+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Why when adding filter in SQL injection payload, injection won't work (/showthread.php?tid=5854426)
Why when adding filter in SQL injection payload, injection won't work - MrBr - Jun 26, 2018
Hello, I have a question.
While i'm training in some websites, i faced this situation.
When doing
id=-2"+or(^^)der+by+5--+-
Then
id=-2"+un(^^)ion+sel(^^)ect+1,2,3,4,5--+-
Here i get Not Acceptable!
So i add some filters like /*!50000(word)*/
id=-2"+/*!50000un(^^)ion*/+sel(^^)ect+1,2,3,4,5--+-
Or filter both 'un(^^)ion' and 'sel(^^)ect'
It gives me error
Code
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1,2,3,4,5-- -" ORDER BY id LIMIT 50' at line 1I don't know exactly what should i do, It came to my mind that when adding filter maybe the SQL payload gone wrong or readed wrong! how can i solve it.
Thanks Advanced.
(^^) are for hackforums.net security
RE: Why when adding filter in SQL injection payload, injection won't work - [BLANK] - Jun 27, 2018
http://ftp.nchu.edu.tw/MySQL/doc/refman/5.0/en/comments.html
From a “-- ” sequence to the end of the line. In MySQL, the “-- ” (double-dash) comment style requires the second dash to be followed by at least one whitespace or control character (such as a space, tab, newline, and so on).
That may be your issue.
RE: Why when adding filter in SQL injection payload, injection won't work - MrBr - Jun 27, 2018
Thank you for your reply
(Jun 27, 2018 09:04 AM)EasyGhost Wrote: ...
Thank you for your reply, I have tried to some styles
This, (--) and (--+-), (+--+), (as `).
but nothing work.
Up, if there is someone want to add something i will be so happy.