Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › URL SQL injection, POST SQL injection ,COOKIE SQL injection[What is this?]

New Reply 

URL SQL injection, POST SQL injection ,COOKIE SQL injection[What is this?]
anonbux0
anonbux0 Offline
[bin@HF:]
*
Registered
Posts:
1,048
Threads:
308
Credibility:
000
Popularity:
4
βytes:
β 0
Game XP:
0
Mar 24, 2012 11:14 AM
What is :

COOKIE SQL injection

URL SQL injection

POST SQL injection

If one site is vulnerable to COOKIE injection,URL SQL injection or POST SQL injection, is possible to hack the site..get information,users..passwords?

Thanks for Help!🤝
VipVince
VipVince Offline
UID 0
****
HF Ub3r
Posts:
6,873
Threads:
967
Credibility:
000
Popularity:
34
βytes:
β 0
Game XP:
0
Mar 24, 2012 11:18 AM
(Mar 24, 2012 11:14 AM)anonbux0 Wrote:  What is :

COOKIE SQL injection

URL SQL injection

POST SQL injection

If one site is vulnerable to COOKIE injection,URL SQL injection or POST SQL injection, is possible to hack the site..get information,users..passwords?

Thanks for Help!🤝

Cookie injection I believe is done via tampering of the cookie and inserting SQL statements via it.

URL is simply basically GET SQL injection. Were you insert your SQL statements via the browser.

POST injection you insert your SQL statements via a box on the page, like a login. This is done via adding your statements with Tamper data.
anonbux0
anonbux0 Offline
[bin@HF:]
*
Registered
Posts:
1,048
Threads:
308
Credibility:
000
Popularity:
4
βytes:
β 0
Game XP:
0
Mar 24, 2012 11:20 AM
(Mar 24, 2012 11:18 AM)VipVince Wrote:  Cookie injection I believe is done via tampering of the cookie and inserting SQL statements via it.

URL is simply basically GET SQL injection. Were you insert your SQL statements via the browser.

POST injection you insert your SQL statements via a box on the page, like a login. This is done via adding your statements with Tamper data.

Thank you for help.. but i can get information from the site with this?
Tjm
Tjm Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,931
Threads:
30
Credibility:
4400
Popularity:
813
βytes:
β 20
Game XP:
64,695
Mar 24, 2012 11:23 AM (This post was last modified: Mar 24, 2012 11:24 AM by Tjm.)
(Mar 24, 2012 11:20 AM)anonbux0 Wrote:  Thank you for help.. but i can get information from the site with this?

Yeah it's just using SQLi but in different areas. Firefox Tamper Data is what you would want to get as Vince said.
I know that you are forever my brother
anonbux0
anonbux0 Offline
[bin@HF:]
*
Registered
Posts:
1,048
Threads:
308
Credibility:
000
Popularity:
4
βytes:
β 0
Game XP:
0
Mar 24, 2012 11:33 AM
(Mar 24, 2012 11:23 AM)Tjm Wrote:  Yeah it's just using SQLi but in different areas. Firefox Tamper Data is what you would want to get as Vince said.

and i use normal SQLi codes?

like , order by 20-- ?

Tjm
Tjm Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,931
Threads:
30
Credibility:
4400
Popularity:
813
βytes:
β 20
Game XP:
64,695
Mar 24, 2012 12:47 PM
(Mar 24, 2012 11:33 AM)anonbux0 Wrote:  and i use normal SQLi codes?

like , order by 20-- ?

Yeah from what I know. You can also do useragent based injection.
I know that you are forever my brother
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by AKDholyaBabyApr 13, 2023 12:20 AM 10 933 Apr 13, 2023 12:20 AM
Last Post: immmi
by aa6667Jun 12, 2021 01:25 AM 2 177 Jun 12, 2021 01:25 AM
Last Post: aa6667
by Hackme1983Apr 24, 2021 07:41 PM 0 289 Apr 24, 2021 07:41 PM
Last Post: Hackme1983