+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: havij cant change values ? (/showthread.php?tid=3584133)
havij cant change values ? - lxl33ch3rz - Jun 28, 2013
ive been using havij as its alot easier and less time consuming than doing sql injection manually but whenever i access a mysql database that lets say controls the content of a topic whenever i change the value of a column it shows on havij as being changed but not on the website ?
for example-
https://gyazo.com/d656ed4a286e31a308f330ed53540716
i changed the text on page id 1 to "leecherz" but as you can see the text on the page has not displayed - http://terdon.asc-hq.org/knowledgebase/show.php?ID=1
even though havij says "Query was done"
any ideas ?
* - bunnyears - Jun 28, 2013
Inb4 you get torn apart young one.
Havij isn't easier as it completely skips any learning process.
* - lxl33ch3rz - Jun 28, 2013
(Jun 28, 2013 06:01 PM)bunnyears Wrote: Inb4 you get torn apart young one.
Havij isn't easier as it completely skips any learning process.
i know people generally take a disliking to havij and anyone that uses it but i find it alot easier personally, and even though it does limit you it also saves alot of time and effort :)
could you please link me to a tutorial on how to edit values manually then please ?
* - Coded Indisoul - Jun 28, 2013
No Bro It Does Not change Values Come On skype Will tell You Much more than skype manjot511
* - cheatson - Jun 28, 2013
(Jun 28, 2013 04:38 PM)lxl33ch3rz Wrote: ive been using havij as its alot easier and less time consuming than doing sql injection manually but whenever i access a mysql database that lets say controls the content of a topic whenever i change the value of a column it shows on havij as being changed but not on the website ?
for example-
https://gyazo.com/d656ed4a286e31a308f330ed53540716
i changed the text on page id 1 to "leecherz" but as you can see the text on the page has not displayed - http://terdon.asc-hq.org/knowledgebase/show.php?ID=1
even though havij says "Query was done"
any ideas ?
I think the video in my signature may be of use to you young padawan 🤝
The crux of it is that even though you skimmed a few tutorials, that doesn't mean you have learned manual SQLi, because at some point in the process you would realise why you can't necessarily do what you are trying to do. It's a good thing nobody is spoon-feeding you on this one, it will be worth it to learn the stuff properly.
* - lxl33ch3rz - Jun 29, 2013
(Jun 28, 2013 07:34 PM)cheatson Wrote: I think the video in my signature may be of use to you young padawan 🤝
The crux of it is that even though you skimmed a few tutorials, that doesn't mean you have learned manual SQLi, because at some point in the process you would realise why you can't necessarily do what you are trying to do. It's a good thing nobody is spoon-feeding you on this one, it will be worth it to learn the stuff properly.
thanks for the advice, i will take a more detailed look into manual injection and go from there :)
the help is much appreciated, dont often see people helping newbies :p
* - 21redallday12 - Jun 30, 2013
if you use havij, you deserve to have problems, and a lot of them
* - amus3d - Jun 30, 2013
i dont think anyone actually explained what was going on to the guy.
basically, well as far as i am aware, havij didnt check if you have perms to alter data in columns, and just guessed (well, just went ahead and said it) you had altered said data.
* - ๖ۣۜAlexander - Jun 30, 2013
Havij won't do the job for you. Learn how to do it manually, why it works, and know what you're actually doing, then come back.
* - Gee4rce - Jul 2, 2013
Seemz u haz insufficient Rights, meaing you can Read the db, but not write into it.
* - lxl33ch3rz - Jul 2, 2013
(Jul 2, 2013 01:06 AM)Gee4rce Wrote: Seemz u haz insufficient Rights, meaing you can Read the db, but not write into it.
thanks for being one of the only people to give me a helpful response instead of flaming me for using havij
* - Gee4rce - Jul 3, 2013
(Jul 2, 2013 04:44 PM)lxl33ch3rz Wrote: thanks for being one of the only people to give me a helpful response instead of flaming me for using havij
Np Dude ✌
but i also highly suggest you look further into manually SQLi, using tools makes you no hacker ;)
* - floffel03 - Jul 3, 2013
(Jul 3, 2013 06:54 AM)Gee4rce Wrote: Np Dude ✌
but i also highly suggest you look further into manually SQLi, using tools makes you no hacker ;)
Hmmm, exept you write them by yourselfe ;)
* - Gee4rce - Jul 3, 2013
(Jul 3, 2013 08:41 AM)floffel03 Wrote: Hmmm, exept you write them by yourselfe ;)
LoL yes, i do agree with that 😁
* - Natalie Portman - Jul 4, 2013
HAVIJ?! HOLY FUCK.
HOLY FUCKING FUCK.
HOW ARE PEOPLE THIS BAD AT SQL THAT THEY HAVE TO USE FUCKING SOFTWARE TO DO IT FOR THEM.
YOU CAN ALSO HAVE A NICE BIG FUCKING -3 RIGHT IN YOUR SKIDDY FUCKING FACE.
I WILL FIX THIS FORUM ONE WAY OR ANOTHER.