4 ms·

Huh, anybody know why DrugSupervise is in the top table names? Googling didn't give me any results and it sounds like some kind of webapp for drugs or something

• cjhveal 11y ago
  I found some mentions of "DrugSupervise" on a bunch of Chinese language sites, which lead me to find drugadmin.com. A google translate of the title tag tells me it's a "Home _ Chinese Drug electronic monitoring network." I found another website with troubleshooting instructions that claim .NET as a dependency and show a Windows XP task manager with a process named DrugSupervise.exe. That support website lists the owner as "CITIC Technology Group", which may or may not be connected to the state-owned investment group "China International Trust and Investment Corporation", which offers a bunch of cloud services through their various subsidiaries. I also found a github repo with some C# code: https://github.com/katway/DrugSupervision https://github.com/katway/DrugSupervision That's all I've got.
  • jeswin 11y ago
    Good find. Since it is not a Web App and hence not publicly available to exploit: Use of String.Format instead Parameterized queries is how Sql injection issues sneak in. (Line 63, https://github.com/katway/DrugSupervision/blob/GuiDesign/DrugSupervise/ScannerForm.cs https://github.com/katway/DrugSupervision/blob/GuiDesign/Dru...)
• mb0 11y ago
  Shodan itself shows that all instances of this database are located in China, and there are 390 instances of it. Top organizations are: China Telecom Yunnan 83 China Telecom xinjiang 80 China Telecom 60 China Unicom Shandong 11 China Telecom Chongqing 10 Connecting to one instance in particular, 183.221.158.220: > show dbs; DrugSupervise 0.125GB local 0.03125GB > use DrugSupervise switched to db DrugSupervise > show collections DrugSupervise.Entity.Models.DictList.DictCodeList DrugSupervise.Entity.Models.DictList.DictCodeTypeList DrugSupervise.Entity.Models.DictRegion.DictRegionList DrugSupervise.Entity.Models.EntPartner.EntPartnerList DrugSupervise.Entity.Models.PhysicsName.PhysicNameList DrugSupervise.Entity.Models.RIOS.InOutStoreD`1[DrugSupervise.Entity.Models.PI.PurchaseInStore] DrugSupervise.Entity.Models.RIOS.InOutStoreD`1[DrugSupervise.Entity.Models.RG.GetDrugOutStore] system.indexes Looking at the DrugSupervise.Entity.Models.PhysicsName.PhysicNameList collection, see a bunch of stuff like this: { "_id" : BinData(3,"s6CfpmQtDkG5Nh3lqDGOQQ=="), "physicName" : "磷酸可待因注射液", "physicInfo" : "磷酸可待因注射液 注射剂 15mg" } { "_id" : BinData(3,"3Aa7ZwXzy0ax2KRCFRhsSg=="), "physicName" : "硫酸吗啡口服溶液", "physicInfo" : "硫酸吗啡口服溶液 口服液 10ml：30mg" } { "_id" : BinData(3,"t9+GHfNq10eqqi2EaqhQKA=="), "physicName" : "枸橼酸舒芬太尼注射液", "physicInfo" : "枸橼酸舒芬太尼注射液 注射剂 2ml:100vg(以舒芬太尼计)" } { "_id" : BinData(3,"bFLxr6tN0kO8vso+BTjB5w=="), "physicName" : "硫酸吗啡片", "physicInfo" : "硫酸吗啡片 片剂 20mg" } { "_id" : BinData(3,"5FGsZIWsPE6L+UQSTEfVag=="), "physicName" : "盐酸吗啡片", "physicInfo" : "盐酸吗啡片 片剂 30mg" } I have no idea what this is, but it looks like some kind of registry of prescriptions.