Jump to content

Featured Replies

Posted
comment_7671

Just curious how good the team is with SQL injection attacks? I know moderately big server that's hosting a compromised web application. Only been able to dump the database, but haven't fully rooted it yet. Curious if you buy leaks from people, or if you actually root the server and take it.

  • 3 weeks later...
comment_8237
On 12/23/2016 at 4:25 PM, Jack said:

Just curious how good the team is with SQL injection attacks? I know moderately big server that's hosting a compromised web application. Only been able to dump the database, but haven't fully rooted it yet. Curious if you buy leaks from people, or if you actually root the server and take it.

Well, people start caring only when they see a problem. I would definitely hire someone to do that yea

  • 2 weeks later...
comment_9005

SQL injection is a way of using Forms or what ever in HTML/PHP to execute SQL. So you would do like in a password feild

);// to kill the last paswordstatement

 

password,null); CREATE_NEW_TABLE(THIS,THAT, THEOTHER);

 

Like ending the SQL Statement within the statement and adding another line to the code that shouldnt be there.

It's easy... use Metasploid and Kali Linux, it'l pretty much do it for u.

  • 2 months later...
  • 2 weeks later...
  • 3 years later...

Create an account or sign in to comment