Basic 8

If i use simple injection, i see where are the pwords saved, but when a i want to open or download it, it dont exists… anyoe can help me?

Oh…family_db isn't a directory. It's a field for MySQL. You can use it to better your sql injection and make it more specific.

Ok, thanks, but new field, in 7, first lofin dialog, i cought cookie send when clicked the button, but i ddint found anything, can anyone pull me right way?

Alright, when you make an injection, look at the source and try to find some <!– tags. Use that with your knowledge. Just because there's a box there and a sql error, doesn't mean you have to inject the box.

nights_shadow wrote: Alright, when you make an injection, look at the source and try to find some <!– tags. Use that with your knowledge. Just because there's a box there and a sql error, doesn't mean you have to inject the box. mas i said in the first login dialog, firts, cookies, its SQL inject protected