+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
- Back_track - Mar 6, 2009
Thanks I've been looking for something like this for a long time
- gilapepe - Mar 6, 2009
Thanks man...very good TUT for Newbies like me....
Keep good Posting Man...
GBU
- Nerv - Mar 6, 2009
now u know this why not read my new tut
blind sql injection
https://hackforums.net/showthread.php?tid=56326
why mysql injection doesnt work
or the site isnt vulnerable
try the blind way and see if its vuln
:D
- Uchiha-Itachi - Mar 8, 2009
Nice tut all your tut are the best;) see you
- Uchiha-Itachi - Mar 8, 2009
nice tut i like it thanks
- b1n4ry burn3r - Mar 9, 2009
Good tutorial, thanks!
- Nerv - Mar 10, 2009
XD havent noticed many people looking at the blind sql injection tut
if u wanna learn how 2 hack sql injection good
u need 2 learn this
seriously u will find another huge amount of the 60% websites that are vulnerable to sql injection
blind link =
https://hackforums.net/showthread.php?tid=56326
- itswink - Mar 14, 2009
here is an example of one that works for you to try out....
http://www.ouronlineregistry.com/welcome/AdministratorLogin.asp
username: Admin
Pass: ' or '1'='1
- Nerv - Mar 14, 2009
lol that is one way
or i have found a way to extract info like the db type and much more
of almost any asp login page
by generating errors
i will be posting the tut
named
advanced sql injection in login pages
lol i just found these table/column names :P
blAdministrator.AdministratorID, tblAdministrator.AdministratorName, tblAdministrator.AdministratorPassword, tblAdministrator.QueryStringKey, tblAdministrator.AdministratorEmail, tblAdministrator.Access_ID, tblAdministrator.RegistryCount_Max, tblAdministrator.DoShowInstruction, tblAdministrator.DateCreated
i might make a video tut will send youtube link
- uzishotz - Mar 16, 2009
Could you please pm me the link? Thanks :D nice tut.
- Nerv - Mar 22, 2009
lol it hasnt been posted yet
ima make a video example as well as a tutorial
- Zw4R - Apr 1, 2009
Nice tut .Thx.Daniel what about sqlmap? can we use that tool for sql injection? when eva i am using that tool user name is rretrieved but it shows error while retreiving password.why so?
- Nerv - Apr 2, 2009
coz its a blind sql injection tool
plus tools are just the n00by way out
there is no real talent needed
meaning you rely on a program
so really
you arent hacking
the program is
i use 1 program
the firefox addon
hackbar
all it does
is make it a bit quicker
by entering the selected available queries
:P
- Zw4R - Apr 2, 2009
Daniel.
i got admin pass and username by this tut thanks.but i am able to login thru admin panel (i.e,www.xxx/admin) i can only edit contents but how to deface it ? someone asked me to upload shell.but how to ?
- ashmafia - Apr 2, 2009
thk it really help really nice