SQL Injection Tutorial - Printable Version

SQL Injection Tutorial - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: SQL Injection Tutorial (/Thread-SQL-Injection-Tutorial--43243)

Pages: 1 2 3 4

RE: SQL Injection Tutorial - st0rmy - 11-07-2012

Hello i have some questions regarding SQL injection, i hope you can help me out. I use Havij (it is quick and i can do it to more than one site at the same time) anyway. Some times i lay hands on the password encrypted with md5 (most of the times thats not an issue) but when i decrypt it and try to log in the admin's index php page, i get a pass word error ALWAYS. and my questions is: why is that? i mean i have the full tables, passwords and data at my disposal and still cant log in, i am studding computer networking an security but i am noob about hacking, so please any explanation would be good for both curiosity and educational purposes... thx in adv.

RE: SQL Injection Tutorial - The Alchemist - 11-07-2012

(11-07-2012, 01:21 PM)st0rmy Wrote: Hello i have some questions regarding SQL injection, i hope you can help me out. I use Havij (it is quick and i can do it to more than one site at the same time) anyway. Some times i lay hands on the password encrypted with md5 (most of the times thats not an issue) but when i decrypt it and try to log in the admin's index php page, i get a pass word error ALWAYS. and my questions is: why is that? i mean i have the full tables, passwords and data at my disposal and still cant log in, i am studding computer networking an security but i am noob about hacking, so please any explanation would be good for both curiosity and educational purposes... thx in adv.

Are you sure the page you're using to log in is the admin log in page??

RE: SQL Injection Tutorial - st0rmy - 11-07-2012

(11-07-2012, 01:47 PM)The Alchemist Wrote: Are you sure the page you're using to log in is the admin log in page??

i believe so... it is like www.****.com\admin\index.php it's not correct?

RE: SQL Injection Tutorial - Diabolic666 - 11-20-2012

Very good tutorial! Always heard about SQL injection but never knew what it actually was.

Executing queries freely is like a key to the database's door. Smile

RE: SQL Injection Tutorial - compfixing - 12-09-2012

very nice tutorial, i gained some knowledge.

Thanks bro!

RE: SQL Injection Tutorial - Solixious - 12-10-2012

I'm glad you guys liked it.

(11-07-2012, 01:51 PM)st0rmy Wrote:
(11-07-2012, 01:47 PM)The Alchemist Wrote: Are you sure the page you're using to log in is the admin log in page??
i believe so... it is like www.****.com\admin\index.php it's not correct?

I guess you've already logged into the admin account..

RE: SQL Injection Tutorial - PiXL - 12-16-2012

I'm using both Havij and Backtrack for SQLi, never heard of this method before.
I got a lot of information out of this and I'm grateful, big up.

RE: SQL Injection Tutorial - Guxi - 12-16-2012

I like it! This is directly going to my hacking notebook! Biggrin