https://wiki.mafiasi.de/index.php?action=history&feed=atom&title=CInsects%2FProtokolle%2FCinsects%3ATreffen-2015-12-16 2026-10-17T23:06:40Z Versionsgeschichte dieser Seite in Fachschaft Informatik MediaWiki 1.46.2 https://wiki.mafiasi.de/index.php?title=CInsects/Protokolle/Cinsects:Treffen-2015-12-16&diff=21772&oldid=prev 2015-12-17T12:08:56Z

<p><span class="autocomment">SQL-Injetion</span></p> <table style="background-color: #fff; color: #202122;" data-mw-interface=""> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 17. Dezember 2015, 12:08 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l19">Zeile 19:</td> <td colspan="2" class="diff-lineno">Zeile 19:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==SQL-Injetion==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==SQL-Injetion==</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">* </del>Einführung in SQL-Injetion</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== </ins>Einführung in SQL-Injetion<ins style="font-weight: bold; text-decoration: none;">===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Im Prinzip wie: [CInsects/Protokolle/CInsects:Treffen-2010.10.19 hier]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Im Prinzip wie: [CInsects/Protokolle/CInsects:Treffen-2010.10.19 hier]</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Coole Stichpunkte:</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Coole Stichpunkte:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*** INFOMATION_SCHEMA.COLUMNS</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*** INFOMATION_SCHEMA.COLUMNS</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*** concat</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*** concat</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">* </del>query</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">===</ins>query<ins style="font-weight: bold; text-decoration: none;">===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Leaken von Informationen wie usernames, passwörter etc</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** Leaken von Informationen wie usernames, passwörter etc</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** braucht informationen über den Aufbau der Tabelle</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** braucht informationen über den Aufbau der Tabelle</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l34">Zeile 34:</td> <td colspan="2" class="diff-lineno">Zeile 34:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>**** z.B. Kommentar zur Ausgabe der Uhrzeit (guten morgen, guten mittag, guten abend) -&gt; 3 Bit</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>**** z.B. Kommentar zur Ausgabe der Uhrzeit (guten morgen, guten mittag, guten abend) -&gt; 3 Bit</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*  </del>bypass</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== </ins>bypass<ins style="font-weight: bold; text-decoration: none;">===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** weitere Bedingugen auskommentieren</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** weitere Bedingugen auskommentieren</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** &quot;OR 1&quot;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>** &quot;OR 1&quot;</div></td></tr> </table>

134.100.17.173 https://wiki.mafiasi.de/index.php?title=CInsects/Protokolle/Cinsects:Treffen-2015-12-16&diff=21771&oldid=prev 2015-12-17T12:08:03Z

<p>Die Seite wurde neu angelegt: „Dies ist eine Unterseite von <a href="/index.php/CInsects" title="CInsects">CInsects</a> =Orga= * Teilnahme am -FAUST-CTF * heutiges Thema: ** SQL-Injekton ** Python-Requests =Ablauf= ==Python-Requests==…“</p> <p><b>Neue Seite</b></p><div>Dies ist eine Unterseite von [[CInsects]]<br /> <br /> =Orga=<br /> * Teilnahme am -FAUST-CTF<br /> * heutiges Thema:<br /> ** SQL-Injekton<br /> ** Python-Requests<br /> <br /> =Ablauf=<br /> ==Python-Requests==<br /> * Vorstellung des Modules &quot;requests&quot; in Python<br /> ** arch-&gt; python-requests<br /> ** &quot;pip install requests --user&quot;<br /> ** [http:/python-requests.org Homepage]<br /> ** Usage:<br /> *** session = requests.Session()<br /> *** rep = requests.get(URL,params={&#039;user&#039;:&#039;foo&#039;, &#039;passwd&#039;:bar&#039; ...} )<br /> ** fancy Zeug mit Cookies ...<br /> <br /> ==SQL-Injetion==<br /> * Einführung in SQL-Injetion<br /> ** Im Prinzip wie: [CInsects/Protokolle/CInsects:Treffen-2010.10.19 hier]<br /> ** Coole Stichpunkte:<br /> *** INFOMATION_SCHEMA.COLUMNS<br /> *** concat<br /> * query<br /> ** Leaken von Informationen wie usernames, passwörter etc<br /> ** braucht informationen über den Aufbau der Tabelle<br /> ** braucht Ausgabestelle<br /> *** Union select fürs dranhängen<br /> *** concat fürs zusammenführen mehrer spalten<br /> *** orakeln<br /> **** codieren von informationen<br /> **** z.B. Kommentar zur Ausgabe der Uhrzeit (guten morgen, guten mittag, guten abend) -&gt; 3 Bit<br /> <br /> * bypass<br /> ** weitere Bedingugen auskommentieren<br /> ** &quot;OR 1&quot;</div>

134.100.17.173