Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Asking for help from masters in sqli

Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful

Many thanks in advance
Post the site and we might be able to help you.

Use: https://www.base64encode.org/
Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable
You have to use %23 to end the comments with or screen goes blank..
Code
id=20' order by 13%23    sql error on screen
id=20' order by 14%23    screen goes blank

hope this helps ✌
(Oct 10, 2017 10:44 PM)Berry White Wrote:  Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful

Many thanks in advance

use:
PHP Code

<?php 
syntax deleted by request 

version: 5.5.55-cll

P.S:
OP contact me by PM when you will have rights to do it...
Janus - SQLi challenges for advanced injectors
(Oct 10, 2017 11:35 PM)Berry White Wrote:  Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable

WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote:  WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍

Sure, after I posted my syntax, you will explain it 😝 🤦‍♂ Story of your life...

P.S.
My syntax was later removed by request as it is used in a challenge
Janus - SQLi challenges for advanced injectors
(Oct 11, 2017 01:43 PM)JaNuS18 Wrote:  Sure, after I posted my syntax, you will explain it 😝 🤦‍♂ Story of your life...

P.S.
My syntax was later removed by request as it is used in a challenge

first: mr JaNuS18 I swear I have not seen your syntax , I am a Muslim and I never lie 👍
Second: mr JaNuS18 wait to see my Work to see it's not your work 😝

I hope not only between us except good work

Regards Mr JaNuS18 🤝
(Oct 11, 2017 11:47 AM)JaNuS18 Wrote:  use:
PHP Code

<?php 
syntax deleted by request 

version: 5.5.55-cll

P.S:
OP contact me by PM when you will have rights to do it...

Janus can u pm me ?


(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote:  WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍

Thank you


(Oct 11, 2017 06:00 AM)c0sm1k Wrote:  You have to use %23 to end the comments with or screen goes blank..
Code
id=20' order by 13%23    sql error on screen
id=20' order by 14%23    screen goes blank

hope this helps ✌

Well i found 13 columns too, but thats not problem...
I found 6 columns too with ;%00
But no output or The used SELECT statements have a different number of columns, thats the problem xD but thanks for trying, i appreciate that mate <3
(Oct 10, 2017 10:44 PM)Berry White Wrote:  Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful

Many thanks in advance

Here You Go My Frind The Solution For You My Dear😁

PHP Code

<?php 
https
://hackforums.net/showthread.php?tid=5735331 
(Oct 11, 2017 05:57 PM)pishicat_Injector Wrote:  Here You Go My Frind The Solution For You My Dear😁

Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow

PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance
(Oct 11, 2017 07:42 PM)Berry White Wrote:  Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow

PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance

why you don't say that to me in facebook in account Berry White Or here when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶
(Oct 11, 2017 08:09 PM)pishicat_Injector Wrote:  why you don't say that to me in facebook when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶

Dude first of all i didnt expect that u will type real website name...
Second, u didnt wrote this for me, u wrote it because yourself on some way :)
And third, i dont need you to delete tut, i just asked to remove website name
----------------------------------------------------------------------------------------------------------
(Oct 11, 2017 08:46 PM)pishicat_Injector Wrote:  who you say that 😶

I don't need your site to add tut here in this section I have six Tutorial written for this section already, Just a matter of time on publication .

I spent a lot of time writing the subject just to help you not to my self 😠 as you say

Any way cuz you see this Tut It's for my self not for you my brother , I love to say to you I don't need it 😧 cuz I know all thing that Posted in this topic, So this Tut Is Deleted

Regards 🤝

You have? Then why u didnt set other website name, but this?
U could just change website name because its same injection method..
And i mean, its not specificaly for you tutorial, but for others , so you gain rep+


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Cyber444Oct 17, 2013 10:52 AM 6 220 Oct 17, 2013 10:52 AM
Last Post: .KabooM.
by Cyber444Oct 9, 2013 06:57 AM 8 296 Oct 9, 2013 06:57 AM
Last Post: Cyber444
by Cyber444Oct 7, 2013 06:38 AM 1 115 Oct 7, 2013 06:38 AM
Last Post: ๖ۣۜStark