+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Vuln. Sites with info and SQL Help! (/showthread.php?tid=967125)
Vuln. Sites with info and SQL Help! - iphonejuul - Jan 11, 2011
Quote:Target: http://www.runningmyraces.com/event.php?id='189
Host IP: 76.162.0.21
Web Server: Apache
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: start6_race
keyword: have
Tables: links
columns: email, id
Quote:Target: http://www.swecard.com/news_view.php?id='49
Host IP: 212.97.132.209
Web Server: Apache/1.3.41
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: cardswe_db
keyword: have
Tables: news
Columns: title, content, id
Please reply what im doing wrong.
I cant get anything out of these.
* - Hackster - Jan 11, 2011
(Jan 11, 2011 12:00 AM)Injection™ Wrote:Quote:Target: http://www.swecard.com/news_view.php?id='49
Host IP: 212.97.132.209
Web Server: Apache/1.3.41
Powered-by: PHP/4.4.9
DB Server: MySQL
Current DB: cardswe_db
keyword: have
Tables: news
Columns: title, content, id
Please reply what im doing wrong.
I cant get anything out of these.
DB Server: MySQL >=4.1
Selected Column Count is 8
Finding string column
Valid String Column is 2
Current DB: cardswe_db
Their vulnerable for sure...
* - iphonejuul - Jan 11, 2011
(Jan 11, 2011 12:13 AM)Hackster Wrote: Please reply what im doing wrong.
I cant get anything out of these.
DB Server: MySQL >=4.1
Selected Column Count is 8
Finding string column
Valid String Column is 2
Current DB: cardswe_db
Their vulnerable for sure...
[/quote]
I cant get any information on admin.
also i cant find admins. i get 404ed
* - Savage1101 - Jan 11, 2011
try using "havij" program. its very usefull ^^
* - iphonejuul - Jan 11, 2011
(Jan 11, 2011 01:06 AM)siavonen Wrote: try using "havij" program. its very usefull ^^
I am using it
Did you try any of these?
* - le@rner - Jan 11, 2011
I know you are using havij
there are many tutorials on it search around
* - learn3r - Jan 11, 2011
If the MySQL version is below 5(it seems to be 4 in your case), you don't have luxury of information_schema database to enumerate the table names and column names and hence probably these automated tools are not working. I personally always exploit SQLi manually. Remember that makes you better exploiter.