| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <271526.77507.qm@web121506.mail.ne1.yahoo.com>
Date: Sat, 7 May 2011 06:23:44 -0700 (PDT)
From: Xa Buri <xaburi@...oo.com>
To: full-disclosure@...ts.grok.org.uk
Cc: info@...yteam.com
Subject: Re: CCAvenue.com Payment Gateway Vulnerable SQL
Injection UPDATE
This is so friggin hilarious:
> Wed May 4 17:22:55 BST 2011 d3hydr8 D
d3hydr8 at hotmail.com
> [ + ] Date: Sat Dec 4 10:47:33 2010
-----------------------------------------------------------
> Fri May 6 17:33:59 BST 2011 d3hydr8 D
d3hydr8 at hotmail.com
> [ + ] Date: Tue May 3 04:47:33 2011
-----------------------------------------------------------
> Fri May 6 17:55:10 BST 2011 iSpy Team
info at ispyteam.com
> [ + ] Date: Wed May 3 04:47:33 2011
-----------------------------------------------------------
> Sat May 7 03:47:30 BST 2011 d3hydr8 D
d3hydr8 at hotmail.com
> [ + ] Date: Wed May 3 04:47:33 2011
So who finally did it and when? ispy or d3hydr8? and I still don't buy the whole SQL Injection theory. There is no proof. Looks more like an insider dump.
On Sat, May 7, 2011 at 12:33 AM, d3hydr8 D <d3hydr8@...mail.com> wrote:
> ******************************************************************
> (+) Authors : d3hydr8
> (+) WebSite : darkode.com
> (+) Date : 06.05.2011
> (+) Hour : 08:21 AM
> (+) Targets : CCAvenue.com (Payment Gateway)
> (+) Document: ESA.int Full Disclosure (UPDATED)
> (+) Method : Hidden SQL Injection
> ******************************************************************
>
>
--------------------------------------------------------------------------------------------------------
>
> [ + ] Date: Wed May 3 04:47:33 2011
> [ + ] Displaying information about MSSQL host !
>
> [ + ] @@VERSION : Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86)
> Nov 24 2008 13:01:59
>
> Copyright (c) 1988-2005 Microsoft Corporation
> Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
>
> [ + ] USER () : iusr_ccavenueiusr_ccavenue
> [ + ] S_USER () : iusr_ccavenue
>
> [ + ] DB_NAME () : gateway
> [ + ] HOST_NAME () : AV-2
> [ + ] SERVER_NAME () : AVDB-3
> [ + ] SERVER_TYPE () : Apache/2.2.14 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5 mod_jk/1.2.28
> [ + ] X-POWERED-By () : Servlet 2.5; JBoss-5.0/JBossWeb-2.1
>
> [ + ] IP_ADDRESS_INFO : 124.153.83.27
>
----------------------------------------------------------------------------------------------------------
>
> [ + ] Displaying list of databases on this MSSQL host !
>
> [ DATABASE: 0 ] : gateway
> [ DATABASE: 1 ] : master
> [ DATABASE: 2 ] : tempdb
> [ DATABASE: 3 ] : model
> [ DATABASE: 4 ] : msdb
> [ DATABASE: 5 ] : Reseller
> ---------------------------------------------------------------------
>
> [ DATABASE: 0 ] : gateway
>
> [ + ] Displaying Tables inside DB:
>
> [ TABLES: 0 ] : addl_merchant_details
> [ TABLES: 1 ] : admin_details
> [ TABLES: 2 ] : Admn_dept_roles
> [ TABLES: 3 ] : Admn_depts
> [ TABLES: 4 ] : Admn_prvlg_grps
> [ TABLES: 5 ] : Admn_prvlgs
>
> [ TABLES: 6 ] : Admn_role_prvlgs
> [ TABLES: 7 ] : Admn_roles
> [ TABLES: 8 ] : Admn_user_prvlgs
> [ TABLES: 9 ] : Admn_users
>
[ TABLES: 10 ] : amex_cc_details
> [ TABLES: 11 ] : AMEX_CCDETAILS
>
> [ TABLES: 12 ] : amex_mer_details
> [ TABLES: 13 ] : amtShopperCart
> [ TABLES: 14 ] : amtShopperCart_MMT
> [ TABLES: 15 ] : auctionPayment
> [ TABLES: 16 ] : Auto_cancel
>
> [ TABLES: 17 ] : Bop_bank
> [ TABLES: 18 ] : callcenter_user_login_history
> [ TABLES: 19 ] : ccav_default_charges
> [ TABLES: 20 ] : Ccav_genid
> [ TABLES: 21 ] : Ccav_links
>
> [ TABLES: 22 ] : ccav_merchant_options
> [ TABLES: 23 ] : ccav_payout_allocated_keys
> [ TABLES: 24 ] : ccav_payout_credit_logs
> [ TABLES: 25 ] : ccav_payout_credits
> [ TABLES: 26 ] : ccav_payout_credits_realtime_
>
> [ TABLES: 27 ] : ccav_payout_debits
> [ TABLES: 28 ] : ccav_payout_debits_realtime_bkp
> [ TABLES: 29 ] : ccav_payout_details
> [ TABLES: 30 ] :
ccav_payout_details_10MAY2010
> [ TABLES: 31 ] : ccav_payout_details_10OCT2010
>
> [ TABLES: 32 ] : ccav_payout_details_12AUG2010
> [ TABLES: 33 ] : ccav_payout_details_temp
> [ TABLES: 34 ] : ccav_payout_summaries_10MAY2010
> [ TABLES: 35 ] : ccav_payout_summaries_10OCT2010
>
> [ TABLES: 36 ] : ccav_payout_summaries_12AUG2010
> [ TABLES: 37 ] : ccav_payout_summaries_temp
> [ TABLES: 38 ] : ccav_pending_authorizations
> [ TABLES: 39 ] : ccav_pending_authorizations_20100918
>
> [ TABLES: 40 ] : ccav_pending_authorizations_20100924
> [ TABLES: 41 ] : ccav_recon_sheets
> [ TABLES: 42 ] : ccav_recon_sheets_20100918
> [ TABLES: 43 ] : ccav_recon_sheets_20100924
>
> [ TABLES: 44 ] : Ccav_sms_providers
> [ TABLES: 45 ] : CCAV_tracking_ids
> [ TABLES: 46 ] : CCAV_tracking_ids_20100918
> [ TABLES: 47 ] : ccav_tracking_ids_20100924
>
[ TABLES: 48 ] : ccav_trans_status_logs
>
> [ TABLES: 49 ] : CCAV_transactions
> [ TABLES: 50 ] : CCAV_transactions_20100918
> [ TABLES: 51 ] : ccav_transactions_20100924
> [ TABLES: 52 ] : CCAV_transactions_logs
> [ TABLES: 53 ] : CCAV_transactions_logs_20100918
>
> [ TABLES: 54 ] : ccav_transactions_logs_20100924
> [ TABLES: 55 ] : ccav_transactions_realtime_bkp
> [ TABLES: 56 ] : ccavenue_scheduler_logs
> [ TABLES: 57 ] : centurion_debit
> [ TABLES: 58 ] : Chrc_contact_dets
>
> [ TABLES: 59 ] : Chrc_contact_dets_20100918
> [ TABLES: 60 ] : Chrc_feedback_dets
> [ TABLES: 61 ] : Chrc_feedback_dets_20100918
> [ TABLES: 62 ] : Chrc_reasons
> [ TABLES: 63 ] : Chrc_reasons_20100918
>
> [ TABLES: 64 ] : Chrc_srch_dets
> [ TABLES: 65 ] : Chrc_srch_dets_20100918
> [ TABLES: 66 ] : Citi_TxtLog_Child
> [ TABLES: 67 ] :
Citi_TxtLog_Parent
> [ TABLES: 68 ] : citibank_cc_details
>
> [ TABLES: 69 ] : citibank_log
> [ TABLES: 70 ] : citibank_wkey
> [ TABLES: 71 ] : COMMISSION
> [ TABLES: 72 ] : Commission_log
> [ TABLES: 73 ] : countries
> [ TABLES: 74 ] : country
>
> [ TABLES: 75 ] : country_ip
> [ TABLES: 76 ] : cpa_20100924
> [ TABLES: 77 ] : crs_20100924
> [ TABLES: 78 ] : ct_20100918
> [ TABLES: 79 ] : ct_20100924
> [ TABLES: 80 ] : ct_20101005
>
> [ TABLES: 81 ] : ctl_20100924
> [ TABLES: 82 ] : custShopCart
> [ TABLES: 83 ] : custShopCart_20100918
> [ TABLES: 84 ] : custshopcart_20100924
> [ TABLES: 85 ] : custShopperCart
>
> [ TABLES: 86 ] : DB_SCHEMA
> [ TABLES: 87 ] : Deprecated_Payment_Invoice
> [ TABLES: 88 ] : Deprecated_Payment_Invoice_Logs
> [ TABLES: 89 ] : Dr_Cr_Notes
> [ TABLES: 90 ] :
dtproperties
>
> [ TABLES: 91 ] : dummy_shopper_details
> [ TABLES: 92 ] : Error_logs
> [ TABLES: 93 ] : FAQ
> [ TABLES: 94 ] : fc_20100924
> [ TABLES: 95 ] : federal_bank
> [ TABLES: 96 ] : fraud_category
>
> [ TABLES: 97 ] : fraud_check
> [ TABLES: 98 ] : fraud_check_20100918
> [ TABLES: 99 ] : fraud_check_20100924
> [ TABLES: 100 ] : fraud_SubCategory
> [ TABLES: 101 ] : fraudCategory
>
> [ TABLES: 102 ] : gatewayList
> [ TABLES: 103 ] : Gen_cities
> [ TABLES: 104 ] : Gen_countries
> [ TABLES: 105 ] : Gen_states
> [ TABLES: 106 ] : gtb_bank
> [ TABLES: 107 ] : Gtw_activities
>
> [ TABLES: 108 ] : gtw_countries
> [ TABLES: 109 ] : gtw_regions
> [ TABLES: 110 ] : hdfc_debit
> [ TABLES: 111 ] : high_risk_con
> [ TABLES: 112 ] : icici_bank
> [ TABLES: 113 ] : ICICI_CC_DETAILS
>
> [
TABLES: 114 ] : idbi_bank
> [ TABLES: 115 ] : InvoiceDetails_logs
> [ TABLES: 116 ] : IVRS_CallCenter_ActiveHistory
> [ TABLES: 117 ] : IVRS_CallCenter_Users
> [ TABLES: 118 ] : JCB_CCDETAILS
>
> [ TABLES: 119 ] : jiaozhu
> [ TABLES: 120 ] : liveGateways
> [ TABLES: 121 ] : log_details
> [ TABLES: 122 ] : M_activities
> [ TABLES: 123 ] : M_activity_logs
> [ TABLES: 124 ] : Mall_categories
>
> [ TABLES: 125 ] : Mall_webstores
> [ TABLES: 126 ] : Mall_webstores_categories
> [ TABLES: 127 ] : Master_Bin
> [ TABLES: 128 ] : merchant_bank_details
> [ TABLES: 129 ] : merchant_bank_details_20100918
>
> [ TABLES: 130 ] : merchant_bank_details_20100924
> [ TABLES: 131 ] : Merchant_bank_details_bkup
> [ TABLES: 132 ] : merchant_follow_ups
> [ TABLES: 133 ] : merchant_follow_ups_20100918
>
> [ TABLES: 134 ] :
merchant_follow_ups_20100924
> [ TABLES: 135 ] : merchant_ivrs_options
> [ TABLES: 136 ] : MERCHANT_PAGE_CUSTOMIZE
> [ TABLES: 137 ] : merchant_pay_mode
> [ TABLES: 138 ] : merchant_pay1
>
> [ TABLES: 139 ] : merchant_pay1_20100918
> [ TABLES: 140 ] : merchant_recon
> [ TABLES: 141 ] : MERCHANT_REGISTRATION
> [ TABLES: 142 ] : MERCHANT_REGISTRATION_20100918
> [ TABLES: 143 ] : merchant_registration_20100924
>
> [ TABLES: 144 ] : MERCHANT_REQS
> [ TABLES: 145 ] : MERCHANT_REQS_20100918
> [ TABLES: 146 ] : merchant_reqs_20100924
> [ TABLES: 147 ] : merchant_upload_options
> [ TABLES: 148 ] : ncm_risk_analysis
>
> [ TABLES: 149 ] : nodal_bank_payouts
> [ TABLES: 150 ] : nodal_bank_payouts_10MAY2010
> [ TABLES: 151 ] : nodal_bank_payouts_10OCT2010
> [ TABLES: 152 ] : nodal_bank_payouts_12AUG2010
>
> [ TABLES: 153 ] :
order_details
> [ TABLES: 154 ] : panb_20100924
> [ TABLES: 155 ] : panbl_20100924
> [ TABLES: 156 ] : pangolin_test_table
> [ TABLES: 157 ] : pay_data
>
> [ TABLES: 158 ] : pay_list
> [ TABLES: 159 ] : payment_codes
> [ TABLES: 160 ] : payment_details
> [ TABLES: 161 ] : payment_details_20100918
> [ TABLES: 162 ] : pci_20100924
>
> [ TABLES: 163 ] : PG_activities
> [ TABLES: 164 ] : PG_all_net_bank_logs
> [ TABLES: 165 ] : PG_all_net_bank_logs_20100918
> [ TABLES: 166 ] : PG_all_net_banks
> [ TABLES: 167 ] : PG_all_net_banks_20100918
>
> [ TABLES: 168 ] : PG_amex_tran_details
> [ TABLES: 169 ] : PG_amex_transactions
> [ TABLES: 170 ] : PG_bank_card_types
> [ TABLES: 171 ] : pg_bob_bank
> [ TABLES: 172 ] : PG_bps_tran_details
>
> [ TABLES: 173 ] : PG_bps_trans
> [ TABLES: 174 ] :
PG_canb_tran_details
> [ TABLES: 175 ] : PG_canb_tran_details_20100918
> [ TABLES: 176 ] : PG_canb_tran_details_20100924
> [ TABLES: 177 ] : PG_canb_trans
>
> [ TABLES: 178 ] : PG_canb_trans_20100918
> [ TABLES: 179 ] : PG_canb_trans_20100924
> [ TABLES: 180 ] : PG_card_details
> [ TABLES: 181 ] : PG_card_details_20100918
> [ TABLES: 182 ] : pg_card_details_20100924
>
> [ TABLES: 183 ] : pg_card_details_bkp
> [ TABLES: 184 ] : PG_card_details_linux
> [ TABLES: 185 ] : PG_cc_log
> [ TABLES: 186 ] : PG_citibank_inr_files
> [ TABLES: 187 ] : PG_citibank_inrs
>
> [ TABLES: 188 ] : PG_citibank_inrs_20100918
> [ TABLES: 189 ] : PG_citibank_inrs_logs
> [ TABLES: 190 ] : PG_citibank_inrs_trans
> [ TABLES: 191 ] : PG_citibank_inrs_trans_20100918
>
> [ TABLES: 192 ] : PG_COMM_BANKS
> [ TABLES: 193 ] : PG_comm_merchants
>
[ TABLES: 194 ] : PG_cop_bank
> [ TABLES: 195 ] : PG_cop_bank_20100918
> [ TABLES: 196 ] : pg_cust_debit_details
>
> [ TABLES: 197 ] : pg_cust_debit_details_20100918
> [ TABLES: 198 ] : pg_customer_bank_acc_no
> [ TABLES: 199 ] : pg_customer_bank_acc_no_20100918
> [ TABLES: 200 ] : PG_eca_net_bank_logs
>
> [ TABLES: 201 ] : PG_eca_net_banks
> [ TABLES: 202 ] : PG_gateway_param_logs
> [ TABLES: 203 ] : PG_gateway_params
> [ TABLES: 204 ] : PG_gateways
> [ TABLES: 205 ] : PG_hdfc_tran_details
>
> [ TABLES: 206 ] : PG_hdfc_trans
> [ TABLES: 207 ] : PG_icici_tran_details
> [ TABLES: 208 ] : PG_icici_tran_details_20100918
> [ TABLES: 209 ] : PG_icici_trans
> [ TABLES: 210 ] : PG_icici_trans_20100918
>
> [ TABLES: 211 ] : PG_icici_trans_20100924
> [ TABLES: 212 ] : pg_icicimigs_tran_details
> [ TABLES: 213 ] :
pg_icicimigs_trans
> [ TABLES: 214 ] : PG_itz_tran_details
> [ TABLES: 215 ] : PG_itz_tran_details_20100918
>
> [ TABLES: 216 ] : PG_itz_tran_details_20100924
> [ TABLES: 217 ] : PG_itz_trans
> [ TABLES: 218 ] : PG_itz_trans_20100918
> [ TABLES: 219 ] : PG_itz_trans_20100924
> [ TABLES: 220 ] : PG_kvb_bank
>
> [ TABLES: 221 ] : pg_kvb_bank_20100918
> [ TABLES: 222 ] : pg_lvb_bank
> [ TABLES: 223 ] : PG_maxmind
> [ TABLES: 224 ] : PG_Merchant_Gateway_Params
> [ TABLES: 225 ] : PG_Merchant_Gateways
>
> [ TABLES: 226 ] : PG_merchant_options
> [ TABLES: 227 ] : PG_mobile_details
> [ TABLES: 228 ] : PG_net_bank_logs
> [ TABLES: 229 ] : PG_net_bank_logs_20100918
> [ TABLES: 230 ] : PG_net_banks
>
> [ TABLES: 231 ] : PG_net_banks_20100918
> [ TABLES: 232 ] : PG_net_indus_logs
> [ TABLES: 233 ] :
PG_net_indus_logs_20100918
> [ TABLES: 234 ] : PG_net_indus_logs_20100924
> [ TABLES: 235 ] : PG_net_kotak_ref_files
>
> [ TABLES: 236 ] : PG_net_kotak_refs
> [ TABLES: 237 ] : PG_net_kotak_responses
> [ TABLES: 238 ] : PG_net_kotak_responses_20100918
> [ TABLES: 239 ] : PG_net_kotak_responses_20100924
>
> [ TABLES: 240 ] : PG_oss_done_card_tran_details
> [ TABLES: 241 ] : PG_oss_done_card_trans
> [ TABLES: 242 ] : PG_oss_rds_tran_details
> [ TABLES: 243 ] : PG_oss_rds_trans
> [ TABLES: 244 ] : PG_paygate_tran_details
>
> [ TABLES: 245 ] : PG_paygate_tran_details_20100918
> [ TABLES: 246 ] : PG_paygate_transactions
> [ TABLES: 247 ] : PG_paygate_transactions_20100918
> [ TABLES: 248 ] : PG_paygate_transactions_20100924
>
> [ TABLES: 249 ] : PG_paymate_tran_details
> [ TABLES: 250 ] : PG_paymate_tran_details_20100918
> [
TABLES: 251 ] : PG_paymate_tran_details_20100924
> [ TABLES: 252 ] : PG_paymate_trans
>
> [ TABLES: 253 ] : PG_paymate_trans_20100918
> [ TABLES: 254 ] : PG_paymate_trans_20100924
> [ TABLES: 255 ] : PG_pex_tran_details
> [ TABLES: 256 ] : PG_pex_trans
> [ TABLES: 257 ] : PG_pnb_bank
>
> [ TABLES: 258 ] : PG_pnb_bank_20100918
> [ TABLES: 259 ] : PG_sbi_net_bank_logs
> [ TABLES: 260 ] : PG_sbi_net_bank_logs_20100918
> [ TABLES: 261 ] : PG_sbi_net_banks
> [ TABLES: 262 ] : PG_sbi_net_banks_20100918
>
> [ TABLES: 263 ] : PG_tc_logs
> [ TABLES: 264 ] : PG_transaction_details_temp_old
> [ TABLES: 265 ] : PG_uni_bank
> [ TABLES: 266 ] : PG_uni_bank_20100918
> [ TABLES: 267 ] : pg_uti_tran_details
>
> [ TABLES: 268 ] : pg_uti_tran_details_20100918
> [ TABLES: 269 ] : pg_uti_tran_details_20100924
> [ TABLES: 270 ] :
pg_uti_trans
> [ TABLES: 271 ] : pg_uti_trans_20100918
> [ TABLES: 272 ] : pg_uti_trans_20100924
>
> [ TABLES: 273 ] : PG_visa_mpi
> [ TABLES: 274 ] : pit_20100924
> [ TABLES: 275 ] : pitd_20100924
> [ TABLES: 276 ] : pnb_20100924
> [ TABLES: 277 ] : pnbl_20100924
> [ TABLES: 278 ] : pptd_20100924
>
> [ TABLES: 279 ] : productMaster
> [ TABLES: 280 ] : productOptions
> [ TABLES: 281 ] : psnb_20100924
> [ TABLES: 282 ] : psnbl_20100924
> [ TABLES: 283 ] : realtime_logs
>
> [ TABLES: 284 ] : rechargeitnow
> [ TABLES: 285 ] : recon_details
> [ TABLES: 286 ] : ref_20100924
> [ TABLES: 287 ] : ref_temp
> [ TABLES: 288 ] : refund_mailcontent_info
>
> [ TABLES: 289 ] : Refunds
> [ TABLES: 290 ] : Refunds_20100918
> [ TABLES: 291 ] : refunds_20100924
> [ TABLES: 292 ] : reqtype_links
> [ TABLES: 293 ]
: RTGS_Banks
> [ TABLES: 294 ] : sbid_genid
>
> [ TABLES: 295 ] : sbid_refunds
> [ TABLES: 296 ] : ScrollNews
> [ TABLES: 297 ] : sd_temp
> [ TABLES: 298 ] : SendInvoiceDetails
> [ TABLES: 299 ] : SendInvoiceDetails_20100918
>
> [ TABLES: 300 ] : SendInvoiceDetails_20100924
> [ TABLES: 301 ] : Ser_tax_Month_report
> [ TABLES: 302 ] : ServiceTax
> [ TABLES: 303 ] : ServiceTax_rate
> [ TABLES: 304 ] : SETUP_FEE
>
> [ TABLES: 305 ] : shopmall_bank_info
> [ TABLES: 306 ] : shopper_details
> [ TABLES: 307 ] : shoppers_view
> [ TABLES: 308 ] : sms_billing
> [ TABLES: 309 ] : sms_billing_20100918
>
> [ TABLES: 310 ] : sms_billing_20100924
> [ TABLES: 311 ] : Statusfield_values
> [ TABLES: 312 ] : suspense_account
> [ TABLES: 313 ] : sysdiagrams
> [ TABLES: 314 ] : sysobj
>
> [ TABLES: 315 ] :
syssegment
> [ TABLES: 316 ] : t_ref
> [ TABLES: 317 ] : t_sd
> [ TABLES: 318 ] : tab1
> [ TABLES: 319 ] : tab2
> [ TABLES: 320 ] : tab3
> [ TABLES: 321 ] : tab33
>
> [ TABLES: 322 ] : tab4
> [ TABLES: 323 ] : tab5
> [ TABLES: 324 ] : tc_logs_20100924
> [ TABLES: 325 ] : TC_merchant_id
> [ TABLES: 326 ] : TC_order_logs
> [ TABLES: 327 ] : temp_payout
>
> [ TABLES: 328 ] : TEMPTC
> [ TABLES: 329 ] : test_logs
> [ TABLES: 330 ] : tmp4
> [ TABLES: 331 ] : to_be_refunded
> [ TABLES: 332 ] : to_be_refunded_r
> [ TABLES: 333 ] : trackingId_view
>
> [ TABLES: 334 ] : trackingId_view1
> [ TABLES: 335 ] : Transaction_Details
> [ TABLES: 336 ] : Transaction_Details_new
> [ TABLES: 337 ] : Transecute_Mer
> [ TABLES: 338 ] : USER_ADMIN
>
> [ TABLES: 339 ] : uti_bank
> [ TABLES: 340 ] :
Vi_err
> [ TABLES: 341 ] : virtual_settings
> [ TABLES: 342 ] : virtual_terminal
> [ TABLES: 343 ] : VisaMerchants
> [ TABLES: 344 ] :
> vw_index_list--------------------------------------------------------------------------------------------
>
> Admn_users
>
> adu_id adu_user adu_pwd adu_status dept_id remote_access mobile_number
> Acc1003 accounts acct7 () ind A Acc Y
> Acc1005 regina reg2004 A Acc
> Acc1026 smita mylord786 A Acc Y 9869033872
> Acc1041 Risk Risk A Acc
> Acc1042 Nandu Sarada1306 A Acc Y
> Acc1043 ganesh ganesh1!2 A Acc Y 9820501510
> Acc1044 yashwant yashwant1!3 A Acc Y 9820770507
> Acc1045 Ujwala Ujwala1!4 A Acc Y
> Acc1046 Kajal Kajal1!5 A Acc
> Acc1047 Sachinm Sachinm1!6 A Acc
> Acc1048 Amitk Amitk1!7 A Acc
> Acc1049 Ashlesha Ashlesha 1!8 A Acc
> Acc1050 ravindra ravindra1!9 A Acc
> Acc1051 varun
varun1!10 A Acc
> Acc1052 reena reena1!11 A Acc
> Acc1058 Sarika Sarika A Acc
> Acc1059 Nitin nitin786 A Acc
> Acc1060 Bharati 135Bharati A Acc
> Acc1061 Kavitha Kavitha A Acc
> Acc1062 Shallu 975Shalini! A Acc
> Acc1063 Sandesh !Sandesh184 A Acc
> Acc1065 Prathamesh XXXXXXXX A Acc
> Acc1066 kTushar tu5harka1 A Acc
> Acc1073 ptaccount testtest123 A Acc Y
> Acc1074 pttest testtest123 A Acc Y
> Acc1075 RajAbhay @bh () y!#% A Acc
> Acc1079 Ashish ashish A Acc
> Mkt1008 susan susan12345 A Mkt
> Mkt1025 Rakhi W!LL! () M$ A Acc
> Mkt1030 maria maria456 A Mkt
> Mkt1036 swati XXXXXXXX A Mkt
> Mkt1048 Deepika dipk () !@ A Acc
> Mkt1049 Priya PRIYA () 12345 A Acc
> Mkt1051 SSachin SSac@@7 A Mkt
> Mkt1055 Pankaj panki777 A Mkt
> Mkt1056 ptmarketing mkttest123 A Mkt Y
> Mkt1065 pthema mkttest123 A Mkt Y
> Mkt1066 Urmi
urmi28 A Mkt
> Mkt1067 Davina Davina135 A Mkt
> Mkt1068 Aarti XXXXXXXX A Mkt
> Mkt1069 vivekn vivek123 A Mkt Y
> Mkt1070 Trupti trusai$7 A Mkt
> Mkt1071 ArunJ Runsun1234 A Mkt
> Mkt1072 Hershel XXXXXXXX A Mkt
> Mkt1073 Lata Lata147 A Mkt
> Mkt1075 DChirag XXXXXXXX A Mkt
> Mkt1076 GDikshita xxxxxxxx N Mkt
> Mkt1077 MukeshM xxxxxxxx N Mkt
> Mkt1078 test test123 A Mkt
> Mkt1081 Deepa d33pa A Mkt Y
> Mkt1082 Uzma @njum A Mkt Y
> SA1001 admin J () stAm@...g A SA Y 9819453377
> SA1027 vishwas ccav! () #$ A SA Y
> SA1080 Anupama S () lv!@ A SA
> Tec1013 laxmikant ammalaxmi123 A Tec Y 9930343594
> Tec1020 govind logoutgovind A Tec Y 9821907585
> Tec1028 rohit solaris123 A Tec Y
> Tec1029 Noor ccavenue A Tec Y
> Tec1031 Agnes agnes007 A Tec Y 9867487955
> Tec1037 Mehjbin querypass A Tec Y
> Tec1039 vivek viv123ek A Tec
>
Tec1043 sunil suNil789 A Tec
> Tec1044 Govindraj govind () raj A Tec
> Tec1045 Shahul xxxxxxxx A Tec
> Tec1046 anuja $anuja$123 A Tec
> Tec1047 ashwini ash! () #wini A Tec
> Tec1052 PriyaS xxxxxxxx A Tec
> Tec1053 Pravin pravin123 A Tec
>
> --------------------------------------------------------------------------------------
>
> Kindly disregard the previous report. I got the date all mixed up.
>
> Thanks, :)
>
> d3hydr8
>
>
>
> --------------------------------------------------------------------------------------
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20110507/d17aac1c/attachment-0001.html
------------------------------
Message: 3
Date: Sat, 7 May 2011 15:23:07 +0530
From: w0lf <w0lfd33m@...il.com>
Subject: Re: [Full-disclosure] CCAvenue.com Payment Gateway Vulnerable
SQL Injection UPDATE
To: full-disclosure@...ts.grok.org.uk
Message-ID: <BANLkTinmLvpY-27Suk+ObqB3Q-h519szhA@...l.gmail.com>
Content-Type: text/plain; charset="utf-8"
Hi
The company CEO denies the attack & claims that the images posted are fake
:)
http://packetstormsecurity.org/news/view/19110/CCAvenue-Denies-Hacking-Attack.html
~w0lf
On Sat, May 7, 2011 at 11:36 AM, CnCxzSec?? <cncxzhack@...il.com> wrote:
> [ TABLES: 119 ] : jiaozhu
>
>
> table `jiaozhu` was made by the auto sql inject tool HDSI for a temp use...
>
>
> aparently this sql injection point have been f*cked by a chinese hacker before(maybe long long time
ago)..:)
>
>
>
> On Sat, May 7, 2011 at 12:33 AM, d3hydr8 D <d3hydr8@...mail.com> wrote:
>
>> ******************************************************************
>> (+) Authors : d3hydr8
>> (+) WebSite : darkode.com
>> (+) Date : 06.05.2011
>> (+) Hour : 08:21 AM
>> (+) Targets : CCAvenue.com (Payment Gateway)
>> (+) Document: ESA.int Full Disclosure (UPDATED)
>> (+) Method : Hidden SQL Injection
>> ******************************************************************
>>
>> --------------------------------------------------------------------------------------------------------
>>
>> [ + ] Date: Wed May 3 04:47:33 2011
>> [ + ] Displaying information about MSSQL host !
>>
>> [ + ] @@VERSION
: Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86)
>> Nov 24 2008 13:01:59
>>
>> Copyright (c) 1988-2005 Microsoft Corporation
>> Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
>>
>> [ + ] USER () : iusr_ccavenueiusr_ccavenue
>> [ + ] S_USER () : iusr_ccavenue
>>
>> [ + ] DB_NAME () : gateway
>> [ + ] HOST_NAME () : AV-2
>> [ + ] SERVER_NAME () : AVDB-3
>> [ + ] SERVER_TYPE () : Apache/2.2.14 (Unix) mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5 mod_jk/1.2.28
>> [ + ] X-POWERED-By () : Servlet 2.5; JBoss-5.0/JBossWeb-2.1
>>
>> [ + ] IP_ADDRESS_INFO : 124.153.83.27
>> ----------------------------------------------------------------------------------------------------------
>>
>> [ + ] Displaying list of databases on this MSSQL host !
>>
>> [
DATABASE: 0 ] : gateway
>> [ DATABASE: 1 ] : master
>> [ DATABASE: 2 ] : tempdb
>> [ DATABASE: 3 ] : model
>> [ DATABASE: 4 ] : msdb
>> [ DATABASE: 5 ] : Reseller
>> ---------------------------------------------------------------------
>>
>> [ DATABASE: 0 ] : gateway
>>
>> [ + ] Displaying Tables inside DB:
>>
>> [ TABLES: 0 ] : addl_merchant_details
>> [ TABLES: 1 ] : admin_details
>> [ TABLES: 2 ] : Admn_dept_roles
>> [ TABLES: 3 ] : Admn_depts
>> [ TABLES: 4 ] : Admn_prvlg_grps
>> [ TABLES: 5 ] : Admn_prvlgs
>>
>> [ TABLES: 6 ] : Admn_role_prvlgs
>> [ TABLES: 7 ] : Admn_roles
>> [ TABLES: 8 ] : Admn_user_prvlgs
>> [ TABLES: 9 ] : Admn_users
>> [ TABLES: 10 ] : amex_cc_details
>> [ TABLES: 11 ] : AMEX_CCDETAILS
>>
>> [
TABLES: 12 ] : amex_mer_details
>> [ TABLES: 13 ] : amtShopperCart
>> [ TABLES: 14 ] : amtShopperCart_MMT
>> [ TABLES: 15 ] : auctionPayment
>> [ TABLES: 16 ] : Auto_cancel
>>
>> [ TABLES: 17 ] : Bop_bank
>> [ TABLES: 18 ] : callcenter_user_login_history
>> [ TABLES: 19 ] : ccav_default_charges
>> [ TABLES: 20 ] : Ccav_genid
>> [ TABLES: 21 ] : Ccav_links
>>
>> [ TABLES: 22 ] : ccav_merchant_options
>> [ TABLES: 23 ] : ccav_payout_allocated_keys
>> [ TABLES: 24 ] : ccav_payout_credit_logs
>> [ TABLES: 25 ] : ccav_payout_credits
>> [ TABLES: 26 ] : ccav_payout_credits_realtime_
>>
>> [ TABLES: 27 ] : ccav_payout_debits
>> [ TABLES: 28 ] : ccav_payout_debits_realtime_bkp
>> [ TABLES: 29 ] : ccav_payout_details
>> [ TABLES: 30 ] :
ccav_payout_details_10MAY2010
>> [ TABLES: 31 ] : ccav_payout_details_10OCT2010
>>
>> [ TABLES: 32 ] : ccav_payout_details_12AUG2010
>> [ TABLES: 33 ] : ccav_payout_details_temp
>> [ TABLES: 34 ] : ccav_payout_summaries_10MAY2010
>> [ TABLES: 35 ] : ccav_payout_summaries_10OCT2010
>>
>> [ TABLES: 36 ] : ccav_payout_summaries_12AUG2010
>> [ TABLES: 37 ] : ccav_payout_summaries_temp
>> [ TABLES: 38 ] : ccav_pending_authorizations
>> [ TABLES: 39 ] : ccav_pending_authorizations_20100918
>>
>> [ TABLES: 40 ] : ccav_pending_authorizations_20100924
>> [ TABLES: 41 ] : ccav_recon_sheets
>> [ TABLES: 42 ] : ccav_recon_sheets_20100918
>> [ TABLES: 43 ] : ccav_recon_sheets_20100924
>>
>> [ TABLES: 44 ] : Ccav_sms_providers
>> [ TABLES: 45 ] : CCAV_tracking_ids
>> [ TABLES: 46 ] :
CCAV_tracking_ids_20100918
>> [ TABLES: 47 ] : ccav_tracking_ids_20100924
>> [ TABLES: 48 ] : ccav_trans_status_logs
>>
>> [ TABLES: 49 ] : CCAV_transactions
>> [ TABLES: 50 ] : CCAV_transactions_20100918
>> [ TABLES: 51 ] : ccav_transactions_20100924
>> [ TABLES: 52 ] : CCAV_transactions_logs
>> [ TABLES: 53 ] : CCAV_transactions_logs_20100918
>>
>> [ TABLES: 54 ] : ccav_transactions_logs_20100924
>> [ TABLES: 55 ] : ccav_transactions_realtime_bkp
>> [ TABLES: 56 ] : ccavenue_scheduler_logs
>> [ TABLES: 57 ] : centurion_debit
>> [ TABLES: 58 ] : Chrc_contact_dets
>>
>> [ TABLES: 59 ] : Chrc_contact_dets_20100918
>> [ TABLES: 60 ] : Chrc_feedback_dets
>> [ TABLES: 61 ] : Chrc_feedback_dets_20100918
>> [ TABLES: 62 ] : Chrc_reasons
>> [ TABLES: 63 ] :
Chrc_reasons_20100918
>>
>> [ TABLES: 64 ] : Chrc_srch_dets
>> [ TABLES: 65 ] : Chrc_srch_dets_20100918
>> [ TABLES: 66 ] : Citi_TxtLog_Child
>> [ TABLES: 67 ] : Citi_TxtLog_Parent
>> [ TABLES: 68 ] : citibank_cc_details
>>
>> [ TABLES: 69 ] : citibank_log
>> [ TABLES: 70 ] : citibank_wkey
>> [ TABLES: 71 ] : COMMISSION
>> [ TABLES: 72 ] : Commission_log
>> [ TABLES: 73 ] : countries
>> [ TABLES: 74 ] : country
>>
>> [ TABLES: 75 ] : country_ip
>> [ TABLES: 76 ] : cpa_20100924
>> [ TABLES: 77 ] : crs_20100924
>> [ TABLES: 78 ] : ct_20100918
>> [ TABLES: 79 ] : ct_20100924
>> [ TABLES: 80 ] : ct_20101005
>>
>> [ TABLES: 81 ] : ctl_20100924
>> [ TABLES: 82 ] : custShopCart
>> [ TABLES: 83 ] : custShopCart_20100918
>> [ TABLES: 84 ] :
custshopcart_20100924
>> [ TABLES: 85 ] : custShopperCart
>>
>> [ TABLES: 86 ] : DB_SCHEMA
>> [ TABLES: 87 ] : Deprecated_Payment_Invoice
>> [ TABLES: 88 ] : Deprecated_Payment_Invoice_Logs
>> [ TABLES: 89 ] : Dr_Cr_Notes
>> [ TABLES: 90 ] : dtproperties
>>
>> [ TABLES: 91 ] : dummy_shopper_details
>> [ TABLES: 92 ] : Error_logs
>> [ TABLES: 93 ] : FAQ
>> [ TABLES: 94 ] : fc_20100924
>> [ TABLES: 95 ] : federal_bank
>> [ TABLES: 96 ] : fraud_category
>>
>> [ TABLES: 97 ] : fraud_check
>> [ TABLES: 98 ] : fraud_check_20100918
>> [ TABLES: 99 ] : fraud_check_20100924
>> [ TABLES: 100 ] : fraud_SubCategory
>> [ TABLES: 101 ] : fraudCategory
>>
>> [ TABLES: 102 ] : gatewayList
>> [ TABLES: 103 ] : Gen_cities
>> [ TABLES: 104 ] :
Gen_countries
>> [ TABLES: 105 ] : Gen_states
>> [ TABLES: 106 ] : gtb_bank
>> [ TABLES: 107 ] : Gtw_activities
>>
>> [ TABLES: 108 ] : gtw_countries
>> [ TABLES: 109 ] : gtw_regions
>> [ TABLES: 110 ] : hdfc_debit
>> [ TABLES: 111 ] : high_risk_con
>> [ TABLES: 112 ] : icici_bank
>> [ TABLES: 113 ] : ICICI_CC_DETAILS
>>
>> [ TABLES: 114 ] : idbi_bank
>> [ TABLES: 115 ] : InvoiceDetails_logs
>> [ TABLES: 116 ] : IVRS_CallCenter_ActiveHistory
>> [ TABLES: 117 ] : IVRS_CallCenter_Users
>> [ TABLES: 118 ] : JCB_CCDETAILS
>>
>> [ TABLES: 119 ] : jiaozhu
>> [ TABLES: 120 ] : liveGateways
>> [ TABLES: 121 ] : log_details
>> [ TABLES: 122 ] : M_activities
>> [ TABLES: 123 ] : M_activity_logs
>> [ TABLES: 124 ] : Mall_categories
>>
>> [
TABLES: 125 ] : Mall_webstores
>> [ TABLES: 126 ] : Mall_webstores_categories
>> [ TABLES: 127 ] : Master_Bin
>> [ TABLES: 128 ] : merchant_bank_details
>> [ TABLES: 129 ] : merchant_bank_details_20100918
>>
>> [ TABLES: 130 ] : merchant_bank_details_20100924
>> [ TABLES: 131 ] : Merchant_bank_details_bkup
>> [ TABLES: 132 ] : merchant_follow_ups
>> [ TABLES: 133 ] : merchant_follow_ups_20100918
>>
>> [ TABLES: 134 ] : merchant_follow_ups_20100924
>> [ TABLES: 135 ] : merchant_ivrs_options
>> [ TABLES: 136 ] : MERCHANT_PAGE_CUSTOMIZE
>> [ TABLES: 137 ] : merchant_pay_mode
>> [ TABLES: 138 ] : merchant_pay1
>>
>> [ TABLES: 139 ] : merchant_pay1_20100918
>> [ TABLES: 140 ] : merchant_recon
>> [ TABLES: 141 ] : MERCHANT_REGISTRATION
>> [ TABLES: 142 ] :
MERCHANT_REGISTRATION_20100918
>> [ TABLES: 143 ] : merchant_registration_20100924
>>
>> [ TABLES: 144 ] : MERCHANT_REQS
>> [ TABLES: 145 ] : MERCHANT_REQS_20100918
>> [ TABLES: 146 ] : merchant_reqs_20100924
>> [ TABLES: 147 ] : merchant_upload_options
>> [ TABLES: 148 ] : ncm_risk_analysis
>>
>> [ TABLES: 149 ] : nodal_bank_payouts
>> [ TABLES: 150 ] : nodal_bank_payouts_10MAY2010
>> [ TABLES: 151 ] : nodal_bank_payouts_10OCT2010
>> [ TABLES: 152 ] : nodal_bank_payouts_12AUG2010
>>
>> [ TABLES: 153 ] : order_details
>> [ TABLES: 154 ] : panb_20100924
>> [ TABLES: 155 ] : panbl_20100924
>> [ TABLES: 156 ] : pangolin_test_table
>> [ TABLES: 157 ] : pay_data
>>
>> [ TABLES: 158 ] : pay_list
>> [ TABLES: 159 ] : payment_codes
>> [ TABLES: 160 ] :
payment_details
>> [ TABLES: 161 ] : payment_details_20100918
>> [ TABLES: 162 ] : pci_20100924
>>
>> [ TABLES: 163 ] : PG_activities
>> [ TABLES: 164 ] : PG_all_net_bank_logs
>> [ TABLES: 165 ] : PG_all_net_bank_logs_20100918
>> [ TABLES: 166 ] : PG_all_net_banks
>> [ TABLES: 167 ] : PG_all_net_banks_20100918
>>
>> [ TABLES: 168 ] : PG_amex_tran_details
>> [ TABLES: 169 ] : PG_amex_transactions
>> [ TABLES: 170 ] : PG_bank_card_types
>> [ TABLES: 171 ] : pg_bob_bank
>> [ TABLES: 172 ] : PG_bps_tran_details
>>
>> [ TABLES: 173 ] : PG_bps_trans
>> [ TABLES: 174 ] : PG_canb_tran_details
>> [ TABLES: 175 ] : PG_canb_tran_details_20100918
>> [ TABLES: 176 ] : PG_canb_tran_details_20100924
>> [ TABLES: 177 ] : PG_canb_trans
>>
>> [ TABLES: 178 ] :
PG_canb_trans_20100918
>> [ TABLES: 179 ] : PG_canb_trans_20100924
>> [ TABLES: 180 ] : PG_card_details
>> [ TABLES: 181 ] : PG_card_details_20100918
>> [ TABLES: 182 ] : pg_card_details_20100924
>>
>> [ TABLES: 183 ] : pg_card_details_bkp
>> [ TABLES: 184 ] : PG_card_details_linux
>> [ TABLES: 185 ] : PG_cc_log
>> [ TABLES: 186 ] : PG_citibank_inr_files
>> [ TABLES: 187 ] : PG_citibank_inrs
>>
>> [ TABLES: 188 ] : PG_citibank_inrs_20100918
>> [ TABLES: 189 ] : PG_citibank_inrs_logs
>> [ TABLES: 190 ] : PG_citibank_inrs_trans
>> [ TABLES: 191 ] : PG_citibank_inrs_trans_20100918
>>
>> [ TABLES: 192 ] : PG_COMM_BANKS
>> [ TABLES: 193 ] : PG_comm_merchants
>> [ TABLES: 194 ] : PG_cop_bank
>> [ TABLES: 195 ] : PG_cop_bank_20100918
>> [ TABLES: 196 ] :
pg_cust_debit_details
>>
>> [ TABLES: 197 ] : pg_cust_debit_details_20100918
>> [ TABLES: 198 ] : pg_customer_bank_acc_no
>> [ TABLES: 199 ] : pg_customer_bank_acc_no_20100918
>> [ TABLES: 200 ] : PG_eca_net_bank_logs
>>
>> [ TABLES: 201 ] : PG_eca_net_banks
>> [ TABLES: 202 ] : PG_gateway_param_logs
>> [ TABLES: 203 ] : PG_gateway_params
>> [ TABLES: 204 ] : PG_gateways
>> [ TABLES: 205 ] : PG_hdfc_tran_details
>>
>> [ TABLES: 206 ] : PG_hdfc_trans
>> [ TABLES: 207 ] : PG_icici_tran_details
>> [ TABLES: 208 ] : PG_icici_tran_details_20100918
>> [ TABLES: 209 ] : PG_icici_trans
>> [ TABLES: 210 ] : PG_icici_trans_20100918
>>
>> [ TABLES: 211 ] : PG_icici_trans_20100924
>> [ TABLES: 212 ] : pg_icicimigs_tran_details
>> [ TABLES: 213 ] : pg_icicimigs_trans
>> [
TABLES: 214 ] : PG_itz_tran_details
>> [ TABLES: 215 ] : PG_itz_tran_details_20100918
>>
>> [ TABLES: 216 ] : PG_itz_tran_details_20100924
>> [ TABLES: 217 ] : PG_itz_trans
>> [ TABLES: 218 ] : PG_itz_trans_20100918
>> [ TABLES: 219 ] : PG_itz_trans_20100924
>> [ TABLES: 220 ] : PG_kvb_bank
>>
>> [ TABLES: 221 ] : pg_kvb_bank_20100918
>> [ TABLES: 222 ] : pg_lvb_bank
>> [ TABLES: 223 ] : PG_maxmind
>> [ TABLES: 224 ] : PG_Merchant_Gateway_Params
>> [ TABLES: 225 ] : PG_Merchant_Gateways
>>
>> [ TABLES: 226 ] : PG_merchant_options
>> [ TABLES: 227 ] : PG_mobile_details
>> [ TABLES: 228 ] : PG_net_bank_logs
>> [ TABLES: 229 ] : PG_net_bank_logs_20100918
>> [ TABLES: 230 ] : PG_net_banks
>>
>> [ TABLES: 231 ] : PG_net_banks_20100918
>> [ TABLES: 232 ] :
PG_net_indus_logs
>> [ TABLES: 233 ] : PG_net_indus_logs_20100918
>> [ TABLES: 234 ] : PG_net_indus_logs_20100924
>> [ TABLES: 235 ] : PG_net_kotak_ref_files
>>
>> [ TABLES: 236 ] : PG_net_kotak_refs
>> [ TABLES: 237 ] : PG_net_kotak_responses
>> [ TABLES: 238 ] : PG_net_kotak_responses_20100918
>> [ TABLES: 239 ] : PG_net_kotak_responses_20100924
>>
>> [ TABLES: 240 ] : PG_oss_done_card_tran_details
>> [ TABLES: 241 ] : PG_oss_done_card_trans
>> [ TABLES: 242 ] : PG_oss_rds_tran_details
>> [ TABLES: 243 ] : PG_oss_rds_trans
>> [ TABLES: 244 ] : PG_paygate_tran_details
>>
>> [ TABLES: 245 ] : PG_paygate_tran_details_20100918
>> [ TABLES: 246 ] : PG_paygate_transactions
>> [ TABLES: 247 ] : PG_paygate_transactions_20100918
>> [ TABLES: 248 ] :
PG_paygate_transactions_20100924
>>
>> [ TABLES: 249 ] : PG_paymate_tran_details
>> [ TABLES: 250 ] : PG_paymate_tran_details_20100918
>> [ TABLES: 251 ] : PG_paymate_tran_details_20100924
>> [ TABLES: 252 ] : PG_paymate_trans
>>
>> [ TABLES: 253 ] : PG_paymate_trans_20100918
>> [ TABLES: 254 ] : PG_paymate_trans_20100924
>> [ TABLES: 255 ] : PG_pex_tran_details
>> [ TABLES: 256 ] : PG_pex_trans
>> [ TABLES: 257 ] : PG_pnb_bank
>>
>> [ TABLES: 258 ] : PG_pnb_bank_20100918
>> [ TABLES: 259 ] : PG_sbi_net_bank_logs
>> [ TABLES: 260 ] : PG_sbi_net_bank_logs_20100918
>> [ TABLES: 261 ] : PG_sbi_net_banks
>> [ TABLES: 262 ] : PG_sbi_net_banks_20100918
>>
>> [ TABLES: 263 ] : PG_tc_logs
>> [ TABLES: 264 ] : PG_transaction_details_temp_old
>> [ TABLES: 265 ] :
PG_uni_bank
>> [ TABLES: 266 ] : PG_uni_bank_20100918
>> [ TABLES: 267 ] : pg_uti_tran_details
>>
>> [ TABLES: 268 ] : pg_uti_tran_details_20100918
>> [ TABLES: 269 ] : pg_uti_tran_details_20100924
>> [ TABLES: 270 ] : pg_uti_trans
>> [ TABLES: 271 ] : pg_uti_trans_20100918
>> [ TABLES: 272 ] : pg_uti_trans_20100924
>>
>> [ TABLES: 273 ] : PG_visa_mpi
>> [ TABLES: 274 ] : pit_20100924
>> [ TABLES: 275 ] : pitd_20100924
>> [ TABLES: 276 ] : pnb_20100924
>> [ TABLES: 277 ] : pnbl_20100924
>> [ TABLES: 278 ] : pptd_20100924
>>
>> [ TABLES: 279 ] : productMaster
>> [ TABLES: 280 ] : productOptions
>> [ TABLES: 281 ] : psnb_20100924
>> [ TABLES: 282 ] : psnbl_20100924
>> [ TABLES: 283 ] : realtime_logs
>>
>> [ TABLES: 284 ] : rechargeitnow
>> [
TABLES: 285 ] : recon_details
>> [ TABLES: 286 ] : ref_20100924
>> [ TABLES: 287 ] : ref_temp
>> [ TABLES: 288 ] : refund_mailcontent_info
>>
>> [ TABLES: 289 ] : Refunds
>> [ TABLES: 290 ] : Refunds_20100918
>> [ TABLES: 291 ] : refunds_20100924
>> [ TABLES: 292 ] : reqtype_links
>> [ TABLES: 293 ] : RTGS_Banks
>> [ TABLES: 294 ] : sbid_genid
>>
>> [ TABLES: 295 ] : sbid_refunds
>> [ TABLES: 296 ] : ScrollNews
>> [ TABLES: 297 ] : sd_temp
>> [ TABLES: 298 ] : SendInvoiceDetails
>> [ TABLES: 299 ] : SendInvoiceDetails_20100918
>>
>> [ TABLES: 300 ] : SendInvoiceDetails_20100924
>> [ TABLES: 301 ] : Ser_tax_Month_report
>> [ TABLES: 302 ] : ServiceTax
>> [ TABLES: 303 ] : ServiceTax_rate
>> [ TABLES: 304 ] : SETUP_FEE
>>
>> [ TABLES: 305 ] :
shopmall_bank_info
>> [ TABLES: 306 ] : shopper_details
>> [ TABLES: 307 ] : shoppers_view
>> [ TABLES: 308 ] : sms_billing
>> [ TABLES: 309 ] : sms_billing_20100918
>>
>> [ TABLES: 310 ] : sms_billing_20100924
>> [ TABLES: 311 ] : Statusfield_values
>> [ TABLES: 312 ] : suspense_account
>> [ TABLES: 313 ] : sysdiagrams
>> [ TABLES: 314 ] : sysobj
>>
>> [ TABLES: 315 ] : syssegment
>> [ TABLES: 316 ] : t_ref
>> [ TABLES: 317 ] : t_sd
>> [ TABLES: 318 ] : tab1
>> [ TABLES: 319 ] : tab2
>> [ TABLES: 320 ] : tab3
>> [ TABLES: 321 ] : tab33
>>
>> [ TABLES: 322 ] : tab4
>> [ TABLES: 323 ] : tab5
>> [ TABLES: 324 ] : tc_logs_20100924
>> [ TABLES: 325 ] : TC_merchant_id
>> [ TABLES: 326 ] : TC_order_logs
>> [ TABLES: 327 ] :
temp_payout
>>
>> [ TABLES: 328 ] : TEMPTC
>> [ TABLES: 329 ] : test_logs
>> [ TABLES: 330 ] : tmp4
>> [ TABLES: 331 ] : to_be_refunded
>> [ TABLES: 332 ] : to_be_refunded_r
>> [ TABLES: 333 ] : trackingId_view
>>
>> [ TABLES: 334 ] : trackingId_view1
>> [ TABLES: 335 ] : Transaction_Details
>> [ TABLES: 336 ] : Transaction_Details_new
>> [ TABLES: 337 ] : Transecute_Mer
>> [ TABLES: 338 ] : USER_ADMIN
>>
>> [ TABLES: 339 ] : uti_bank
>> [ TABLES: 340 ] : Vi_err
>> [ TABLES: 341 ] : virtual_settings
>> [ TABLES: 342 ] : virtual_terminal
>> [ TABLES: 343 ] : VisaMerchants
>> [ TABLES: 344 ] :
>> vw_index_list--------------------------------------------------------------------------------------------
>>
>> Admn_users
>>
>> adu_id
adu_user adu_pwd adu_status dept_id remote_access mobile_number
>> Acc1003 accounts acct7 () ind A Acc Y
>> Acc1005 regina reg2004 A Acc
>> Acc1026 smita mylord786 A Acc Y 9869033872
>> Acc1041 Risk Risk A Acc
>> Acc1042 Nandu Sarada1306 A Acc Y
>> Acc1043 ganesh ganesh1!2 A Acc Y 9820501510
>> Acc1044 yashwant yashwant1!3 A Acc Y 9820770507
>> Acc1045 Ujwala Ujwala1!4 A Acc Y
>> Acc1046 Kajal Kajal1!5 A Acc
>> Acc1047 Sachinm Sachinm1!6 A Acc
>> Acc1048 Amitk Amitk1!7 A Acc
>> Acc1049 Ashlesha Ashlesha 1!8 A Acc
>> Acc1050 ravindra ravindra1!9 A Acc
>> Acc1051 varun varun1!10 A Acc
>> Acc1052 reena reena1!11 A Acc
>> Acc1058 Sarika Sarika A Acc
>> Acc1059 Nitin nitin786 A Acc
>> Acc1060 Bharati 135Bharati A Acc
>> Acc1061 Kavitha Kavitha A Acc
>> Acc1062 Shallu 975Shalini! A
Acc
>> Acc1063 Sandesh !Sandesh184 A Acc
>> Acc1065 Prathamesh XXXXXXXX A Acc
>> Acc1066 kTushar tu5harka1 A Acc
>> Acc1073 ptaccount testtest123 A Acc Y
>> Acc1074 pttest testtest123 A Acc Y
>> Acc1075 RajAbhay @bh () y!#% A Acc
>> Acc1079 Ashish ashish A Acc
>> Mkt1008 susan susan12345 A Mkt
>> Mkt1025 Rakhi W!LL! () M$ A Acc
>> Mkt1030 maria maria456 A Mkt
>> Mkt1036 swati XXXXXXXX A Mkt
>> Mkt1048 Deepika dipk () !@ A Acc
>> Mkt1049 Priya PRIYA () 12345 A Acc
>> Mkt1051 SSachin SSac@@7 A Mkt
>> Mkt1055 Pankaj panki777 A Mkt
>> Mkt1056 ptmarketing mkttest123 A Mkt Y
>> Mkt1065 pthema mkttest123 A Mkt Y
>> Mkt1066 Urmi urmi28 A Mkt
>> Mkt1067 Davina Davina135 A Mkt
>> Mkt1068 Aarti XXXXXXXX A Mkt
>> Mkt1069 vivekn vivek123 A Mkt Y
>> Mkt1070 Trupti trusai$7
A Mkt
>> Mkt1071 ArunJ Runsun1234 A Mkt
>> Mkt1072 Hershel XXXXXXXX A Mkt
>> Mkt1073 Lata Lata147 A Mkt
>> Mkt1075 DChirag XXXXXXXX A Mkt
>> Mkt1076 GDikshita xxxxxxxx N Mkt
>> Mkt1077 MukeshM xxxxxxxx N Mkt
>> Mkt1078 test test123 A Mkt
>> Mkt1081 Deepa d33pa A Mkt Y
>> Mkt1082 Uzma @njum A Mkt Y
>> SA1001 admin J () stAm@...g A SA Y 9819453377
>> SA1027 vishwas ccav! () #$ A SA Y
>> SA1080 Anupama S () lv!@ A SA
>> Tec1013 laxmikant ammalaxmi123 A Tec Y 9930343594
>> Tec1020 govind logoutgovind A Tec Y 9821907585
>> Tec1028 rohit solaris123 A Tec Y
>> Tec1029 Noor ccavenue A Tec Y
>> Tec1031 Agnes agnes007 A Tec Y 9867487955
>> Tec1037 Mehjbin querypass A Tec Y
>> Tec1039 vivek viv123ek A Tec
>> Tec1043 sunil suNil789 A Tec
>> Tec1044 Govindraj govind () raj A
Tec
>> Tec1045 Shahul xxxxxxxx A Tec
>> Tec1046 anuja $anuja$123 A Tec
>> Tec1047 ashwini ash! () #wini A Tec
>> Tec1052 PriyaS xxxxxxxx A Tec
>> Tec1053 Pravin pravin123 A Tec
>>
>> --------------------------------------------------------------------------------------
>>
>> Kindly disregard the previous report. I got the date all mixed up.
>>
>> Thanks, :)
>>
>> d3hydr8
>>
>>
>>
>> --------------------------------------------------------------------------------------
>>
>>
>>
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and
sponsored by Secunia - http://secunia.com/
>>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20110507/5275c31a/attachment.html
------------------------------
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
End of Full-Disclosure Digest, Vol 75, Issue 18
***********************************************
Content of type "text/html" skipped
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists