[Kainaan]

One of the best tutorials I have come across. Is this only for php based websites? What happens if I get to a page with a form on it, but the url does not have anything like id at the end? I think its an asp site, and the url with the form on it is like www.example.com/page
I assume it cant be checked for vuns like in the example you show?

The only requirements to perform this type of attack is that the website must have MySQL and some form of user input, typically you do it in the URL. However you could inject the code into a search bar, body of a thread, anything that accepts input and turns it into a MySQL query.

[The_Defiant_One]

Very nicely detailed tutorial.Thanks for putting the time to make this!

[Austerity]

Very nice tutorial mate, comes in handy and is very useful towards me !

Thanks for the contribution.

[shup]

really nice tut for noobs...superliked it 😏

[Kainaan]

Very nice tutorial mate, comes in handy and is very useful towards me !

Thanks for the contribution.

Glad I could help out someone who needs it :P

[SteamBulgaria]

thanks for sharing this man , will help me alot in the future :)

[Kainaan]

thanks for sharing this man , will help me alot in the future :)

Glad someone is enjoying my tutorials :)
Spent a lot of time on them :P

[jawwad20]

Nyce tutorial but .. bro manual attack is powerful rather than automatic ?

[Kainaan]

Nyce tutorial but .. bro manual attack is powerful rather than automatic ?

In my personal opinion manual attacking will always remain supreme. If you are doing an automatic chance it is a very high chance that you have absolutely no idea what is going on in the background to perform that attack, for this reason you will never really gain any knowledge and will probably be what people call a "Script Kiddie". To truly gain knowledge and become powerful you must have insight on the inner workings of these systems. However this is just my personal opinion, it is entirely up to you.

[MadSocietyKing]

I was trying this out, and I got confused. Where do you type in the code to do this? I had the website up and when i tried the ' at the end I got a 404. Then I added the order by 1--, and the browser (IE9) added the %20 for a space in the URL. Then I can't do anything. Is there software you are using or is it just me? Please help, it'd be gladly appreciated.

-Remember when life used to be fun?

[gab1x]

Superb tutorial, really liked the start explaining SQL, and very in-depth. Thank you so much!

[metalhck]

Thanks for great tutorial, helped me a lot.