[M00N66]

I really want to learn more about SQL Dumping, SQL Injecting, etc. However tutorials do not explain essential concepts that seem to be constantly prevalent. For instance, Dorks. I actually fail to understand what these are and how to obtain/filter them. If someone could link me to a real tutorial from an attackers AND hosts standpoint I would appreciate it. SQL Always intrigued me.

[Mats0o0o0]

i can teach you all this buddy feel free to contact me and take a look to my thread

[mothered]

I realize this thread Is over 2 weeks old, but I've completely missed It.

First and foremost, do you have knowledge of the SQL language?

[M00N66]

I realize this thread Is over 2 weeks old, but I've completely missed It.

First and foremost, do you have knowledge of the SQL language?

Kind of sort of. I know about the methods it utilizes.

[mothered]

I realize this thread Is over 2 weeks old, but I've completely missed It.

First and foremost, do you have knowledge of the SQL language?

Kind of sort of. I know about the methods it utilizes.

I suggest to at least learn the basics of SQL- how to select, query and manipulate databases. This will significantly help to understand how and why SQLi attacks (In-Band, Union-Based, Boolean-Based, Inferential/Blind) work.

As a starting point, no need to go through each function, clause, constraint, operator and so forth. As you advance, SQL proficiency Is paramount.

[tschaikowsky]

Learn SQL and PHP for understanding what you do...
otherwise do it like 99% of the Internet and use 1337 Haxxor Tool SQLi Dumper and be part of the script kiddy community

[M00N66]

Learn SQL and PHP for understanding what you do...
otherwise do it like 99% of the Internet and use 1337 Haxxor Tool SQLi Dumper and be part of the script kiddy community

SQL Tools suck, just like 75% of already patched GUI checkers, Bruters, etc. Lmao.

[mothered]

SQL Tools suck

They certainly do.

Once you've attained the above-mentioned knowledge, you won't need the tools. I perform everything manually, which Is far better than wasting time with a given tool for hours on end.

[tschaikowsky]

If you have never Exploited/Injected manually by Hand, you will never have high level targets, because most waf/ids filtering '

[mothered]

If you have never Exploited/Injected manually by Hand, you will never have high level targets, because most waf/ids filtering '

Agree.

A given tool will not be much help when the WAF kicks In.