 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 50
 Members: 0
 Total: 50
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
How can i write the Sql injection |
|
 Posted: Fri Jul 03, 2009 6:36 pm |
 |
|
| ba9ba9 |
| Active user |
 |
|
| Joined: Feb 11, 2009 |
| Posts: 46 |
|
|
|
 |
|
 |
|
How can i write the right sql injection , and how can i find the real tables used in the date base.
for exemple when i find this Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
how can i use it ? |
|
|
|
|
| Posted: Sat Jul 04, 2009 2:13 pm |
|
|
| absorb |
| Regular user |
|
|
| Joined: May 06, 2009 |
| Posts: 14 |
|
|
|
|
|
|
|
Well, you must find the right number of columns in the database 1st. So add union all select 1,2,3,4-- and so on until the error dissapears. Then you should see some numbers on the web, that means you can replace that numbers in your browser to get data. Better read the Tutorial...
http://www.milw0rm.com/papers/202 |
|
|
|
|
|
Re: How can i write the Sql injection |
|
| Posted: Sat Jul 04, 2009 2:26 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| ba9ba9 wrote: | How can i write the right sql injection , and how can i find the real tables used in the date base.
for exemple when i find this Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
how can i use it ? |
First task is to check for existance of sql injection and getting syntaxt right.
There can be need for single quote, parentheses, comments, etc.
For starters post your attack string here, but without sensitive data.
Example:
Then we may be able to help you move forward. |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
