Hack Website....(Tekniknya)

[AlchemisT]

pd hacker CG meh la ajar nak hack website......aku nak hack web israel nih

 

[lutttfi]

la..
igtkan k0 yg nk ajr..

 

[noraini@azlan]

aku berminat sangat nk blojo nih

 

[AlchemisT]

tu la...mai kita tanya pakar hack CG nih...mcm mn nak start

 

[nizamac79]

meh kito pakat buat banner ... holocaust is fake ... hihihi ye ke eja holocaust tu )

 

[AlchemisT]

simple hack

http://www.religions.ir/cont.php?sid=1

now to test let us add symbol ' at the end of the url

we get the error msg check the link


http://www.religions.ir/cont.php?sid=1'

 

[AlchemisT]

the error is:- You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1


that means the url is vulnerable to sql injection

now we try to find out the n.of columns...
let us start iterizing the no of columns till we get an error

for this we use the order command like this:-

 

[AlchemisT]

aku berminat sangat nk blojo nih

aku pun.....we want masta

 

[zalweb]

Tanya pokcik google hehe

 

[AlchemisT]

soory.....slh paste