How I Hacked My College (PART 2)

Ashish Dhone
3 min readFeb 29, 2020

Hello Everyone, here is the second part SQL INJECTION where I was able to get the complete database of my college. This story is about the challenge I got from one of the head of my System Department Saying “You can’t do anything, you will just sit in college and do small things…”. I think everyone should understand the importance of Security If someone doesn’t understand make them because this is the way we are protected from cybercriminals and cyber attacks.

I accepted the Challenge “I said nothing to him and went back to my work”. I started thinking, My Challenge for myself was to make him aware of Cyber Security not to prove him what I can do because whatever he said was just because I used to go to him and tell him this is not Secure we can hack it easily you need to improve security here and they were like okay we will do but, no one did the work so I did.

SQL INJECTION — Story Of My Challenge

I directly started hunting for SQL INJECTION, because I wanted to have the databases which were very critical for them and me too. It was almost more than 2 hours but I didn’t get anything but I didn't stop. Finally, I got one website xyz.redacted.com “Sorry I can’t disclose the website so I am using as redacted.com”. There was an option to Search Books :P

--

--

Ashish Dhone
Ashish Dhone

Written by Ashish Dhone

Top Hacker’s Ranking in World | Best Bug Hunter @Microsoft MVR 2023 & 2024 @Apple 2022 @Google 2021 & 300+ | CRTP | LPT | CPENT | eWPTXv2 | CHFI | CEH | CVEs x4

No responses yet