Hack Forums
SQLi Vulns!?!? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLi Vulns!?!? (/showthread.php?tid=5376633)



SQLi Vulns!?!? - ColbzgotdaHax - Aug 16, 2016

I'm new to the whole injection scene usually I'm about nets and RATing but shying away from all that and getting more into website hacking. Where can I find sites that HAVENT been jacked already and that are SQLi injectable. All the ones I found off google are used...


* - Gardener Jim - Aug 16, 2016

Quote:Where can I find sites that HAVENT been jacked already and that are SQLi injectable.

All I can suggest is to use google dorks and find them yourself. Any site's posted will have a good chance of being fkt with....good luck tho...

Jim


* - iStealBoatz - Aug 16, 2016

Google: php?id= , when you have done that look for the sites with that at the end of the URL and click on the site and when you've loaded it put a " ' " at the end to see if the site has any errors and if it does, its vulnerable. good luck.


* - r421x0 - Aug 16, 2016

Look for sites with a parameter like this:
?id=[number] & place a ' next to the end of it.

So... Google.com/cocksdsf.php?id=3'
If it returns with a "SQL" error, it's probably vulnerable. If not... try other methods.

Create your own dorks. Here are some examples, get creative.
-
Code
specials.php?cid=
masks.php?id=
icing.php?id=
breaks.php?id=
news.php?article_id=



* - ColbzgotdaHax - Aug 17, 2016

Thank you guys..............