+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Hello everyone , I decided to make tutorial how to do sql injection (/showthread.php?tid=5261123)
Pages: Pages
1
2
Hello everyone , I decided to make tutorial how to do sql injection - tarakaske - May 6, 2016
I strongly reccomend you to use VPN(Of course paid is better but they are some good free too.) or RDP/VPS while doing this!
1.Open Sqli Dumper v7.0
[IMG]http://s13.postimg.org/rrcw8qwuv/Pv_Sw_H1_V.png[/IMG]
Put some dorks from the list
[IMG]http://s21.postimg.org/xyz18i06f/12l_UW0i.png[/IMG]
2.Click Start Scanner
3.Wait few minutes . If you dont want to wait the full scan , click CANCEL in the bottom.
4.Go on tab Exploitables and click on Start Exploiter
[IMG]http://s2.postimg.org/hxldlwxtl/2z_Jz_UMb.png[/IMG]
5.You can still CANCEL at any time if you dont want to wait the full scan, just be sure they are some sites already loaded.
6.Go on tab Injectables and click Start Analizer
[IMG]http://s2.postimg.org/gcb5r7tx5/3g95_Ldn.png[/IMG]
7.See below the injectable sites , also watch for the METHOD.
[IMG]http://s17.postimg.org/s2g3wga3z/DXFJJq_N.png[/IMG]
9.Right click then CLIPBOARD, see the method,in my case MySQL Union
[IMG]http://s23.postimg.org/ek0e1bqq3/n_Du_P1_Ri.png[/IMG]
10.Go on tab Data Dumper,then paste the link and select the Method which you saw in step 9
[IMG]http://s23.postimg.org/p88qdwq2z/RTGYSe_X.png[/IMG]
11.Click Get server info and wait.(In some cases it doesnt load , make sure that the method is correct, if still not working , just select other site to inject)
12.Now click Get Tables
http://s1.postimg.org/x5mlwzgrj/b6pix_Il.png
13.Depens on the site , you will see different things here.I will just show you how to grab that(You can get different things like admin login,credit card info,email:pass etc)
14.Select whatever you want and click Get Columns
[IMG]http://s22.postimg.org/85cr3pfhd/Tretfxm.png[/IMG]
15.Again mark something something and click Dump Data
[IMG]http://s8.postimg.org/qs769mjet/Olb6_Dlo.png[/IMG]
16.I found it without decryption need (because usually admin password is encrypted with MD5 or SHA1)
[IMG]http://s17.postimg.org/fzy7oyywf/oj1_Ppo_D.png[/IMG]
I hope you like:)
* - Kashmiri Hunter - May 6, 2016
Learn To Inject Manually.Much More Fun In Manual Injecting.Tools Can't Help Where There is a little Tough WAF
But The Posted Tutorial Is not bad.Good Work !
* - jaultop - May 6, 2016
thanks for sharing this tutorials
* - -_-Error 404-_- - May 9, 2016
I prefer using SQLMap on Kali :)
* - DataDumper - May 9, 2016
(May 9, 2016 12:40 AM)-_-Error 404-_- Wrote: I prefer using SQLMap on Kali :)
I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.
I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.
* - Rubixa - May 9, 2016
(May 9, 2016 12:54 AM)FANEq Wrote: I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.
I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.
Correct, I have a tutorial I put up not long ago on how to go about getting SQLMap on windows, here
* - Embered - May 9, 2016
Do you have a link for sqli dumper?
* - jonathanxx1 - May 10, 2016
(May 9, 2016 12:05 PM)Embered Wrote: Do you have a link for sqli dumper?
Same for me,,is there a clean version of the latest release of sqlidumper somewhere on HackForum?
* - Regulus - May 10, 2016
Thanks a lot for this buddy!
* - Baccaa - May 10, 2016
Will I be able to hack my own weebly website or will it be considered a hack to weebly
* - •^v^–[ bLacKn3x ]–^v^• - May 10, 2016
Thats no tut about sql injection ..
.thats a tut about "how i use sql dumper"
* - XeAnarchy - May 11, 2016
would this work on flash based games?
* - blazelord - May 11, 2016
new to this .. would love to know more about it ... thanks mate
* - -_-Error 404-_- - May 12, 2016
(May 9, 2016 12:54 AM)FANEq Wrote: I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.
I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.
i didnt say that you cant do sql injection from any other OS, i just like kali linux.... anw i think you are correct about mannual injection :)
* - aprilfool - May 13, 2016
need a paypal page for payment