bugbounty-cheatsheet/cheatsheets/sqli.md
2017-07-14 14:54:44 +01:00

268 B

SQLI

Akamai Kona Bypass

  • MID instead of SUBSTRING
  • LIKE instead of =
  • /**/ instead of a space
  • CURRENT_USER instead of CURRENT_USER()
  • " instead of '

Final example:

444/**/OR/**/MID(CURRENT_USER,1,1)/**/LIKE/**/"p"/**/#