Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Hello everyone , I decided to make tutorial how to do sql injection

I strongly reccomend you to use VPN(Of course paid is better but they are some good free too.) or RDP/VPS while doing this!

1.Open Sqli Dumper v7.0
[IMG]http://s13.postimg.org/rrcw8qwuv/Pv_Sw_H1_V.png[/IMG]

Put some dorks from the list
[IMG]http://s21.postimg.org/xyz18i06f/12l_UW0i.png[/IMG]

2.Click Start Scanner

3.Wait few minutes . If you dont want to wait the full scan , click CANCEL in the bottom.

4.Go on tab Exploitables and click on Start Exploiter
[IMG]http://s2.postimg.org/hxldlwxtl/2z_Jz_UMb.png[/IMG]

5.You can still CANCEL at any time if you dont want to wait the full scan, just be sure they are some sites already loaded.



6.Go on tab Injectables and click Start Analizer
[IMG]http://s2.postimg.org/gcb5r7tx5/3g95_Ldn.png[/IMG]

7.See below the injectable sites , also watch for the METHOD.
[IMG]http://s17.postimg.org/s2g3wga3z/DXFJJq_N.png[/IMG]

9.Right click then CLIPBOARD, see the method,in my case MySQL Union
[IMG]http://s23.postimg.org/ek0e1bqq3/n_Du_P1_Ri.png[/IMG]

10.Go on tab Data Dumper,then paste the link and select the Method which you saw in step 9
[IMG]http://s23.postimg.org/p88qdwq2z/RTGYSe_X.png[/IMG]

11.Click Get server info and wait.(In some cases it doesnt load , make sure that the method is correct, if still not working , just select other site to inject)

12.Now click Get Tables
http://s1.postimg.org/x5mlwzgrj/b6pix_Il.png

13.Depens on the site , you will see different things here.I will just show you how to grab that(You can get different things like admin login,credit card info,email:pass etc)

14.Select whatever you want and click Get Columns
[IMG]http://s22.postimg.org/85cr3pfhd/Tretfxm.png[/IMG]

15.Again mark something something and click Dump Data
[IMG]http://s8.postimg.org/qs769mjet/Olb6_Dlo.png[/IMG]

16.I found it without decryption need (because usually admin password is encrypted with MD5 or SHA1)
[IMG]http://s17.postimg.org/fzy7oyywf/oj1_Ppo_D.png[/IMG]

I hope you like:)
Learn To Inject Manually.Much More Fun In Manual Injecting.Tools Can't Help Where There is a little Tough WAF

But The Posted Tutorial Is not bad.Good Work !
thanks for sharing this tutorials
I prefer using SQLMap on Kali :)
Do you feel my products are HQ ?
Send a Donation Here
: 1DGoPU7MPKkx7Kgem1SiGACxHZf3i5tk4j
(May 9, 2016 12:40 AM)-_-Error 404-_- Wrote:  I prefer using SQLMap on Kali :)

I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.

I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.
(May 9, 2016 12:54 AM)DataDumper Wrote:  I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.

I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.

Correct, I have a tutorial I put up not long ago on how to go about getting SQLMap on windows, here
Do you have a link for sqli dumper?
(May 9, 2016 12:05 PM)Embered Wrote:  Do you have a link for sqli dumper?

Same for me,,is there a clean version of the latest release of sqlidumper somewhere on HackForum?
Thanks a lot for this buddy!
Will I be able to hack my own weebly website or will it be considered a hack to weebly
Thats no tut about sql injection ..
.thats a tut about "how i use sql dumper"
would this work on flash based games?
new to this .. would love to know more about it ... thanks mate
(May 9, 2016 12:54 AM)DataDumper Wrote:  I dont know why u need kali to use sqlmap, kali linux is great but if you are doing only sql injection u dont have to install kali to do that.

I also suggest to switch on manualy injection, tools cant inject more tricky sites. The search engine scraper included in SQL Dumper is old and the search results are not even worth a try.

i didnt say that you cant do sql injection from any other OS, i just like kali linux.... anw i think you are correct about mannual injection :)
Do you feel my products are HQ ?
Send a Donation Here
: 1DGoPU7MPKkx7Kgem1SiGACxHZf3i5tk4j
need a paypal page for payment


Possibly Related Threads...
Thread / Author Replies Views Last Post
by thanh159May 27, 2016 07:19 AM 4 259 May 27, 2016 07:19 AM
Last Post: b4tb0t
by RIPPERMay 24, 2016 02:19 AM 24 2,096 May 24, 2016 02:19 AM
Last Post: Kashmiri Hunter
by deadfreak99Nov 1, 2015 08:21 AM 7 188 Nov 1, 2015 08:21 AM
Last Post: Sadleking5000