MYSQL内联注释绕过WAF

in #cmd • 7 years ago

MYSQL内联注释绕过WAF

前言:

现在基本上是个网站都设置个waf ,一般都是通过一些注释啊 编码绕过

一些注释如下:

//, -- , /**/, #, --+, -- -, ;%00

这些都需要自己收集 积累

不过这些大多都不能用 内联注释还是可以用的

id=1/*!UnIoN*/SeLeCT

/*! code */来绕过
#cn-curation #cn #cn-malaysia #cn-funny
7 years ago in #cmd by
$0.04
  • Past Payouts $0.04
  • - Author $0.04
  • - Curators $0.00
11 votes
Reply 11
Sort:  
  • Trending
    • [-]
     7 years ago 

    不懂 还是支持了

    [-]
     7 years ago 

    谢谢

    $0.02
    • Past Payouts $0.02
    • - Author $0.02
    • - Curators $0.00
    5 votes
    Reply
    [-]
     7 years ago 

    有点行不通了

    $0.02
    • Past Payouts $0.02
    • - Author $0.02
    • - Curators $0.00
    6 votes
    Reply
    [-]
     7 years ago 

    一些还是可以的

    $0.02
    • Past Payouts $0.02
    • - Author $0.02
    • - Curators $0.00
    5 votes
    Reply
    [-]
     7 years ago 

    Congratulations @evil0x00! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :

    Award for the number of upvotes

    Click on the badge to view your Board of Honor.
    If you no longer want to receive notifications, reply to this comment with the word STOP

    Do you like SteemitBoard's project? Then Vote for its witness and get one more award!

    $0.00
      Reply