Hack Website Using SQL Injection Attack with WebCruiser 604 comments

What is SQL Injection?

SQL injection is a type of security exploit in which the attacker adds Structured Query Language (SQL) code to a Web form input box to gain access to resources or make changes to data. An SQL query is a request for some action to be performed on a database. Typically, on a Web form for user authentication, when a user enters their name and password into the text boxes provided for them, those values are inserted into a SELECT query. If the values entered are found as expected, the user is allowed access; if they aren't found, access is denied. However, most Web forms have no mechanisms in place to block input other than names and passwords. Unless such precautions are taken, an attacker can use the input boxes to send their own request to the database, which could allow them to download the entire database or interact with it in other illicit ways.

OR

SQL injection is one of the popular web application hacking method.  Using the SQL Injection attack, an unauthorized person can access the database of the website. Attacker can extract the data from the database.

What a hacker can do with SQL Injection attack?

• Bypassing Logins,
• Accessing secret data,
• Modifying contents of website,
• Shutting down the My SQL server.

How to Hack Website with SQL Injection:

In this article, I have shown to how to hack a website step by step using WebCruiser;

Example picture for understanding the SQL Injection Attack

Step 1: Finding Vulnerable Website:

Firstly find out the website which have SQL vulnerability page, so google will help us simply search any of the dork on google.

Google SQL Dork List

After searching on google many website links will appear so open any link and you will see any website link like this

http://www.victimsite.com/index.php?id=2

Note: If you like to hack any particular website,then try this;

site:www.victimsite.com dork_list_commands

for example:

site:www.victimsite.com inurl:index.php?id=

(You can also see this tutorial for finding vulnerable site, more easily, more efficiently and less time consuming method using SQL Poizon)

Step 2: Checking the Vulnerability:

1. Now for checking the vulnerability, let it be on the WebCruiser, it will now do all the work;

Download WebCruiser

2. Open WebCruiser and put the vulnerable link that you have found in URL box and then click Scan Site;

3. Now wait till the scanning gets completed, depending on your internet connection speed for the scan to finish, then the results will be like;

Step 3: Exploiting the Database:

Now right click on the vulnerable URL and then click SQL INJECTION POC, to inject the injection;

Step 4: Accessing the Database:

1. After successful injection, click on the DataBase tab;

2. Now click on the drop down menu and then select Get_All_DB then click the DataBase;

3. Now select the DataBase and then click on Table;

4. In the tables, click admin and then click Column;

5. Now in the columns, click on the adminName, adminId and adminPass then click on the Data to retrieve all from it;

Step 5: Find Admin Login Page:

You have nearly done everything, got the admin username and password, so now for finding the admin login page of that vulnerable site, you can use any of the tool from here to find it and login to the admin panel.

Note: Do Not Use Any Tutorial Of This Blog To Harm Anyone. This Is Only For Educational Purpose. I Will Not Be Responsible For Anything Done By You.

Do you my like Articles..?

Get Free Email Updates Daily!	Follow us!