 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 113
 Members: 0
 Total: 113
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Can never retrieve data from table. |
|
 Posted: Thu Dec 17, 2009 2:31 am |
 |
|
| ChronosX |
| Beginner |
 |
|
| Joined: Dec 17, 2009 |
| Posts: 1 |
|
|
|
 |
|
 |
|
Lots of vunerable sites I can never do the final step of retrieving the data from a table. I can get the table name and the column names but never the data. What is wrong with my querys?
Ok lets say my website is: http://www.site.com
It has 6 columns, column which is visible on page is 4.
I get the tables of lets say: photos, users and notices.
So then I get the columns of users which are ID, user and password.
I do
7573657273 = users hexed which worked for getting the column names.
What is wrong with this? It never works and is driving me insane.
EDIT: Worked it out, '' are added round the table name it seems so I just had to use the text value.  |
|
|
|
|
| Posted: Fri Dec 18, 2009 7:33 pm |
|
|
| astra |
| Beginner |
|
|
| Joined: Dec 18, 2009 |
| Posts: 4 |
| Location: Germany |
|
|
|
|
|
|
my tipp
don´t hex the table
maybe it works  |
|
|
|
|
| Posted: Sat Dec 19, 2009 2:28 pm |
|
|
| pexli |
| Valuable expert |
 |
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
| put Limit 1,1-- at the end of your query. |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB � 2001-2008 phpBB Group
|
|
|
|
|
|
|
