ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Pentesting and Forensics › help to exploit sql injection

New Reply 

help to exploit sql injection
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 03:50 AM
how can exploit a sql injection vuln ending with word not a number ?



# SQL Injection/Exploit :
# http : // localhost /index.php?option=com_joomblog&task=tag&tag=Ihsan_Sencan[SQL]
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 04:23 AM
I don't see where it's different whether you got words or numbers for your injection
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 06:57 AM
(Feb 16, 2017 04:23 AM)Dutisto Wrote:  I don't see where it's different whether you got words or numbers for your injection


Thank you man for your answer
but i will give example:
you see that link is vulnerable to SQL injection but i wasn't able to exploit it
http: //www .alexkincaid. com/index.php?option=com_joomblog&task=tag&tag=hack'
DelziumTheProudWhale_temp
DelziumTheProudWhale_temp Offline
[closed@HF:]
Posts:
1,166
Threads:
80
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 16, 2017 06:58 AM
(Feb 16, 2017 06:57 AM)MR-XX Wrote:  Thank you man for your answer
but i will give example:
you see that link is vulnerable to SQL injection but i wasn't able to exploit it
http: //www .alexkincaid. com/index.php?option=com_joomblog&task=tag&tag=hack'

use havij
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 07:06 AM
Same probleme
WAppEx 2.0 Analyze :
Analyzing bla bla bla..
Can't find keyword but let me do a try!
Can't find injection type... Trying Integer type if failed, retry with String type
Can't find db server type! But maybe there be some chances! [-o
Finding Injection Method...
Trying Mssql error based method...
I think i was wrong about injection type trying String type!
Trying union based method...
Finding columns count...
Can't find Columns count!
Trying Mysql error based method...
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 08:44 AM
Do you succeed to got at least a SQL error or something ? How do you know that this link is vulnerable ?

PM if u want
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 10:56 AM
(Feb 16, 2017 08:44 AM)Dutisto Wrote:  Do you succeed to got at least a SQL error or something ? How do you know that this link is vulnerable ?

PM if u want

visit that link and will give you sql error
http: //www .alexkincaid. com/index.php?option=com_joomblog&task=tag&tag=hack'
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 11:47 AM
Alright, i was able to inject whatever i want in this site. As i said, number or word doesn't matter^^
DelziumTheProudWhale_temp
DelziumTheProudWhale_temp Offline
[closed@HF:]
Posts:
1,166
Threads:
80
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 16, 2017 01:11 PM
(Feb 16, 2017 11:47 AM)Dutisto Wrote:  Alright, i was able to inject whatever i want in this site. As i said, number or word doesn't matter^^

may i ask you how you did it?
i tried to do it however no luck
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 01:12 PM
I can guide you in the right direction, pm me^^
DelziumTheProudWhale_temp
DelziumTheProudWhale_temp Offline
[closed@HF:]
Posts:
1,166
Threads:
80
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 16, 2017 01:12 PM
(Feb 16, 2017 01:12 PM)Dutisto Wrote:  I can guide you in the right direction, pm me^^

you wont be able to reply to my pm tho
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 02:41 PM
(Feb 16, 2017 01:12 PM)DelziumTheProudWhale_temp Wrote:  you wont be able to reply to my pm tho

Oups, forgot about this. Alright, show some injections you tried, and i'll correct you^^
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 04:04 PM
Guys , how about to show us here in public ?
Dutisto
Dutisto Offline
[n00b@HF:]
*
Registered
Posts:
30
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 16, 2017 04:09 PM
That's what we gonna do ;)
MR-XX
MR-XX Offline
[n00b@HF:]
*
Registered
Posts:
44
Threads:
21
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 17, 2017 02:38 AM
(Feb 16, 2017 04:09 PM)Dutisto Wrote:  That's what we gonna do ;)

Then where is it?
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by shazalammNov 4, 2016 05:14 PM 1 328 Nov 4, 2016 05:14 PM
Last Post: something goes here
by ElkhazrajySep 18, 2016 04:28 AM 0 142 Sep 18, 2016 04:28 AM
Last Post: Elkhazrajy