Hack Forums
Detailed Basic and Full SQL Injection Tutorial - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42


- 2nazty4u2handle - Apr 17, 2009

OMG this shit is confusing. This seems like one of the 2 things I wanna specialize in, so I'll be posting in here alot. nice post tho


- Valour - Apr 17, 2009

Thnnnnnxxxxxx for the tut


- tusku - Apr 19, 2009

Nice tutorial. [+]REP for you.  


- TheHackz - Apr 20, 2009

thanks dude, very helpful


- mammoth - Apr 21, 2009

what does it mean when you test for a vuln with the ' and you get an error such as....
Microsoft VBScript runtime error '800a000d'

Type mismatch: 'cLng'

/subscribeplan.asp, line 320


but when you try to ORDER the columns, nothing happens. But it repeats the same error page?

thanks


- Mineral - Apr 28, 2009

Thanks for the TUT, really helpful.


- Glock Phobia - Apr 28, 2009

nice tut but there is something i understood for SQLi - u gotta learn MySQL, PHP and may be C# otherwise no matter how many tuts u read u wont be able to do a proper SQLi .. unless u r one very lucky mo'fo' :)


- cmbatchuk - Apr 29, 2009

It's a good thing I am a moral person.

I came across a company's paypal account today on their site.

Oh . . . what I could have done, if I wasn't a nice guy.


- Riproarious - May 12, 2009

I can do the first steps fine...
Let's say the error is in column 5, when I try and do this:
http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4--
It never seems to work, I always get select does not describe number of columns...
Or some kind of MySQL error message.

Ill pm you an example if it helps.


- zeroclass - May 13, 2009

nice tut! great job! :)


- zindeq - May 14, 2009

this is great details, i will read it ALL


- ramirez13 - May 14, 2009

wow..nice...thanx for share


- p4dm3sh - May 20, 2009

Da 1st step fails Nowdays

can u wat type of error we get in step 2


- the gost - May 20, 2009

that's cool man thanx


- artline - May 21, 2009

🤗woo..! very useful.
thanx.