Posts

Showing posts with the label SQL

HOW TO DO BLIND SQL INJECTION MANUALLY

HOW TO DO BLIND SQL INJECTION MANUALLY ************************************************************************ Blind SQL Injection is used when a web application is vulnerable to an SQL injection but the results of the injection are not visible to the attacker. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become time-intensive because a new statement must be crafted for each bit recovered. There are several tools that can automate these attacks once the location of the vulnerability and the target information has been established. Blind SQL INJECTIONS: Suppose That You want to Hack This website with Blind SQLi http://example.com/index.php?id=5 when we execute this, we see some page and articles on that page, pictures etc then when we want to test it for blind sql injection attack http://www.e...

40,000+ SQL DORKS FOR HACKING WEBSITES WITH SQL INJECTION

Image
40,000+ SQL DORKS FOR HACKING WEBSITES WITH SQL INJECTION   This is a HUGE list of dorks you can use to help you find SQL injection vulnerable websites using google search. Simply goto google and type inurl:dorkhere Review the SQL Injection guide for instructions. trainers.php ? id = article.php ?ID= play_ old.php ? id = declaration_ more.php ? decl _ id = Pageid = games.php ? id = newsDetail.php ? id = staff_ id = historialeer.php ? num = product-item.php ? id = news_ view.php ? id = humor.php ? id = communique_ detail.php ? id = sem.php3 ? id = opinions.php ? id = spr.php ? id = pages.php ? id = chappies.php ? id = prod_ detail.php ? id = viewphoto.php ? id = view.php ? id = website.php ? id = hosting_ info.php ? id = gery.php ? id = detail.php ?ID= publications.php ? id = Productinfo.php ? id = releases.php ? id = ray.php ? id = produit.php ? id = pop.php ? id = shopping.php ? id = productdetail.php ? id = post.php ? id = section.ph...

COMPLETE EXPLANATION OF DDOS AND SQL INJECTION

Image
COMPLETE EXPLANATION OF DDOS AND SQL INJECTION In most  articles about Hack you usually follow attacks by groups like Anonymous, LulzSec and AntiSec. And you’ve heard also spoke websites and platforms that have been hacked as Sony earlier this year, for example. But are you aware of the methods used to break down these services? There are many tools and techniques that some hackers use to reach their goals but I will not give you all this turnkey. Here I will briefly explain the operating principle of the two most known attacks on the web. —  DDoS (Distributed) Denial of Service — SQL injections or SQLi DDoS attacks (Distributed) Denial of Service First of all what is a DDoS attack? A Denial of Service (also known as Distributed Denial of Service, or DDoS), resulting in denial-of-service attack. This kind of attack is to make available a service. Here I take the example (according to the diagram above) an attack on a...

Basic of SQL for SQL Injection part 1

Image
In this Tutorial we will discuss some basics of SQL queries and concentrate on queries and basics which will help us while different Phases of Injection. This will be like a crash course of SQL as per the requirements of SQL Injection.   The Hierarchy First of all there are users which can have access to multiple databases, then a database can have multiple tables then a table can have multiple Columns and columns have data in each row.   This is an example database.   Here is an example of the most basic type of Select query. select * from table1 Output will be: Where * stands for all the columns and "table1" is the table name. so for example we do not want all the columns but only some selected colulms in output then the query will be. select column1,column2 from table1 Output will be: so let us try some basic conditions now to limit the output. Select * from students where id=1 Output will be: lets try some other conditions with string type columns. Selec...