Sunday 11 September 2011

How To Sqli a website Using Software N00b Friendly

Thing You Need
Havij
C99 Shall
and
Adminpage Finder

now open Havij and enter you website in the url bar


http://img201.imageshack.us/img201/502/havij.png


and then push the analyze button
http://img3.imageshack.us/img3/2849/havij2.png
You Should See this afterwards
http://img534.imageshack.us/img534/3374/havij3.png
and then push the tables button and you will see the database
http://img203.imageshack.us/img203/2108/havij4.png
now click the Get Tables Button
http://img38.imageshack.us/img38/9885/havij5.png
now click on the user table and click Get Columns
http://img709.imageshack.us/img709/7464/havij6.png
Now Click On The User And Password Column And Push Get Data
http://img245.imageshack.us/img245/6780/havij7.png
The First Username And Password You See Should Be The Administrator
Now Open You Admin Page Finder And Put In The URL
http://img408.imageshack.us/img408/6821/havij8.png
And Click The Scan Button
http://img821.imageshack.us/img821/4236/havij9.png
Once You find The Page visit It in your web browser
http://img96.imageshack.us/img96/7394/havij10.png
Now Login With The Username And Pass You found in the database
Now If your website is a CMS like myn there should be a sidebar 
or navigation menu somewhere and theres always a place to 
upload images in my case the news
[Image: havij11.png]
Now Rename the c99 script ANYTHING.PHP.JPG and upload it
http://img138.imageshack.us/img138/6862/havij12.png
now find the directory where the images are and goto your shell
http://img822.imageshack.us/img822/3851/havij13.png
And Now Your Done

No comments:

Post a Comment