+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Asking for help from masters in sqli (/showthread.php?tid=5734847)
Asking for help from masters in sqli - Berry White - Oct 10, 2017
Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
* - Gardener Jim - Oct 10, 2017
Post the site and we might be able to help you.
Use: https://www.base64encode.org/
* - Berry White - Oct 10, 2017
Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable
* - c0sm1k - Oct 11, 2017
You have to use %23 to end the comments with or screen goes blank..
Code
id=20' order by 13%23 sql error on screen
id=20' order by 14%23 screen goes blankhope this helps ✌
* - JaNuS18 - Oct 11, 2017
(Oct 10, 2017 10:44 PM)Berry White Wrote: Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
use:
PHP Code
<?php
syntax deleted by request
version: 5.5.55-cll
P.S:
OP contact me by PM when you will have rights to do it...
* - pishicat_Injector - Oct 11, 2017
(Oct 10, 2017 11:35 PM)Berry White Wrote: Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable
WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
* - JaNuS18 - Oct 11, 2017
(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote: WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
Sure, after I posted my syntax, you will explain it 😝 🤦♂ Story of your life...
P.S.
My syntax was later removed by request as it is used in a challenge
* - pishicat_Injector - Oct 11, 2017
(Oct 11, 2017 01:43 PM)JaNuS18 Wrote: Sure, after I posted my syntax, you will explain it 😝 🤦♂ Story of your life...
P.S.
My syntax was later removed by request as it is used in a challenge
first: mr JaNuS18 I swear I have not seen your syntax , I am a Muslim and I never lie 👍
Second: mr JaNuS18 wait to see my Work to see it's not your work 😝
I hope not only between us except good work
Regards Mr JaNuS18 🤝
* - Berry White - Oct 11, 2017
(Oct 11, 2017 11:47 AM)JaNuS18 Wrote: use:
PHP Code
<?php
syntax deleted by request
version: 5.5.55-cll
P.S:
OP contact me by PM when you will have rights to do it...
Janus can u pm me ?
(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote: WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
Thank you
(Oct 11, 2017 06:00 AM)c0sm1k Wrote: You have to use %23 to end the comments with or screen goes blank..
Codeid=20' order by 13%23 sql error on screen
id=20' order by 14%23 screen goes blank
hope this helps ✌
Well i found 13 columns too, but thats not problem...
I found 6 columns too with ;%00
But no output or The used SELECT statements have a different number of columns, thats the problem xD but thanks for trying, i appreciate that mate <3
* - pishicat_Injector - Oct 11, 2017
(Oct 10, 2017 10:44 PM)Berry White Wrote: Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
Here You Go My Frind The Solution For You My Dear😁
PHP Code
<?php
https://hackforums.net/showthread.php?tid=5735331
* - Berry White - Oct 11, 2017
(Oct 11, 2017 05:57 PM)pishicat_Injector Wrote: Here You Go My Frind The Solution For You My Dear😁
Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow
PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance
* - pishicat_Injector - Oct 11, 2017
(Oct 11, 2017 07:42 PM)Berry White Wrote: Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow
PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance
why you don't say that to me in facebook in account Berry White Or here when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶
* - Berry White - Oct 11, 2017
(Oct 11, 2017 08:09 PM)pishicat_Injector Wrote: why you don't say that to me in facebook when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶
Dude first of all i didnt expect that u will type real website name...
Second, u didnt wrote this for me, u wrote it because yourself on some way :)
And third, i dont need you to delete tut, i just asked to remove website name
* - pishicat_Injector - Oct 11, 2017
----------------------------------------------------------------------------------------------------------
* - Berry White - Oct 11, 2017
(Oct 11, 2017 08:46 PM)pishicat_Injector Wrote: who you say that 😶
I don't need your site to add tut here in this section I have six Tutorial written for this section already, Just a matter of time on publication .
I spent a lot of time writing the subject just to help you not to my self 😠 as you say
Any way cuz you see this Tut It's for my self not for you my brother , I love to say to you I don't need it 😧 cuz I know all thing that Posted in this topic, So this Tut Is Deleted
Regards 🤝
You have? Then why u didnt set other website name, but this?
U could just change website name because its same injection method..
And i mean, its not specificaly for you tutorial, but for others , so you gain rep+