[Zw4R]

=============================================================
www.xxxx.com/index.php?catid=-1 UNION SELECT 1,concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37),3,4--
this should display the table containing the admin username and password

Daniel Is there any mistake in this sql query?coz your Query for version above 4 working fine for me.but when ever i am tryin this i am getting error.

then see if you can get the admin panel if you cant then try the admin panel finder script here http://www.darkc0de.com/c0de/perl/admin_1.2_.txt

where this text file should be used so that we can find Admin panel.can you throw some light regarding this.


Thanks!🙂

[StNightmare]

thanks man good job on this ^-^ keep it up

[Nerv]

=============================================================
www.xxxx.com/index.php?catid=-1 UNION SELECT 1,concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37),3,4--
this should display the table containing the admin username and password

Daniel Is there any mistake in this sql query?coz your Query for version above 4 working fine for me.but when ever i am tryin this i am getting error.

then see if you can get the admin panel if you cant then try the admin panel finder script here http://www.darkc0de.com/c0de/perl/admin_1.2_.txt

where this text file should be used so that we can find Admin panel.can you throw some light regarding this.


Thanks!🙂

dude if u cant even run a perl program why are you learning sql
start with the basics like telnet hacking
u need 2 know how 2 program the language to hack it
i know php sql and im learning asp i am a webmaster and hacker
this is for all peeps out there!

[xenix]

i found a vulnerable site, igot this error in "order by 1--"
mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/********
then i try union select 1--
and i so number "1" on the screen...
i was stop to the next step
http://www.xxxx.com/index.php?catid=1 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version())--
i cant find the db type and version, can you hel me sir?

[lightman_86]

Love this tut!!! Read it half a million times.!

[Zw4R]

Wit the help of your tut..i got a bunch of Passwrd hashes :) :) Thnks Dude..!!
root:[hash]
which is the best cracker to crack this hash?
[me reading your shell uploading tut now]

---

Attimes when i am tryin to rtrieve tables and columns i am getting only
CHARECTER_SET and CHARECTER_SET_NAME
what does this mean?

---

Attimes when i am tryin to rtrieve tables and columns i am getting only
CHARECTER_SET and CHARECTER_SET_NAME
what does this mean?

[Zw4R]

at times while trying to retreive tables and columns i get only CHARECTER_SET as table and CHARECTER_SET_NAME as column. what does this mean?no other tables or columns?

[Riss]

So. . .
Let's say i try ''') or ('x'='x ''
And then it dousn't work, do i need to test all of them?

[haxxxxy]

great tut dan1el
keep it up.

[dmanza]

awesome post, cheers for sharing buddy!!

[Skaraa]

did i have to die ?
??

[Jpillz]

lol no it's okay. :D

[[W4RL0CK]]

nice tutorial man!!! cheers for the share :)

[[W4RL0CK]]

what an awesome tutorial, cheers mate!!

[BonesInvalid]

I dont really understand several parts you were trying to explain in your tutorial...
Like the "dork" search, am I searching the word Dork? Or what,

Than the URL part, am I putting thoes in at the end?