Posts

Showing posts from August, 2011

Sql Injection Tutorial With SQLiHelper Free Download

Full SQL Injection Tutorial (MySQL) Mainly we can use 3 methods for SQL injections.but i  explain most poputer 2 methods for you! In this tutorial i will describe how sql injection works and how to use it to get some useful information. 1.SQL Injection (classic or error based or whatever you call it) 2.Blind SQL Injection (the harder part) So let’s start with some action HINT:you must use the -- end of the url 1). Check for vulnerability hint:search google like this " . lk/main.php?nID " get the 1st result and use somename is alise for the real name:icant provide the site name,but u can search it using above query in google:  you got something like that www.somename.lk/main.php?nID=Search&id=1 -- and use this www.somename.lk/main.php?nID=Search&id=null union all select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 -- then find the numbers are in the page related to above 1 to 19,then replace one number with database() or user() or version(