Sinisterly
How To Use SQL To Inject Website Admin Panel - N0ob Friendly - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: How To Use SQL To Inject Website Admin Panel - N0ob Friendly (/Thread-How-To-Use-SQL-To-Inject-Website-Admin-Panel-N0ob-Friendly)



How To Use SQL To Inject Website Admin Panel - N0ob Friendly - #Unkn0wn - 08-19-2011


[Image: ieM3OS5Tf.png]

This is a 100% n00b Friendly TuT About Simple SQL Injection
If You Like This TuT Add Your Comments & Rep


------------------------------------------------------

First of all, Open your browser & go to google.com & search this string

Quote:linurl:adminlogin.asp

Now click any site from result, adminlogin.asp as the text after slash

Ex : http://www.amskrupajal.org/AdminLogin.asp

After you open site you will have to use this as the Login Details:

Quote:user: admin
password: 'or''='

Here is more strings can be use - Click Here

This is a simple SQL injection. :epic:


After That you have Logged in as the Administrator, Now Some Things To Note.

1.) In This Website (the example - that is real) the password SQL String, is the main one that works, to Login as the Administrator on That site, you need that SQL String

2.) If you need a Email Address to Login as the user, then you will not be Able to, Using This Tutorial, You Will Have To Look SomeWhere Else

3.) Some Websites Disable SQL Injection Techniques, and in turn will stop SQL Injection Attacks, But there Are some edits you can have to allow SQL, But that is not in This Tutorial

Thanks For Reading My Thread
Happy Hacking!


RE: How To Use SQL To Inject Website Admin Panel - N0ob Friendly - Shining White - 08-19-2011

i'll suggest you some thing , Smile you can read the past tut , before posting Biggrin
btw , nice share Smile