MySQL SQL injection through ORDER BY

[StandaxXx]

I was trying to make a SQL injection according to this article:

http://josephkeeler.com/2009/05/php-security-sql-injection-in-order-by/

I already prepared the injections for scanning the tables from information_schema but doing it manualy is very boring. I want to make some script to search the web page, then read the answer and reload it with different variables. Then in the end it should display the results. I have some knowladge in programming, but I am not sure what language would be best for this purpose. Thanks for any help.

[centip3de]

I was trying to make a SQL injection according to this article:

http://josephkeeler.com/2009/05/php-security-sql-injection-in-order-by/

I already prepared the injections for scanning the tables from information_schema but doing it manualy is very boring. I want to make some script to search the web page, then read the answer and reload it with different variables. Then in the end it should display the results. I have some knowladge in programming, but I am not sure what language would be best for this purpose. Thanks for any help.

I quite honestly would use Python, as it is my favorite, it's fairly easy, has massive documentation, and has a very good urllib/urllib2 library. Though this is quasi-illegal (so I won't go in-depth, just skim the surface), you would want to input a website, attach the test for sql injections to the end, download the page, search the page for tokens, if it worked, proceed, etc.

On a side-note, though doing things manually is boring, repetition is the easiest way to memorize. Where-as a program would do all the memorizing for you, and ruin the learning process.

~Cent