My SQL injection complete tutorial :)

My SQL injection complete tutorial :) - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: My SQL injection complete tutorial :) (/Thread-My-SQL-injection-complete-tutorial)

Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

RE: My SQL injection complete tutorial :) - yxzy - 12-09-2012

Thanks but i think i saw a problem with it, when i was doing a site i saw it had 36 colums and it opened normal (I wasnt using the -) and then on 37 i got "Unknown column '37' in 'order clause' "
But then when i add the dash i get an sql error...

RE: My SQL injection complete tutorial :) - soldi3r - 12-10-2012

nice effort.. Smile

thanks man.. Smile

RE: My SQL injection complete tutorial :) - V1P3R - 12-13-2012

anytime guys Smile

im glad people still looking at my tutorial

RE: My SQL injection complete tutorial :) - Faner - 12-14-2012

(12-09-2012, 06:13 PM)yxzy Wrote: Thanks but i think i saw a problem with it, when i was doing a site i saw it had 36 columns and it opened normal (I wasnt using the -) and then on 37 i got "Unknown column '37' in 'order clause' "
But then when i add the dash i get an sql error...

In that case you should try blind injection with substring.
For example

Quote:site.com?id=15 and substring(@@version,1,1)=4

if page loads normally, then mysql version is 4. If some content of page is missing, then it's different, change 4 to 5 and try again.
I believe you can find tutorial on blind sqli on this forum. just use search.

RE: My SQL injection complete tutorial :) - Techie - 12-16-2012

Nice and HQ tutorial, thank you.

RE: My SQL injection complete tutorial :) - vqoley - 12-18-2012

very nice bro. i like use inurl: admin page. :-)

RE: My SQL injection complete tutorial :) - Sariki - 12-18-2012

Thank you for the amazing TuT I am going to be trying this now I really do appreciate it!

RE: My SQL injection complete tutorial :) - h4ckcode - 12-19-2012

Great i will try that .. thanks alot for the knowlegde..