+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: MSSQL Union Based Exploitation in Worse Conditions[Tutorial] (/showthread.php?tid=4815424)
MSSQL Union Based Exploitation in Worse Conditions[Tutorial] - iHacker-n00b - May 10, 2015
MSSQL Practical Second Order Exploitation Or Kinda Out of Band Exploitation(The Purpose is Same, The Trick is little different) When You are Not Able To Do Error Based Or Union Based SQL Injection and Then Comes What You Could Do Instead of Those 'Blind injections '🎉 In Such Situations
Code
http://securityidiots.com/Web-Pentest/SQL-Injection/mssql-out-of-band-exploitation.htmlHope You 'll Enjoy!
* - Hooded Robin - May 11, 2015
Neat trick that would be fairly site specific. Also this is a normal stacked query injection, nothing out of band (email, dns, etc) about it all...
* - iHacker-n00b - May 11, 2015
(May 11, 2015 06:18 AM)Hooded Robin Wrote: Neat trick that would be fairly site specific. Also this is a normal stacked query injection, nothing out of band (email, dns, etc) about it all...
WoW! Thanks For The Nice Comment! Yea Its Nothing Out of Band Though The Purpose Is The Same :P To Avoid xD Blind Injections ! :') Actually Here 2 Queries are running with Different Number of Columns :P That Causes Union Based and Even Error based a Problem .. For That We Could even Do one More thing that is :P Alter and add Column(s) to the One Of Tables Such That Both queries have Same Number of columns :) And Then Union Based Injection works.. Fine
* - IDK - May 11, 2015
Nice tut mate It will help beginners for learning something new 👍
* - iHacker-n00b - May 11, 2015
(May 11, 2015 10:12 AM)-You Wrote: Nice tut mate It will help beginners for learning something new 👍
🤝 Thanks Mate! =) Glad You Liked It
* - The_Defiant_One - May 11, 2015
Some good stuff here. Also ... i've check out your website as well as your web app tutorials and i must say ... you have some really great stuff there. Good for learning web app hacking. Will refer to it for future use. Thanks.
* - iHacker-n00b - May 12, 2015
(May 11, 2015 05:08 PM)The_Defiant_One Wrote: Some good stuff here. Also ... i've check out your website as well as your web app tutorials and i must say ... you have some really great stuff there. Good for learning web app hacking. Will refer to it for future use. Thanks.
Thanks 🤝 Its Good to know :D that Some People Liked It
* - AkDK - May 25, 2016
Nice One Bro Awesome Work