sql injection cheat sheet

SQL Injection Cheat Sheet：SQL注入查询手册

详情访问：http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/#LineComments

 

1. About SQL Injection Cheat Sheet
2. Syntax Reference, Sample Attacks and Dirty SQL Injection Tricks
   1. Line Comments
      • SQL Injection Attack Samples
   2. Inline Comments
      • Classical Inline Comment SQL Injection Attack Samples
      • MySQL Version Detection Sample Attacks
   3. Stacking Queries
      • Language / Database Stacked Query Support Table
      • About MySQL and PHP
      • Stacked SQL Injection Attack Samples
   4. If Statements
      • MySQL If Statement
      • SQL Server If Statement
      • If Statement SQL Injection Attack Samples
   5. Using Integers
   6. String  Operations
      • String Concatenation
   7. Strings without Quotes
      • Hex based SQL Injection Samples
   8. String Modification & Related
   9. Union Injections
      • UNION – Fixing Language Issues
   10. Bypassing Login Screens
   11. Enabling xp_cmdshell in SQL Server 2005