Tools required:
1.exploit scanner
download link :http://www.megaupload.com/?d=KWHLU1JC
2.sqli helper version 2.7
download link: http://rs417.rapidshare.com/files/283992449/SQLIHelperV.2.7.rar
3.Admin panel finder
download link: http://www.megaupload.com/?d=066ONRML
Checking vunerability
1.open exploit scanner and input a dork.for example "inurl:index.php?id=" (without quotes).
2.click scan sites
3.after you obtain a list of sites click "test sites".
4.pick one of the tested sites
Finding admin password
1.open sqli helper
2.input one among the tested site
3.click "inject"
4.wait for a sometime until it checks vunerability--no of columns--my sql version--union support--and after that if my sql version is >5 it asks us to get the database.
5.click "Get database".
6.after it finishes getting database select a database and click "Get tables"
7.after that find the admin table from table list and click "Get columns"(here you can see the columns like user,admin,pwd,password,email something like that
8.select username and password and Click "Dump now"
then you will be able to see the username and password.
If the user name is encrypted in MD5 Go to www.md5decrypter.co.uk/ or www.md5crack.com and crack it.
Finding admin control panel
1.open admin panel finder and input the url of the site for example www.site.com
2.press scan now
3.after finding the admin panel you can login using the username and password.
Screenshot
SQLi helper
