sql injection(100% working)

sql injection in just a minute(read info if video not clear)
today i will show u how to use sql injection

the most widely used sql injection string is ' OR 1=1--

so we will see how to use it...

1st we will choose our target

i have found one which is very vunerable

target: https://web.arizona.edu/mysql

now lets see.. how to do it

lets do sql injection

put ' OR 1=1-- in username

see there is no password

yuppi!!! we r in...

so now i'll explain actually this string compares 1st username with itself
it says or 1=1

which is always tru

so our authentication also becomes true..

and we get login as admin coz 1st username in databse is always of admin..right??

thanks for watching

-ashrey jones

Category:

Education

Tags:

• sql
• injection

[hipotutorials]

Error

#1045 - Access denied for user '' OR 1=1--'@'localhost' (using password: NO)

[jonesrulz]

@hipotutorials ya its not working now,they fixed tht bug

[ubercharger9000]

i cand see the text freaking make it biger

[jonesrulz]

@ubercharger9000 can u see it now

[aldininjo]

it wont work

[jonesrulz]

ya its not working now,they fixed tht bug

[f1ctgt2]

the evaluation of 1=1 will always be true........and that is why it works on websites with poor administration

[studyhacking]

@jonesrulz, pls check again. It is not working now. Hope you would comeup with new ideas. Thanks.

[DavidEdwardSchnell]

who, pray tell, are "they"?

[garchagudashvili]

ya its really cool trick but today almost everybody knows that...