urdeath
Cross-Chain Trader
2
MONTHS
2 2 MONTHS OF SERVICE
LEVEL 1
300 XP
You can watch part 2 here :
Hello! Today I will show u how to make SQL Injection and grab USR and PSW with jSQL software (with Kali Linux).
For this tutorial I will use official acunetix vulnerability site.
[1] We need a vulnerable site (u can use to find vuln sites google dorks for SQL).
So anyway what we're looking for is a page that ends with
id=1 or ID=any number you want.
Now u see Acunetix vuln site is: http://testphp.vulnweb.com/ . Click in artists and see site URL, then click in r4w8... now u see page that ends with artist=1
[2] In URL after "artist=1" add this ' --> artist=1'
And u will see MySQL error!
[3] Open jSQL tool and paste URL http://testphp.vulnweb.com/artists.php?artist=1 (wihout ' ) in textbox and press ENTER
if everything is ok you will see the base.
[4] Now we click on first base and see the tables
[5] We have table "users". Click and check the box what would you like to see. I mark uname, emal and password. Then click right button on table USERS and ---> Load.
Now we watching users data
[6] Go back to the site. Click on Signup in left side menu. and use uname and pass from jSQL
Hello! Today I will show u how to make SQL Injection and grab USR and PSW with jSQL software (with Kali Linux).
For this tutorial I will use official acunetix vulnerability site.
[1] We need a vulnerable site (u can use to find vuln sites google dorks for SQL).
So anyway what we're looking for is a page that ends with
id=1 or ID=any number you want.
Now u see Acunetix vuln site is: http://testphp.vulnweb.com/ . Click in artists and see site URL, then click in r4w8... now u see page that ends with artist=1
[2] In URL after "artist=1" add this ' --> artist=1'
And u will see MySQL error!
[3] Open jSQL tool and paste URL http://testphp.vulnweb.com/artists.php?artist=1 (wihout ' ) in textbox and press ENTER
if everything is ok you will see the base.
[4] Now we click on first base and see the tables
[5] We have table "users". Click and check the box what would you like to see. I mark uname, emal and password. Then click right button on table USERS and ---> Load.
Now we watching users data
[6] Go back to the site. Click on Signup in left side menu. and use uname and pass from jSQL