来到select正则:
1
|
<.+javascript:window[.{1}\x|<.*=(&#d+?;?)+?>|<.*(data|src)=data:text/html.*>|(alert(|confirm(|expression(|prompt(|benchmarks*?(.*)|sleeps*?(.*)|load_files*?()|<[a-z]+?[^>]*?on([a-z]{4,})s*?=|^+/v(8|9)|( and | or )s*?([() '"d]+?=[()' "d]+?|[() '"a-zA-Z]+?=[()' "a-zA-Z]+?|>|<|s+?[w]+?s+?ins*?(|likes+?[ "'])|/*.**/|<s*script|EXEC|UNION.+?SELECT@{0,2}((.+)|s+?.+?|(`|'|" ).*?(`| '|"))|UPDATE@{0,2}((.+)|s+?.+?|(`|' |").*?(`| '|"))SET|INSERTs+INTO.+?VALUES|(SELECT|DELETE)@{0,2}((.+)|s+?.+?s+?|(`|' |").*?(`| '|"))FROM((.+)|s+?.+?|(`|' |").*?(`| '|"))|(CREATE|ALTER|DROP|TRUNCATE)s+(TABLE|DATABASE)|/*.*?*/|' |
Bypass:
union select@1,2,3,4,5,6,7
union select@1=@1,2,3,4,5,6,7
insert正则部分:
1
|
INSERTs+INTO.+?(VALUES|SET) |
Bypass:
insert into t set cmd=123