214, 10/11 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   dudtntdud
   False Injection¿¡ °üÇÑ Áú¹®ÀÔ´Ï´Ù.

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_Web&no=230 [º¹»ç]


Mysql ±¸¹®¿¡¼­

select * from where id = 0; À» ´ëÀÔÇÒ°æ¿ì ¸ðµç id°ªÀÌ ³ª¿À´õ¶ó°í¿ä

0Àº false°ªÀ¸·Î ¾Ë·ÁÁ® Àִµ¥ ¾î°¼­ ¸ðµç °ªÀ» Ãâ·ÂÇØÁִ°ǰ¡¿ä.

  Hit : 2622     Date : 2017/01/18 06:01



    
jinmo123 Ȥ½Ã id°¡ ¼ýÀÚ°¡ ¾Æ´Ñ ¹®ÀÚ¿­·Î ½ÃÀÛÇÏ´Â ¹®ÀÚ¿­ÀÌ ¾Æ´Ñ°¡¿ä? ±×·² °æ¿ì¿¡´Â ¼ýÀÚ 0°ú ºñ±³ÇÏ¸é ¼ýÀÚ·Î º¯È¯Çؼ­ ºñ±³Çϱ⶧¹®¿¡ ¸ðµÎ 0À̶û °°°Ô µË´Ï´Ù 2017/01/18  
chaneyoon Çä ÀÌ ºÐ »ýÈ°ÇØÅ·¿¡¼­µµ º» °Í °°Àºµ¥ 2017/01/19  
chaneyoon mysql> select * from rank;
+------+-------+
| id | score |
+------+-------+
| aaa | 1 |
| bb | 39 |
| ccc | 349 |
| ddd | 33 |
| eee | 982 |
| fff | 2 |
| 1a | 320 |
+------+-------+
7 rows in set (0.00 sec)

ÀÌ·± Å×À̺íÀÌ ÀÖÀ» ¶§ ¸¸¾à

select * from rank where id=0 À̶ó´Â Äõ¸®¸¦ ½ÇÇàÇÏ°Ô µÇ¸é,

+------+-------+
| id | score |
+------+-------+
| aaa | 1 |
| bb | 39 |
| ccc | 349 |
| ddd | 33 |
| eee | 982 |
| fff | 2 |
+------+-------+

ÀÌ·¸°Ô ¾Õ¿¡ ¼ýÀÚ°¡ ¾ø´Â Á¤º¸µéÀÌ ³ª¿À°Ô µÇ°í,

¶Ç "select * from rank where id=1" À̶ó´Â Äõ¸®¸¦ º¸³»°Ô µÈ´Ù¸é
+------+-------+
| id | score |
+------+-------+
| 1a | 320 |
+------+-------+

ÀÌ·¸°Ô ¾ÕÀÌ 1·Î ½ÃÀÛÇÏ´Â Á¤º¸µéÀ» ºÒ·¯¿À´Â ¿ø¸®¿Í ºñ½ÁÇÏÁö ¾ÊÀ»±î ½Í½À´Ï´Ù
2017/01/19  
34   À¥ÇØÅ· ¹è¿ï·Á°í ÇÕ´Ï´Ù[2]     aktrg1234
11/09 3180
33   ¸ÞÀÏ ÇØÅ·¿¡ ´ëÇؼ­ ¹®ÀÇ ÇÕ´Ï´Ù[5]     wqw3
12/16 5045
  False Injection¿¡ °üÇÑ Áú¹®ÀÔ´Ï´Ù.[3]     dudtntdud
01/18 2621
31   [À¥Áú¹®] »çÀÌÆ® ¼Ò½º¸¦ Åë°·Î °®°í¿À´Â ÅøÀÌ ÀÖ³ª¿ä?[2]     helpwizet
03/08 5216
30   get method ¿¡ °üÇÑ Áú¹®[1]     ewqqw
03/13 2745
29   POST METHOD     ewqqw
03/13 2393
28   Post Method[2]     ewqqw
03/16 2527
27   cookie °ü·Ã[1]     ewqqw
03/23 2674
26   SQL injection ±âº»     ewqqw
03/24 3140
25   ¹ö±× ¹Ù¿îƼ ±âÃÊ     wwwlk
06/27 2790
24   À¥ÇØÅ·ÇÏ°í½Í¾î¼­ ¹è¿ì°íÀִµ¥ htmlÇÏ°í css ű׳ª»ö»óµîµî..ÀÌ·±°Å±îÁö ¹è¿ïÇÊ¿ä°¡ÀÖ³ª¿ä?;;[8]     ykk98433
06/29 4037
23   APMSETUP7À» ¼³Ä¡ÇÏ·Á°íÇϴµ¥..     0429njy
07/22 2402
22   Webhacking.kr ¹®Á¦¸¦ Ç®´Ù°¡..     alstnsms67
08/02 2688
21   À¥ÇØÅ·¿¡ ÇÊ¿äÇÑ ¾ð¾î[3]     yunpung1234
08/17 3673
20   À¥ÇØÅ· Áú¹®[1]     ericseo16
10/14 2819
19   PHP¿¡¼­ À̸ÞÀÏ Àü¼ÛÇÒ¶§ °¡·Îç ¼ö ÀÖ³ª¿ä?[9]     drrobot333
11/16 2569
18   XSS <> ġȯ ¿ìȸ°¡ °¡´ÉÇÑ°¡¿ä?[2]     drrobot333
11/19 3595
17   À¥ ÇØÅ· Áú¹®ÀÔ´Ï´Ù.     dsgoidsog
11/26 2748
16   Ä®¸®¸®´ª½º dvwa ¼³Ä¡°úÁ¤Áß ¿À·ù[2]     wnsdud5534
01/23 3401
15   ¾ÆÆÄÄ¡ ¼³Á¤Áß ¿À·ù[2]     eunjong147
02/06 8379
[1][2][3][4][5][6][7][8][9] 10 ..[11]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org