[sexysb2]

Hacking Website With Sql Injection

This tutors for newbie only

First you need a tools scaner for sql injection.You can Download it from the link below.

Scanner

A Dork sql injection

you can find in google .



Havij ( tool sql injection )

This Tool is helpful for injecting in to the website and find out the links to their database tables.Download link below.

Link To Download


http://3.bp.blogspot.com/-qkFOEsmng6w/US...00/4-4.jpg
http://4.bp.blogspot.com/-uZEqX1CbgAI/US...00/7-1.jpg


As the Images provides the relevant information you new.You can also decrypt the md5 hashes using following tool.

link to download

For More Tutorials And Tools Click here

[i0xIllusi0n_mybb_import11329]

Havij is next to the worst automatic SQL injection tool there is.
Plus, "decrypt hashes?" Obviously you don't know what a hash is.

A hash is a one-way encryption, there is no decryption. Havij sends requests to websites who then have rainbow tables to check and see if the hash you are attempting to crack has been previously cracked or not. It doesn't crack it for you.

Continuing this post, you're a little skid if all you do is use Havij -- or any automatic injection tool -- without knowing manual injection. And we can all surely tell that's what OPs situation is. Learn manual injection buddy. Then come talk.

[zomgwtfbbq]

Havij is next to the worst automatic SQL injection tool there is.
Plus, "decrypt hashes?" Obviously you don't know what a hash is.

A hash is a one-way encryption, there is no decryption. Havij sends requests to websites who then have rainbow tables to check and see if the hash you are attempting to crack has been previously cracked or not. It doesn't crack it for you.

Continuing this post, you're a little skid if all you do is use Havij -- or any automatic injection tool -- without knowing manual injection. And we can all surely tell that's what OPs situation is. Learn manual injection buddy. Then come talk.

I agree. However you can learn something from Havij if you setup a vulnerable script which logs all get/post requests to see how havij gathers information.

[i0xIllusi0n_mybb_import11329]

Havij is next to the worst automatic SQL injection tool there is.
Plus, "decrypt hashes?" Obviously you don't know what a hash is.

A hash is a one-way encryption, there is no decryption. Havij sends requests to websites who then have rainbow tables to check and see if the hash you are attempting to crack has been previously cracked or not. It doesn't crack it for you.

Continuing this post, you're a little skid if all you do is use Havij -- or any automatic injection tool -- without knowing manual injection. And we can all surely tell that's what OPs situation is. Learn manual injection buddy. Then come talk.

I agree. However you can learn something from Havij if you setup a vulnerable script which logs all get/post requests to see how havij gathers information.

Or you can use SQLMap which shows you the exact commands as it performs them.