Friday 11 November 2011

SQL Injection

SQL Injection( Structured Query Language) is a malicious code attack used by Hackers to hack into websites like ebay, amazon and other e-commerce sites and gain access to the admins panel thus get the clients visa or credit card details to purchase products.
This an example of SQLi http:/www.ebay.com/php
Note: every website ending with php is vulnerable to SQL injection, now to begin the attack, after php put =99 ' or 1=1 this means everything =99 in the database is true, if you get an error start injecting this code UNION SELECT null,null.null,null,null,null,null until you get the right nulls. You are simply injecting these codes to gain access to the admins panel.
Some website want you to sign up to view their products, simply use these codes to log in as anonymous user
Username: Admin
Password: ') or '1'='1--

I will later post SQL injection codes

SQLi is the language used by the database.



No comments: