This forum is in archive mode. You will not be able to post new content.

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Droffo

Pages: [1]
1
Tutorials / Re: Full SQL Injection Tutorial
« on: May 10, 2013, 10:25:22 PM »

when i try to find out how many collumes there are it says


"Query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ORDER BY products.id' at line 5"

I'm wondering if that means all is good or that I'm screwing something up


im on this site, http://www.mastertrailerparts.com.au/products.php?id=9'


EDIT: i found my problem. i moved to http://www.thecomedystore.co.uk/page.php?id=46. however when i do the union all 1,2-- i get a page that basically just says "Not Acceptable  An appropriate representation of the requested resource /page.php could not be found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request." is that basically saying i cant inject that way to the site?






ive tested the website "http://www.mastertrailerparts.com.au/products.php?id=8" and it is very much vulnerable... keep trying, perhaps try a new method?

Pages: [1]


Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.