Login Register






The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Thread Rating:
  • 0 Vote(s) - 0 Average


Help With SQL Injection filter_list
Author
Message
Help With SQL Injection #1
OK, so the vulnerable URL that I'm attacking has only one column and the only way to retrieve data from that column is to generate an error. The column normally accepts an int value so any string value returns an error. However, when I try to cast an int to a string as to return an error like:

union select convert(varchar,zip) from address

I don't get an error. How can I generate one?
Additionally, conversion to type text only gives the error "Operand type clash: text is incompatible with int".

Reply

RE: Help With SQL Injection #2
sow me the site and i will see if i can help you
[Image: 6caf54.gif]

Reply

RE: Help With SQL Injection #3
sow me the site and i will see if i can help you
[Image: 6caf54.gif]

Reply

RE: Help With SQL Injection #4
http://www.timeimports.com/designer-watc...sp?SFVID=1

Reply

RE: Help With SQL Injection #5
http://www.timeimports.com/designer-watc...sp?SFVID=1

Reply







Users browsing this thread: 1 Guest(s)