[yxzy]

Thanks but i think i saw a problem with it, when i was doing a site i saw it had 36 colums and it opened normal (I wasnt using the -) and then on 37 i got "Unknown column '37' in 'order clause' "
But then when i add the dash i get an sql error...

[soldi3r]

nice effort.. thanks man..

[V1P3R]

anytime guys im glad people still looking at my tutorial

[Faner]

Thanks but i think i saw a problem with it, when i was doing a site i saw it had 36 columns and it opened normal (I wasnt using the -) and then on 37 i got "Unknown column '37' in 'order clause' "
But then when i add the dash i get an sql error...

In that case you should try blind injection with substring.
For example

site.com?id=15 and substring(@@version,1,1)=4

if page loads normally, then mysql version is 4. If some content of page is missing, then it's different, change 4 to 5 and try again.
I believe you can find tutorial on blind sqli on this forum. just use search.

[Techie]

Nice and HQ tutorial, thank you.

[vqoley]

very nice bro. i like use inurl: admin page. :-)

[vqoley]

very nice bro. i like use inurl: admin page. :-)

[Sariki]

Thank you for the amazing TuT I am going to be trying this now I really do appreciate it!

[Sariki]

Thank you for the amazing TuT I am going to be trying this now I really do appreciate it!

[h4ckcode]

Great i will try that .. thanks alot for the knowlegde..