kasmir Posted March 1, 2012 Report Share Posted March 1, 2012 (edited) Sql injection with into outfile Edit: --- toti 93am zis sa-i fac un bump, poate mai ajute pe cineva, vazand ca-s atatia care dau "deface" la show off! Edited March 11, 2014 by kasmir 3 Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted March 1, 2012 Report Share Posted March 1, 2012 Bravo.+1 REP Quote Link to comment Share on other sites More sharing options...
totti93 Posted March 1, 2012 Report Share Posted March 1, 2012 Bravo! In sfarsit ceva util in categoria SQL Injection! Daca ma gandesc bine, la load_file() nu era nevoie sa-l pui in HEX. Quote Link to comment Share on other sites More sharing options...
daNNy.bv Posted March 1, 2012 Report Share Posted March 1, 2012 bravos chiar folositor .. ma apuc si eu Quote Link to comment Share on other sites More sharing options...
SticKyWoX Posted March 1, 2012 Report Share Posted March 1, 2012 Un tutorial de nota 10! Multumesc. Quote Link to comment Share on other sites More sharing options...
kasmir Posted March 1, 2012 Author Report Share Posted March 1, 2012 Bravo! In sfarsit ceva util in categoria SQL Injection! Daca ma gandesc bine, la load_file() nu era nevoie sa-l pui in HEX.Da asa este.. as fi putut scrie 'etc/passwd' in loc de 0x2f6574632f706173737764Dar am zis sa fie... Quote Link to comment Share on other sites More sharing options...
icebird Posted March 1, 2012 Report Share Posted March 1, 2012 Felicitari, mai invata si lumea ceva nu mai sta cu pula la soare pe RST, myself included. Mersi. Quote Link to comment Share on other sites More sharing options...
Cril Posted March 1, 2012 Report Share Posted March 1, 2012 felicitari, foarte folositor Quote Link to comment Share on other sites More sharing options...
pr00f Posted March 1, 2012 Report Share Posted March 1, 2012 InfoSec Institute – IT Training and Information Security Resources – Creating Backdoors Using SQL Injection Quote Link to comment Share on other sites More sharing options...
GoogleMe Posted March 1, 2012 Report Share Posted March 1, 2012 (edited) ce le stie englezu , bravo Edited March 1, 2012 by GoogleMe Quote Link to comment Share on other sites More sharing options...
totti93 Posted March 1, 2012 Report Share Posted March 1, 2012 Combinand LFI & SQLi iese un shell minunat.Un PoC facut de mine mai demult: Quote Link to comment Share on other sites More sharing options...
icebird Posted March 1, 2012 Report Share Posted March 1, 2012 Combinand LFI & SQLi iese un shell minunat.Un PoC facut de mine mai demult: Felicitari. Inspirata alegere, i-ai futut macar? Eu le-as fi sters tot si as fi lasat un deface frumos cu "afara cu voi din romania", unguri tampiti. Quote Link to comment Share on other sites More sharing options...
MagicThunder Posted March 1, 2012 Report Share Posted March 1, 2012 Bravo.Chiar foarte interesant.Esti tare!!+1 rep si likePs:nu am dat like niciodata:)) Quote Link to comment Share on other sites More sharing options...
JohnyCNAM Posted March 2, 2012 Report Share Posted March 2, 2012 Nu vreau sa te supar insa am cateva neplaceri:-intr-un tutorial explici ceea ce faci-un user de rand care nu a auzit in viata lui de "order by","union all select", etc, nu ar intelege nimic din ceea ce scriai tu in bara de adrese(adica din sintaxa)Totusi te felicit pt. ceea ce ai reusit in videoclip, nu pentru "tutorial".REP+ si like ai de la mine.(3 de DA mergi mai departe:)) )PS:Azi noapte am visat ca iti scriu chestia asta, tu te superi si imi faci calculatorul praf=)) Quote Link to comment Share on other sites More sharing options...
Nytro Posted March 2, 2012 Report Share Posted March 2, 2012 Spune si care sunt diferentele intre "union" si "union all", intre "into outfile" si "into dumpfile", cum verifici privilegiile, ce faci daca directorul nu e writeable, sau nu ai calea directa, de ce e acel "+" la final, ce inseamna pentru browser, de ce folosesti hex la Load File cand la codul PHP se vede ca nu se face escape la ghilimea, ce se poate face daca functia system e in lista de "disabled_functions" si... de ce folosesti Internet Explorer? Quote Link to comment Share on other sites More sharing options...
kasmir Posted March 2, 2012 Author Report Share Posted March 2, 2012 (edited) Spune si care sunt diferentele intre "union" si "union all", intre "into outfile" si "into dumpfile", cum verifici privilegiile, ce faci daca directorul nu e writeable, sau nu ai calea directa, de ce e acel "+" la final, ce inseamna pentru browser, de ce folosesti hex la Load File cand la codul PHP se vede ca nu se face escape la ghilimea, ce se poate face daca functia system e in lista de "disabled_functions" si... de ce folosesti Internet Explorer?Daca te referi la bazele de date, este ceva de povestit si cred ca nu sunt in masura sa dau o explicatie foarte clara, dar am sa spun ce stiu, deci diferenta intre "union" si "union all" este ca "union all" nu elimina randurile duplicate, deci union all extrage toate randurile si le "potriveste" interogarilor tale punandu-le intr-un tabel. Nu stiu daca intelege cineva ceva Privilegiile cu file_priv din mysql.user.diferenta dintre outfile si dumpfile este ca daca apelezi dumpfile iti scrie pe un rand.Cam atata stiu,restu completeaza si tu pentru ca stii mai bine, sau altcineva. Sunt chiar foarte bine venice intebarile.. Edited March 2, 2012 by kasmir Quote Link to comment Share on other sites More sharing options...
kasmir Posted March 11, 2014 Author Report Share Posted March 11, 2014 (edited) UPP Edited March 11, 2014 by kasmir Quote Link to comment Share on other sites More sharing options...
