[Step 2 - SQL Injection] How to Hack a Site with SQL Injection Manually [HD]

[ryanphillips1660]

when i got to 3.54 i got access denied

[dtvrij74]

this is illegal

[govind55555]

if website is giving message that " the page is under construction " then it vulnerable or not......

[willi1147]

@govind55555 It needs to give some sort of missing image or SQL query error.

[markssenoga1]

Hi i did the same website hack but it says wrong username/password. What should i do!

[DylanHolmesGgs]

Hey thanks alot, I got two website admins user and pass. But i can not find the admin panel. Can you make a tutorial for that. other wise I have to make my own DirectoryBuster... Which is almost done.

[iGeckoGaming]

Invalid Configuration

Table 'capture_frappetbcs.css_admin' doesn't exist

I have the table names (they are username and password) but when i type in: "(username,0x3a,password),4 from css_admin" I get that message^^

HELP!

HELP!

[iGeckoGaming]

@iGeckoGaming

nevermind, I got it!

[tha14331]

STEAM!

[Algoraptor]

It's awesome because it works perfectly.

[dezindzer]

FUNCTION niftybaz_nifty7.group_concant does not exist

hehe xD

[Algoraptor]

@dezindzer it's group_concat like con and cat.

[dezindzer]

@dezindzer oh, lol now it works :)

[Gordinak2]

Nice tut man

[TheRyanpatton]

Can anyone help me with the error "Illegal mix of collations for operation 'UNION'"

[TooAwesomeToDie7331]

Nice :)! I just got tons of emails and phone numbers using this method :D

[DaRealZeruat]

nice =O

[iSexyest]

bro i got this error The used SELECT statements have a different number of columns

[TheVerbalAxiom]

@iSexyest I have that same error, hopefully he'll respond with an answer.

[fataly123]

This was amazing. You inspire me.

[QuicklySniping]

ive tried over 100 sites none vulnerable does noscript or any mozilla addons have anything to do with it?

[xCALLLmeCLUTCHx]

should you use a proxy to get on the site

[willi1147]

@xCALLLmeCLUTCHx Not really, at least you aren't doing harm to the site. I got banned of a site because of "Suspicious Hacking Behavior" with a VPN, Proxy, Sock5, etc.

[xJulyNinthx]

@willi1147 hey can you help me. I want to hack tinychat (dot).com.

[SuperQweef]

niftybazzar com/monthly_in_detail.php?Id=-­194%20union%20select%201,2,gro­up_concat%28admin,0x3a,pass%29­,4,5,6%20from%20nifty_admin

[DeadlyWalking]

willi, I got the password now?

[xDatNiggaSamx]

woooooooooow this shit is legit. i cant do this >_< too much to remember

[mangiworld]

if a website give 404 eroor is it means that it is wormable?

[willi1147]

@mangiworld No, if the website is vulnerable it will have a SQL error or part of the page missing or messed up. A 404 error is a Page Not Found error.

[MegaHellboyy]

@willi1147 if a website give 404 error is it vulnerable..?

[willi1147]

@MegaHellboyy No, because the page isn't found. It should at least have an SQL error.

[MegaHellboyy]

@willi1147 thank you.....

if you found any new and advanced queries in sqli... pls upload to youtube.