IEFD Ep. 11 - Website Hacking - Sql Injection Part 2

For Infinity Exists Full Disclosure's first Website Hacking episode, we demonstrate how to exploit a security vulnerability occurring in a website's database to extract password hashes. Sql (Structured Query Language) is a computer language designed for the retrieval and management of data in a system's database. The Attack, known as Sql Injection, manipulates Sql statements before they are sent to the Sql Server, allowing the Attacker to create, change, or retrieve data stored in the database. Sql Injection is a hard concept to understand, so we made a video that encompasses all our knowledge on the subject to make it easier for our viewers to grasp.

Part 2 of 2

http://infinityexists.com/videos/episode11/

Category:

Howto & Style

Tags:

• Infinity
• Exists
• full
• disclosure
• sql
• injection
• website
• hacking
• cracking
• exploiting
• computer

[alexlozinski]

Yay. After hours of searching this is the only video which tells people HOW and WHY this attack works. Great job guys.

[2slow2stupid]

cool cool cool!:)

[IceColdKillaPL]

wow how long did it take you guys to learn all of this?

[KillcrazeWoW]

where do you get the program used to crack the hash in this video?

[MegaSHamed]

@alexlozinski totally agree.

[tcporcaria]

how did you converter 'boot.ini' into hex?

[ayotollah]

I can't see what you are typing...is there any written reference to this video?

[pilkingtoez09]

nice one man,

i need more info tho, do you know any good links for more sql examples,

im trying to get an idea of the INFORMATION_SCHEMA" of a site right now,

bugging me sql, its like a myth, haha

[lolatmarshall]

Don't call me a cracker !!!

lol j/k :)

[1999mnnn]

whats the cracker you are using on the video?

you talk about an episode when you show how to crack md5, but i really dont find it :(