Skip to main content

Posts

Showing posts with the label Hacking Aspx / Php websites (ACTIVE SQL INJECTION)

Hacking Aspx / Php websites (ACTIVE SQL INJECTION)

Hacking Aspx / Php websites (ACTIVE SQL INJECTION) hey guys in this tutorial i will show you how to make a injection on a aspx based website.  1) seach aaspx website.  for this step you can use one of this dorks  ".aspx?bookID= "     OR         ".php?id= " 2) If you found one lets check if the website is vulnverable. Add this text after the url  "order by 1--"  example : http://www.target.com/index.aspx?Id=1 order by 1--  Now you will get a Error : "Page not found" or something like that.  3) Lets go on and begin with the Injection the first step of every injection is to find out the columns.  for this step we use :  "having 1=1"  you only have to copy it behind the url  example : http://www.target.com/index.aspx?Id=1 having 1=1  4) Well lets go on and search the tables. Use this code for it  and 1=convert  example : http://www.target.com/index.aspx?Id=1 and 1=convert...