Most Wanted Hackers
Welcome To the World of MostWantedHacker…

Let the world know that hacking is not a crime so invite all your friends to join this forum...

To take full advantage of everything offered by our forum, please log in if you are already a member or join our community if you're not yet....


How Hackers Work? - What Tools They Use?, Learn Hacking To Prevent being Hacked, Indian Hackers , Ethical Hackers Forum, Indian Cyber Warriors
 
HomeSearchRegisterLog in
Search
 
 

Display results as :
 
Rechercher Advanced Search
Latest topics
» █►| ◕OFFICIAl◕| A Beginner's Guide To Hacking◄█
Sat Nov 15, 2014 8:19 pm by chaoske

» PREMIUM ACCOUNT USERNAME & PASSWORD
Mon Sep 22, 2014 3:40 pm by jmanish13

» Can someone help me please?
Fri Jul 11, 2014 1:00 pm by Coelus

» HI AM NEW HERE
Wed Mar 12, 2014 12:29 am by cyber-spider

» Serious Tumblr Cross Site Scripting Vulnerability can be used to Spread Worms
Mon Feb 03, 2014 5:24 am by greyhat

» Hello,I am new here
Tue Jul 02, 2013 8:10 pm by GOD_E2

» Ruby Programming Tutorials Playlist
Thu May 02, 2013 11:35 pm by Oo_iPhone

» Admin log in blocked
Thu Apr 18, 2013 10:51 pm by alessandro

» Latest Hacked Premium Accounts | Free Working Premium Accounts
Wed Feb 27, 2013 1:51 pm by wong gs

Affiliates
Social bookmarking
Social bookmarking Digg  Social bookmarking Delicious  Social bookmarking Reddit  Social bookmarking Stumbleupon  Social bookmarking Slashdot  Social bookmarking Yahoo  Social bookmarking Google  Social bookmarking Blinklist  Social bookmarking Blogmarks  Social bookmarking Technorati  

Bookmark and share the address of Most Wanted Hackers on your social bookmarking website

Share | 
 

 [SQL Injection] How To Hack A Website Admin Account

View previous topic View next topic Go down 
AuthorMessage
CEH



Posts : 53
Join date : 2012-01-29
Age : 26
Location : Indian

PostSubject: [SQL Injection] How To Hack A Website Admin Account   Mon Feb 20, 2012 5:06 pm

What is SQL Injection?
SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database.

How It Works?
SQL Injection Injects A Code Into The Mysql Database Which Gets Passed The Site Security Login.

What an attacker can do?
  • ByPassing Logins
  • Accessing secret data
  • Modifying contents of website
  • Shutting down the My SQL server


Tips :
  • Dont try this on .gov or .edu sites.
  • Dont try this on sites that look really adv.
  • Try on sites that don't record false login's.
  • Make sure it does not say powered by and then a company name, such a Pearson.
  • Use a proxy if think you might get caught.


SQL Injection List:
http://www.fileserve.com/file/hwgs3UJ/SQL_Infection_Exploit.rar

Step By Step Tutorial:-

Step 1: Finding Vulnerable Website: Use Google Search Engine. We can find the Vulnerable websites(hackable websites) using Google Dork list...

Step 2: Search in Google:
inurl:adminlogin.asp

Step 3: Copy the above command and paste in the google search engine box...

Step 4: So Start from the first website. if you find a website ending with adminlogin.asp Now enter the website...

Step 5: At the username type in "Admin" or "Administrator" and at the password type:
1'or'1'='1

Done...!
cheers

Tips: The first string is the most important one. Many of the times it will say login failed but keep on trying with different strings...

Note: This technique will work only on low secured websites, not on every website.


How to protect you own websites from SQL injection?

Filter out character like ' " - / \ ; NULL, etc. in all strings from:
  • Input from users
  • Parameters from URL
  • Values from cookie


Back to top Go down
 
[SQL Injection] How To Hack A Website Admin Account
View previous topic View next topic Back to top 
Page 1 of 1
 Similar topics
-
» Creating the account (URL) globally and using that variable where ever it needed
» Learning how to do an I.M. injection
» How do I give myself an injection of Toradol
» Need a new injection site
» If you have Netflix watch your credit card/bank account

Permissions in this forum:You cannot reply to topics in this forum
Most Wanted Hackers :: Website Hacking :: Website Hacking Techniques-
Jump to: