Skip to content

Instantly share code, notes, and snippets.

@righettod
Last active February 10, 2024 12:22
Show Gist options
  • Save righettod/62c47f4c99f5b362346288497484fee5 to your computer and use it in GitHub Desktop.
Save righettod/62c47f4c99f5b362346288497484fee5 to your computer and use it in GitHub Desktop.
Payloads to try to discover blind SQLi when no error is returned.
# The situation is the following:
# Your enter ab in a feature and it return data to you but when your enter ab' it indicate that there is not data found.
#
# So, does it means that there is no SQLi because ab' is well handled OR the error is catched
# and a "not data found message" is returned?
#
# The goal here is to submit a payload that, if interpreted by the SQL DB, will give ab and then data will be returned
# then indicating that there is a SQLi because the payload is interpreted.
ab';#
ab';--
a' 'b
a'/* */'b
a'||'b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment