you dont know about mysql injection turn around and learn it b4 u even consider learning this
because this is a whole different story.
1. test for vulnerability
so you have a site lets say :
Code:
www.cia.gov/news.php?id=1
just like normal mysql injection
but for blind you put
Code:
www.cia.gov/news.php?id=1 and 1=2if you see any text from the page missing
or an error message like invalid id or db_error select * from xxxx@localhost call line "/" or anything like that
then its vuln
this works
because 1=2 is always false
you see if it was
Code:
www.cia.gov/index.php?id=1...
Apr 30, 2012
List Dork Sql injection
Sekedar Share beberapa Dork dalam Web attacking Sql injection.
PHP: about.php?cartID=
accinfo.php?cartId=
acclogin.php?cartID=
add.php?bookid=
add_cart.php?num=
addcart.php?
addItem.php
add-to-cart.php?ID=
addToCart.php?idProduct=
addtomylist.php?ProdId=
adminEditProductFields.php?intProdID=
advSearch_h.php?idCategory=
affiliate.php?ID=
affiliate-agreement.cfm?storeid=
affiliates.php?id=
ancillary.php?ID=
archive.php?id=
article.php?id=
phpx?PageID
basket.php?id=
Book.php?bookID=
book_list.php?bookid=
book_view.php?bookid=
BookDetails.php?ID=
browse.php?catid=
browse_item_details.php
Browse_Item_Details.php?Store_Id=
buy.php?
buy.php?bookid=
bycategory.php?id=
cardinfo.php?card=
cart.php?action=
cart.php?cart_id=
cart.php?id=
cart_additem.php?id=
cart_validate.php?id=
cartadd.php?id=
cat.php?iCat=
catalog.php
catalog.php?CatalogID=
catalog_item.php?ID=
catalog_main.php?catid=
category.php
category.php?catid=
category_list.php?id=
categorydisplay.php?catid=
checkout.php?cartid=
checkout.php?UserID=
checkout_confirmed.php?order_id=
checkout1.php?cartid=
comersus_listCategoriesAndProducts.php?idCategory=
comersus_optEmailToFriendForm.php?idProduct=
comersus_optReviewReadExec.php?idProduct=
comersus_viewItem.php?idProduct=
comments_form.php?ID=
contact.php?cartId=
content.php?id=
customerService.php?TextID1=
default.php?catID=
description.php?bookid=
details.php?BookID=
details.php?Press_Release_ID=
details.php?Product_ID=
details.php?Service_ID=
display_item.php?id=
displayproducts.php
downloadTrial.php?intProdID=
emailproduct.php?itemid=
emailToFriend.php?idProduct=
events.php?ID=
faq.php?cartID=
faq_list.php?id=
faqs.php?id=
feedback.php?title=
freedownload.php?bookid=
fullDisplay.php?item=
getbook.php?bookid=
GetItems.php?itemid=
giftDetail.php?id=
help.php?CartId=
home.php?id=
index.php?cart=
index.php?cartID=
index.php?ID=
info.php?ID=
item.php?eid=
item.php?item_id=
item.php?itemid=
item.php?model=
item.php?prodtype=
item.php?shopcd=
item_details.php?catid=
item_list.php?maingroup
item_show.php?code_no=
itemDesc.php?CartId=
itemdetail.php?item=
itemdetails.php?catalogid=
learnmore.php?cartID=
links.php?catid=
list.php?bookid=
List.php?CatID=
listcategoriesandproducts.php?idCategory=
modline.php?id=
myaccount.php?catid=
news.php?id=
order.php?BookID=
order.php?id=
order.php?item_ID=
OrderForm.php?Cart=
page.php?PartID=
payment.php?CartID=
pdetail.php?item_id=
powersearch.php?CartId=
price.php
privacy.php?cartID=
prodbycat.php?intCatalogID=
prodetails.php?prodid=
prodlist.php?catid=
product.php?bookID=
product.php?intProdID=
product_info.php?item_id=
productDetails.php?idProduct=
productDisplay.php
productinfo.php?item=
productlist.php?ViewType=Category&CategoryID=
productpage.php
products.php?ID=
products.php?keyword=
products_category.php?CategoryID=
products_detail.php?CategoryID=
productsByCategory.php?intCatalogID=
prodView.php?idProduct=
promo.php?id=
promotion.php?catid=
pview.php?Item=
resellers.php?idCategory=
results.php?cat=
savecart.php?CartId=
search.php?CartID=
searchcat.php?search_id=
Select_Item.php?id=
Services.php?ID=
shippinginfo.php?CartId=
shop.php?a=
shop.php?action=
shop.php?bookid=
shop.php?cartID=
shop_details.php?prodid=
shopaddtocart.php
shopaddtocart.php?catalogid=
shopbasket.php?bookid=
shopbycategory.php?catid=
shopcart.php?title=
shopcreatorder.php
shopcurrency.php?cid=
shopdc.php?bookid=
shopdisplaycategories.php
shopdisplayproduct.php?catalogid=
shopdisplayproducts.php
shopexd.php
shopexd.php?catalogid=
shopping_basket.php?cartID=
shopprojectlogin.php
shopquery.php?catalogid=
shopremoveitem.php?cartid=
shopreviewadd.php?id=
shopreviewlist.php?id=
ShopSearch.php?CategoryID=
shoptellafriend.php?id=
shopthanks.php
shopwelcome.php?title=
show_item.php?id=
show_item_details.php?item_id=
showbook.php?bookid=
showStore.php?catID=
shprodde.php?SKU=
specials.php?id=
store.php?id=
store_bycat.php?id=
store_listing.php?id=
Store_ViewProducts.php?Cat=
store-details.php?id=
storefront.php?id=
storefronts.php?title=
storeitem.php?item=
StoreRedirect.php?ID=
subcategories.php?id=
tek9.php?
template.php?Action=Item&pid=
topic.php?ID=
tuangou.php?bookid=
type.php?iType=
updatebasket.php?bookid=
updates.php?ID=
view.php?cid=
view_cart.php?title=
view_detail.php?ID=
viewcart.php?CartId=
viewCart.php?userID=
viewCat_h.php?idCategory=
viewevent.php?EventID=
viewitem.php?recor=
viewPrd.php?idcategory=
ViewProduct.php?misc=
voteList.php?item_ID=
whatsnew.php?idCategory=
WsAncillary.php?ID=
WsPages.php?ID=
ASP:...
Apr 24, 2012
Fernando Torres Bawa Chelsea ke Final Liga Champions
Fernando Torres
Fernando Torres Bawa Chelsea ke Final Liga Champions . Chelsea akhirnya ke Final Liga Champions. Gol Fernando Torres di menit ke-92 membuat kedudukan imbang menjadi 2-2.
Hasil imbang itu cukup untuk Chelsea menuju Allianz Arena di Kota Munich, Jerman. Sebab di leg pertama mereka unggul 1-0.
Dalam leg kedua yang berlangsung di Stadion Camp Nou itu, Barca tampil full team. Tak mau tersisih di Liga Champions, pasukan Pep Guardiola...
Pique Dilarikan ke Rumah Sakit
DEFENDER Barcelona Gerard Pique dilarikan ke rumah sakit terdekat setelah berbenturan dengan rekan setimnya, kiper Victor Valdes, pada leg kedua semi-final Liga Champions kontra Chelsea di Camp Nou dini hari tadi.
Pique terkapar di lapangan, usai secara tidak sengaja menabrak Valdes yang tengah menyelamatkan peluang Didier Drogba di menit ke-17.
Pique sempat kembali ke lapangan setelah mendapat perawatan medis. Tapi merasa tidak baik...
Terry Mengaku tak Sengaja Jatuhkan Sanchez
JOHN Terry merasa tak sengaja menjatuhkan Alexis Sanchez. Namun akibat tindakannya itu, kapten Chelsea itu diganjar kartu merah pada leg kedua semi-final Liga Champions kontra Barcelona, dini hari tadi.
Berdasarkan lansiran Sky Sports, Terry mengklaim Sanchez telah menjaga pergerakannya. Sehingga, ia harus menumpukan berat tubuhnya dengan bagian belakang kakinya.
Anak-anak asuh Roberto Di Matteo terpaksa meladeni perlawanan Blaugrana...
Dramatis, 10 Pemain Chelsea Singkirkan Barca
Chelsea akhirnya memastikan melaju ke final Champions League 2011/2012 setelah sukses menahan imbang Barcelona 2-2 di leg 2 babak semifinal. Chelsea melaju setelah unggul agregat 3-2. Hebatnya, Chelsea harus bermain dengan 10 pemain sejak menit 36.
Tandang ke Camp Nou, Rabu 25 April 2012, Chelsea langsung dikurung Barcelona. Pertandingan baru berjalan 4 menit, Lionel Messi langsung mengancam gawang Chelsea. Sayang tembakan Messi masih...
Kasus Video Porno, Roy Suryo Datangi BK DPR
Pakar telematika yang juga anggota Komisi I DPR, Roy Suryo, akan mendatangi Badan Kehormatan DPR siang ini, Selasa 24 April 2012, terkait kasus video porno yang pasangan pelakunya mirip dengan dua orang anggota DPR.
Namun tujuan kedatangan Roy Suryo ke BK DPR justru untuk meminta BK menggunakan pakar telematika selain dirinya guna meneliti keaslian video porno tersebut. Sebelumnya, BK memang berniat memanggil ahli telematika untuk...
Video Porno Mirip Anggota DPR Beredar
Video Porno Mirip Anggota DPR Beredar. Berita tentang beredarnya video porno mirip anggota DPR hari ini mengemuka di media massa online. Adapun anggota DPR yang diduga terlibat dalam aksi video mesum tersebut terdiri dari 2 orang anggota DPR, pria dan wanita. Meski keberadaan video tersebut belum tentu benar anggota DPR. Namun menurut informasi yang beredar, bahwa saat ini Badan Kehormatan (BK) DPR sudah bergerak untuk menindaklanjuti...
