For Infinity Exists Full Disclosure's first Website Hacking episode, we demonstrate how to exploit a security vulnerability occurring in a website's database to extract password hashes. Sql (Structured Query Language) is a computer language designed for the retrieval and management of data in a system's database. The Attack, known as Sql Injection, manipulates Sql statements before they are sent to the Sql Server, allowing the Attacker to create, change, or retrieve data stored in the database. Sql Injection is a hard concept to understand, so we made a video that encompasses all our knowledge on the subject to make it easier for our viewers to grasp.
Part 2 of 2
http://infinityexists.com/videos/episode11/
Yay. After hours of searching this is the only video which tells people HOW and WHY this attack works. Great job guys.
This is the only "Hack a Web sight" that is actually hacking or at least finding out the Variables that you need, But You cant shutdown the web sight by doing this.