+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
* - TMNSquirtle - Feb 26, 2011
So theres no tool for this it's just typing those weird series into a data base until it auth bypasses you?
* - shomb - Mar 3, 2011
thanks but it should have been written in a more cohesive english, as it seems was written by someone in a rush, for example "http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names "
doesnt make any sense,seriously if you wanna make a good thread with some good explanation i suggest to take some time and actually put some effort.
* - Killi0naire93 - Mar 4, 2011
(Mar 3, 2011 01:52 AM)shomb Wrote: thanks but it should have been written in a more cohesive english, as it seems was written by someone in a rush, for example "http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names "
doesnt make any sense,seriously if you wanna make a good thread with some good explanation i suggest to take some time and actually put some effort.
Chill man. Lets see you make a tutorial that is better than this. Then your point will be valid.
Besides that nice post really helpful.
* - GhostAKF - Mar 4, 2011
Hello everybody
welcome to my tutorail on Total SQL injection tool download link: http://www.fileshift.com/forms/receive.html?fid=cc8a81544669ea2af112d3f53a25ab1f6412
Total SQL injection tool is composed of:
-Dorks finder
-injection tool
-admin finder
-Md5 finder
BEFORE USE IT
1_ Disable your anti-virus before run it because it's detect as a trojan but it's not one.
2_ Double click on the setup to install end find website like : http://mywebsite.com/index.php?id=1 using dorks bellow
trainers.php?id=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
Pageid=
games.php?id=
newsDetail.php?id=
staff_id=
historialeer.php?num=
product-item.php?id=
3_ Copy and past the url in the tool and click inject -let the tool hackes the website for you-
4_use the admin finder the find the admin control panel
5_ use md5 finder to find the password hashed
6_ enjoy!!
* - REALTOR - Mar 12, 2011
Quote:part 2: injecting sql queries to extract the admin username and password
ok so lets say we have a site :
http://www.xx.com/index.php?catid=1
there is a list of dork 4 sites lyk this
"inurl:index.php?catid="
"inurl:news.php?catid="
"inurl:index.php?id="
"inurl:news.php?id="
or the best in my view "full credit to qabandi for discovering this"
"inurl:".php?catid=" site:xxx"
I am confuzzled. How do we do the inurl: part? Does it go at the end of the url or something..?
* - RR16 - Mar 12, 2011
A long, but great tut. Keep it up.
* - innsett - Mar 12, 2011
Very well written, in plain language.
Nice job of communicating the main points.
👍
(Mar 12, 2011 03:54 PM)ThePunishment Wrote: I am confuzzled. How do we do the inurl: part? Does it go at the end of the url or something..?
Those are "dorks" he posted. Their used to be put in google to search for site that may be vulnerable.
So like in google you would put "inurl:index.php?catid=" and it would search sites with that in the url.
From there just follow the steps.
* - bholzer - Mar 13, 2011
Pretty good tutorial! Keep stuff like this coming
* - AnonSpirit - Mar 15, 2011
wow cool tut if youd add some pictures woud be nice
* - Avectius - Mar 15, 2011
Amazing Guide! =) Loving it.
* - xSk0rp - Mar 16, 2011
Nice ,I inject a lot of sites with this tutorial!
* - yea its alex - Mar 17, 2011
explaind a lot of stuff to me thank you
* - nofinishline - Mar 20, 2011
cool,
it was great TUT.
thanks mate
* - Infinity. - Mar 20, 2011
Awesome awesome , bro it was really cool TUT
* - lukissluki - Mar 21, 2011
this is very good
message too short