مشكلة اختراق موقع

[dh_merdel]

السلام عليكم

لقيت موقع أمريكي لبيع الخمر مصاب بسكيول و قررت أخترقه بس واجهتني مشكلة :froown:

هذا لامر يطلع الأعمدة المصابة
http://www.xxxxx.com/xxx.php?store_i...,9,10,11,12,13

لقيت أعمدة مصابة و منها العمود 2 و بعد طلعت اصدار قاعدة البيانات 4.0.27-sure1-log

بعدين طبقت الاوامر التالية
http://www.xxxx.com/xxx.php?store_id...5,%20115,%2037)

طلعلي مشكلة :
You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '(hex(concat(table_name,0x3a,column_name,0x3a,tabl e_schema))),3,

و بعدين جربن من غير تسفير unhex(hex( ما نجحت
و كذلك جربت group_concat ما نجحت :froown:

أرجوكم موقع زي هذا لازم يخترررررررق

مشكوووووووور

[black-cat]

أنا أفضل أن تستخدم برامج أختراق ~ْ}

مثل~ْ}

havij

و~ْ}

sql injctor
~ْ}ٍٍٍٍٍِ

[KaLa$nikoV]

انت اشتغلت باستعلامات تخص القواعد 5 وهذا غلط لانه القاعده عندك 4 شغلك كله تخمين يا حلو

اقتباس أنا أفضل أن تستخدم برامج أختراق ~ْ}

لا تعليق

[aircrack -ng]

تفضل التخمينات الواردة لها الاصدار

user
username
usernames
admin
admins
users
manager
account
accounts
member
login
logins
members
tbl_user
tbl_users
tbl_admin
tbl_admins
tbl_member
tbl_members
tbladmins
memberlist
tbluser
tblusers
tblmanager
tblmanagers
tblclients
tblservers
adminuser
usertbl
userstbl
admintbl
adminstbl
id
tuser
tusers
uid
userid
user_id
auid
adminpass
LoginID
FirstName
LastName
cms_user
cms_member
cms_users
cms_members
cms_admin
cms_admins
user_admin
user_info
user_list
user_login
user_logins
user_names
userrights
userinfo
userlist
webadmin
webadmins
Webmaster
Webuser
product
products
tblproducts
tblproduct
tbl_tbadmin
Adminlogin
useraccount
nguoidung
quanly
quantri
dangnhap
taikhoan
taikhoanquantri
useraccounts
nguoidungs
tbuser
tblogin
tbadmin
tbaccount
tbuseraccount
tbnguoidung
tbllogin
tbladmin
tblaccount
tbluseraccount
tblnguoidung
tbusers
tblogins
tbadmins
tbaccounts
tbuseraccounts
tbnguoidungs
tbllogins
tblaccounts
tbluseraccounts
tblnguoidungs
tb_account
tb_useraccount
tb_nguoidung
tbl_login
tbl_account
tbl_useraccount
tbl_nguoidung
tb_logins
tb_accounts
tb_useraccounts
tb_nguoidungs
tbl_logins
tbl_accounts
tbl_useraccounts
tbl_nguoidungs
tb_admin
tb_administrator
tb_admins
tb_login
tb_member
tb_members
tb_user
tb_username
tb_usernames
tb_users
login_admin
login_admins
login_user
login_users
lost_pass
lost_passwords
lostpass
lostpasswords
password
pwd
pwds
a_admin
adm
modir
modiriat
karbar
karbaran
admin_user
admin_userinfo
administrator
adminid
admin_id
adminuserid
admin_userid
AdminUID
adminusername
admin_username
adminname
admin_name
usr
usr_n
usrname
usr_name
usrnam
name
student
students
user_name
useradmin
apwd
adminpaw
adminpwd
admin_pwd
admin_pass
adminpassword
admin_password
usrpass
usr_pass
pass
userpass
user_pass
dbaccount
dbstudent
dbstudents
dbadmin
useres
dbuser
dbusers
person
personal
affiliateUsers
dbpersoon
list
lists
dblist
userpassword
user_password
sort
userpwd
user_pwd
SecurityLevel
LastLoginDate
LoginIP
pword
_wfspro_admin
4images_users
ad
Konto
Konten
admin_login
admin_psw
administer
administrable
administrate
administration
administrators
verwalten
verwaltet
administrieren
Verwaltung
Administratoren
adminrights
adminpsw
adminupass
Kunst
articles
Artikel
aut
author
autore
backend
Autor
backend_users
backenduser
article
Buch
chat_config
chat_messages
chat_users
client
chat
clients
Kunden
art
tblnews
superuser
sysadmin
sysadmins
sysuser
sysusers
x_admin
article_admin
bbs
book
clubconfig
company
usuario
config
banner
dbadmins
info
m_admin
manage
movie
movies
news
options
general
settings
setting
ACT_INFO
upload
uploads
file
files
akhbar
reguser
sb_host_admin
Firma
contact
contacts
content
contenu
control
Kontakt
Kontakte
Inhalt
Kontrolle
cpg_config
cpg132_users
controle
Country
customer
customers
Kunde
customers_basket
dealer
dealers
diary
download
H***228;ndler
Tagebuch
herunterladen
Dragon_users
e107.e107_user
e107_user
forum.ibf_members
fusion_user_groups
fusion_users
dw
Event
gl
glmm
gly
us
stnuser
stuser
stusers
stuseres
staff
dbstaff
db_staff
staff_db
db
database
databases
test_user
user_test
test_users
users_test
group
groups
Gruppe
Gruppen
ibf_admin_sessions
ibf_conf_settings
ibf_members
ibf_members_converge
ibf_sessions
icq
guanli
guanliyuan
h_admin
images
index
Bilder
ipb.ibf_members
ipb_sessions
joomla_users
jos_blastchatc_users
jos_comprofiler_members
jos_contact_details
jos_joomblog_users
jos_messages_cfg
jos_moschat_users
jos_users
knews_lostpass
korisnici
Mitgliederbereich
kpro_adminlogs
kpro_user
links
key
keywords
Anmeldung
logon
logs
Protokolle
main
haupts***228;chlich
mambo_session
mambo_users
mb_users
Mitglied
Mitgliederliste
Mitglieder
minibbtable_users
mima
mm
mpassword
musername
Film
Filme
mybb_users
mysql
mysql.user
names
nc
new
Namen
news_lostpass
newsletter
nuke_authors
nuke_bbconfig
nuke_config
nuke_popsettings
nuke_users
obb_profiles
order
orders
parol
partner
partners
passes
passwords
Auftrag
Bestellungen
P***228;sse
Passwort
Passw***246;rter
perdorues
perdoruesit
phorum_session
phorum_user
phorum_users
phpads_clients
phpads_config
phpbb_users
phpBB2.forum_users
phpBB2.phpbb_users
phpmyadmin.pma_table_info
pma_table_info
poll_user
punbb_users
power
powers
psw
pswd
pw
pwd1
reg_user
reg_users
registered
jhu
webapps
ASP
ASP.NET
Microsoft
logging
log
sing
singup
singin
register
registeration
reg
registriert
regusers
root
roots
session
sessions
Tagung
Sitzungen
Einstellungen
shop.cards
shop.orders
site_login
site_logins
sitelogin
sitelogins
sites
Standorte
smallnuke_members
smf_members
SS_orders
statistics
Subjects
Statistiken
sys
system
sysconstraints
syssegments
Systemadministratoren
systime
table
tables
Tisch
Tabellen
tbl
tbl_clients
tbl_client
tblclient
tblConfigs
test
usebb_members
Titel
u
u_n
u_name
u_p
u_pass
Benutzer
usercontrol
user_pw
Benutzerliste
userlogins
userpasswd
usr_pw
usrs
Benutzername
Benutzernamen
vb_user
vbulletin_session
vbulletin_user
voodoo_members
vip
webmasters
webusers
Webbenutzer
xar_roles
xoops_bannerclient
xoops_users
yabb_settings
yabbse_settings
sb_host_adminActiveDataFeed
ActiveDataFeed
Category
Kategorie
CategoryGroup
ChicksPass
ClickTrack
Land
CountryCodes1
CustomNav
DataFeedPerformance1
DataFeedPerformance2
DataFeedPerformance2_incoming
DataFeedShowtag1
DataFeedShowtag2
DataFeedShowtag2_incoming
dtproperties
Event_backup
Event_Category
EventRedirect
Events_new
Genre
JamPass
MyTicketek
MyTicketekArchive
Passwords by usage count
Passw***246;rter durch Nutzung z***228;hlen
PerfPassword
PerfPasswordAllSelected
Promotion
ProxyDataFeedPerformance
ProxyDataFeedShowtag
ProxyPriceInfo
Region
SearchOptions
Series
Suchoptionen
Serie
Sheldonshows
categoria
StateList
States
SubCategory
Survey
Staaten
UnterkKlasse
Anhand des Sachgebietes
Umfrage
SurveyAnswer
SurveyAnswerOpen
SurveyQuestion
SurveyRespondent
tblRestrictedPasswords
tblRestrictedShows
Ticket System Acc Numbers
TimeDiff
Titles
Ticket-System ACC-Nummern
ToPacmail1
ToPacmail2
Total Members
UserPreferences
uvw_Category
uvw_Pref
uvw_Preferences
Venue
venues
Veranstaltungsort
Veranstaltungsorte
VenuesNew
X_3945
stone list
Stein Liste
tblArtistCategory
tblArtists
tblLayouts
tblLogBookAuthor
tblLogBookEntry
tblLogBookImages
tblLogBookImport
tblLogBookUser
tblMails
tblNewCategory
tblOrders
tblStoneCategory
tblStones
tblWishList

[hank00sh]

يب اخوي شغلك تخمين

زي ما افادوك الاخوه