[bpnrockstar]

HOW TO HACK WEBSITES DATABASE




SQL Injection Is Most Widely Used Common Method In Web Hacking. Most Websites Are Being Hacked Using SQL Injection These Days. In This Post We Are Going To Learn About A Tool Called Havij. It is the simplest method to hack any site with this tool Havij Is An Automated SQL Injection Tool.


It Helps Pen-Testers To Find And Exploit Vulnerabilities On A Web Page. You Can Perform Back-End Database Finger Printing, Retrieve DBMS Login Names And Password In The Shape Of Hashes. You Can Also Dump Tables And Columns, Can Fetch Data From The Database, Can Execute SQL Statements Against The Server And Much More.



As We Know, That There Are Many Tools Available On Internet, By Using Which Anyone Can Hack Vulnerable Websites. Because Of The Availability Of Hacking Tools. Hacking Websites Is Becomming Easy And The Number Of Hacking Websites Is Also Increasing. Everyone Can Use Havij For Hacking Websites And For Testing Vulnerabilities. Because Of GUI(Graphical User Interface) And Automated Configuration. In This Post I Am Going To Share Tutorial Of Havij. How To Use It And How Can A Person Hack SQLI Vulnerable Website By Using This Tool.



THINGS WE NEED TO HACK WEBSITES DATABASE:-


1.Havij Tool – download here

2. SQLI Vulnerable Website. – Use Google Dorks To Search Vulnerable Website.

3. Start Tutorial. Open Havij.



4. Type Vulnerable Website Inside It And Hit Analyze Button.



5.Now Click On Tables Tab And Then Hit Get DBs Button.



6. Now You Have Got All Databases In Result. Tick Databases And Hit Get Tables Button.



7. You Have Got Tables From The Databases You Ticked In Previous Step. Now Tick Related Tables And Hit Get Columns Button.



8. You Have Got Columns From Ticked Table. Tick Related Columns And Press Get DataButton.
I Am Going To Choose Username, Password, UserGroup Columns. There Should Be Stored Data Related To Admin’s Username, Password Etc.



9. Booom! You Have Got Username And Password Of Admin.




BONUS:- http://www.sendpoints.cn/newsDetail.php?id=24

NOTE:- YOU CAN TRY TO HACK THIS WEBSITE 😛 :-P. WELL THIS IS NOT MINE 😛 SO, DON’T BE RUDE

[eo420]

Nowadays I think that sqlmap is better, its open-source. Also becareful with .exe because ransomware spreads everywhere

[Bluevilain]

How do I know if this is not dirty ? A while back I remember people used to post a novirusthanks scan on this forum before sharing their exe

[bpnrockstar]

yeah bro i am using this tool personally. actually i am just sharing yeah but i used it, i know now a days everyone is sharing virus. even my computer has been affected by ansomeware irus more than 10 times. and normal virus i used itself. i disable my antivirus. and if u r in this feild then never try to explore bro

[Crypted]

isnt havij outdated for todays mysql?

[bpnrockstar]

BRO I CAN GIVE SOME WEBSITE LINK STILL SITES ARE VERNABLE

http://www.sendpoints.cn/newsDetail.php?id=24

YOU CAN HACK THIS SITE :-P

[Nikix]

How about jsql-injection tool...it is java based open source. It is remind me Havij, I have tried it with some sites and it works. But I am not sure how good this one is. But unlike Havij it is updated regularly.

Here is github link:
https://github.com/ron190/jsql-injection

[RyanC4460]

How about jsql-injection tool...it is java based open source. It is remind me Havij, I have tried it with some sites and it works. But I am not sure how good this one is. But unlike Havij it is updated regularly.

Here is github link:

I have had to buy a new PC due to viruses many times, how do I know this is safe?

---

I clicked Analyse however it said I needed to input a parameter??

[Nikix]

I have had to buy a new PC due to viruses many times, how do I know this is safe?

---

I clicked Analyse however it said I needed to input a parameter??

Hi if you had to buy new pc due to viruses I would recommend you stop playing with Havij or similar tools and go back to read and study something.
Then come back later. Trust me.

[RyanC4460]

Hi if you had to buy new pc due to viruses I would recommend you stop playing with Havij or similar tools and go back to read and study something.
Then come back later. Trust me.

I got HAVIJ but get a parameter error when trying to click analyze?

[thewolf21]

you can user this tools sqlmap very good

[LordDragon]

Bookmarking this,to come back later.

[нα¢кєя]

No one uses havij anymore, SQL map is wayy better.

[frank3nstien]

I personally really like Havij a great tool ever but with today's advanced protections and technologies it's outdated, SQLMAP and jSQL is way better.

[gubed]

SQLMap is definitely a more robust tool than havij, IMO. And it's open source so no need to worry about any sketchy business with EXEs. Also important is understanding SQLi well enough to do it manually because often times, especially with modern web apps, finding the injection point can be tricky and just firing random tools off will be detected. And automated tools can overlook potential issues, or call put false positives , that will also cause interference.