WooYun.org

备份文件：http://**.**.**.**:10080/jjksreg/123.rar

sql注入：在注册页面，专业选择及所在院校都存在sql注入：

用burpsuite抓包

也可以用union select 注入
用sqlmap 跑一下吧

400多个表
-------------------------------+---------+
| dbo.Ttmp | 274043 |
| dbo.TPrintCertLog | 240443 |
| dbo.TCandidateCashAccount | 164740 |
| dbo.MCP_VCandidateInfo | 163618 |
| dbo.TCandidate | 163618 |
| dbo.TCandidateDetail | 163618 |
| dbo.TCandidateUser | 163618 |
| dbo.VBaseCandidate | 163618 |
| dbo.vCandidate | 163618 |
| dbo.vCandidateFeeReturnInfo | 163618 |
| dbo.vCandidateInfo | 163618 |
| dbo.VCSVScoreCandidate | 163618 |
| dbo.vExamRegInfo | 163618 |
| dbo.voCandidate | 163618 |
| dbo.VScoreCandidate | 163618 |
| dbo.tcandidate20150918 | 163606 |
| dbo.TCandidateDetailEncrypt | 163574 |
| dbo.TcandidateGetPSWAnswer | 163573 |
| dbo.TApplyInvoice | 44248 |
| dbo.vApplyInvoice | 44246 |
| dbo.TCandidateGroup | 7087 |
| dbo.V_SGT_CandidateGroup | 7087 |
| dbo.V_SGT_GroupCandidate | 7087 |
| dbo.VCandidateGroup | 7087 |
| dbo.EMP_Testscene_NCMS | 5169 |
| dbo.T_MiddleSchool | 2541 |
| dbo.TCandidateGroupHistory | 1485 |
| dbo.TCandidateForbid | 1355 |
| dbo.TGroupUser | 1122 |
| dbo.VRegionStru | 1121 |
| dbo.MCP_RegionsInfo | 1116 |
| dbo.MCP_VRegionsInfo | 1116 |
| dbo.TRegionInfo | 1116 |
| dbo.EMP_MapRule | 500 |
| dbo.EMP_Step | 450 |
| dbo.TDictDetail | 370 |
| dbo.T_ZhuanYe | 317 |
| dbo.TFuncInfo | 295 |
| dbo.T1231111 | 146 |
| dbo.TTestConfigItem | 123 |
| dbo.TWebDictDetail | 122 |
| dbo.T_ZhengQuan | 112 |
| dbo.TOrganizationCoordinate | 111 |
| dbo.EMP_BulkAppointRegion | 100 |
| dbo.T_ZiXun | 89 |
| dbo.T_ZhiWei | 78 |
| dbo.TSysParam | 75 |
| dbo.T_JiJin | 71 |
| dbo.TDictInfo | 65 |
| dbo.TExamRCtrlInfo | 60 |
| dbo.VNation | 57 |
| dbo.TExamCertStencilFieldsInfo | 50 |
| dbo.TCandidateInfoConfig | 47 |
| dbo.VLogType | 21 |
| dbo.TLogType | 18 |
| dbo.TTemplateRule | 18 |
| dbo.TSysmbol | 15 |
| dbo.TSysInfo | 13 |
| dbo.VCountry | 13 |
| dbo.TFlowCondition | 12 |
| dbo.TFuncGroup | 11 |
| dbo.TExamCertConfig | 10 |
| dbo.T_PingJi | 9 |
| dbo.TTestRoomEnvCheck | 9 |
| dbo.TCandidateState | 8 |
| dbo.TConfigInfo | 7 |
| dbo.TSubPassRuleDetail | 6 |
| dbo.TTestSchedule | 6 |
| dbo.TTimeRange | 6 |
| dbo.voTTestSchedule | 6 |
| dbo.vViewTaskTree | 6 |
| dbo.TAgent | 5 |
| dbo.TAgentOrg | 5 |
| dbo.TExamCertPrintStencil | 5 |
| dbo.TGroupInfo | 5 |
| dbo.vAgentOrgInfo | 5 |
| dbo.VEducation | 5 |
| dbo.TDefaultTestConfig | 4 |
| dbo.EMP_TSubjectNotice | 3 |
| dbo.MCP_VSubjectInfo | 3 |
| dbo.TAgeRange | 3 |
| dbo.TControlStates | 3 |
| dbo.TExamCheck | 3 |
| dbo.TItemScoreRate | 3 |
| dbo.TPrintModel | 3 |
| dbo.TQueryField | 3 |
| dbo.TQueryItem | 3 |
| dbo.TRule | 3 |
| dbo.TScoreRange | 3 |
| dbo.TSubject | 3 |
| dbo.TSubPassRule | 3 |
| dbo.vCheckSubjejectUsed | 3 |
| dbo.vEverySubjectAverageScore | 3 |
| dbo.vExamResult | 3 |
| dbo.VOccupation | 3 |
| dbo.VPrintModel | 3 |
| dbo.VSubjectInfo | 3 |
| dbo.VSubPassRule | 3 |
| dbo.vViewPaperTree | 3 |
| dbo.vViewSubjectTree | 3 |
| dbo.dictTimeMode | 2 |
| dbo.EMP_Upload_EFSInfo | 2 |
| dbo.EMP_Upload_SKINInfo | 2 |
| dbo.TQPPackage | 2 |
| dbo.TSubPassRuleDetailUsed | 2 |
| dbo.TSysTable | 2 |
| dbo.TTestBaseInfo | 2 |
| dbo.TTrackRule | 2 |
| dbo.TUserGroup | 2 |
| dbo.TUserInfo | 2 |
| dbo.vSceneType | 2 |
| dbo.VSex | 2 |
| dbo.vTestBaseInfo | 2 |
| dbo.EMP_Abspaper_Mapping | 1 |
| dbo.EMP_OpenPaperDownload | 1 |
| dbo.EMP_PreQPPackage | 1 |
| dbo.EMP_PreSetAbsPaper | 1 |
| dbo.EMP_TQPHistory | 1 |
| dbo.MCP_VExamOrgInfo | 1 |
| dbo.TCheckList | 1 |
| dbo.TEfsImportInfo | 1 |
| dbo.TNews | 1 |
| dbo.TOrganization | 1 |
| dbo.TQPPackageSkinFile | 1 |
| dbo.TQueryTable | 1 |
| dbo.TSceneTemplate | 1 |
| dbo.TTemplateScene | 1 |
| dbo.TVersion | 1 |
| dbo.VOrganization | 1 |
| dbo.VSceneExamStru | 1 |
| dbo.VSceneStru | 1 |
| dbo.VSceneStruAvailability | 1 |
| dbo.VSubjectStru_New | 1 |
| dbo.VTestRoomStru | 1 |
| dbo.VUsedSceneStru | 1 |
+--------------------------------+---------+