TGS Forum
Hello Guest,

You are currently viewing our boards as a guest, which gives you limited access to view most discussions and access our other features.

By joining this community for FREE, you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content, & many other special features.

Registration is fast, simple & absolutely free, so please, join our community today!


 
PortalHomeFAQRegisterLog in

Share | 
 

 'ORDER BY' Doesn't work? Look here [String Based Tutorial]

Go down 
AuthorMessage
ethi-hackah
Newbie
Newbie
avatar

Points : 39
Posts : 13
Join date : 2011-09-21
Age : 25

PostSubject: 'ORDER BY' Doesn't work? Look here [String Based Tutorial]   Wed Sep 28, 2011 7:50 pm

So you have find a vulnerable site but when you do 'order by 1000000--' it doesn't work?

This is probably due to the fact that you will have to use String Based Injection. I am going to show you how to do that. :)

First lets say you have this website which gave you SQL Error.

Code:
[You must be registered and logged in to see this link.]

You try the regular command:

Code:
[You must be registered and logged in to see this link.]

Hm.. Still no Error. Now it's time to use String Based Injection.

You try this new command

Code:
[You must be registered and logged in to see this link.]

Now you will still have no error, and you then use this command:

Code:
[You must be registered and logged in to see this link.]

ERROR ! Finaly, so now it's just like regular injection, lets say we try:

Code:
[You must be registered and logged in to see this link.]

Which gives us an error and then we try:

Code:
[You must be registered and logged in to see this link.]


And that query gives us no Error. Then you just do it like normal injection:


Code:
[You must be registered and logged in to see this link.]

Now we have just performed a String Based SQL Injection. :)


NOTE: I wrote this tutorial very quick so there is a possibility there are typos and stuff like that. Feel free to point them out for me. :P
Back to top Go down
Malay Akechan
Administrator
Administrator
avatar

Points : 676
Posts : 244
Join date : 2011-04-04
Location : Muzaffarpur, New Delhi
OS Used : Windows 7 & XP
Mobile : Nokia 5233, Samsung Galaxy Tab
Browser : Google Chrome Plus

PostSubject: Re: 'ORDER BY' Doesn't work? Look here [String Based Tutorial]   Wed Sep 28, 2011 8:46 pm

Nice info. thanks
Back to top Go down
http://www.tgsforum.in
 
'ORDER BY' Doesn't work? Look here [String Based Tutorial]
Back to top 
Page 1 of 1

Permissions in this forum:You cannot reply to topics in this forum
TGS Forum :: Hacking Section :: Hacking Tutorials-
Jump to:  
Free forum | © phpBB | Free forum support | Contact | Report an abuse | Free forum