[TMNSquirtle]

So theres no tool for this it's just typing those weird series into a data base until it auth bypasses you?

[shomb]

thanks but it should have been written in a more cohesive english, as it seems was written by someone in a rush, for example "http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names "
doesnt make any sense,seriously if you wanna make a good thread with some good explanation i suggest to take some time and actually put some effort.

[Killi0naire93]

thanks but it should have been written in a more cohesive english, as it seems was written by someone in a rush, for example "http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names "
doesnt make any sense,seriously if you wanna make a good thread with some good explanation i suggest to take some time and actually put some effort.

Chill man. Lets see you make a tutorial that is better than this. Then your point will be valid.

Besides that nice post really helpful.

[GhostAKF]

Hello everybody

welcome to my tutorail on Total SQL injection tool download link: http://www.fileshift.com/forms/receive.h...25ab1f6412

Total SQL injection tool is composed of:

-Dorks finder

-injection tool

-admin finder

-Md5 finder

BEFORE USE IT

1_ Disable your anti-virus before run it because it's detect as a trojan but it's not one.

2_ Double click on the setup to install end find website like : http://mywebsite.com/index.php?id=1 using dorks bellow

trainers.php?id=

article.php?ID=

play_old.php?id=

declaration_more.php?decl_id=

Pageid=

games.php?id=

newsDetail.php?id=

staff_id=

historialeer.php?num=

product-item.php?id=

3_ Copy and past the url in the tool and click inject -let the tool hackes the website for you-

4_use the admin finder the find the admin control panel

5_ use md5 finder to find the password hashed

6_ enjoy!!

[REALTOR]

part 2: injecting sql queries to extract the admin username and password

ok so lets say we have a site :
http://www.xx.com/index.php?catid=1
there is a list of dork 4 sites lyk this

"inurl:index.php?catid="
"inurl:news.php?catid="
"inurl:index.php?id="
"inurl:news.php?id="
or the best in my view "full credit to qabandi for discovering this"
"inurl:".php?catid=" site:xxx"

I am confuzzled. How do we do the inurl: part? Does it go at the end of the url or something..?

[RR16]

A long, but great tut. Keep it up.

[innsett]

Very well written, in plain language.
Nice job of communicating the main points.
👍

---

I am confuzzled. How do we do the inurl: part? Does it go at the end of the url or something..?

Those are "dorks" he posted. Their used to be put in google to search for site that may be vulnerable.
So like in google you would put "inurl:index.php?catid=" and it would search sites with that in the url.
From there just follow the steps.

[bholzer]

Pretty good tutorial! Keep stuff like this coming

[AnonSpirit]

wow cool tut if youd add some pictures woud be nice

[Avectius]

Amazing Guide! =) Loving it.

[xSk0rp]

Nice ,I inject a lot of sites with this tutorial!

[yea its alex]

explaind a lot of stuff to me thank you

[nofinishline]

cool,
it was great TUT.
thanks mate

[Infinity.]

Awesome awesome , bro it was really cool TUT

[lukissluki]

this is very good

message too short