SQL INJECTION, Getting To The Admin Control Panel

[baar34]

you guys understand this only works for shittily coded websites, basically it only works for abandoned websites or a website that no one cares about.

[mmtech4geeks]

how to hack a freeforums. org site

[NicoAE7]

bad music

[JoeMommahFool]

yay the youtube theme song

[thecooldude9999]

im muted in 1 second.

[Anonymous123097]

IT LOGGED ME IN AUTOMATICALLY

[ccdevilleh]

i cant hack moodle4free . com anyone help me please, life or death issue

[mishalml007]

visit realhackings com to learn all hackings

[Ofx78y]

thanks ;) now i've hacked my school's website and done some serious shit :))

[theghost2424]

radio killed the video star....???? YOU MEAN THIS RACKET KILLED THE RADIO STAR!!!!!! Turn this stupid shite OFF

[AtomicBl453]

Actually never do this without the Admins written approval first. Regardless if you are letting them know and or even giving them the direct bug fix then you are still liable for damages which have occurred according to the admin.

[louie540x]

@AtomicBl453

Right, you can still get in trouble.

I actually read on an article about injections and the author said that he would get a notice anytime someone attempts to log in to his control panel. I'm thinking about setting mine up the same way.

[AtomicBl453]

@louie540x That's why you get written approval and in some cases a witness has be present to also give a signature verifying that he did in fact give consent. Either way, precautions are always a must.

[Rbaker131]

LOLOLOLOL! Ultimate Fail! He said vunerable. LOL! And this site is Gay anyways. Try SQL Injecting . Just inserting queries And just leaving errors at the top of the Page. That's better hacking, And while you're in the admin panel . Upload a shell. I wouldn't want admin on a n00by site like that. Just destroy it.

[hipotutorials]

I tried so many adminlogin.asp and it didn't work! Lolz, help me plz! I really wanna hack one site!

[daeheadshot]

@hipotutorials >_> scriptkiddie

[PepsiFails]

The most common SQL injection in existance.

This only works on "/adminlogin.asp" pages. So guys, to have your 10 seconds of glory, you need to be typing the above part in Google, not just "admin login"

Come back when you know real SQL.

[fingerslamjam]

like if u muted.

[fingerslamjam]

IF I HERE THIS SONG AGAIN ILL SHOOT MYSELF IN THE FUCKING FOOT.

[xWiZxKiDx]

@fingerslamjam your lying you don't have the heart to do such a foolish thing

[fingerslamjam]

@xWiZxKiDx damn u and ur infinite wisdom. 

[Tikvanaya]

I got a site that gives an error when I insert ' '=' 

but I can't find a way to proceed to the admin.

It keeps giving an error

[zurek306]

what is the **** website he uses!?!

[surerkesha]

Lol its just and HTML

[MertontiK1]

I think it is your site :D

[73834767]

nice

[smithdennis4]

What song!!?

[stevenmcl1]

@smithdennis4 It's by Daft Punk.

[Nonees1000]

How to Download The SQL Injection Can YOu Give me The Site ?

[nobodymik]

@Nonees1000 You don't "download" SQL Injection, you'll learn it. Learn SQLi and hack =D

[kevin54683]

Program to search for vulnerabilities in php scripts

You can download the program go to:

rapidshare. com/files/454622728/security.r­ar

depositfiles. com/files/946egeo54

Note:

In reference to remove blank!

The file can swear antivirus!

[BigX2299]

How could help me to Disable this link I need it please as soon as you can I couldn't do it to hard I tried many times this the website : eprints.kfupm.edu.sa/10138/

[Theocrasuck]

This is an old exploit I have not tried inlike 10 years? They were on it for a while.

[apolosyse]

forum(.)age-of-germans(.)de/ Nick: Admin PW: Passwort...Have fun :)

[gyrotuffjonykirby2]

Stay out of jail? lol. What you´re doing ain´t illegal for starters. And secondly, if you´re so afraid to get caught, just connect through a VPN. Youl be assigned with a secure and encrypted IP. They can´t find you that way ;)

[crappyfilmproduction]

I find it odd how some "programmers" can be pretty sloppy when it comes to security. A site's security should be at the top of the list. Cool video by the way. Thumbs up.

[iml337rofl]

To all noobs saying FBI is gonna come hunt you down if you deface a site are skids.

If the site admin is too noob to patch this simple vulnerability, its probably a shitty site, and FBI doesn't care if gay 10 view per year sites get defaced since it would cost more money to find the hacker than it would to fucking pay for a whole new fucking site lol.

99% defaces FBI doesn't care about.

[MNJaoune]

@sergei291 I fucked your mother and had you to come to life and you call me a 12 years old?! Second of all, I hacked many websites why are the FBI not in front of my house?! If the FBI wants to arrest every hacker then they are going to stay 24 hours in action, they say it is illegal to scare fools like you so they wont hack websites, like a father teaches his son that the monster will capture him if he does some thing wrong same thing

[jadochararo]

@MNJaoune lol dude xD how do you hack XD?

a computer trojean backdoor rat virus anyway..

[MNJaoune]

@jadochararo There are maaany types of hacks, not only sql injection, and you will never go to fucking jail because of hacking a website, you will go to jail if you hack a bank only

[GloryoftheHero]

@MNJaoune Do you know what website defacing is? You can get charged for it, fool. l2internet

[AwEsKoMeR]

@MNJaoune Or major websites, if you hack their admin accounts...

[DavidRockin1]

@MNJaoune I hacked your mom

[MNJaoune]

@DavidRockin1 I hacked ur mother's pussy, I found many things inside, there were something bold spitting, and some white animals, and a basketball

[UnixBoy75]

If I were to comprimise an admin account such in that manner, could I go to jail just by loggiing in and still doing no harm? Im just curious.

[downfall991]

@UnixBoy75 Ofc. you could go to jail, it's the same thing as, If I break in to someones house and dont take anything can I get jail for that?

OFC. U breaked in!

[TyRATnt]

It's not setting query's it's obtaining query's.

[MrCohibaboy]

someone please hack MYFREECAMS and shut those bastards down

[CypherThanatos]

@MrCohibaboy

Wai? its a pretty cool site dude

[MrCohibaboy]

@CypherThanatos i hate that site , i hate the bitches on there that ban for no bloody reason .

[xdreamagainx]

@agentmax69 D:< YOU SKEMMER. )':

[xdreamagainx]

@agentmax69 Orange Hat is what you use for you oranges

Yellow hats for the sunshine

Pink hat for the red sock in the whites

Violet hat is for your violet flowers

Silver hats is for second place

And gold is for First.

Gimme My Candeh Naow. :3

[xdreamagainx]

@agentmax69 No

Black Hat= Expert

White Hat= Noob

Grey Hat= In The Middle

Blue Hat= Good Guy

[unclepoepoe]

hahaha.... lets just say that sql injection helps my grades sometimes.... ;D

[ThinkFastSecurity]

The Newest Black Hat Hacking Forum, has just been put online, We are looking for 2 Admins, and 6 Mods! 0day exploits, and FUD tools! ThinkFastForum . com

[itheneo18]

SQLi V2.7 does the dirty work for you!

[MEDIAFIRE] /?836jpwfe088xezi

[Essa698]

No greyhats aren't blackhats that went to white. Noob. They are hackers that either try to inflict harm on black hats or hack for good using black hat methods.

[NeutralCountry]

LOL this is a site that he made himself xD

[jacksawild]

'or 1=1; insert into * values (YOUREMAIL);--

for the win

[laverkfc4stitching]

will this work out on univeristy admin page.. i mean if u use brutus force attack or sql

[jacksawild]

@laverkfc4stitching University IT admins don't know what they're doing because they don't spend every minute of every day dealing with wannabe knowitall dickheads trying to hack their shit. They obviously don't bother validating their strings and just let any jacksass form a dynamic query with root privileges. My advice to you is to try it. Make sure you use the computer you usually log in at with your proper credentials. Then say hello to a lifetime career at burger king. Prick.

[laverkfc4stitching]

@jacksawild dude why u big it up... its not US college.. second it has been hacked many times.. hello im payin 450$ for this service

[MrZackeriess]

i am infact a scrpit kiddie. i know html, and am currently teaching myself java script before learning mysql and php :]

[jonidashi]

OR a=a, a string in MySQL should be between quotes. It should be OR 'a'='a'. It looks u have no idea what you're doing...

[x3ICEx]

@jonidashi Doesn't a equal to undefined by default? Comparing null to null returns true, so a=a should work just fine. Comparing error to error returns true as well.

[WilliamW1979]

Blue hats, people that just don't care about the other colors and think you all rainbow brights!

[randomnatorable]

haha i typed ' as the user and = as the pass and it logged me in :P

[112251919112]

D: I clicked a site and it was pr0n.

[Septagotius]

Anyone watching this is a script kiddie.

[TechTutorials4you]

@Septagotius Not really, Everyone starts somewhere. This is a good way to learn. Using cain... is for script kiddies.. Learning about SQL injections.. isn't. Skid.

[raghunfourpif]

@Septagotius i'm not, i'm just looking for pwnerz. FOR YOUR INFORMATION, SCRIPT KIDIE IS : a non-expert who breaks into computer systems by using pre-packaged automated tools written by others, usually with little understanding of the underlying concept.

IN OTHER WORDS, EVEN THOUGH YOU WATCH IT, IT DOES NOT MEAN YOU ARE A SCRIPT KIDDIE !

[ICDWILL117]

Inform the admin......... WITH A DEFACE!

[LaSpeeda]

Songs name is Da funk by Daft punk

[4763843]

song name plxx

[Micripow]

Someone please answer. In the second attempt, when he types that long password. Wtf is he writing? Didn't got the stupid windows moviemaker code

[MegaSHamed]

White grey black blah blah , only one thing about SQL Injection , it will never work and it is 90% not possible if you don't know the construction of data base of the website.

Also would like to mention you can sit next to your screen and try 1000 codes but I don't think you will find any wholes if you don't know which door to open, with out data table you have no power even if you know all SQL language by memory.

[unclepoepoe]

okay, if you get into youtububes database using sql injection, you will have my respect

[ShinjiXShinji]

sites with this vulnerability are not even worth hacking unless you have some sort of nerd rage against them.

[chessmaster001]

what password did you use when you finally got in? just a bunch of random letters?

[obiwanfisher537]

@chessmaster001 Nope, watch the video

[TheMasokis]

skiddies =))

[deffentlymaybe]

hahah look, at the database E-mail list there is only ONE (1) its his own site!!!!

[hackiosa]

@deffentlymaybe Sorry, but that will not mean, that it will not work...

[inmortal009]

Nice annoying song! more than fcng VUVUZELA!!! BbbzzzzzzzzzzzzzZZzzzzzZZz

[icodeforlove]

Please use mysql_real_escape_string when with all $_POST, $_GET vars... Or you will end up with a security hole like this... I wouldn't consider this hacking, just a stupid web developer. This is common sense.

[FullMelee]

i'm hiring.... are u available to hack website for me?

[ffert2907]

if your website can be hacked like that.... just change your sql command like that in PHP : $query = 'SELECT * FROM USER WHERE password="' . $_POST['pwd'] . '" AND username="' . $_POST['username'] . '"'; ........ if ($resultcount == 1) { ... login } else { .... password or username error } if you try to skip the password verification you can but it will return 0 or more than 1 result, then means login failure also.... simple to make it secure. just good coding. you can use php command also..

[elmonkeylp77]

' invalid user name character

lol

[siconic]

I agree with Nightazr and JJovola... Dont need to say anything further.

[SouthPark15426]

Injection Tool by Pr0xY

With this tool you can exploited SQL injections without any knowledge, All that you need to find is site with SQL injection and what remains is to choose one of the options tool and that done.

[sweffe96]

Why is everyone talking about hacking? Im pretty sure its called cracking, and all of you are a bunch of scriptiekids that doesnt know shit.

[rim3]

@sweffe96 aaaaaaaaaaaaaaaaaaaaaaaahahaha­haha, usonoob :)

[sweffe96]

@rim3 I like turtles.

[TripleBarrelRoll]

@sweffe96 Cracking is modifying features or disabling features to circumvent serial numbers, CD keys ect. ect.

[sweffe96]

@TripleBarrelRoll

yaw nigg i gott diz prrgm on mi pc so i kan crack ya ass nigga u b cerfull now, niggah ait later i got 8 kidz 2 wtch ovah aiit

[TripleBarrelRoll]

@sweffe96 aw fk mah pr0noz b on thy comput3r shi nigguh wat b a crak in duh fs1t place

[sweffe96]

@TripleBarrelRoll

nigga us trollin?

[coolbharatahuja1234]

dis video fucks...

[hackerlover101]

*************my aim is lilyopo,contact me if you can hack a random website!

[TwoBoredWhiteKids]

stupid skiddie

[danishganztaz]

lol... noob website... looks like something mabe by a scriptkiddie, like you :)

[kaspericas]

Yeah, Daft Punk + Hacking, awesome mix ;)

[Copoboxx]

This is nothing compared to my tool..? I've programmed a private tool which would crash ANY WEBSITE YOU WANT. I EVEN PROVE IT FOR YOU SO YOUR NOT WORRIED! The tool isn't for free.. It's rarely out there cause it's not for free.. CHECK MY VIDEO 'HACKING WEBSITES CRASHING THEM' FOR PROOF IT WORKS.. Add me on msn Copoboxx@Hotmail.c om I'll CRASH A WEBSITE FOR YOU! Just to prove it works.. I also got other great tools you might be interested in! Seriously my program works !

[sweffe96]

@Copoboxx Re-naming LOIC is not programming.

[onlyshayne]

@Copoboxx You discovered dos, congratu-fucking-lations.

[PeopleHidden]

hey,

if anyone is a reall good hacker and wants an acomplice then email me at hpdogtags(at)gmail(dot)com

i can get into basic websites and need some ferther help.

[progamersful]

eee kid, that was not site. You created with notepad than you are making people crazy. MORON

[crusherX11]

sucker made website on his machine and show hw to hack it LAMO

[curlyjimbo92]

song?

[coolNAO15660]

/watch?v=IjIgDyNJjgs

[Bock8888]

great video

[pip00123]

I got into a website for some place, pm me for pass and url

[jessemobster11]

Hacked into an university!

[0001Nikola]

What if I'm not getting error page when typing ' in username and '=' in password, but only "user not exist". Is that mean that site isn't vulnerable to this kind of attacks?

[Caesar512]

If you do this without a proxy you deserve to be jailed for your ignorance.

[pokemonspriter88888]

do not go to sites that say

(BIG RED BUTTON)

Do not Press this Button

it will scare you out

[nabeelmerchant]

Yeah we shouldnt mess with the website and dont steal anything that is tangiable on the website, but intangiable assets would not cause any harm.

[Pas1logan]

shut up bitch nobody likes you

[nabeelmerchant]

@Pas1logan Thats a value judgement I a doubt its not true.

[nabeelmerchant]

What other insults you have on the line, its interesting to hear them, I would like to see through you. Give me one more, or give me a reason for not you to say so.

Looking forward to your statement :)

Regards

Nabeel.

[Pas1logan]

Wow I posted earlier that I was just kidding but now its gone all of a sudden. I was tired, pissed, and tired of people for that day.

[nabeelmerchant]

Its doesnt matter anymore, all is forgiven to man :) .

[ILikeHarderShit]

Black hat till I die.

[Nightrazr]

You're no blackhat, you're a script kiddie.

Real Blackhats won't reveal that they are blackhats that easily.

[djsvideodiarys]

sorry but what is a Blackhat?

[Nightrazr]

A Blackhat is a hacker with the intent to do harm to its targets.

In the same way you have Whitehats, who mean no harm to their targets and inform their targets or clients about security flaws.

And Greyhats, former Blackhats who whent White.

[Malice808]

What kind of hat would a hacker be wearing if he did it for the fun of it without intention of harming OR informing their targets of the flaws?

Tis been bugging me

[Love2bemonkey]

whitehat

[heroclix0rz]

@Nightrazr i've always thought of greyhats as someone who will hack those people that "need to be hacked". taking the law into their own hands. lawful evil or chaotic good in D&D terms

[4763843]

@Nightrazr whitehat is ethical hacker?

[Nightrazr]

@4763843 Indeed they are, they're often hired by security companies which are hired to test certain security feature for companies like banks and such.

[happygamestvfun1]

@Nightrazr luke i am your father!

[MrJosiahT]

@Nightrazr That isn't the actual definition of a greyhat.

[iml337rofl]

a bad hacker.

[PoweredBySource]

@Nightrazr yeah and why do you seem to know alot moron i would not be shocked

if you dont even know how to copy and paste p.s just because you use the word

script kiddie dosent mean you know whats it actually means fucktard and why the hell are you on youtube talking about blackhats if you have no idea whats all of this means fagget.

[Nightrazr]

@PoweredBySource Cool story bro.

[hihaatje]

@PoweredBySource you mean faggot?

[grmskid]

@Nightrazr so your a blackhat? cause u sound like u know alot about them...

[Nightrazr]

@grmskid No I'm not, I just know the difference between a silly script kiddie and a proper hacker, be he white hat or black hat.

[JacknoobTheYHero]

@Nightrazr Im a silly script kiddie, cause all I want are cracks :P.

[SethiXzon]

@Nightrazr I wouldn't say script kiddie. I'd say a stupid blackhat.

[JoachimPetersen]

@Nightrazr 1st of all, that is "hacking", because someone shows a very easy way of using SQL injection doesn't mean they are "script kiddies" the exploit works because the input does not filter some characters and that doesn't mean that they are script kiddies or blackhats, and please learn what a whitehat, greyhat, blackhat is! He did not do any harm to the target. nice video, next time try something more advanced as that one is very old :P

[Nightrazr]

@JoachimPetersen What the fuck are you babbling about?

I never denied the fact that this wasn't hacking.

You don't need to explain how this works, I know it well enough.

And I think YOU should learn about the 3 hats and their origins, jackass.

[obiwanfisher537]

@JoachimPetersen Thats cracking. Hackinbg is something totally different

[obiwanfisher537]

@Nightrazr Black hats are just idiot in front of a computer. Grey and white hats rules:P

And by the way: Script kiddies have skill too

[joshua99999999]

@Nightrazr true, because blackhats want to not be known, obv because its illegal, still just wanted to reply :)

[MrJosiahT]

@Nightrazr When does he claim to be a blackhat!?

[NickProductionzTV]

@Nightrazr what are blackhats ???

[Nightrazr]

@NickProductionzTV Blackhats are hackers that like to use illegal means online for personal profit.

[NickProductionzTV]

@Nightrazr wow ... so they are cyber criminals ???

[Nightrazr]

@NickProductionzTV Lots of them are.

Other blackhats like to make money using affiliate networks and lots of traffic.

[NickProductionzTV]

@Nightrazr are you a blackhat ???

[Nightrazr]

@NickProductionzTV I know blackhat methods but I don't actively use them.

[NickProductionzTV]

@Nightrazr can you teach me blackhat methods ???

[kakaseka12345]

noob

[paintballer957]

@Copoboxx its called a ddos any newb hacker should be able to do that.

[KirstenProutTHEMES]

@paintballer957 n00b, dos is what you're looking for, ddos is done through zombie pc's and botnet pc's, learn to hack THEN criticize.

[fvaletudo06]

better yet learn internet security and youll then know how to hack

[TheRagingAnonymous]

op is a faggot

[TheSeomex]

fuck hacker

[chimrae]

FUCKING CANCER

[KeolaOwnz777]

1:04. LULZ. :D

Good job, dude.