SQL Injection - Vulnerability Test

So now you know what SQL injection is and how to find a vulnerable website using Google Dorks, now we can finally get in action. :D

                   Vulnerability Test

To find out if a website is vulnerable to SQLi, simply add a ' at the end of the url.

So for me it would be PHP Code:

www.examplewebsite.com/index.php?id=1'

Now press enter, if you get an error that says something like: "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right (etc)..." or something similar. That error is good, as it means that the site is vulnerable, hackable, so now you can simply continue with SQL Injecting. If you get no error, the site is not vulnerable.  (Then you have to use Xpath Injection which we will learn in further lessons)

SQL Injection - Finding Vulnerable Website

Our best partner for SQL injection is Google. We can find the Vulnerable websites(hackable websites) using Google Dork list. Google dork(Advanced Google Searching) is searching for vulnerable websites using the google searching tricks. There is lot of tricks to search in google. But we are going to use “inurl:” command for finding the vulnerable websites.

Some Examples:
inurl:index.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:pageid=

How to use ?

Copy one of the above command and paste in the google search engine box.
Hit enter.You can get list of web sites.
We have to visit the websites one by one for checking the vulnerability.
So Start from the first website.

Note : If you like to hack particular website then.

Try this :

site:www.victimsite.com dork_list_commands

For Example :

site:www.victimsite.com inurl:index.php?
id=