Yes, but when you log in they probably take your IP so they will have no problems catching you.
It might be injectible.
(Aug 23, 2010 12:16 PM)Plitvix Wrote: ?catid=1 and 1=0 union all select 1,2,3,4,5,6,7--
?catid=99 union all select 1,2,3,4,5,6,7--
?catid=-1 union all select 1,2,3,4,5,6,7--
and so on.
You need to null
Thanks for explaing me.
I now know the number of columns and the vulnerable once and also the version (4.1.22-standard). I know that it is now the guessing part.
I can't really get the right thing, really getting pissed of after hours of guessing.
Please tell me the most probable cammands to guess of as I can't think anymore.
Please note, I'm new to all this, and this is my first website.
DO NOT DEAL WITH THIS MEMBER
Nice TUt but has neone defaced ne site wid help of this tut ??
@ firaaun
I didn't deface a site but,
i found a admin logon page
Typed in admin and use one the of passwords listed and it said something about a fatal error, so i tried a different password and BAM! it logged me into admin :)
I tried again and first time, it logged me in..
I found the admin login and password just sitting there but i didn't do anything :P
BTW, cheers for this TuT
thanks dude nice tut w8ing for more
great work!! please can you give me few site name which can be hacked..
man , nice job, but this pages are fucking shit you don't have nothing when u hack them , how to hack some your web like the forums on forumotion.com , I tried with SQL injection on the forums , and I get nothing :S It doesn't work on forumotion.com
It doesnt work on most forums because they are all patched.
This is great, thanks mate!
really great tutorial .... thks for posting
yes it's a nice tut, thank you for sharing.
Vey nice tutorial, thanks for posting
DO NOT DEAL WITH THIS MEMBER
Nice tutorial though kinda confusing for my noob hacking skills =[
Ahh.. So confusing :/ Can you pm me on what to do at the end?.. with the columns?
Thank you for this tutorial :)
|
