w3bd3f4c3r

Untitled

Sep 3rd, 2011
478
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ############################### HACKED BY TEAM T!g3R #####################################
  2. NATIONAL SCIENCE FOUNDATION OF SRILANKA HACKED BY TEAM T!g3R
  3. MEMBERS : w3bd3f4c3r, n3ll4!s4mur4!,r00t, burn3r, violence_sh@r0n.
  4. WEBSITE : www.nsf.ac.lk
  5. VULNEABLITY SQLi
  6.  
  7. ################################## PROOFS ################################################
  8.  
  9. PROOFS OF TABLES AND COLUMNS ACESSED : http://i51.tinypic.com/14ecsjn.png
  10. PROOFS OF USERS DATA ACESSED : http://i53.tinypic.com/332nhq9.png
  11. PROOFS OF ANOTHE TABLES : http://i53.tinypic.com/f55dzm.png
  12.  
  13.  
  14. ################################ SERVER DETAILS ##########################################
  15.  
  16. Target: http://www.nsf.ac.lk/annou.php?ID=379
  17. Host IP: 192.248.80.11
  18. Web Server: Apache/2.2.3 (CentOS)
  19. Powered-by: PHP/5.1.6
  20. DB Server: MySQL >=5
  21. Resp. Time(avg): 988 ms
  22. Current User: web@localhost
  23. Sql Version: 5.0.77-log
  24. Current DB: web
  25. System User: web@localhost
  26. Host Name: slstic.nsf.ac.lk
  27. Installation dir: /usr/
  28. DB User: 'web'@'localhost'
  29.  
  30. ################################## DATABSE NAMES ###########################################
  31.  
  32. Data Bases: information_schema
  33. Agre
  34. nni
  35. test
  36. twc
  37. web
  38.  
  39. ######################### TABLES AND COLUMN NAMES OF D.B (WEB) ############################
  40.  
  41. +TABLES+ ++COLUMNS++
  42. thematic
  43. survey_scinnotech
  44. staff photo remarks email fax tel txt division priority designation2
  45. designation fname sname title id
  46. sss
  47. slsmem
  48. rdinst
  49. pub
  50. pec_users email userlevel lname fname password username uid
  51. pec_mssgs
  52. pages
  53. login LEVEL LDATE PASSWORD U_NAME FULL NAME ID
  54. links_type
  55. links
  56. jss
  57. jnsf_menuscripts
  58. jnsf_guide
  59. jnsf_abstract
  60. jnsf
  61. events
  62. error
  63. ebk1
  64. division
  65. com_type
  66. com_name
  67. com_mem
  68. biospherer
  69. binary
  70. awards
  71. announcements
  72. activity
  73. abk1
  74. ############################## USER DETAILS OF DB (WEB)###################################
  75.  
  76.  
  77. Data Found: FULL NAME=
  78. Data Found: U_NAME=MadhawaP
  79. Data Found: PASSWORD=740940139V
  80. Data Found: LEVEL=ADMIN
  81. Data Found: ID=3
  82. Data Found: U_NAME=Chamika
  83. Data Found: PASSWORD=ch2006
  84. Data Found: LEVEL=USER
  85. Data Found: ID=4
  86. Data Found: U_NAME=Chanaka
  87. Data Found: PASSWORD=ch2008
  88. Data Found: LEVEL=USER
  89.  
  90. ########################### DATABASE NAME Agri TABLES & COLUMNS########################
  91. +TABLES+ ++COLUMNS++
  92. msg
  93. User AccessLevel Nic Tpno Address Name Password UserName
  94. University
  95. Test
  96. Qualification
  97. Member
  98. Mem_Qua
  99. Mem_AI
  100. Mem_AE
  101. AreaofInterest
  102. AreaOfExpertise
  103.  
  104.  
  105. ############################## USRS DETAIS OF DB (Agri) ##################################
  106.  
  107.  
  108. Data Found: UserName=A
  109. Data Found: Password=skNlp8zOkx1kg
  110. Data Found: AccessLevel=Admin
  111. Data Found: UserName=Admin
  112. Data Found: Password=skNlp8zOkx1kg
  113. Data Found: AccessLevel=Admin
  114. Data Found: UserName=Chani
  115. Data Found: Password=skNlp8zOkx1kg
  116. Data Found: AccessLevel=RegistrationOfficer
  117. Data Found: UserName=ladmin
  118. Data Found: Password=skNlp8zOkx1kg
  119. Data Found: AccessLevel=Admin
  120. Data Found: UserName=malshi
  121. Data Found: Password=123
  122. Data Found: AccessLevel=RegistrationOfficer
  123. Data Found: UserName=R
  124. Data Found: Password=abc
  125. Data Found: AccessLevel=RegistrationOfficer
  126. Data Found: UserName=RU
  127. Data Found: Password=123
  128. Data Found: AccessLevel=RegistrationOfficer
  129.  
  130.  
  131. ################################ HACKED BY TEAM T!g3R######################################
RAW Paste Data