sh3nanagin5 wrote:i need some help with sql injections, i get the code and the idea but im not sure exactly how to use in real situations.
please help by posting sites that i can try some on or just help by going into it further.
No no no.
If you don't know SQL - you don't know SQL injections.http://w3schools.com/sql/
Learn it all. Seriously.
Also, don't ask for sites you can 'pwn'. That's against the rules. They're pretty easy to find anyway, just go on google product search, choose a "searched for product", pick a few sites and test them.
Remember, typing in ' OR 1=1-- is only good for seeing if a site is vulnerable but it will never ever exploit a site.