Dongle SQL Injection rules Bypass

Dongle SQL Injection rules Bypass

1: This test is only applicable

Union select for Research and Testing

2: id = 1 union select 1, 2, 3

The contents of fuzz were as follows:

8e0, \ N, 0.0

3: The test id = 1 8e0union select 1, 2, 3 is blocked.

4: therefore, it is customary to test the characters that can be entered before union, including numbers and characters.

5: So here we have an idea: xxx [operator number] Number union select 1, 2, 3?
6: I tested some combinations,

1.2e % 2b308union select 1, 2, and 3 are bypassed. [it seems that the filter is used when the minus sign is used]

Verification Result:

Bypass when adding

Filter when minus signs

Verification Result:

Bypass when adding

Filter when minus signs

Solution:

Add rule Filtering