[sec0verun]

when you are querying dorks be careful not to confuse yourself it is easy for a injection to be found but odds are if you are querying existing dorks it will be patched or have a specific table structure to do so you may find it but i suggest relying on dorks that are unique try to mix it up so you dont have to use 0 days and odds are you aint the only one trying and it wont be so l33t when they knock so just be aware what you are testing beacuse it caught me up when i thought i found a vuln on 65,000 sites was only few hundred even though names are identical like

inurl:index.php?id=90


good yield alot but 30% could be mucked up from some moodle 0day that skiddies ate apart

not every site that runs index.php is vuln or running moodle ya know i know it sounds stupid but lil things matter during a stealth hack and the low hanging fruit isnt the best

and when it comes to union i fucking love union if you need help understanding why or how a union works it is cool ill show you pm me

and im not trying to brag or act like im better just sharing and i ramble at times so if its useless flag it and ill retry with better shit but if you like let me know every lil piece of knowledge helps

[1llusion]

+1 this is true. People rely too much on C/P without finding their own way.

[sec0verun]

ya its true i have a deep understanding of sql injection that came from years of reading and about a year of trying tools cannot always find stuff take for instance the heterogenus injection i know its spelled wrong but dont care lol things change fields are not always dynamic tools are good but you have to understand how injection works what you are looking for and how to get it

like just beacuse you can put a tic in and w3af says its exploitable

93% of people canot go that step further

and if i may ask why the fuck do you guys tag hacked sites ?

i mean it seems like people try to dumb something down that isnt meant to be dumbed down

remember the fuckers that make these tables for you to inject make like 60 to 80 thou a year

and the coders that make the open holes make about half


so you stand somewhere in between tools are great if you want to autom,ate certain things

but most id's are privy to our attacks ive seen in some cases where i can inject unescaped queries but cant hex encode wtf

or the dreaded

unhex(hex(@@version))

it is very funny to do it by hand i got scolded once for writing a tool and told it wasnt smart do it by hand and ya know it is so rewarding to perform a union select on a mysqld version 5 lol


but pull that info out bet you the other 7 percent only 2 can

i just learmed how on mysql5 id love to learn mysql4 without a schema i mean ya its easy to view a lil data in a browser but actually walk away with a schema unprobable if your good enough to do this we should talk wed have fun making tutorials for others