+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Pentesting SQLi (/showthread.php?tid=3755587)
Pentesting SQLi - UnChallengeD - Sep 15, 2013
Hi
I'm looking for a tutorial about good SQL pentesting
Means sometime their "you have error in your sql syntax" error doesn't show and site vulnerable...
i would like to know about all identities of SQLi Vulnerability
Sorry for my English.. i hope you understand
* - T0ucaNSaM - Sep 15, 2013
Use the search button and all your answers and dreams will come true. Nobody is going to answer you questions that easy.
* - Double X - Sep 15, 2013
Use Order by 1-- first, memorize the page, and then use order by 500--. If some of the texts are missing, it's sure that your site is vulnerable.
The error doesn't show when this code is inserted in .htaccess file.
Code
ini_set('display_errors','off');So, you need the order by to check out for column count. 👍