[lxl33ch3rz]

ive been using havij as its alot easier and less time consuming than doing sql injection manually but whenever i access a mysql database that lets say controls the content of a topic whenever i change the value of a column it shows on havij as being changed but not on the website ?

for example-

https://gyazo.com/d656ed4a286e31a308f330ed53540716

i changed the text on page id 1 to "leecherz" but as you can see the text on the page has not displayed - http://terdon.asc-hq.org/knowledgebase/show.php?ID=1

even though havij says "Query was done"


any ideas ?

[lxl33ch3rz]

Inb4 you get torn apart young one.

Havij isn't easier as it completely skips any learning process.

i know people generally take a disliking to havij and anyone that uses it but i find it alot easier personally, and even though it does limit you it also saves alot of time and effort :)

could you please link me to a tutorial on how to edit values manually then please ?

[lxl33ch3rz]

I think the video in my signature may be of use to you young padawan 🤝

The crux of it is that even though you skimmed a few tutorials, that doesn't mean you have learned manual SQLi, because at some point in the process you would realise why you can't necessarily do what you are trying to do. It's a good thing nobody is spoon-feeding you on this one, it will be worth it to learn the stuff properly.

thanks for the advice, i will take a more detailed look into manual injection and go from there :)

the help is much appreciated, dont often see people helping newbies :p

[amus3d]

i dont think anyone actually explained what was going on to the guy.

basically, well as far as i am aware, havij didnt check if you have perms to alter data in columns, and just guessed (well, just went ahead and said it) you had altered said data.

[lxl33ch3rz]

Seemz u haz insufficient Rights, meaing you can Read the db, but not write into it.

thanks for being one of the only people to give me a helpful response instead of flaming me for using havij

[floffel03]

Np Dude ✌
but i also highly suggest you look further into manually SQLi, using tools makes you no hacker ;)

Hmmm, exept you write them by yourselfe ;)