I strongly reccomend you to use VPN(Of course paid is better but they are some good free too.) or RDP/VPS while doing this!
1.Open Sqli Dumper v7.0
[IMG]http://s13.postimg.org/rrcw8qwuv/Pv_Sw_H1_V.png[/IMG]
Put some dorks from the list
[IMG]http://s21.postimg.org/xyz18i06f/12l_UW0i.png[/IMG]
2.Click Start Scanner
3.Wait few minutes . If you dont want to wait the full scan , click CANCEL in the bottom.
4.Go on tab Exploitables and click on Start Exploiter
[IMG]http://s2.postimg.org/hxldlwxtl/2z_Jz_UMb.png[/IMG]
5.You can still CANCEL at any time if you dont want to wait the full scan, just be sure they are some sites already loaded.
6.Go on tab Injectables and click Start Analizer
[IMG]http://s2.postimg.org/gcb5r7tx5/3g95_Ldn.png[/IMG]
7.See below the injectable sites , also watch for the METHOD.
[IMG]http://s17.postimg.org/s2g3wga3z/DXFJJq_N.png[/IMG]
9.Right click then CLIPBOARD, see the method,in my case MySQL Union
[IMG]http://s23.postimg.org/ek0e1bqq3/n_Du_P1_Ri.png[/IMG]
10.Go on tab Data Dumper,then paste the link and select the Method which you saw in step 9
[IMG]http://s23.postimg.org/p88qdwq2z/RTGYSe_X.png[/IMG]
11.Click Get server info and wait.(In some cases it doesnt load , make sure that the method is correct, if still not working , just select other site to inject)
12.Now click Get Tables
http://s1.postimg.org/x5mlwzgrj/b6pix_Il.png
13.Depens on the site , you will see different things here.I will just show you how to grab that(You can get different things like admin login,credit card info,email:pass etc)
14.Select whatever you want and click Get Columns
[IMG]http://s22.postimg.org/85cr3pfhd/Tretfxm.png[/IMG]
15.Again mark something something and click Dump Data
[IMG]http://s8.postimg.org/qs769mjet/Olb6_Dlo.png[/IMG]
16.I found it without decryption need (because usually admin password is encrypted with MD5 or SHA1)
[IMG]http://s17.postimg.org/fzy7oyywf/oj1_Ppo_D.png[/IMG]
I hope you like:)
1.Open Sqli Dumper v7.0
[IMG]http://s13.postimg.org/rrcw8qwuv/Pv_Sw_H1_V.png[/IMG]
Put some dorks from the list
[IMG]http://s21.postimg.org/xyz18i06f/12l_UW0i.png[/IMG]
2.Click Start Scanner
3.Wait few minutes . If you dont want to wait the full scan , click CANCEL in the bottom.
4.Go on tab Exploitables and click on Start Exploiter
[IMG]http://s2.postimg.org/hxldlwxtl/2z_Jz_UMb.png[/IMG]
5.You can still CANCEL at any time if you dont want to wait the full scan, just be sure they are some sites already loaded.
6.Go on tab Injectables and click Start Analizer
[IMG]http://s2.postimg.org/gcb5r7tx5/3g95_Ldn.png[/IMG]
7.See below the injectable sites , also watch for the METHOD.
[IMG]http://s17.postimg.org/s2g3wga3z/DXFJJq_N.png[/IMG]
9.Right click then CLIPBOARD, see the method,in my case MySQL Union
[IMG]http://s23.postimg.org/ek0e1bqq3/n_Du_P1_Ri.png[/IMG]
10.Go on tab Data Dumper,then paste the link and select the Method which you saw in step 9
[IMG]http://s23.postimg.org/p88qdwq2z/RTGYSe_X.png[/IMG]
11.Click Get server info and wait.(In some cases it doesnt load , make sure that the method is correct, if still not working , just select other site to inject)
12.Now click Get Tables
http://s1.postimg.org/x5mlwzgrj/b6pix_Il.png
13.Depens on the site , you will see different things here.I will just show you how to grab that(You can get different things like admin login,credit card info,email:pass etc)
14.Select whatever you want and click Get Columns
[IMG]http://s22.postimg.org/85cr3pfhd/Tretfxm.png[/IMG]
15.Again mark something something and click Dump Data
[IMG]http://s8.postimg.org/qs769mjet/Olb6_Dlo.png[/IMG]
16.I found it without decryption need (because usually admin password is encrypted with MD5 or SHA1)
[IMG]http://s17.postimg.org/fzy7oyywf/oj1_Ppo_D.png[/IMG]
I hope you like:)




