Sql Injection / Website Using Havij Pro Edition [TUTORIAL]

It's one of the most common vulnerability in web appliions today. It allows attacker to execute database query in url and gain access to some confidential information etc...(in shortly).
First of all Download Havij From Here
1.SQL Injection (classic or error based or whatever you call it)
2.Blind SQL Injection (the harder part)
TIP you must have vulnerable site.
What is vulnerable?Exposed to the possibility of being attacked or harmed, either physically or emotionally: "we were in a vulnerable position



Start

Download the attached file.
1st we need to find vulnerability site to do that we need dork, download it above


here is one i pick out of dork (index.p?), so what you have to do is to go to google.com and put this dork there (index.p?id=)


You will see Vulnerable Site Pick one site.Open the HAVIJ and insert the website that you want to and follow the screenshots.

After that the sofware will look for database of you website. the database i got here is "slighter_website"
We need to get the of tables that the database have to do this we click on table as i do in this pic below:
Then the of tables will show, like below pics:

We need to find the of column, at this point it depends on the intention you want, either you want to admin or you want to credit card but here I will use this to get admin and ID. now click the admin and click get colunm as below pics.
Then you will see another sub columns which is name and for this database, it depends on the site you want to get their database and
click on the sub coloum name and , then go and click on get data to get the login user name and admin for this database.

At last you will see the admin and pasword

Thanks :)
to lrn and to defend your self :))