Follow us on Twitter!
I'd prefer to die standing, than to live on my knees - Che Guevara
Sunday, May 03, 2015
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 34
Guests Online: 31
TeamSpeak Online : 5 Members Online: 3

Registered Members: 88161
Newest Member: nairobery
Latest Articles
Our sponsor needs your help!


One of our sponsors needs your help, http://www.virginmediabusiness.co.uk/pitch-to-rich/grow/krystal-hosting/
Go check out their video and Don't forget to vote !


~ Thanks for your help
HBH
View Thread

HellBound Hackers | Computer General | Web hacking

Author

Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 05-06-06 23:40
The original query: "SELECT name,interest,profile FROM members WHERE id=$id"

UNION ALL SELECT null,email,null WHERE > 2 Gives me an email address.

What I am having problems with is finding out the NAME of the password column. I've been bruteforcing it for 2 days now, no luck yet. It's a mysql database, so the error messages gives me no help.

I really dont think there is any way of finding the name of the column, but if you know a way, please tell me.
Author

RE: Advanced sql injection, need help

Mr_Cheese




Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank:
Uber Elite
Posted on 06-06-06 13:50
messing around with TABLE SCHEME and COLUMN should give you those details i think.


http://www.hellboundhackers.org/
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 07:05
"SQL Injection Walkthrough" <-- this tutorial will help you out finding column_name or else.
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 07:33
lol nice b0lu. thats the best tut ever


Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 12:18
Mr_Cheese wrote:
messing around with TABLE SCHEME and COLUMN should give you those details i think.

Can you give me some examples on how to inject those commands ?
Author

RE: Advanced sql injection, need help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-06-06 21:16
umm, b0lu, where is the Tut at ? lol