Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

How are hashed passwords obtained through SQL?

Sorry I am new to hacking and was wondering on where the hashed passwords are actually stored and how changing the SQL data allows you to extract them.
(Jul 7, 2022 12:18 AM)Incog Wrote:  https://www.programiz.com/sql/injection
https://www.w3schools.com/sql/sql_injection.asp

SQL Injection is the, well injection of SQL (lol) into a user input, where the goal is to manipulate the way the server handles the input to execute malicious SQL code, so if they were injecting into a user input on a login form, if they could manipulate the input, they could try and return all the info from a table, aka the user table, and their passwords

I am assuming this is what you meant

Thanks for this information!
(Jul 7, 2022 12:18 AM)Incog Wrote:  https://www.programiz.com/sql/injection
https://www.w3schools.com/sql/sql_injection.asp

SQL Injection is the, well injection of SQL (lol) into a user input, where the goal is to manipulate the way the server handles the input to execute malicious SQL code, so if they were injecting into a user input on a login form, if they could manipulate the input, they could try and return all the info from a table, aka the user table, and their passwords

I am assuming this is what you meant

Thanks a lot for this, you've given me a lot more knowledge through this simple post. I really appreciate.
Very good reply from Incog there, it is also worth mentioning that SQLI vulnerabilities are very rare today. At least in most commercial websites etc.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by AndyfromgoogleSep 7, 2017 04:27 PM 1 139 Sep 7, 2017 04:27 PM
Last Post: John Player Special
by rissa007Mar 28, 2017 03:51 PM 2 192 Mar 28, 2017 03:51 PM
Last Post: rissa007
by JaliscoJun 26, 2016 04:35 AM 2 1,337 Jun 26, 2016 04:35 AM
Last Post: Im gone brah