Carding order_fraud - sql injection reveals fraud flags

[Dlslater]

Hey there!

This is likely review for a lot of us that have been around for while, but I was doing sqli on a website today and came across a table labled order_fraud, with a bunch of columns for what they are looking for so I thought I would post that for some newer folks.

order_fraud [53# 0]
order_id
high_risk_country
country_code
customer_id
country_match
ip_region
distance
ip_org
ip_asnum
ip_longitude
ip_net_speed_cell
ip_area_code
ip_time_zone
ip_region_name
ip_metro_code
ip_domain
ip_country_name
ip_continent_code
ip_corporate_proxy
proxy_score
anonymous_proxy
is_trans_proxy
free_mail
carder_email
ip_city
bin_match
bin_country
ip_region_confidence
high_risk_password
bin_name
ip_postal_confidence
bin_name_match
bin_phone_match
ip_latitude
bin_phone
ip_postal_code
high_risk_username
city_postal_match
ship_forward
ip_accuracy_radius
ip_isp
score
ship_city_postal_match
ip_city_confidence
ip_user_type
ip_country_confidence
date_added
risk_score
queries_remaining
error
maxmind_id
explanation
ps. if there are any of you out there that good at sqli, I am starting to get somewhat proficient, but I am stuck at where I find a site that has credit card data (I have quite a few in my saved sites), but when I try to pull data off the table the column count is always 0 and I am unsure how to get around that. Any pointers would be greatly appreciated.

 

[kevin77]

Hey there!

This is likely review for a lot of us that have been around for while, but I was doing sqli on a website today and came across a table labled order_fraud, with a bunch of columns for what they are looking for so I thought I would post that for some newer folks.

order_fraud [53# 0]
order_id
high_risk_country
country_code
customer_id
country_match
ip_region
distance
ip_org
ip_asnum
ip_longitude
ip_net_speed_cell
ip_area_code
ip_time_zone
ip_region_name
ip_metro_code
ip_domain
ip_country_name
ip_continent_code
ip_corporate_proxy
proxy_score
anonymous_proxy
is_trans_proxy
free_mail
carder_email
ip_city
bin_match
bin_country
ip_region_confidence
high_risk_password
bin_name
ip_postal_confidence
bin_name_match
bin_phone_match
ip_latitude
bin_phone
ip_postal_code
high_risk_username
city_postal_match
ship_forward
ip_accuracy_radius
ip_isp
score
ship_city_postal_match
ip_city_confidence
ip_user_type
ip_country_confidence
date_added
risk_score
queries_remaining
error
maxmind_id
explanation
ps. if there are any of you out there that good at sqli, I am starting to get somewhat proficient, but I am stuck at where I find a site that has credit card data (I have quite a few in my saved sites), but when I try to pull data off the table the column count is always 0 and I am unsure how to get around that. Any pointers would be greatly appreciated.

wow man thanks for sharing, like