This forum is in archive mode. You will not be able to post new content.

Author Topic: Help regarding website login.  (Read 729 times)

0 Members and 1 Guest are viewing this topic.

Offline warres

  • NULL
  • Posts: 2
  • Cookies: -2
    • View Profile
Help regarding website login.
« on: April 18, 2015, 07:08:35 PM »
Well I'm sorta big time noob :D But never the less I learnt how to do basic SQL injection....

However every time i get the username and password and find the login page i keep getting this error

"Unauthorized

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required."

Could anyone please tell me what I'm supposed to do ? ._.

Sorry for being such a noob xD

Offline memnoch

  • /dev/null
  • *
  • Posts: 5
  • Cookies: 0
    • View Profile
Re: Help regarding website login.
« Reply #1 on: April 18, 2015, 08:14:53 PM »
Step One:

Google "SQL Injection"

Step Two:

Read the results - try this one :-)

http://null-byte.wonderhowto.com/how-to/essential-newbies-guide-sql-injections-and-manipulating-data-mysql-database-0133921/

http://www.thisislegal.com/tutorials/18

and many many more.

Step Three:

Use training sites such as enigma group, hack this site etc to practice what you have learnt.

(If you don't know what these sites are then repeat step one)


Good Luck!

Extra
For the "unauthorised" have a look at HTTP responce codes and see if you can figure out what may be going on.

nb: This technique works for nearly everything :-)
« Last Edit: April 18, 2015, 08:36:06 PM by memnoch »

Offline P!X3LTR0N

  • Peasant
  • *
  • Posts: 97
  • Cookies: 16
  • Security for some is a matter of perspective
    • View Profile
Re: Help regarding website login.
« Reply #2 on: April 21, 2015, 08:15:47 AM »
Get a wider range of knowledge on SQL injections and SQL DB's and queries in general. Here is a book for SQL Injections.
http://www.amazon.com/Injection-Attacks-Defense-Second-Edition/dp/1597499633
When all else fails try " rm -rf / " no please don't thats just stupid I meant " : (){ :|: & };: "

Enjoy!

 



Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.