RE: SQL Injection Tutorial 12-23-2012, 03:19 AM
#21
thank bro.this's very useful for me and veryone
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
| SQL Injection Tutorial filter_list | |
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
RE: SQL Injection Tutorial 01-21-2013, 08:54 PM
#22
First off I would like to say this was a great tutorial. It really helped me a lot. I had just one problem when you added the database name in. It keeps giving me an error. I have triple checked I followed exactly what you had but I keep getting an error. If you could help me in any way it would be much appreciated.
RE: SQL Injection Tutorial 01-22-2013, 01:55 AM
#23
Wish you would have done this one yourself :/ Anyways you should have atleast explained WAF bypassing. Sometimes the server will have a windows application firewall. This will sanitize some SQL commands such as UNION SELECT in most cases and you will have to bypass that and trick the server into no sanitizing it. You can do this by using whitespacing and many other methods like so: /**UNION**/+/**SELECT**/+1,2,3.. Might make a TUT for you guys on this later on.
![[Image: 8Hd3UZQ.png]](http://i.imgur.com/8Hd3UZQ.png)
My Private Tools:
[*] Private SQL INJECTION SCANNER! [*]
[*] HQ Tutiorals Too! [*]
RE: SQL Injection Tutorial 01-24-2013, 11:14 PM
#24
Really thanks for posting, man. so much useful. definitely the greatest SQLi tutorial i've found.
very well detailed and much much comprehensible.
keep this up..
very well detailed and much much comprehensible.
keep this up..
My Bitcoin address: 1AtxVsSSG2Z8JfjNy9KNFDUN6haeKr7LiP
Give me money by visiting www.google.com here: http://coin-ads.com/6Ol83U
If you want a Bitcoin URL shortener/advertiser, please, use this referral: http://coin-ads.com/register.php?refid=noize
Give me money by visiting www.google.com here: http://coin-ads.com/6Ol83U
If you want a Bitcoin URL shortener/advertiser, please, use this referral: http://coin-ads.com/register.php?refid=noize
RE: SQL Injection Tutorial 02-26-2013, 02:20 AM
#25
hey i got a problem because i think i'm not well experienced on that actully it's first time i'm trying to do that 
..so the problem is when i arrive to the step to find the column name i wrote all table name in the place where in ur example u wrote ''You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"es_cms_users\"--' at line 1 '' ... i tried also to convert to hex n after same error ''You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"0x65735f656e5f636d735f64616e65\"--' at line 1'' where am i making it wrong please help ;=) thanks a lot for share
..so the problem is when i arrive to the step to find the column name i wrote all table name in the place where in ur example u wrote ''You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"es_cms_users\"--' at line 1 '' ... i tried also to convert to hex n after same error ''You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"0x65735f656e5f636d735f64616e65\"--' at line 1'' where am i making it wrong please help ;=) thanks a lot for share
RE: SQL Injection Tutorial 08-16-2013, 12:13 AM
#26
Thanks for your post. I always have a need for good explanations for sqli as well as a good manual. HQ post
RE: SQL Injection Tutorial 09-07-2013, 10:33 AM
#27
Thank you for this tutorial
My Drop Adress
New York Address
London Address
Istanbul Address
Mumbai Address
Hong Kong Address
Shanghai Address
Dubai Address
For any one want drop for shopping
Contact me via email :-
eng.pro.ahmedtarek@hotmail.com
New York Address
London Address
Istanbul Address
Mumbai Address
Hong Kong Address
Shanghai Address
Dubai Address
For any one want drop for shopping
Contact me via email :-
eng.pro.ahmedtarek@hotmail.com
