##################################### HACKED BY TEAM T!g3R #################################
OFFICE OF PRESIDENT, NEPAL
MEMBERS : w3bd3f4c3r, n3ll@!s4mur@!, !nd!@nRuBuk, 5!l3nt k!ll3r, r00t, burn3r.
WEBSITE : http://eproc.presidentofnepal.gov.np
VULNERABLE : SQLi
VULNERABLE LINK HIDDEN
########################## ADMIN DETAILS OF THE WEBSITE ###################################

Data Found: admin_id=1
Data Found: user_name=admin
Data Found: pass_word=deb4ad7b764f33a331a8b722323ad257
Data Found: user_level=1

######################################## PROOFS ############################################

PROOF THAT THE TABLES ACCESSD : http://i56.tinypic.com/2vv5obc.png
PROOF THAT THE USERS ACCESSED : http://i53.tinypic.com/357rix1.png

################################## SERVER DETAILS #########################################


Analyzing	http://eproc.presidentofnepal.gov.np/
Host IP: 	202.166.216.235
Web Server: 	Apache/2.2.11 (Unix) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8k PHP/5.2.9
		mod_apreq2-20051231/2.6.0 mod_perl/2.0.4 Perl/v5.10.0
Powered-by: 	PHP/5.2.9
Keyword Found: 	page
DB Server: 	MySQL >=5
Current DB: 	dbpresident
Current User: 	root@localhost
Sql Version:	 5.1.33
Current DB: 	dbpresident
System User:	 root@localhost
Host Name: 	eproc.presidentofnepal.gov.np
Installation dir: /opt/lampp/
Db User & Pass: root:*4CA67FA19DAB93064ACF48DD5B62C638C79E9424:localhost
Db User & Pass: root:*4CA67FA19DAB93064ACF48DD5B62C638C79E9424:linux
Db User & Pass: ::localhost
Db User & Pass: ::linux
Db User & Pass: pma::localhost

################################### DATABASE NAMES ########################################

Data Base Found: information_schema
Data Base Found: cdcol
Data Base Found: dbpresident
Data Base Found: mysql
Data Base Found: phpmyadmin
Data Base Found: test

############################### TABLES NAMES OF DB dbpresident ############################


Table found: tbl_acknowledgement
Table found: tbl_addenda
Table found: tbl_admin_info
Table found: tbl_adminlogin
Table found: tbl_agency
Table found: tbl_agency_category
Table found: tbl_award
Table found: tbl_bid
Table found: tbl_bid_document
Table found: tbl_bid_document_additional
Table found: tbl_bid_information
Table found: tbl_bid_modification
Table found: tbl_clarification
Table found: tbl_company_category
Table found: tbl_contract
Table found: tbl_contract_bid_information
Table found: tbl_member_login
Table found: tbl_mytender
Table found: tbl_notice
Table found: tbl_notice_modification
Table found: tbl_organization
Table found: tbl_provider
Table found: tbl_provider_category
Table found: tbl_required_bid_doc
Table found: tbl_tender
Table found: tbl_tender_category
Table found: tbl_tender_document
Table found: tbl_tender_modification
Table found: tbl_tender_state
Table found: tbl_tender_type
Table found: tbl_track

############################ USER DETAILS OF DB dbpresident ###############################


Data Found: login_id=1
Data Found: member_id=1
Data Found: member_type=a
Data Found: user_name=presidentoffice
Data Found: pass_word=deb4ad7b764f33a331a8b722323ad257
Data Found: email_addr=behtash46@yahoo.com
Data Found: question=What is your pet's name?
Data Found: answer=kale
Data Found: login_id=6
Data Found: member_id=1
Data Found: member_type=p
Data Found: user_name=prajjwal
Data Found: pass_word=5b36eadf7755ea380d6c20ef9e03bf93
Data Found: email_addr=prj_shakya@yahoo.com
Data Found: question=What is your pet's name?
Data Found: answer=kale
Data Found: login_id=10
Data Found: member_id=10
Data Found: member_type=p
Data Found: user_name=hitechvalley
Data Found: pass_word=d64ed3b96f13d81b363a45b096fb9be7
Data Found: email_addr=cto2.hitech@gmail.com
Data Found: question=What is your pet's name?
Data Found: answer=kale
Data Found: login_id=32
Data Found: member_id=21
Data Found: member_type=p
Data Found: user_name=akbarkhan
Data Found: pass_word=f039e5f60e85d10bf7b742e65ad931ca
Data Found: email_addr=akbar@f1soft.com
Data Found: question=What is your pet's name?
Data Found: answer=doggy
Data Found: login_id=49
Data Found: member_id=33
Data Found: member_type=p
Data Found: user_name=hitech
Data Found: pass_word=dd2921cc76ee3abfd2beb60709056cfb
Data Found: email_addr=info@hitechvalley.net
Data Found: question=Who is your favorite football player?
Data Found: answer=ronaldo
Data Found: login_id=59
Data Found: member_id=58
Data Found: member_type=p
Data Found: user_name=rohit123
Data Found: pass_word=f6a7fa7f69c823868f57565c0ab86d36
Data Found: email_addr=pm.hitech@gmail.com
Data Found: question=Who is your favorite football player?
Data Found: answer=ronaldo
Data Found: login_id=68
Data Found: member_id=79
Data Found: member_type=p
Data Found: user_name=surajagni
Data Found: pass_word=b466814f65ad86cd9ac506e5cc6521b6
Data Found: email_addr=suraj@agniinc.com.np
Data Found: question=What is your pet's name?
Data Found: answer=boby
Data Found: login_id=71
Data Found: member_id=100
Data Found: member_type=p
Data Found: user_name=chakreswori
Data Found: pass_word=30bc90d39de6bcbd85e7d28c8a3ea9c9
Data Found: email_addr=chakreswori@ntc.net.np
Data Found: question=What is your favorite sports?
Data Found: answer=Football
Data Found: login_id=76
Data Found: member_id=102
Data Found: member_type=p
Data Found: user_name=Rajusingh
Data Found: pass_word=25f9e794323b453885f5181f1b624d0b
Data Found: email_addr=rajusingh_9@yahoo.com
Data Found: question=Who is your favorite football player?
Data Found: answer=Pele
Data Found: login_id=94
Data Found: member_id=126
Data Found: member_type=p
Data Found: user_name=michico
Data Found: pass_word=5a762dd31e151a88947b4f0955b00553
Data Found: email_addr=pragalbhabasnyat@yahoo.com
Data Found: question=What is your pet's name?
Data Found: answer=bravo
Data Found: login_id=96
Data Found: member_id=141
Data Found: member_type=p
Data Found: user_name=mahadev
Data Found: pass_word=7fac8ce0f38d094de5582e0e8a47f7b5
Data Found: email_addr=mahadevkhmt@gmail.com
Data Found: question=What is your pet's name?
Data Found: answer=nirajan
Data Found: login_id=119
Data Found: member_id=154
Data Found: member_type=p
Data Found: user_name=situconstruction
Data Found: pass_word=9219db2f179dc5c46604bcb639c264e5
Data Found: email_addr=sangeeta_shrestha@hotmail.com
Data Found: question=What is your father's name?
Data Found: answer=Shiva Prasad Shrestha
Data Found: login_id=122
Data Found: member_id=176
Data Found: member_type=p
Data Found: user_name=aaaaaa
Data Found: pass_word=d9f2bddb9f81c9b85415d2f3d424290b
Data Found: email_addr=a@a.com
Data Found: question=What is your pet's name?
Data Found: answer=a
Data Found: login_id=135
Data Found: member_id=186
Data Found: member_type=p
Data Found: user_name=touchcompany
Data Found: pass_word=fc15fcb19f6fa66b6d317132ea06e39d
Data Found: email_addr=alex_anzeela7@yahoo.com
Data Found: question=What is your pet's name?
Data Found: answer=julle

############################## HACKED BY TEAM T!g3R ########################################