Follow us on Twitter!
It is never to LATE to become what you never WERE.
Saturday, April 19, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 31
Guests Online: 28
Members Online: 3

Registered Members: 82839
Newest Member: fezphantom
Latest Articles
View Thread

HellBound Hackers | Computer General | Web hacking

Author

Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 05-06-06 23:40
The original query: "SELECT name,interest,profile FROM members WHERE id=$id"

UNION ALL SELECT null,email,null WHERE > 2 Gives me an email address.

What I am having problems with is finding out the NAME of the password column. I've been bruteforcing it for 2 days now, no luck yet. It's a mysql database, so the error messages gives me no help.

I really dont think there is any way of finding the name of the column, but if you know a way, please tell me.
Author

RE: Advanced sql injection, need help

Mr_Cheese




Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank:
Uber Elite
Posted on 06-06-06 13:50
messing around with TABLE SCHEME and COLUMN should give you those details i think.


http://www.hellboundhackers.org/
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 07:05
"SQL Injection Walkthrough" <-- this tutorial will help you out finding column_name or else.
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 07:33
lol nice b0lu. thats the best tut ever


Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 12:18
Mr_Cheese wrote:
messing around with TABLE SCHEME and COLUMN should give you those details i think.

Can you give me some examples on how to inject those commands ?
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 21:16
umm, b0lu, where is the Tut at ? lol