Hack Forums
hard SQLI on bangladesh gov site ~ Joomla - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: hard SQLI on bangladesh gov site ~ Joomla (/showthread.php?tid=3490113)



hard SQLI on bangladesh gov site ~ Joomla - n31ght0 - May 19, 2013

false condition:
Code
http://www.moind.gov.bd/index.php?option=com_easyfaq&task=view&id=1&Itemid=1

other than task=view is always give a true condition.
ex:
Code
http://www.moind.gov.bd/index.php?option=com_easyfaq&task=show&id=1&Itemid=1

how to solve??


* - 21redallday12 - May 19, 2013

Lol ... trying to hack a .gov, when you don't even know sql injection, let alone forensics.
I doubt anyone will give you help, its just a stupid idea...


* - n31ght0 - May 20, 2013

(May 19, 2013 07:10 AM)21redallday12 Wrote:  Lol ... trying to hack a .gov, when you don't even know sql injection, let alone forensics.
I doubt anyone will give you help, its just a stupid idea...

i dont want to hack it i just want to know how the injection work.
i only have this sample of case if you have non gov site that has similar case like me post here then i will change the link to non gov site.

just want to learn how it goes if you facing case like this