+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: learning SQL Injections (/showthread.php?tid=5761385)
learning SQL Injections - Ariesfangz - Dec 1, 2017
Where would you guys recommend to learn how to SQL Inject and what tools to use I am quite interested
RE: learning SQL Injections - 05hax05 - Dec 1, 2017
havij is good for SQL injection..
RE: learning SQL Injections - Ariesfangz - Dec 1, 2017
(Dec 1, 2017 05:27 PM)05hax05 Wrote: havij is good for SQL injection..
Where would you recommend learning about sql injection as well ?
RE: learning SQL Injections - Faith Connors - Dec 1, 2017
(Dec 1, 2017 05:30 PM)Ariesfangz Wrote: Where would you recommend learning about sql injection as well ?
if hes recommending havij there is exactly a 0% chance he ever learned how to do it on his own.
literally the best way to learn is to learn sql on its own then learn a bit about backends, what makes shit vulnerable and how to find injection points.
RE: learning SQL Injections - CyberStrike - Dec 1, 2017
Yes learn SQL first
https://www.tutorialspoint.com/sql/index.htm
Havij/SQLmap ..etc will not teach you. You want to know what the tool is actually doing if you understand the underlying technologies and processes going on you will have a better chance of being successful.
Once you have learned a bit then check out the following, try it manually no tools of course. If you get stuck it happens it does have some things to try there on the page, but learn and do it in a safe environment.
http://sqlzoo.net/hack/
Edit: There are several tutorials as well on sqlzoo.
RE: learning SQL Injections - Ariesfangz - Dec 2, 2017
(Dec 1, 2017 06:14 PM)sirru5h Wrote: Yes learn SQL first
https://www.tutorialspoint.com/sql/index.htm
Havij/SQLmap ..etc will not teach you. You want to know what the tool is actually doing if you understand the underlying technologies and processes going on you will have a better chance of being successful.
Once you have learned a bit then check out the following, try it manually no tools of course. If you get stuck it happens it does have some things to try there on the page, but learn and do it in a safe environment.
http://sqlzoo.net/hack/
Edit: There are several tutorials as well on sqlzoo.
yeah i agree the tools dont teach you how it works it just does shit but without knowledge of what it does then theirs no hope
RE: learning SQL Injections - Girl With One BallSack - Dec 2, 2017
Try | SQLMap is a great program for sql vulnerabities
RE: learning SQL Injections - CyberStrike - Dec 2, 2017
(Dec 2, 2017 02:23 AM)Ariesfangz Wrote: yeah i agree the tools dont teach you how it works it just does shit but without knowledge of what it does then theirs no hope
Very good sounds like you are willing to learn that is probably the most important thing, Anyhow yeah stay away from the automated tools as they will not teach you anything best of luck.