EvilZone

Hacking and Security => Beginner's Corner => Topic started by: warres on April 18, 2015, 07:08:35 PM

Title: Help regarding website login.
Post by: warres on April 18, 2015, 07:08:35 PM
Well I'm sorta big time noob :D But never the less I learnt how to do basic SQL injection....

However every time i get the username and password and find the login page i keep getting this error

"Unauthorized

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required."

Could anyone please tell me what I'm supposed to do ? ._.

Sorry for being such a noob xD
Title: Re: Help regarding website login.
Post by: memnoch on April 18, 2015, 08:14:53 PM
Step One:

Google "SQL Injection"

Step Two:

Read the results - try this one :-)

http://null-byte.wonderhowto.com/how-to/essential-newbies-guide-sql-injections-and-manipulating-data-mysql-database-0133921/ (http://null-byte.wonderhowto.com/how-to/essential-newbies-guide-sql-injections-and-manipulating-data-mysql-database-0133921/)

http://www.thisislegal.com/tutorials/18 (http://www.thisislegal.com/tutorials/18)

and many many more.

Step Three:

Use training sites such as enigma group, hack this site etc to practice what you have learnt.

(If you don't know what these sites are then repeat step one)


Good Luck!

Extra
For the "unauthorised" have a look at HTTP responce codes and see if you can figure out what may be going on.

nb: This technique works for nearly everything :-)
Title: Re: Help regarding website login.
Post by: P!X3LTR0N on April 21, 2015, 08:15:47 AM
Get a wider range of knowledge on SQL injections and SQL DB's and queries in general. Here is a book for SQL Injections.
http://www.amazon.com/Injection-Attacks-Defense-Second-Edition/dp/1597499633