+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
* - gbro94 - Oct 31, 2010
Hi
on alot of sites where i use the
admin
' or '1'='1
i get acces , but when i try do click on like modify or something
it just kicks me out, someone knows what im doing wrong or is it just the site/script ?
* - 1337pam - Nov 2, 2010
awesome tut, thankss a lot
* - StEp Up! - Nov 3, 2010
thanks buddy nice tut..ill try it
* - almb1111 - Nov 12, 2010
i am having problems plz help me .
I am trying to hack http://www.hawkingtech.com/products/index.php?CatID=1 .
I added a ' and it gave me an error , so it is vulnerable .
I used the "order by " and found at it has 12 columns .
But when i put http://www.hawkingtech.com/products/index.php?CatID=1 union select 1,2,3,4,5,6,7,8,9,10,11,12-- it gives me an error . No numbers show as you said .
Plz tell me what to do .
* - th3peacemaker - Nov 13, 2010
check this
https://hackforums.net/showthread.php?tid=699457
try another site ;D
* - ha_ck - Nov 13, 2010
this good lesson
it's learn my how to hack some sites
* - Epizen - Nov 13, 2010
:/
http://www.nameplate.net/newsID.php?id=1%20union%20select%201,2,3,4,5--
Hacked by a certain someone. This brings up the numbers 2 and 4, however the next query in the TuT doesn't work and returns
http://www.nameplate.net/newsID.php?id=1%20union%20select%201,CONCAT_WS%28CHAR%2832,58,32%29,user%28%29,database%28%29,version%28%29%29,3,4--
Tutorial doesn't specify what happens if this part doesn't work. ^^,
* - h1t4k3 - Nov 14, 2010
A good tutor, nice share..
* - johnyohm - Nov 14, 2010
hey man nice tutorial but i cant do the union thing.. when i do it no number is displayed :( i tried several sites but no numbers display when i do union all select or union select.. please help me out... Thanks! :)
* - johnyohm - Nov 14, 2010
hey man nice tutorial but i cant do the union thing.. when i do it no number is displayed :( i tried several sites but no numbers display when i do union all select or union select.. please help me out... Thanks! :)
* - Nuiok - Nov 19, 2010
This TUT is a copy from a site which was posted 2:17 am
April 2, 2009
http://tinkernut.com/forum/hacks-for-everything/hacking-websites-mysql-injection-basics?value=exploit&type=1&include=1&search=1&ret=all
* - feweR - Nov 20, 2010
Lol nice tutorial. Im begginer and this tut is unique good job
* - bahebakhabibi2009 - Nov 21, 2010
thanks alot for this good tutorial it helps good :)
* - RAMONATER - Nov 21, 2010
Hey man thanks for the tutorial, very nice and well explained although i'm having slight problems,
I am just a newbie but have found numerous errors on sites when i put in the catid=1' i get (error) then when i use order by 1-- (error) order by 1,2-- (error) order by 1,2,3,4-- (error) going up more and is all just errors so how do i know how many columns are ther if i'm getting errors on every one is this right ?
I got my error messeage at start when i entered /index.php?catid=1' so this should work right ?
* - TarGuist - Nov 22, 2010
nie man great
i which i know