+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Extracting data from SQL database knowing tables and columns (/showthread.php?tid=5196631)
Extracting data from SQL database knowing tables and columns - jackjohn - Mar 8, 2016
well say theoretically that I have found a vulnerable website, found the number of columns, found the vulnerable column and finally found the names of both the tables and the columns...how the hell I extract data like passwords or anything else ? I mean what query should I use ? Please help
* - JaNuS18 - Mar 8, 2016
Using DIOS syntax (no limitation with output)
or using group_concat (possible output limitation as output is limited to 1024 characters).
See syntax :
http://pastie.org/private/de9jfl89op1hdvskpjpf7a
* - kolinn - Mar 9, 2016
hello bro! where can i get more DIOS code?
* - Frosteh - Mar 9, 2016
(Mar 9, 2016 05:22 AM)kolinn Wrote: hello bro! where can i get more DIOS code?
I have a tutorial blog post which goes in depth regarding DIOS, specifically used for dumping the entire DB struct. But it's fairly easy to modify these queries to pull out the actual data. http://frostyhacks.blogspot.co.uk/2014/10/one-sqli-to-rule-them-all.html
* - Anti0Day - Mar 9, 2016
Maybe column is empty......
Use SqlMap tool to try.
* - jackjohn - Mar 9, 2016
thank you so much, I'll take a look to the DIOS tutorial
* - jackjohn - Mar 23, 2016
Hi guys!!! Now say theoretically that I've been able to watch all the data in all the columns of all the tables...is it possible that there's not sensible data ?? I mean there's no trace of passwords or mails or telephone numbers ! In this case is the sql injection totally unuseful ??
* - JaNuS18 - Mar 23, 2016
(Mar 23, 2016 11:12 AM)jackjohn Wrote: Hi guys!!! Now say theoretically that I've been able to watch all the data in all the columns of all the tables...is it possible that there's not sensible data ?? I mean there's no trace of passwords or mails or telephone numbers ! In this case is the sql injection totally unuseful ??
Did you check all databases for passwords?
If passwords are not stored in database that doesn't mean SQLi is generally useless. SQLi can't give you something that isn't stored in database(s).
* - jackjohn - Mar 23, 2016
yes it is what I was trying to say :) I meant it is useles in this particular case isn't it ? so is it possible that passwords are not stored anywhere ?
* - Forum Developer - Mar 23, 2016
If you're using sqlmap hmu.
* - jackjohn - Mar 24, 2016
No I'm doing it "manually"