(11-07-2012, 11:41 PM)st0rmy Wrote: Great tutorial, very detailed... However i have some questions regarding SQL injection, i hope you can help me out. I use Havij (it is quick and i can do it to more than one site at the same time) anyway. Some times i lay hands on the password encrypted with md5 (most of the times thats not an issue) but when i decrypt it and try to log in the admin's index php page, i get a password error ALWAYS. and my questions is: why is that? i mean i have the full tables, passwords and data at my disposal and still cant log in, i am studding computer networking an security but i am noob regarding hacking, so please any explanation would be good for both curiosity and educational purposes... thx in adv.