Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
April 19, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 581
Members: 0
Total: 581
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 5 matches
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum: Sql injection   Posted: Wed Jul 06, 2011 2:13 pm   Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
 
Replies: 9
Views: 14680





&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=a', '127.0.0.1'); SELECT * from site_infotable --



Query failed:
errorno=1064
error=You have an error in your S ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum: Sql injection   Posted: Wed Jul 06, 2011 1:51 pm   Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
 
Replies: 9
Views: 14680




If you try:


birthdate=1234


do you get sql error message?

And if you try:


birthdate=abcd


do you see sql error message?


Nope, abcd works just fine. The requests goes through ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum: Sql injection   Posted: Wed Jul 06, 2011 1:44 pm   Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
 
Replies: 9
Views: 14680




I'm using my own C# application to send a POST request.

The post data I'm sending looks like this:

&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=


"&birthdate=" ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum: Sql injection   Posted: Wed Jul 06, 2011 1:20 pm   Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
 
Replies: 9
Views: 14680




I'm using my own C# application to send a POST request.

The post data I'm sending looks like this:

&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=


"&birthdate=" ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum: Sql injection   Posted: Tue Jul 05, 2011 12:07 am   Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
 
Replies: 9
Views: 14680




INSERT INTO tablename ( field1, field2, field3, exploitable_field, field5 ) VALUES( 'val1', 'val2', 'val3', '??????', 'val5' )


I've been trying to inject a query into "exploitable_field" and grab ...
Page 1 of 1
All times are GMT
  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.131 Seconds