IEFD Ep. 11 - Website Hacking - Sql Injection Part 1

Video Title :	IEFD Ep. 11 - Website Hacking - Sql Injection Part 1
Description :	For Infinity Exists Full Disclosure's first Website Hacking episode, we demonstrate how to exploit a security vulnerability occurring in a website's database to extract password hashes. Sql (Structured Query Language) is a computer language designed for the retrieval and management of data in a system's database. The Attack, known as Sql Injection, manipulates Sql statements before they are sent to the Sql Server, allowing the Attacker to create, change, or retrieve data stored in the database. Sql Injection is a hard concept to understand, so we made a video that encompasses all our knowledge on the subject to make it easier for our viewers to grasp. Part 1 of 2 http://infinityexists.com/videos/episode11/
Views :	25856
Rating :	4.35
Keywords, Tags :	Infinity Exists full disclosure sql injection website hacking cracking exploiting computer
Video Length :	7 : 57

Comments :

Jambi! haha love that song

Hi guys,my computor crashed lately and I lost all my data. Can someone show me how to retrieve it without paying big shitty companies?

Make your SQL Query in (int), this will protect you from this ;)

Tool!!! xD

Excellent guys v.good job!!

netoveride are you new? more like 9 times out of 10 when an exploit is found and published it's based upon an a weakness in code that could be attacked via sql injection. Someone needs to take a look at packetstorm sometime or milw0rm there isn't a day in the week when you can't find a newly published sql attack.

Don't even answer the past comment dumb question

Could you post a .asp website hack?

9 out of 10 websites with an sql database have been protected, try typing in admin/login.asp "all those have sql or asp" and see how many you can hack

but...wait before I say that...At the bottom (FerryWell) Why the heck would I need a 3 or 4 hundred dollar AirPcap Driver for webserver hacking. I don't (It is good for wireless hacking). What I was going to say is that even though this sql isn't as common, blind sql via manual input or sql brute force is still pretty common. If you use 1=1 and get a blank page it was succesful, error means not succesful. It is a yes/no game with the website. It is also the hardest type of attack