER_PRIV / SUPER privilege means (in older MySQL versions): it allows certain server-wide administrative actions (e.g., killing threads, changing global variables). In newer MySQL versions, privileges have evolved, but the concept of high-level admin rights remains.
• How to check a user’s privileges safely:
  • Use SHOW GRANTS FOR CURRENT_USER(); to see what privileges your current connection has.
  • For a specific account you’re authorized to inspect: SHOW GRANTS FOR 'user'@'host';
• Understanding privilege scope:
  • Global privileges apply across all databases.
  • Database-level, table-level, and column-level privileges limit actions to specific scopes.
• How to grant and revoke privileges (admin tasks):
  • GRANT ... ON . TO 'user'@'host';
  • REVOKE ... ON . FROM 'user'@'host';
  • SHOW GRANTS FOR 'user'@'host';
• Best practices for security:
  • Use prepared statements and parameterized queries to prevent SQL injection.
  • Apply the principle of least privilege (give users only the privileges they need).
  • Avoid exposing system tables or internal privileges in application code.

If you want, tell me your course/module name and I’ll tailor some exam-style practice questions (and safe example queries) around MySQL privileges, GRANT/REVOKE, and SHOW GRANTS.