2019-11-3: penetration testing, based learning, bypass type notes

Equivalent character

Space:% 20, +, (),% 0a,% 09,% a0,% 0b,% 0c,% 0d, / ** / etc.

=:like,regexp,liker,<>,! =等

and:&&

or: xor &, ^, || (and can be interchanged or OR, and only different conditions on both sides)

Comma: Blinds in from 1 for 1, union query A join B

 

mysql characteristics

=,:=,@

mysql the "=" equal means, only when the update set is assigned meaning

": =" Means to copy

Variable need not be defined in mysql, using the @ variable name to be called directly

 

 

The Notes

In mysql comment symbol can be used are:

/ ** / for multi-line comments

- (spaces), #

mysql in a unique characteristic, the content of the comment symbol exclamation mark behind it can parse such / *! and * /, and the exclamation mark behind the data version number is less than or equal to mysql then likewise resolves

 

 

 

 

 Wrap in mysql after changing line would be executed

 

 mysql installed for implicit type

When used with operand with different types of operators, so that the type of conversion occurs compatible operands. Implicit conversion occurs

 

Guess you like

Origin www.cnblogs.com/sym945/p/11785329.html