+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: URL SQL injection, POST SQL injection ,COOKIE SQL injection[What is this?] (/showthread.php?tid=2333580)
URL SQL injection, POST SQL injection ,COOKIE SQL injection[What is this?] - anonbux0 - Mar 24, 2012
What is :
COOKIE SQL injection
URL SQL injection
POST SQL injection
If one site is vulnerable to COOKIE injection,URL SQL injection or POST SQL injection, is possible to hack the site..get information,users..passwords?
Thanks for Help!🤝
* - VipVince - Mar 24, 2012
(Mar 24, 2012 11:14 AM)anonbux0 Wrote: What is :
COOKIE SQL injection
URL SQL injection
POST SQL injection
If one site is vulnerable to COOKIE injection,URL SQL injection or POST SQL injection, is possible to hack the site..get information,users..passwords?
Thanks for Help!🤝
Cookie injection I believe is done via tampering of the cookie and inserting SQL statements via it.
URL is simply basically GET SQL injection. Were you insert your SQL statements via the browser.
POST injection you insert your SQL statements via a box on the page, like a login. This is done via adding your statements with Tamper data.
* - anonbux0 - Mar 24, 2012
(Mar 24, 2012 11:18 AM)VipVince Wrote: Cookie injection I believe is done via tampering of the cookie and inserting SQL statements via it.
URL is simply basically GET SQL injection. Were you insert your SQL statements via the browser.
POST injection you insert your SQL statements via a box on the page, like a login. This is done via adding your statements with Tamper data.
Thank you for help.. but i can get information from the site with this?
* - Tjm - Mar 24, 2012
(Mar 24, 2012 11:20 AM)anonbux0 Wrote: Thank you for help.. but i can get information from the site with this?
Yeah it's just using SQLi but in different areas. Firefox Tamper Data is what you would want to get as Vince said.
* - anonbux0 - Mar 24, 2012
(Mar 24, 2012 11:23 AM)Tjm Wrote: Yeah it's just using SQLi but in different areas. Firefox Tamper Data is what you would want to get as Vince said.
and i use normal SQLi codes?
like , order by 20-- ?
* - Tjm - Mar 24, 2012
(Mar 24, 2012 11:33 AM)anonbux0 Wrote: and i use normal SQLi codes?
like , order by 20-- ?
Yeah from what I know. You can also do useragent based injection.