+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Tutorial Powerful Union SQLi Tutorial (/Thread-Tutorial-Powerful-Union-SQLi-Tutorial)
RE: Powerful Union SQLi Tutorial - chronical - 09-19-2014
(09-19-2014, 10:24 PM)Krypt Wrote: You act like you're a genius. Prove it, throw down some tutorials and other shit on this forum so that I can see that you're not just ridin' this booter exploit. Your friends are only on my knob because this account is new to the forum and it can pose no threat.
Oh and thanks for bumping the thread.
Oh god, please shut the fuck up. You have no room to say that when you know nothing other than how to look off of HF SQLi tutorials and type your own. Reiko is 100x better than you'll ever be, me and just about every other damn person on this forum can vouch for that. If you really want him to prove himself to you, don't cry when you start regretting it.
RE: Powerful Union SQLi Tutorial - Reiko - 09-19-2014
(09-19-2014, 10:35 PM)Adorapuff Wrote: Please stop, Reiko already proved herself many times. She has tutorials posted most people can't even begin to comprehend and is one of the most well-respected members not only here, but throughout the scene.
Actually, Breshie reposted one I wrote on HF. Perhaps you know me from there, Krypt? The name's Starfall, look it up.
https://www.sinister.ly/Thread-How-To-Write-Nonalphanumeric-PHP-Backdoors?highlight=nonalphanumeric
RE: Powerful Union SQLi Tutorial - Alan Turing - 09-20-2014
the keks in this thread are amazing.
RE: Powerful Union SQLi Tutorial - p0t@t@t0 - 12-04-2014
Good post! Learned a lot, and its going to be a lot of fun to play around with
RE: Powerful Union SQLi Tutorial - p.u.r.e.m.i.n.d - 01-25-2015
I long for something something that is not shit im here to become a hacker not a retard Maybe explain sql along with it.
starfall you my lil neko girl don't forget it.
RE: Powerful Union SQLi Tutorial - blackhatcat - 01-26-2015
(01-25-2015, 05:44 PM)p.u.r.e.m.i.n.d Wrote: I long for something something that is not shit im here to become a hacker not a retard Maybe explain sql along with it.
starfall you my lil neko girl don't forget it.
Light yagami why are you impersonating someone who isn't even around anymore?
RE: Powerful Union SQLi Tutorial - Arthur Curry - 01-26-2015
(01-26-2015, 09:40 AM)blackhatcat Wrote: Light yagami why are you impersonating someone who isn't even around anymore?
Because Aush0k and I make him feel bad about being himself.
RE: Powerful Union SQLi Tutorial - Oni - 01-28-2015
(09-20-2014, 02:39 AM)Alan Turing Wrote: the keks in this thread are amazing.
The keks in most of the threads are.
RE: Powerful Union SQLi Tutorial - Dong - 01-28-2015
(09-19-2014, 09:59 PM)Reiko Wrote: In many cases you don't actually have to encode the table name, and you certainly don't need to do it this way. Hex is faster and smaller and uses less CPU on the server. Unless for some reason quotes are being escaped server-side you can just use table_name='fish';
https://dev.mysql.com/doc/refman/5.6/en/ Here, have a look at this. You might learn something... probably not.
Why post these things if you don't understand their use cases?
By the way, this is absolutely a jab at you. I didn't -rep you for pleasure. I -repped you because you are a poser.
Agreed. It always baffles me how people dive into topics such as "code injection" without learning much (or anything) about the code they're injecting or the systems involved in the process.
This isn't a new topic but maybe my opinion will help someone out... (I'm probably just nitpicking):
Quote:Basically, SQLi is the abuse and exploitation of a MySQL Database that most websites (and even some professional websites) run on/with.I feel like quite a few people are confusing the concepts of SQL (the actual language standard) and a DBMS like MySQL, PostgreSQL or MS SQL Server. To put it simply, many of these DBMS are implementations of the SQL language alongside other features such as front-ends, security mechanisms, administration tools, etc., etc.
It's also worth noting that many of them (if not all of the popular ones) don't exactly adhere to the standard, which results in several syntactical differences (amongst others) between the systems. This is why, in my opinion, spending some time learning the SQL standard is important; even for code injection. Some of the syntax you presented may work fine on a server running MySQL, but what if someone wants to execute this on a server running MS SQL? They may have trouble applying these concepts when all they have done is memorize some syntax. That's why I believe tutorials like this should speak more on the concepts and less on the specifics such as syntax.
The Lesson: The general concepts of the language are usually very much the same across these different database systems. However, the specific differences between them can be very, very different (if that even makes sense).
RE: Powerful Union SQLi Tutorial - p.u.r.e.m.i.n.d - 02-08-2015
(01-26-2015, 10:25 AM)Arthur Curry Wrote: Because Aush0k and I make him feel bad about being himself.
that's kind of funny is this scott thomas lol
i am puremind i will take on the role i am many people i am zeekill i am puremind i am e-boss