mirror of
https://github.com/minimaxir/big-list-of-naughty-strings.git
synced 2025-09-25 05:12:14 +02:00
Fixed SQL OR 1=1 query, and added extra character after the comment.
This commit is contained in:
@@ -390,8 +390,9 @@
|
||||
"<iframe src=http://ha.ckers.org/scriptlet.html <",
|
||||
"\\\";alert('XSS');//",
|
||||
"1;DROP TABLE users",
|
||||
"1'; DROP TABLE users--",
|
||||
"' OR 1 == 1;",
|
||||
"1'; DROP TABLE users-- 1",
|
||||
"' OR 1=1 -- 1",
|
||||
"' OR '1'='1",
|
||||
"-",
|
||||
"--",
|
||||
"--version",
|
||||
|
5
blns.txt
5
blns.txt
@@ -478,8 +478,9 @@ perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
|
||||
# Strings which can cause a SQL injection if inputs are not sanitized
|
||||
|
||||
1;DROP TABLE users
|
||||
1'; DROP TABLE users--
|
||||
' OR 1 == 1;
|
||||
1'; DROP TABLE users-- 1
|
||||
' OR 1=1 -- 1
|
||||
' OR '1'='1
|
||||
|
||||
# Server Code Injection
|
||||
#
|
||||
|
Reference in New Issue
Block a user