Welcome to Mobilarian Forum - Official Symbianize forum.

Join us now to get access to all our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, and so, so much more. It's also quick and totally free, so what are you waiting for?

String-Based SQL Injection

Alexhost
nethanker 0

nethanker

Abecedarian
Member
Access
Joined
Aug 27, 2014
Messages
111
Reaction score
55
Points
28
grants
₲2,707
10 years of service
Here is a tutorial on String Based SQL Injection. This must certainly help many of you guys Awink


What is String Based SQL injection
String Based SQL Injection is used when the target website does not display the result when we enter a query.

Here are some Common Issues and cases when you have to use String Based SQL Injection :
Code:
Order By does not work Example : Order by 10000 does not show error/
Group By statement does not work.
Queries related to SQL injection doesnt work.

The Solution
So the solution for solving when you are having problem is ,just modify your syntax a bit.


Code:
Please, Log in or Register to view codes content!
So we add a at the end of the link and we add a + at the end of the -- .

String - Union Based SQL Injection

Obtaining Columns
Code:
Please, Log in or Register to view codes content!

Obtaining the Databases
Code:
Please, Log in or Register to view codes content!
Obtaining the Tables from the current Database
Code:
Please, Log in or Register to view codes content!
.Obtaining Column names from a specific table (which in this example is "admin")
Code:
Please, Log in or Register to view codes content!
Obtaining Data from Column names
Code:
Please, Log in or Register to view codes content!

credits: Rain112/CHF
 
jughead3716 50

jughead3716

Alpha and Omega
Contributor
Access
Joined
Jun 28, 2014
Messages
5,123
Reaction score
11,452
Points
113
grants
₲127,594
10 years of service
nakita ko na punkz kung saan mo ito nakukuha.. hehe.. :hehe:

member ka rin ba dito....
maka join na rin para magmasid... :D

gusto ko talaga kasi matuto ng mga ganito eh...

salamat dito... :D
 
Abs-Gma 0

Abs-Gma

Corporal
Ardent
Access
Joined
Jul 22, 2014
Messages
523
Reaction score
301
Points
63
Age
29
grants
₲5,744
10 years of service
post nyo nga dito yun nauna jan fafs ten yun pag inject ng WEBSITE :)

BTW thanks for sharing keepsharing
 
OP
nethanker 0

nethanker

Abecedarian
Member
Access
Joined
Aug 27, 2014
Messages
111
Reaction score
55
Points
28
grants
₲2,707
10 years of service
ahh, oo. matagal na ako dun punkz.
beep me kung makita mo ako dun. :D

anyway, magandang i share ung mga iba dun dito :)
 
Top Bottom