[Prominent]

Seems like xPath injections are getting a bit known here. Glad to see another detailed tutorial on this type of injection, well done :3

[-DownFall]

Seems like xPath injections are getting a bit known here. Glad to see another detailed tutorial on this type of injection, well done :3

Thanks Prominent, thought I would add my own with both methods of doing this. Thanks for all the replies!

[-zerocool]

No I say how we can recognize for use this method...maybe when all another methods doesn't work???

Especially you find

Code

The used select statements have a diffrent number of columns

with union.
condition version=5.1.5
It is error based injection.

[Limboland™]

very nice TuT ...

Thank you very much .

✌✌✌✌✌

[Pen and Paper]

finally a tutorial. i found alot types of this injection and i couldn't exploit. now i know :D

ty

[BeggFoMercy]

nice lol
im kinda trying to master every injecting Method ;) so that kinda helped me out alot
keep it up

[-DownFall]

nice lol
im kinda trying to master every injecting Method ;) so that kinda helped me out alot
keep it up

Thanks, you have me on MSN if you need anything. Make sure you bookmark my mega thread so you can learn them all, I went over a lot.

[BeggFoMercy]

Thanks, you have me on MSN if you need anything. Make sure you bookmark my mega thread so you can learn them all, I went over a lot.

Thats for sure mate i will head over to ask u if im stak in some thing

[mabbylish]

Thanks for the tutorial ,and i was wondering when can i use XPath Injection ? and how can i tell it ?

[root_Hak42]

@Downfall - Could of used this like a month ago as I recently learned this method for injection!!! Good share.

[-DownFall]

@Downfall - Could of used this like a month ago as I recently learned this method for injection!!! Good share.

Sorry, I never really thought of making a tutorial on it, should have done it sooner. Hopefully this helps you refresh your memory, just in case you don't remember something.

[Cyber_Space_Warrior]

updatexml() huh! thats new to me , thanks a lot bro!!!

[-DownFall]

updatexml() huh! thats new to me , thanks a lot bro!!!

No problem, I'm glad you learned something new from it!
Keep up the good work :3

[Diabolis]

Thanks for the tut man, I'm trying to do what BeggFoMercy's doing, and so far its going really well.

This clears up quite a few things as far as updatexml() goes, I 'kept seeing sites (the few that explained it) trying to use different syntaxes for using it. Needless to say, that got a bit confusing after a while.

Great work man, looking forward to seeing new stuff from you 🤝

[-DownFall]

Thanks for the tut man, I'm trying to do what BeggFoMercy's doing, and so far its going really well.

This clears up quite a few things as far as updatexml() goes, I 'kept seeing sites (the few that explained it) trying to use different syntaxes for using it. Needless to say, that got a bit confusing after a while.

Great work man, looking forward to seeing new stuff from you 🤝

No problem, thanks for the reply. I was thinking of making a tutorial on SQL Injecting vulnerable vBulliten forums, but I wasn't sure if anyone would be interested in it..