+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [n00b] mssqli help [n00b] (/showthread.php?tid=3403029)
[n00b] mssqli help [n00b] - Solain - Apr 12, 2013
hey hf, I was trying to learn mssqli for far too long
thought that someone could give me a good guide or teach me
I dont know asp but I know php+sql
(for those of you who are asking: yes, I googld this topic)
thanks for helpers! 🎉
edit: im 1337 at engliz
Sorry for any mistakes
* - Money Maker Mike - Apr 12, 2013
You could use SQLmap. I have written a nice tutorial. PM me for the link.
* - -Root - Apr 12, 2013
An important note is that MS SQL is different when it comes to ordered single-cell selection.
Listing Tables: SELECT TABLE_NAME FROM information_schema.COLUMNS WHERE table_catalog=[database_name] GROUP BY TABLE_NAME ORDER BY TABLE_NAME ASC;
Listing Columns: SELECT column_name FROM information_schema.COLUMNS WHERE table_catalog=[database_name] AND TABLE_NAME=[table_query] GROUP BY column_name ORDER BY column_name ASC
http://www.blackhatlibrary.net has some great information about SQL injection. They are down at the moment, but http://web.archive.org/web/20130123103504/http://www.blackhatlibrary.net/SQL_injection#MS_SQL_mapping
* - Solain - Apr 12, 2013
for intro: thanks but I want to learn MSSQLI not to SKID MSSQLI
for -Root: thanks for the guide!
* - Money Maker Mike - Apr 12, 2013
(Apr 12, 2013 05:18 PM)Solain Wrote: for intro: thanks but I want to learn MSSQLI not to SKID MSSQLI
for -Root: thanks for the guide!
Well that's just rude.
Also, I misread the title.
* - Solain - Apr 12, 2013
(Apr 12, 2013 05:07 PM)-Root Wrote: An important note is that MS SQL is different when it comes to ordered single-cell selection.
Listing Tables: SELECT TABLE_NAME FROM information_schema.COLUMNS WHERE table_catalog=[database_name] GROUP BY TABLE_NAME ORDER BY TABLE_NAME ASC;
Listing Columns: SELECT column_name FROM information_schema.COLUMNS WHERE table_catalog=[database_name] AND TABLE_NAME=[table_query] GROUP BY column_name ORDER BY column_name ASC
http://www.blackhatlibrary.net has some great information about SQL injection. They are down at the moment, but http://web.archive.org/web/20130123103504/http://www.blackhatlibrary.net/SQL_injection#MS_SQL_mapping
(Apr 12, 2013 05:04 PM)Intro Wrote: You could use SQLmap. I have written a nice tutorial. PM me for the link.i love the way this forum handles multiply quotes and posts
check the messege I wrote above this one ^^
also for -Root: what is the sigs that makes everything become a comment after it?
cause I know that in php it is --
(Apr 12, 2013 05:20 PM)Intro Wrote: Well that's just rude.
Also, I misread the title.
sorry if you got offeneded ^^
didnt mean to hurt anybody 🤐
* - Money Maker Mike - Apr 12, 2013
(Apr 12, 2013 05:21 PM)Solain Wrote: *sorry for double post im new and trying to find a way to reply*
check the messege I wrote above this one ^^
also for -Root: what is the sigs that makes everything become a comment after it?
cause I know that in php it is --
sorry if you got offeneded ^^
didnt mean to hurt anybody 🤐
Not at all, I just appreciate people being polite.
Good luck in your search.
* - Solain - Apr 12, 2013
(Apr 12, 2013 05:23 PM)Intro Wrote: Not at all, I just appreciate people being polite.sorry for being rude I guess
Good luck in your search.
and thank you 🤝
* - Money Maker Mike - Apr 12, 2013
(Apr 12, 2013 05:27 PM)Solain Wrote: sorry for being rude I guess
and thank you 🤝
Probably already seen this but...
http://www.anarchyforums.net/Thread-MsSQL-Injection-Tutorial?COLLCC=1566259063&;
* - Solain - Apr 12, 2013
(Apr 12, 2013 05:30 PM)Intro Wrote: Probably already seen this but...
https://hackforums.net/Thread-MsSQL-Injection-Tutorial?COLLCC=1566259063&;
404 error
yet found other guides
thanks!
weirdly enough I havent found the guides really useful \:
* - Money Maker Mike - Apr 12, 2013
(Apr 12, 2013 05:35 PM)Solain Wrote: 404 error
yet found other guides
thanks!
weirdly enough I havent found the guides really useful \:
Ah, hackforums has filtered out the forum name.
I guess I shouldn't evade it.
* - WhiteHattedGuy - Apr 12, 2013
Instructions -
1. Go to website hacking section
2. scroll all the way down until you see the search bar
3. Type into the search bar: SQLi Tutorial
* - Solain - Apr 13, 2013
(Apr 12, 2013 06:01 PM)Intro Wrote: Ah, hackforums has filtered out the forum name.
I guess I shouldn't evade it.
what? what do you mean? what do you mean by filtered?
(Apr 12, 2013 06:42 PM)WhiteHattedGuy Wrote: Instructions -
1. Go to website hacking section
2. scroll all the way down until you see the search bar
3. Type into the search bar: SQLi Tutorial
wow thank you very much you are so useful!
NOT
dude, im not dumb
If I opened a post than it is because I didnt understand the guides OR they were not useful too me
* - Th3PonyWizard - Apr 13, 2013
http://www.exploit-db.com/papers/12975/
Exactly the thing I gave you in Skype~
* - Solain - Apr 13, 2013
(Apr 13, 2013 02:27 PM)Th3PonyWizard Wrote: http://www.exploit-db.com/papers/12975/
Exactly the thing I gave you in Skype~
thanks once again ^^
(god what is with the 35 characters..)