HACKING ASP / ASPX SITES -- (MANUALLY) -- Cyber Security Expert & Penetration Tester chetansoni@live.comASPX Injection is also similar to PHP based SQL Injection. But here, we don’t use queries that contain order by, union select etc. Instead, we will cheat the server to respond with the information we needed. It is an error based injection technique. We will get the information in the form of errors.Find Out A Vulnerable Link First, we need find out a vulnerable asp/aspx link which looks like http://www.vulnerablesite.com/index.aspx?id=10CHECKING FOR VULNERABILITY As in the PHP based injection, we will test for the vulnerability by adding a single quote at the end of the URL. http://www.vulnerablesite.com/gallery.aspx?id=10′ If it gives an error similar to the following, then our site is vulnerable to sql injection.To check the error just type apostrophe at the end of the vulnerable URL http://website.org/search.aspx?txt=EDIT’To check that whether the s...
Comments
Post a Comment