Skip to main content

Minnesota National Guard hacked

  1. ====================================
  2. = https://twitter.com/m0m_r00tw0rm =
  3. ====================================
  4.  
  5. Target: http://www.dma.state.mn.us
  6. Vuln target: http://www.dma.state.mn.us/press_room/e-zine/articles/index.php?item=280
  7. IP: 156.98.187.50
  8. Web-Server: Apache
  9. PHP Version:  156.98.187.50
  10.  
  11. Vuln Type: SQL Injection
  12.  
  13. Database: ng_internet
  14. Tables: tbl_ezinetype, tbl_jobvac, tbl_journalists, tbl_newsevents, tbl_pages, tbl_ripleyuploads,
  15. tbl_service, tbl_unit, tbl_unitlocation, tbl_unitpage, tbl_webpages
  16.  
  17. Table tbl_journalists columns: intJournalistID, strJournalistFirstName, strJournalistInitial, strJournalistLastName, strJournalistRank
  18.  
  19. Table tbl_journalists data:
  20.  
  21. ID FirstName LastName Rank
  22.  
  23. 1 John Angelo Sgt.
  24. 2 Daniel Ewer Master Sgt.
  25. 3 Rich Kemp Master Sgt.
  26. 4 Patrick Loch Sgt.
  27. 5 Dajon Ferrell Sgt.
  28. 6 Eric Jungels Staff Sgt.
  29. 7 Public Affairs
  30. 8 Melanie Nelson 2nd Lt.
  31. 9 Ben Houtkooper Staff Sgt.
  32. 10 Davin Fischer 1st Lt.
  33. 11 Stacey Mosher Sgt.
  34.  
  35. ====================================
  36. = https://twitter.com/m0m_r00tw0rm =
  37. ====================================

http://pastebin.com/njJ3U22z

Comments