Rubrica (Esempio per PHP+SQLite)

I miei numeri telefonici

	Cognome	Nome	Numero telefonico	Comando
	-1 OR 2+444-444-1=0+0+0+1	GRLpGpAG	555-666-0606	[CANCELLA]
	-1 OR 3*2<(0+5+444-444)	GRLpGpAG	555-666-0606	[CANCELLA]
	-1 OR 3*2<(0+5+970-970) --	GRLpGpAG	555-666-0606	[CANCELLA]
	-1 OR 3*2>(0+5+444-444)	GRLpGpAG	555-666-0606	[CANCELLA]
	-1 OR 3+444-444-1=0+0+0+1	GRLpGpAG	555-666-0606	[CANCELLA]
	-1 OR 3+970-970-1=0+0+0+1 --	GRLpGpAG	555-666-0606	[CANCELLA]
	-1" OR 3*2<(0+5+322-322) --	GRLpGpAG	555-666-0606	[CANCELLA]
	-1" OR 3+322-322-1=0+0+0+1 --	GRLpGpAG	555-666-0606	[CANCELLA]
	-1' OR 3*2<(0+5+214-214) or 'LMKQnJOn'='	GRLpGpAG	555-666-0606	[CANCELLA]
	-1' OR 3*2<(0+5+566-566) --	GRLpGpAG	555-666-0606	[CANCELLA]
	-1' OR 3*2>(0+5+214-214) or 'LMKQnJOn'='	GRLpGpAG	555-666-0606	[CANCELLA]
	-1' OR 3+566-566-1=0+0+0+1 --	GRLpGpAG	555-666-0606	[CANCELLA]
	0'XOR(if(now()=sysdate(),sleep(9),0))XOR'Z	GRLpGpAG	555-666-0606	[CANCELLA]
	1 waitfor delay '0:0:9' --	GRLpGpAG	555-666-0606	[CANCELLA]
	1'"	GRLpGpAG	555-666-0606	[CANCELLA]
	5WEr2oxh'); waitfor delay '0:0:9' --	GRLpGpAG	555-666-0606	[CANCELLA]
	GRLpGpAG	-1' OR 3*2<(0+5+529-529) --	555-666-0606	[CANCELLA]
	GRLpGpAG	-1' OR 3*2>(0+5+529-529) --	555-666-0606	[CANCELLA]
	GRLpGpAG	-1' OR 2+848-848-1=0+0+0+1 or 'BZ4xUzWi'='	555-666-0606	[CANCELLA]
	GRLpGpAG	-1' OR 3+848-848-1=0+0+0+1 or 'BZ4xUzWi'='	555-666-0606	[CANCELLA]
	GRLpGpAG	"+convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(113)+CHAR(75)+CHAR(55)+CHAR(48)+CHAR(115)+CHAR(83)+CHAR(107)+CHAR(107))+"	555-666-0606	[CANCELLA]
	GRLpGpAG	-1" OR 2+847-847-1=0+0+0+1 --	555-666-0606	[CANCELLA]
	GRLpGpAG	-1" OR 3+847-847-1=0+0+0+1 --	555-666-0606	[CANCELLA]
	GRLpGpAG	GRLpGpAG	and(select 1 from(select count(*),concat((select concat(CHAR(52),CHAR(67),CHAR(117),CHAR(83),CHAR(122),CHAR(105),CHAR(114),CHAR(112),CHAR(57),CHAR(113),CHAR(81)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)and	[CANCELLA]
	GRLpGpAG	-1" OR 3*2>(0+5+847-847) --	555-666-0606	[CANCELLA]
	GRLpGpAG	if(now()=sysdate(),sleep(6),0)	555-666-0606	[CANCELLA]
	GRLpGpAG	GRLpGpAG	convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(83)+CHAR(122)+CHAR(105)+CHAR(114)+CHAR(112)+CHAR(57)+CHAR(113)+CHAR(81))	[CANCELLA]
	GRLpGpAG	GRLpGpAG	'and(select 1 from(select count(*),concat((select concat(CHAR(52),CHAR(67),CHAR(117),CHAR(75),CHAR(108),CHAR(83),CHAR(107),CHAR(108),CHAR(67),CHAR(55),CHAR(118)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)and'	[CANCELLA]
	GRLpGpAG	GRLpGpAG	'(select 1 and row(1,1)>(select count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(75),CHAR(108),CHAR(83),CHAR(107),CHAR(108),CHAR(67),CHAR(55),CHAR(118)),floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))'	[CANCELLA]
	GRLpGpAG	1 waitfor delay '0:0:6' --	555-666-0606	[CANCELLA]
	GRLpGpAG	RdI0EkUN'; waitfor delay '0:0:3' --	555-666-0606	[CANCELLA]
	GRLpGpAG	F9VqfLs2'); waitfor delay '0:0:3' --	555-666-0606	[CANCELLA]
	GRLpGpAG	GRLpGpAG	'+convert(int,CHAR(52)+CHAR(67)+CHAR(117)+CHAR(75)+CHAR(108)+CHAR(83)+CHAR(107)+CHAR(108)+CHAR(67)+CHAR(55)+CHAR(118))+'	[CANCELLA]
	GRLpGpAG	GRLpGpAG	"and(select 1 from(select count(*),concat((select concat(CHAR(52),CHAR(67),CHAR(117),CHAR(77),CHAR(109),CHAR(89),CHAR(103),CHAR(100),CHAR(105),CHAR(65),CHAR(67)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)and"	[CANCELLA]
	GRLpGpAG	ZIQUn4qL'));select pg_sleep(3); --	555-666-0606	[CANCELLA]
	GRLpGpAG	GRLpGpAG	"(select 1 and row(1,1)>(select count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(77),CHAR(109),CHAR(89),CHAR(103),CHAR(100),CHAR(105),CHAR(65),CHAR(67)),floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))"	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1 OR 2+497-497-1=0+0+0+1 --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1 OR 3+497-497-1=0+0+0+1 --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1 OR 3*2>(0+5+497-497) --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1 OR 2+819-819-1=0+0+0+1	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1' OR 2+782-782-1=0+0+0+1 --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1' OR 3*2>(0+5+782-782) --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1' OR 2+272-272-1=0+0+0+1 or 'dSpoQa3o'='	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1' OR 3*2>(0+5+272-272) or 'dSpoQa3o'='	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1" OR 2+903-903-1=0+0+0+1 --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	-1" OR 3*2>(0+5+903-903) --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	if(now()=sysdate(),sleep(9),0)	[CANCELLA]
	GRLpGpAG	GRLpGpAG	0'XOR(if(now()=sysdate(),sleep(9),0))XOR'Z	[CANCELLA]
	GRLpGpAG	GRLpGpAG	0"XOR(if(now()=sysdate(),sleep(6),0))XOR"Z	[CANCELLA]
	GRLpGpAG	GRLpGpAG	1 waitfor delay '0:0:9' --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	FSPRyoYR')); waitfor delay '0:0:6' --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	HNGqReig';select pg_sleep(6); --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	N1954OxX');select pg_sleep(6); --	[CANCELLA]
	GRLpGpAG	GRLpGpAG	VNPF3uTn'));select pg_sleep(3); --	[CANCELLA]
	NCY0otTb');select pg_sleep(6); --	GRLpGpAG	555-666-0606	[CANCELLA]
	Y6wWy7xa';select pg_sleep(6); --	GRLpGpAG	555-666-0606	[CANCELLA]
	YgZUFPbJ')); waitfor delay '0:0:9' --	GRLpGpAG	555-666-0606	[CANCELLA]
	cwM8gbu2'; waitfor delay '0:0:6' --	GRLpGpAG	555-666-0606	[CANCELLA]
	if(now()=sysdate(),sleep(3),0)	GRLpGpAG	555-666-0606	[CANCELLA]

Aggiungi voce

Visualizza il codice sorgente