SQL Injection related tips and hints

ghost

0 0

16 years ago

Does anyone know some good SQL Injection hint or tips to finding database names, table names. location ect..

ghost

0 0

16 years ago

here is a good tut helped me out alot

http://milw0rm.com/papers/174

hopes this kinda helps

ghost

0 0

16 years ago

cool, thanks

ghost

0 0

16 years ago

How about just learn MySQL. Then you can find out how to comment out the form fields and insert your own queries. If you have the ability to make a SQL query, you can easily do an SQL injection. Amiright? xD

korg

Admin from hell

0 0

16 years ago

Good point, How about learning some blind sql also.

ghost

0 0

16 years ago

Damn, that article was probably the single most helpful article I've ever read. Every article everywhere from now on should be like that.

ghost

0 0

16 years ago

It's nice to see a paper that covers a subject from the ground up. :)

spyware

Banned

0 0

16 years ago

The best way to learn SQL is setup a website using PHP and SQL, and you create your database by typing it straight from the input box, so no mouse-clicks involved =].