Scribd Logo
Upload

Welcome to Scribd!

  • 46 views

    STEP 1: Breaking The Query: Let Me Try Out With Error Based Single Quote Injection Method

    Uploaded by

    javeeed0401
    This document outlines 10 steps to perform SQL injection on a vulnerable website: 1. Break the query by trying different injection techniques like single quotes and integers. Double quotes are found to break the database. 2. Copy the SQL error message and find that mismatched double quotes cause an error, indicating a double quote string injection vulnerability. 3. Join the query with "-+" to fix SQL errors, demonstrating the query has been broken and joined. 4. Use an "order by" command to find there are 5 columns in the database tables. 5. Use a union query to find username is in the 2nd column, locating the table position. 6. Directly ask

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    STEP 1: Breaking The Query: Let Me Try Out With Error Based Single Quote Injection Method

    Uploaded by

    javeeed0401
    46 views8 pages
    This document outlines 10 steps to perform SQL injection on a vulnerable website: 1. Break the query by trying different injection techniques like single quotes and integers. Double quotes are found to break the database. 2. Copy the SQL error message and find that mismatched double quotes cause an error, indicating a double quote string injection vulnerability. 3. Join the query with "-+" to fix SQL errors, demonstrating the query has been broken and joined. 4. Use an "order by" command to find there are 5 columns in the database tables. 5. Use a union query to find username is in the 2nd column, locating the table position. 6. Directly ask

    Original Title

    New Microsoft Office Word Document (3).docx

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document outlines 10 steps to perform SQL injection on a vulnerable website: 1. Break the query by trying different injection techniques like single quotes and integers. Double quotes are found to break the database. 2. Copy the SQL error message and find that mismatched double quotes cause an error, indicating a double quote string injection vulnerability. 3. Join the query with "-+" to fix SQL errors, demonstrating the query has been broken and joined. 4. Use an "order by" command to find there are 5 columns in the database tables. 5. Use a union query to find username is in the 2nd column, locating the table position. 6. Directly ask

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    46 views8 pages

    STEP 1: Breaking The Query: Let Me Try Out With Error Based Single Quote Injection Method

    Uploaded by

    javeeed0401
    This document outlines 10 steps to perform SQL injection on a vulnerable website: 1. Break the query by trying different injection techniques like single quotes and integers. Double quotes are found to break the database. 2. Copy the SQL error message and find that mismatched double quotes cause an error, indicating a double quote string injection vulnerability. 3. Join the query with "-+" to fix SQL errors, demonstrating the query has been broken and joined. 4. Use an "order by" command to find there are 5 columns in the database tables. 5. Use a union query to find username is in the 2nd column, locating the table position. 6. Directly ask

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    You are on page 1of 8

    STEP 1: Breaking the Query

     Let me try out with error based single quote injection method
    http://leettime.net/sqlninja.com/tasks/basic_ch3.php?id=1′

     Above figure shows single quote error based not working.

     Above figure shows integer based method is also not working.


     Above figure shows double quotes are breaking the database so its vulnerable to SQL
    injection

    STEP 2: Copying the Error Statement

     Copy and Paste the SQL Error statement into Notepad.

     Above figure shows that Highlighted double quotes are breaking the backend database
     When we add double quotes which are mismatching the query like this Select username,
    Password from table where id =”1″”
     Now you can found out this is Double quote error based string injection.

    STEP 3: Joining the Query

     Let us add –+ to join the


    query http://leettime.net/sqlninja.com/tasks/basic_ch3.php?id=1″ –+
     Above figure illustrates SQL errors are fixed with –+

     Whatever malicious code placed will talk with database and as of now you have
    successfully broken the query, joined the query and finally found out it is Double quote
    error based string injection.

    STEP 4: Finding the Backend Columns

     It is time to have a conversation with the database to find the number of columns.To
    enumerate columns we can use order by command.
     Above Figure shows Database with error statement Unknown column ‘6’ in ‘order
    clause and this error statement says as “There are only 5 columns in database”.

    STEP 5: Finding the Backend Tables

     SQL backend may contain more Tables names with empty data also.Therefore You
    should first able to find out which table names are present in this 5 columns.
     Now we can select all 5 columns with union all select to existing URL
     Above Illustrated Figure shows Username is: 2 as the value which represents table
    names is present in the 2nd column of the database. Now we have successfully found out
    the table location in Database

    STEP 6: Finding the Backend Table Names

     We already knew the location of table path, so will directly ask database name, version
    etc

     Above figures show the database name as leettime_761wHole


     Above figures show the database version as 5.6.36-cll-lve

    STEP 7: Dumping Database Tables

     Group_concat() is the function returns a string with the concatenated non-NULL value
    from a group.
     So we can use this Function to list all Tables from the database.
     In Addition, we can use Information_Schema to view metadata about the objects within a
    database.
     The Above Figure shows the dump of all tables as testtable1, userlogs, users.

    STEP 8: Dumping all Data in Columns of Tables

     We can dump userlogs

     The Above Figure shows the dump of all columns of tables contains id, username,
    action,date

    STEP 9: Dumping all Usernames

     Here we can dump all username in the database.


     The Above Figure shows the dump of all
    usernames Zen,Inj3ct0r,Zenodermus,decompiler

    STEP 10: Dumping all Date

     Now we can dump all date

     The Above Figure shows the dump of all user created dates in the database.HAPPY
    HACKING !!!

    You might also like