(Jan 14, 2011 07:21 AM)Dimitrije Wrote: NOTE not all sites are vulnerable. ! So what we do with sites which are non vulnerable on SQL Injection??
I would also like to know the answer to this. From what I can see, on most sites this does not work. What is the alternative?
thanks... great post ! ! !
I got some website shopadmin tables, and in order column I can't get the number of credit cards. It only shows me **4251 . I mean only the lasts 4 digits. What can be done? Is this because of havij free and dont let me see the all cc number? Or some websites encripts credit cards detail? If so, what can be done to unencrypt them. Thanks.
thanks very match my man..
thanks
nice tut!!~
wtf still too short
i couldnt figure out where to find a vulnerable site or how to get to the administrator panel
Nice tut! Although I've yet to find a site with such a small number of tables :/
How and where do i type all the codes to inject? Yes im totally noob.
DO NOT DEAL WITH THIS MEMBER
(Jan 22, 2011 01:08 AM)autorunman22 Wrote: How and where do i type all the codes to inject? Yes im totally noob.
Url bar😝
Message to shoort 🎉
Thanks man i will try out later when ive got some time on my hands. Great work :D
😅Hi,How do you get your Dork on this site?
Such as www.facebook.com
Ok,, Would like to start of by saying good tutorial.
Now that being said I have a few questions for you.
When I use these dorks in google, I can't seem to find any specific site that has the proper specifications to allow such an attack, to retrieve passwords from the site.
Quote:inurl:index.php?catid="
"inurl:news.php?catid="
"inurl:index.php?id="
"inurl:news.php?id="
or the best in my view "full credit to qabandi for discovering this"
"inurl:".php?catid=" site:xxx"
I do get the errors, but when I input order by 1-- ... Nothing happens or just the same error pops up. And on some I go threw pages of the site, I tried skipping ahead on some, just because when I got to 50, I was to lazy to keep going so I tried 500, then 1000 right away just to see if i would get an error. But no error. Why is this am I doing somehting wrong? Or do I just need to find another site? Just curious I'm sure this might help out allot more people on here too if you care to explain. 😁
Good toturial about sql injection :D
Jan 26, 2011 10:14 AM
(This post was last modified: Jan 26, 2011 10:18 AM by autorunman22.)
Im sorry, but where do i type all of that codes? Help please
(Jan 23, 2011 05:12 AM)GosthShadow Wrote: Url bar😝
Message to shoort 🎉
hey thenks :) to be more specific, should i append it on a target vuln site? I mean like this
www.blabla.com/bla=1[codes to inject]
do u get my point? Thanks again.
Very nice toturial... :D :D
Very nice toturial... :D :D
|