+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How are hashed passwords obtained through SQL? (/showthread.php?tid=6212357)
How are hashed passwords obtained through SQL? - Javk - Jul 6, 2022
Sorry I am new to hacking and was wondering on where the hashed passwords are actually stored and how changing the SQL data allows you to extract them.
RE: How are hashed passwords obtained through SQL? - LeetSpeed - Jul 7, 2022
(Jul 7, 2022 12:18 AM)Incog Wrote: https://www.programiz.com/sql/injection
https://www.w3schools.com/sql/sql_injection.asp
SQL Injection is the, well injection of SQL (lol) into a user input, where the goal is to manipulate the way the server handles the input to execute malicious SQL code, so if they were injecting into a user input on a login form, if they could manipulate the input, they could try and return all the info from a table, aka the user table, and their passwords
I am assuming this is what you meant
Thanks for this information!
RE: How are hashed passwords obtained through SQL? - LucyWantsfun - Jul 8, 2022
(Jul 7, 2022 12:18 AM)Incog Wrote: https://www.programiz.com/sql/injection
https://www.w3schools.com/sql/sql_injection.asp
SQL Injection is the, well injection of SQL (lol) into a user input, where the goal is to manipulate the way the server handles the input to execute malicious SQL code, so if they were injecting into a user input on a login form, if they could manipulate the input, they could try and return all the info from a table, aka the user table, and their passwords
I am assuming this is what you meant
Thanks a lot for this, you've given me a lot more knowledge through this simple post. I really appreciate.
RE: How are hashed passwords obtained through SQL? - Sitrep - Jul 16, 2022
Very good reply from Incog there, it is also worth mentioning that SQLI vulnerabilities are very rare today. At least in most commercial websites etc.