Where would you guys recommend to learn how to SQL Inject and what tools to use I am quite interested
learning SQL Injections |
 (Dec 1, 2017 05:27 PM)05hax05 Wrote: havij is good for SQL injection.. Where would you recommend learning about sql injection as well ?  (Dec 1, 2017 05:30 PM)Ariesfangz Wrote: Where would you recommend learning about sql injection as well ? if hes recommending havij there is exactly a 0% chance he ever learned how to do it on his own. literally the best way to learn is to learn sql on its own then learn a bit about backends, what makes shit vulnerable and how to find injection points.
humble rubyist in a world of pythonistas
Dec 1, 2017 06:14 PM
(This post was last modified: Dec 1, 2017 06:28 PM by CyberStrike.)
Yes learn SQL first
https://www.tutorialspoint.com/sql/index.htm Havij/SQLmap ..etc will not teach you. You want to know what the tool is actually doing if you understand the underlying technologies and processes going on you will have a better chance of being successful. Once you have learned a bit then check out the following, try it manually no tools of course. If you get stuck it happens it does have some things to try there on the page, but learn and do it in a safe environment. http://sqlzoo.net/hack/ Edit: There are several tutorials as well on sqlzoo. (Dec 1, 2017 06:14 PM)CyberStrike Wrote: Yes learn SQL first yeah i agree the tools dont teach you how it works it just does shit but without knowledge of what it does then theirs no hope  (Dec 2, 2017 02:23 AM)Ariesfangz Wrote: yeah i agree the tools dont teach you how it works it just does shit but without knowledge of what it does then theirs no hope Very good sounds like you are willing to learn that is probably the most important thing, Anyhow yeah stay away from the automated tools as they will not teach you anything best of luck. |
|
|
