Hacking Aspx / Php websites (ACTIVE SQL INJECTION) hey guys in this tutorial i will show you how to make a injection on a aspx based website. 1) seach aaspx website. for this step you can use one of this dorks ".aspx?bookID= " OR ".php?id= " 2) If you found one lets check if the website is vulnverable. Add this text after the url "order by 1--" example : http://www.target.com/index.aspx?Id=1 order by 1-- Now you will get a Error : "Page not found" or something like that. 3) Lets go on and begin with the Injection the first step of every injection is to find out the columns. for this step we use : "having 1=1" you only have to copy it behind the url example : http://www.target.com/index.aspx?Id=1 having 1=1 4) Well lets go on and search the tables. Use this code for it and 1=convert example : http://www.target.com/index.aspx?Id=1 and 1=convert The output is the first table of the databse. But this table
Comments
Post a Comment