Sinisterly
How to find the Vul SQLi on the site - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: How to find the Vul SQLi on the site (/Thread-How-to-find-the-Vul-SQLi-on-the-site)

Pages: 1 2


RE: How to find the Vul SQLi on the site - blackcobra - 03-01-2013

(02-28-2013, 09:19 PM)Faner Wrote: Some websites uses that mod_rewrite or something like that, to change url.
For example I have seen the webpage
Code:
http://www.website.com/articles/science/spaceship_fuel.html
and after few tests turned out, that "spaceship_fuel" is GET parameter for sql. So to find sql injection vulnerability you need luck, experience and some brains. Basic web programming knowledge also helps.

Could u explain more clearly?


RE: How to find the Vul SQLi on the site - kyubiSSJ - 04-01-2013

wowow