+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
* - stubz - Dec 25, 2010
i always get confused on the "order by 1--" bit, where do i type it in and stuff?
* - slimshadyLP - Jan 1, 2011
thanks dude .. great tutorial ! Tested and it works
* - giannis28 - Jan 2, 2011
nice tut!!Thanks!!✌✌✌
* - PanParagon - Jan 2, 2011
(Dec 25, 2010 03:14 PM)stubz Wrote: i always get confused on the "order by 1--" bit, where do i type it in and stuff?
you type it in page url, where you type: www.google.pl :D
so: site.pl/index.php?id=10 order by 1-- :)
and i have question, why you didn't post a typical errors of sql injection like:
Code
Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION' ( for: article.php?id=139 union all select 1,2,@@version,4,5,6,7,8,9--)Code
The used SELECT statements have a different number of columns [i correctly ordered site...]Code
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by 5-- or peoplelink2 = 40 order by 5-- or peoplelink3 = 40 order by 5' at line 1any help?
* - The Axe - Jan 2, 2011
Sweet hacked like 50 sites!!
* - The Axe - Jan 2, 2011
Sweet hacked like 50 sites!!
* - SIM-209986 - Jan 3, 2011
What if I get 403 Error at this point:
union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
* - tequila - Jan 3, 2011
Then your facing WAF and this message is way too short.
* - R 1 P A G 3 - Jan 4, 2011
Very nice.
Um, this really is intresting,
-Tony
* - Nerv - Jan 4, 2011
(Jan 3, 2011 06:52 AM)MaXim Wrote: What if I get 403 Error at this point:
union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
means that sql is pretty much fucked on that site
* - amn3sys - Jan 7, 2011
bookmarked so i can read it tomorrow :) --
* - Peltraw - Jan 8, 2011
Nice.
Helped alot, keep it up. c(;
* - MRHawt - Jan 13, 2011
http://www.lcoastpress.com/journal.php?id=7 union all select 1,2,3,4,5,6,7,8,9--
This gives me "The used SELECT statements have a different number of columns".
what am i supposed to do next? Cant find any column no which is vulnerable.
* - Dimitrije - Jan 14, 2011
NOTE not all sites are vulnerable. ! So what we do with sites which are non vulnerable on SQL Injection??
* - DAG - Jan 15, 2011
I know theres 24 columns on this one website I have, but when I go to do the "union select" part I got confused am I supposed to list all numbers before 24 or something? its not realley explained...