[stubz]

i always get confused on the "order by 1--" bit, where do i type it in and stuff?

[slimshadyLP]

thanks dude .. great tutorial ! Tested and it works

[giannis28]

nice tut!!Thanks!!✌✌✌

[PanParagon]

i always get confused on the "order by 1--" bit, where do i type it in and stuff?

you type it in page url, where you type: www.google.pl :D

so: site.pl/index.php?id=10 order by 1-- :)

and i have question, why you didn't post a typical errors of sql injection like:

Code

Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION'  ( for: article.php?id=139 union all select 1,2,@@version,4,5,6,7,8,9--)

Code

The used SELECT statements have a different number of columns  [i correctly ordered site...]

Code

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by 5-- or peoplelink2 = 40 order by 5-- or peoplelink3 = 40 order by 5' at line 1

any help?

[The Axe]

Sweet hacked like 50 sites!!

[The Axe]

Sweet hacked like 50 sites!!

[SIM-209986]

What if I get 403 Error at this point:

union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--

[tequila]

Then your facing WAF and this message is way too short.

[R 1 P A G 3]

Very nice.

Um, this really is intresting,

-Tony

[Nerv]

What if I get 403 Error at this point:

union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--

means that sql is pretty much fucked on that site

[amn3sys]

bookmarked so i can read it tomorrow :) --

[Peltraw]

Nice.
Helped alot, keep it up. c(;

[MRHawt]

http://www.lcoastpress.com/journal.php?id=7 union all select 1,2,3,4,5,6,7,8,9--

This gives me "The used SELECT statements have a different number of columns".
what am i supposed to do next? Cant find any column no which is vulnerable.

[Dimitrije]

NOTE not all sites are vulnerable. ! So what we do with sites which are non vulnerable on SQL Injection??

[DAG]

I know theres 24 columns on this one website I have, but when I go to do the "union select" part I got confused am I supposed to list all numbers before 24 or something? its not realley explained...