Home » BlackHat, Cracking, Database Hacking

How to hack website using SQLI Helper

25 May 2009 No Comment

SQLI Helper is handy software to hack website. You don’t need to have any knowledge of SQL to hack website using SQLI Helper. Just follow the guidelines below:

1. Free download SQLI Helper to hack website.
Password: djrohan.com

2. Unzip the file to obtain SQLI Helper to hack website.

3. Now, when you have website hacking software, you need to find website with potential vulnerability. There are some websites that are unhackable. While finding hackable websites, it is better to search for sites with format “article.php?id=[number]” in url.

Lets consider one example which I will use in this article:

http://encycl.anthropology.ru/article.php?id=1

Check whether your searched victim site can be hacked by entering:

http://encycl.anthropology.ru/article.php?id=’1

in address bar and hit enter. You will get error message like:

Query failed.You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’1 ORDER BY lastname’ at line 1 SELECT * FROM person_old WHERE id=\’1 ORDER BY lastname

If you get such error message, it is confirmed that you can hack website using this method and now you can move forward to hack website.

4. Run SQLI Helper on your computer.

SQLI Helper to hack website

5. In target field, enter http://encycl.anthropology.ru/article.php?id=1 (the website url you just discovered as hackable) and hit on “Inject”.

6. SQLI Helper will search for columns and you will have something like this:

Website hacking software

7. Hit on “Get Database” to get:

Hacking website down

8. Select any element from “Database Name” and click on “Get Tables”.

Hack website using software

9. Now, select element from table and hit on “Get Columns”. I have selected “user” to get userid and password required for login.

Hacking website software

10. Now, when you know “user” table has columns “usr_login” and “usr_pass”, select them and hit on “Dump Now”.

How to hack website

11. You will get values like these:

password hashes cracked

12. The values achieved are actually in hash and hence you have to crack these hashes to get userlogin and password to hack website. For this, go to http://www.md5crack.com/ and crack the hash using “Crack that hash baby” button. Thus, you are now able to hack website as you have got website user id and password. Once, you get admin password, you can easily hack website.

Random Posts

Leave your response!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.