Oxygen Chrome

USER-AGENT İLE SQL INJECTİON - SONMEZZ

<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=8736831156475766463&zx=ba1db432-5f00-4223-bcb3-570444ae4de7' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=8736831156475766463&zx=ba1db432-5f00-4223-bcb3-570444ae4de7' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4069717223499904&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>

<!-- data-ad-client=ca-pub-4069717223499904 -->

</head><body>
<!-- sonmez reklam -->
<ins class='adsbygoogle' data-ad-client='ca-pub-4069717223499904' data-ad-format='auto' data-ad-slot='8484949854' data-full-width-responsive='true' style='display:block'></ins>
<script>
     (adsbygoogle = window.adsbygoogle || []).push({});
</script>
*/</style>

Yönetici

1 Nis, 2026

7565

Admin

SVIP Member

Verified

Nisan 01, 2026

New
#1

User-Agent ile SQL Injection Açığı Testi

Kullandığımız internet tarayıcılarının tamamı içerisinde bir User-Agent yani tarayıcı kimliği bulunur. Bu bilgi sayesinde bağlanılan web sunucusu; kullanılan işletim sistemi, tarayıcı sürümü ve cihaz bilgilerini öğrenebilir. User-Agent verileri çoğunlukla analiz ve istatistik amacıyla kullanılır. Ancak bazı durumlarda güvenli filtreleme yapılmadığında SQL Injection açıkları oluşabilir.

User-Agent SQL Injection testi

Tamper Data ile Request Verilerini İnceleme

İlk olarak Tamper Data veya benzeri bir araç kullanılarak gönderilen HTTP request verileri görüntülenir. Burada özellikle User-Agent başlığı üzerinde test işlemleri yapılır.

User-Agent Üzerinden SQL Hata Kontrolü

User-Agent verisinin sonuna tek tırnak (') eklenerek uygulamanın hata davranışı kontrol edilir. Eğer sistem SQL hata mesajı döndürüyorsa ilgili alan güvenlik zafiyeti içeriyor olabilir.

SQL hata mesajı kontrolü

SQLMap ile Güvenlik Analizi

SQL hata mesajı alındıktan sonra güvenlik analizi amacıyla SQLMap kullanılabilir. Bu tarz işlemler yalnızca yetkili sistemlerde ve eğitim amaçlı yapılmalıdır.

sqlmap.py -u https://example.com/test.php --cookie="xxx" --user-agent="test" -p "user-agent"

User-Agent SQL Injection örneği

Yanıtlamak için burayı tıklayın.

Paylaş:

Giriş Yap

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/387437488-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AAVkm1s0mXqahvjH5q5zGl5kYCNL:1780530865612';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d8736831156475766463','//www.sonmezz.com.tr/2026/05/user-agent-ile-sql-injection.html','8736831156475766463');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '8736831156475766463', 'title': 'SONMEZZ', 'url': 'http://www.sonmezz.com.tr/2026/05/user-agent-ile-sql-injection.html', 'canonicalUrl': 'http://www.sonmezz.com.tr/2026/05/user-agent-ile-sql-injection.html', 'homepageUrl': 'http://www.sonmezz.com.tr/', 'searchUrl': 'http://www.sonmezz.com.tr/search', 'canonicalHomepageUrl': 'http://www.sonmezz.com.tr/', 'blogspotFaviconUrl': 'http://www.sonmezz.com.tr/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'G-N7QNBS31Q4', 'analytics4': true, 'encoding': 'UTF-8', 'locale': 'tr', 'localeUnderscoreDelimited': 'tr', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22SONMEZZ - Atom\x22 href\x3d\x22http://www.sonmezz.com.tr/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22SONMEZZ - RSS\x22 href\x3d\x22http://www.sonmezz.com.tr/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22SONMEZZ - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/8736831156475766463/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22SONMEZZ - Atom\x22 href\x3d\x22http://www.sonmezz.com.tr/feeds/4510085921801088779/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-4069717223499904', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/fd3827f039554d71', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Ba\u011flant\u0131y\u0131 al', 'key': 'link', 'shareMessage': 'Ba\u011flant\u0131y\u0131 al', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Facebook platformunda payla\u015f', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'X platformunda payla\u015f', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Pinterest platformunda payla\u015f', 'target': 'pinterest'}, {'name': 'E-posta', 'key': 'email', 'shareMessage': 'E-posta', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27tr\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Devam\u0131n\u0131 oku \xbb', 'pageType': 'item', 'postId': '4510085921801088779', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiOLoqXeG32or810u8UNZaeLmIS_-kTGDRvV70bd-dwVPGjRNVLm6ip84vYHh10TQ8SRo53RJaK7UJUuSdL4bOQcUzjHP9U0Y-hqL2SzNQ5Dkg0HRChIlmtUJgy9RdLjVemPSY0P5v6RpS3KDApQ6llFCtd8hx4jMla-0BZaqXxEw1sXw2rdfM4sSL-HVHN\x3ds72-c', 'postImageUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiOLoqXeG32or810u8UNZaeLmIS_-kTGDRvV70bd-dwVPGjRNVLm6ip84vYHh10TQ8SRo53RJaK7UJUuSdL4bOQcUzjHP9U0Y-hqL2SzNQ5Dkg0HRChIlmtUJgy9RdLjVemPSY0P5v6RpS3KDApQ6llFCtd8hx4jMla-0BZaqXxEw1sXw2rdfM4sSL-HVHN', 'pageName': 'USER-AGENT \u0130LE SQL INJECT\u0130ON', 'pageTitle': 'SONMEZZ: USER-AGENT \u0130LE SQL INJECT\u0130ON', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'D\xfczenle', 'linkCopiedToClipboard': 'Ba\u011flant\u0131 panoya kopyaland\u0131!', 'ok': 'Tamam', 'postLink': 'Yay\u0131n Ba\u011flant\u0131s\u0131'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': '\xd6zel', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'USER-AGENT \u0130LE SQL INJECT\u0130ON', 'description': 'Sonmezz.com.tr Ziyaret\xe7ilerimizin ruhsal sa\u011fl\u0131klar\u0131 \xfczerindeki potansiyel etkiler g\xf6z \xf6n\xfcnde bulundurularak, sorumluluk kabul edilmemektedir.', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiOLoqXeG32or810u8UNZaeLmIS_-kTGDRvV70bd-dwVPGjRNVLm6ip84vYHh10TQ8SRo53RJaK7UJUuSdL4bOQcUzjHP9U0Y-hqL2SzNQ5Dkg0HRChIlmtUJgy9RdLjVemPSY0P5v6RpS3KDApQ6llFCtd8hx4jMla-0BZaqXxEw1sXw2rdfM4sSL-HVHN', 'url': 'http://www.sonmezz.com.tr/2026/05/user-agent-ile-sql-injection.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 4510085921801088779}}, {'name': 'widgets', 'data': [{'title': '', 'type': 'Image', 'sectionId': 'upload-image', 'id': 'Image10'}, {'title': 'Logo', 'type': 'HTML', 'sectionId': 'header-main', 'id': 'HTML10'}, {'title': 'Icons, Search', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList10'}, {'title': 'Menu', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList11'}, {'title': '', 'type': 'HTML', 'sectionId': 'hero', 'id': 'HTML9'}, {'title': 'Hero', 'type': 'LinkList', 'sectionId': 'hero', 'id': 'LinkList19'}, {'title': 'Konuyu Sesli Okuma', 'type': 'HTML', 'sectionId': 'hero', 'id': 'HTML15'}, {'title': 'Man\u015fet', 'type': 'HTML', 'sectionId': 'hero', 'id': 'HTML16'}, {'title': 'Duyuru Alan\u0131', 'type': 'HTML', 'sectionId': 'notice', 'id': 'HTML1'}, {'title': 'Story', 'type': 'HTML', 'sectionId': 'notice', 'id': 'HTML7'}, {'title': '#Contact Form', 'type': 'ContactForm', 'sectionId': 'contact-from', 'id': 'ContactForm1'}, {'title': 'Sayfalar', 'type': 'PageList', 'sectionId': 'pages-sticky', 'id': 'PageList1'}, {'title': 'Blog Kay\u0131tlar\u0131', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '4510085921801088779', 'title': 'USER-AGENT \u0130LE SQL INJECT\u0130ON', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiOLoqXeG32or810u8UNZaeLmIS_-kTGDRvV70bd-dwVPGjRNVLm6ip84vYHh10TQ8SRo53RJaK7UJUuSdL4bOQcUzjHP9U0Y-hqL2SzNQ5Dkg0HRChIlmtUJgy9RdLjVemPSY0P5v6RpS3KDApQ6llFCtd8hx4jMla-0BZaqXxEw1sXw2rdfM4sSL-HVHN', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'Comment'}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': 'Tags'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'labels', 'label': 'Tags'}]}, {'title': 'Pop\xfcler G\xf6nderiler', 'type': 'PopularPosts', 'sectionId': 'sidebar-static', 'id': 'PopularPosts10', 'posts': [{'title': 'Ubuntu 24.04 \xdczerinde Linux, Apache, MySQL, PHP (LAMP) Kurulumu', 'id': 6334681256868437352}, {'title': 'Windows 10/11\x27de \x22Kritik Hata: Ba\u015flat Men\xfcs\xfc \xc7al\u0131\u015fm\u0131yor\x22 \xc7\xf6z\xfcm\xfc', 'id': 8468519436633315183}, {'title': 'WordPress\x27te Sinir Bozucu \x27YouTube Video Hatas\u0131 153\x27\xfc D\xfczeltin', 'id': 7200026890310568376}, {'title': 'Plesk panel ossav lisans kald\u0131rma', 'id': 5648528847503749367}, {'title': 'Ubuntu 24.04\x27te Kolay WireGuard VPN Kurulumu (H\u0131zl\u0131 Komut Dosyas\u0131 K\u0131lavuzu)', 'id': 8661373797421903109}]}, {'title': 'Etiket Bulutu', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML4'}, {'title': 'Son Yorumlar', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML2'}, {'title': 'An \u0130tibariyle', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML3'}, {'title': 'Copyright', 'type': 'HTML', 'sectionId': 'copyright', 'id': 'HTML23'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'xen-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image10', 'upload-image', document.getElementById('Image10'), {'resize': true}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML10', 'header-main', document.getElementById('HTML10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList10', 'header-main', document.getElementById('LinkList10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList11', 'header-main', document.getElementById('LinkList11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML9', 'hero', document.getElementById('HTML9'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList19', 'hero', document.getElementById('LinkList19'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'hero', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML16', 'hero', document.getElementById('HTML16'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'notice', document.getElementById('HTML1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML7', 'notice', document.getElementById('HTML7'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'contact-from', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'G\xf6nderiliyor...', 'contactFormMessageSentMsg': '\u0130letiniz g\xf6nderildi.', 'contactFormMessageNotSentMsg': '\u0130leti g\xf6nderilemedi. Daha sonra tekrar deneyin.', 'contactFormInvalidEmailMsg': 'Ge\xe7erli bir e-posta adresi gerekli.', 'contactFormEmptyMessageMsg': '\u0130leti alan\u0131 bo\u015f b\u0131rak\u0131lamaz.', 'title': '#Contact Form', 'blogId': '8736831156475766463', 'contactFormNameMsg': 'Ad', 'contactFormEmailMsg': 'E-posta', 'contactFormMessageMsg': 'Mesaj', 'contactFormSendMsg': 'G\xf6nder', 'contactFormToken': 'AAVkm1uPG8Iv7CTHFVUPfqB4AJL9:1780530865613', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'pages-sticky', document.getElementById('PageList1'), {'title': 'Sayfalar', 'links': [], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1559596066-lbx__tr.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/828616780-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts10', 'sidebar-static', document.getElementById('PopularPosts10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML4', 'sidebar-static', document.getElementById('HTML4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML2', 'sidebar-static', document.getElementById('HTML2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML3', 'sidebar-static', document.getElementById('HTML3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'copyright', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'xen-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>