Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆ ZexoCard: no-KYC virtual crypto cards ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › MSSQL Union Based Exploitation in Worse Conditions[Tutorial]

New Reply 

MSSQL Union Based Exploitation in Worse Conditions[Tutorial]
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 10, 2015 12:59 PM (This post was last modified: May 10, 2015 01:28 PM by iHacker-n00b.)
MSSQL Practical Second Order Exploitation Or Kinda Out of Band Exploitation(The Purpose is Same, The Trick is little different) When You are Not Able To Do Error Based Or Union Based SQL Injection and Then Comes What You Could Do Instead of Those 'Blind injections '🎉 In Such Situations
Code
http://securityidiots.com/Web-Pentest/SQL-Injection/mssql-out-of-band-exploitation.html





Hope You 'll Enjoy!
Hooded Robin
Hooded Robin Offline
[email protected]
***
HF Ub3r
Posts:
2,272
Threads:
104
Credibility:
000
Popularity:
77
βytes:
β 0
Game XP:
0
May 11, 2015 06:18 AM
Neat trick that would be fairly site specific. Also this is a normal stacked query injection, nothing out of band (email, dns, etc) about it all...

iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 11, 2015 06:29 AM (This post was last modified: May 11, 2015 06:31 AM by iHacker-n00b.)
(May 11, 2015 06:18 AM)Hooded Robin Wrote:  Neat trick that would be fairly site specific. Also this is a normal stacked query injection, nothing out of band (email, dns, etc) about it all...

WoW! Thanks For The Nice Comment! Yea Its Nothing Out of Band Though The Purpose Is The Same :P To Avoid xD Blind Injections ! :') Actually Here 2 Queries are running with Different Number of Columns :P That Causes Union Based and Even Error based a Problem .. For That We Could even Do one More thing that is :P Alter and add Column(s) to the One Of Tables Such That Both queries have Same Number of columns :) And Then Union Based Injection works.. Fine
IDK
IDK Offline
✅ Verified Copypasta Bot
*****
Benevolence
Posts:
1,951
Threads:
76
Credibility:
3701
Popularity:
2,474
βytes:
β 3,890.6
Game XP:
41,765
May 11, 2015 10:12 AM
Nice tut mate It will help beginners for learning something new 👍
卐卐卐Click to Buy this Signature space卐卐卐
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 11, 2015 10:15 AM
(May 11, 2015 10:12 AM)IDK Wrote:  Nice tut mate It will help beginners for learning something new 👍

🤝 Thanks Mate! =) Glad You Liked It
The_Defiant_One
The_Defiant_One Offline
[user@HF:]
*
Registered
Posts:
315
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 11, 2015 05:08 PM
Some good stuff here. Also ... i've check out your website as well as your web app tutorials and i must say ... you have some really great stuff there. Good for learning web app hacking. Will refer to it for future use. Thanks.
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 12, 2015 08:36 AM (This post was last modified: May 12, 2015 08:36 AM by iHacker-n00b.)
(May 11, 2015 05:08 PM)The_Defiant_One Wrote:  Some good stuff here. Also ... i've check out your website as well as your web app tutorials and i must say ... you have some really great stuff there. Good for learning web app hacking. Will refer to it for future use. Thanks.

Thanks 🤝 Its Good to know :D that Some People Liked It
AkDK
AkDK Offline
[user@HF:]
*
Registered
Posts:
117
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 25, 2016 06:23 AM
Nice One Bro Awesome Work
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by MESHAL7Feb 27, 2026 04:20 PM 1 88 Feb 27, 2026 04:20 PM
Last Post: MESHAL7
by brian911Feb 2, 2026 01:42 AM 6 439 Feb 2, 2026 01:42 AM
Last Post: Chornaya Magiya
by darkguideOct 21, 2025 07:48 PM 4 377 Oct 21, 2025 07:48 PM
Last Post: binxzzz