+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: How to hack this error? (/Thread-How-to-hack-this-error)
Pages:
1
2
How to hack this error? - blackcobra - 02-19-2013
Hi,
When I check SQli with ' i get error for SQLi but when I order by 1-- there is no error
http://example/product_info.php?Path=25_35&products_id=31251'
The error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '31251' and pd.language_id = '1' and p.products_status=1' at line 1
select p.products_id, pd.products_name, pd.products_description, p.products_model, p.products_quantity, p.products_image, pd.products_url, p.products_price, p.products_tax_class_id, p.products_date_added, p.products_image_xl_6, p.products_date_available, p.manufacturers_id from products p, products_description pd where p.products_id = '31251\' and pd.products_id = '31251' and pd.language_id = '1' and p.products_status=1
How I can hack with that?
RE: How to hack this error? - Techie - 02-19-2013
Follow this tutorial it might help you.
http://www.hackcommunity.com/Thread-Tutorial-Hacking-Webserver-by-SQL-Injection
RE: How to hack this error? - blackcobra - 02-19-2013
(02-19-2013, 11:45 AM)τhε.τhinkεr Wrote: Follow this tutorial it might help you.
http://www.hackcommunity.com/Thread-Tutorial-Hacking-Webserver-by-SQL-Injection
I follow already but when i use order by 1-- it redirect to homepage.
RE: How to hack this error? - Techie - 02-19-2013
(02-19-2013, 04:01 PM)blackcobra Wrote:(02-19-2013, 11:45 AM)τhε.τhinkεr Wrote: Follow this tutorial it might help you.
http://www.hackcommunity.com/Thread-Tutorial-Hacking-Webserver-by-SQL-Injection
I follow already but when i use order by 1-- it redirect to homepage.
Did you try order by 2--;3--;4--...?
RE: How to hack this error? - blackcobra - 02-20-2013
(02-19-2013, 06:48 PM)τhε.τhinkεr Wrote:(02-19-2013, 04:01 PM)blackcobra Wrote:(02-19-2013, 11:45 AM)τhε.τhinkεr Wrote: Follow this tutorial it might help you.
http://www.hackcommunity.com/Thread-Tutorial-Hacking-Webserver-by-SQL-Injection
I follow already but when i use order by 1-- it redirect to homepage.
Did you try order by 2--;3--;4--...?
I tried it already but still redirect to homepage. Do u know anthor method to bypass?
Thanks
RE: How to hack this error? - Techie - 02-20-2013
Nope bro sorry, but you can always PM 1llusion, V1P3R, Wild Hacker etc. maybe they can help you.
RE: How to hack this error? - 1llusion - 02-21-2013
Hi,
there are multiple kinds of SQL injection. The guide explains just one, look up error based SQL injection. Also, there is a difference between injecting an integer value or a string and also there is a difference between ' and ".
I'm not a master of SQLi so these are my two cents.
RE: How to hack this error? - 1llusion - 02-21-2013
Hi,
there are multiple kinds of SQL injection. The guide explains just one, look up error based SQL injection. Also, there is a difference between injecting an integer value or a string and also there is a difference between ' and ".
I'm not a master of SQLi so these are my two cents.
RE: How to hack this error? - blackcobra - 02-21-2013
(02-20-2013, 08:22 PM)τhε.τhinkεr Wrote: Nope bro sorry, but you can always PM 1llusion, V1P3R, Wild Hacker etc. maybe they can help you.PM via skype or yahoo?
RE: How to hack this error? - blackcobra - 02-21-2013
(02-20-2013, 08:22 PM)τhε.τhinkεr Wrote: Nope bro sorry, but you can always PM 1llusion, V1P3R, Wild Hacker etc. maybe they can help you.PM via skype or yahoo?