create account

MYSQL内联注释绕过WAF by evil0x00

View this thread on: hive.blog |  peakd.com |  ecency.com
cmd · @evil0x00 ·
$0.04
MYSQL内联注释绕过WAF
### <center>MYSQL内联注释绕过WAF</center>

</br>

<center>![](https://cdn.steemitimages.com/DQmRcLnVJZqXXVqcnGVm3WY4P2tFj4xMoDWTRVpi5ZHGcw7/image.png)</center>

前言:

现在基本上是个网站都设置个waf ,一般都是通过一些注释啊 编码绕过

一些注释如下:

```
//, -- , /**/, #, --+, -- -, ;%00
```
这些都需要自己收集 积累

不过这些大多都不能用 内联注释还是可以用的

```
id=1/*!UnIoN*/SeLeCT
```

```
/*! code */来绕过
```
👍  , , , , , , , , , ,
properties (23)
authorevil0x00
permlinkmysql-waf
categorycmd
json_metadata{"tags":["cmd","cn-curation","cn","cn-malaysia","cn-funny"],"image":["https://cdn.steemitimages.com/DQmRcLnVJZqXXVqcnGVm3WY4P2tFj4xMoDWTRVpi5ZHGcw7/image.png"],"app":"steemit/0.1","format":"markdown"}
created2018-08-27 08:48:21
last_update2018-08-27 08:48:21
depth0
children11
last_payout2018-09-03 08:48:21
cashout_time1969-12-31 23:59:59
total_payout_value0.037 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length336
author_reputation106,257,240,660
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,482,952
net_rshares26,725,110,459
author_curate_reward""
vote details (11)
@alibabab ·
$0.03
不懂 还是支持了
👍  , , , , , , ,
properties (23)
authoralibabab
permlinkre-evil0x00-mysql-waf-20180827t085332160z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 08:53:33
last_update2018-08-27 08:53:33
depth1
children1
last_payout2018-09-03 08:53:33
cashout_time1969-12-31 23:59:59
total_payout_value0.025 HBD
curator_payout_value0.001 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length8
author_reputation3,205,760,566
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,483,290
net_rshares18,680,505,573
author_curate_reward""
vote details (8)
@evil0x00 ·
$0.02
properties (23)
authorevil0x00
permlinkre-alibabab-re-evil0x00-mysql-waf-20180827t090813095z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 09:08:12
last_update2018-08-27 09:08:12
depth2
children0
last_payout2018-09-03 09:08:12
cashout_time1969-12-31 23:59:59
total_payout_value0.024 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length2
author_reputation106,257,240,660
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,484,209
net_rshares16,707,680,741
author_curate_reward""
vote details (5)
@jonesnow ·
$0.03
properties (23)
authorjonesnow
permlinkre-evil0x00-mysql-waf-20180827t084933242z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 08:49:33
last_update2018-08-27 08:49:33
depth1
children1
last_payout2018-09-03 08:49:33
cashout_time1969-12-31 23:59:59
total_payout_value0.029 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length6
author_reputation8,321,137,946
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,483,034
net_rshares19,870,306,114
author_curate_reward""
vote details (9)
@evil0x00 ·
$0.03
properties (23)
authorevil0x00
permlinkre-jonesnow-re-evil0x00-mysql-waf-20180827t084957253z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 08:50:00
last_update2018-08-27 08:50:00
depth2
children0
last_payout2018-09-03 08:50:00
cashout_time1969-12-31 23:59:59
total_payout_value0.028 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length6
author_reputation106,257,240,660
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,483,063
net_rshares19,528,002,285
author_curate_reward""
vote details (9)
@kcon · 
你好
👍  ,
properties (23)
authorkcon
permlinkre-evil0x00-mysql-waf-20180828t022314144z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-28 02:23:15
last_update2018-08-28 02:23:15
depth1
children0
last_payout2018-09-04 02:23:15
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length2
author_reputation3,441,437,814
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,557,479
net_rshares6,486,675,313
author_curate_reward""
vote details (2)
@manager0 ·
$0.03
有些不能用了
👍  , , , , , , ,
properties (23)
authormanager0
permlinkre-evil0x00-mysql-waf-20180827t085619833z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 08:56:21
last_update2018-08-27 08:56:21
depth1
children1
last_payout2018-09-03 08:56:21
cashout_time1969-12-31 23:59:59
total_payout_value0.025 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length6
author_reputation2,116,016,834
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,483,472
net_rshares17,889,685,504
author_curate_reward""
vote details (8)
@evil0x00 ·
$0.02
properties (23)
authorevil0x00
permlinkre-manager0-re-evil0x00-mysql-waf-20180827t090846902z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 09:08:45
last_update2018-08-27 09:08:45
depth2
children0
last_payout2018-09-03 09:08:45
cashout_time1969-12-31 23:59:59
total_payout_value0.023 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length2
author_reputation106,257,240,660
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,484,250
net_rshares16,057,109,916
author_curate_reward""
vote details (5)
@root0x00 · 
学习方法
👍  , , ,
properties (23)
authorroot0x00
permlinkre-evil0x00-mysql-waf-20180828t010949227z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-28 01:10:21
last_update2018-08-28 01:10:21
depth1
children0
last_payout2018-09-04 01:10:21
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length4
author_reputation75,627,896,971
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,553,172
net_rshares9,317,365,411
author_curate_reward""
vote details (4)
@steemitboard · 
Congratulations @evil0x00! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :

[![](https://steemitimages.com/70x80/http://steemitboard.com/notifications/votes.png)](http://steemitboard.com/@evil0x00) Award for the number of upvotes

<sub>_Click on the badge to view your Board of Honor._</sub>
<sub>_If you no longer want to receive notifications, reply to this comment with the word_ `STOP`</sub>



> Do you like [SteemitBoard's project](https://steemit.com/@steemitboard)? Then **[Vote for its witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1)** and **get one more award**!
properties (22)
authorsteemitboard
permlinksteemitboard-notify-evil0x00-20180828t084906000z
categorycmd
json_metadata{"image":["https://steemitboard.com/img/notify.png"]}
created2018-08-28 08:49:06
last_update2018-08-28 08:49:06
depth1
children0
last_payout2018-09-04 08:49:06
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length670
author_reputation38,975,615,169,260
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,582,409
net_rshares0
@ustd ·
$0.02
有点行不通了
👍  , , , , ,
properties (23)
authorustd
permlinkre-evil0x00-mysql-waf-20180827t090630543z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 09:06:30
last_update2018-08-27 09:06:30
depth1
children1
last_payout2018-09-03 09:06:30
cashout_time1969-12-31 23:59:59
total_payout_value0.023 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length6
author_reputation157,962,129,739
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,484,106
net_rshares16,228,869,310
author_curate_reward""
vote details (6)
@evil0x00 ·
$0.02
一些还是可以的
👍  , , , ,
properties (23)
authorevil0x00
permlinkre-ustd-re-evil0x00-mysql-waf-20180827t090910724z
categorycmd
json_metadata{"tags":["cmd"],"app":"steemit/0.1"}
created2018-08-27 09:09:12
last_update2018-08-27 09:09:12
depth2
children0
last_payout2018-09-03 09:09:12
cashout_time1969-12-31 23:59:59
total_payout_value0.022 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length7
author_reputation106,257,240,660
root_titleMYSQL内联注释绕过WAF
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id69,484,279
net_rshares15,424,788,076
author_curate_reward""
vote details (5)
Help/Feedback