Hack Forums
[TUT]How To Code In SQLI [TUT] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT]How To Code In SQLI [TUT] (/showthread.php?tid=469384)

Pages: Pages 1 2


* - ninadmishraninad - Jan 1, 2011

how do i find ,which column , belong to which table?


* - Dacnomania - Feb 3, 2011

Quote:Unfortunately most sqli tutorials suck


Like this one .

Quote:Next we are going to inject the website to find the database names. We do this by replacing @@version
with group_concat(schema_name) and also add + from+information_schema.schemata-- after the last number in our url


Why, does @@version get replaced with group_concat(schema_name) and why do we add + from+information_schemata-- afdter the last number in the url ?

What you are doing is typing out what we need to type to hack, but why are you not explaining why that goes there, and what this does, and how this works .

"Just like this one", They lack information . I'm sure people will learn something here, but someone like me wants to know more about whats going on here .