MichaellCader michaellcader

Must read

This is for SQL INSERT statement. For SELECT statements, please see https://gist.github.com/shriyanss/6192ee7eb80da5efc26916922fc9b035

I simply broke ChatGPT to generate the following examples while I was trying to learn SQL Injections. The following output is completely generated by ChatGPT:-

Certainly, here are examples of malicious inputs that could lead to SQL injection vulnerabilities in INSERT statements, along with the resulting queries. As always, it's crucial to use parameterized queries or prepared statements to prevent SQL injection.

Example 1: Classic SQL Injection in INSERT

Malicious Input:

Must read

This is for SQL INSERT statement. For INSERT statements, please see https://gist.github.com/shriyanss/1139f8c2b01e074642b7df745f9abc55

I simply broke ChatGPT to generate the following examples while I was trying to learn SQL Injections. The following output is completely generated by ChatGPT:-

I understand your request for examples of inputs that can lead to SQL injection vulnerabilities. Below are ten examples along with the potential malicious inputs and the resulting SQL queries. Please note that these examples are for educational purposes, and it's crucial to apply proper input validation and use parameterized queries or prepared statements to prevent SQL injection.

Example 1: Classic SQL Injection

Malicious Input:

ChainSwap 1

$800k
July 2, 2021
Vulnerability: Smart contract bug
Note: Users reported lost funds, ChainSwap shut down all nodes and a fix was deployed within 30 minutes.
Source: https://chain-swap.medium.com/chainswap-post-mortem-and-compensation-plan-90cad50898ab

ChainSwap 2

$4.4M
July 10, 2021
Vulnerability: Smart contract bug

	/**
	* RuntimeGlobalsChecker
	*
	* You can use this utility to quickly check what variables have been added (or
	* leaked) to the global window object at runtime (by JavaScript code).
	* By running this code, the globals checker itself is attached as a singleton
	* to the window object as "__runtimeGlobalsChecker__".
	* You can check the runtime globals programmatically at any time by invoking
	* "window.__runtimeGlobalsChecker__.getRuntimeGlobals()".
	*

	POST /api/v2/accounts
	GET /api/v2/activities?since=cstest
	GET /api/v2/audit_logs?filter[source_type]=cstest&filter[source_id]=1&filter[actor_id]=1&filter[ip_address]=cstest&filter[created_at]=cstest&filter[action]=cstest&sort_by=cstest&sort_order=cstest&sort=cstest
	GET /api/v2/automations
	POST /api/v2/automations
	GET /api/v2/bookmarks
	POST /api/v2/bookmarks
	GET /api/v2/brands
	POST /api/v2/brands
	GET /api/v2/custom_objects

	//
	// Headless SSO Login CSRF PoC
	// (c) Lauritz Holtmann, 2023
	//

	const pt = require('puppeteer')
	const express = require('express')
	const app = express()
	const port = 3000

	#!/usr/bin/env python3

	"""
	Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
	Based on: https://github.com/thalpius/Microsoft-Defender-for-Identity-Check-Instance.
	Usage: ./check_mdi.py -d <domain>
	"""

	import argparse
	import dns.resolver

	#!/system/bin/sh

	set -ex

	ip rule del fwmark 666 table 666 \|\| true
	ip route del local 0.0.0.0/0 dev lo table 666 \|\| true

	iptables -t nat -F
	iptables -t nat -X
	iptables -t mangle -F

	#!/bin/env python3

	import argparse
	import datetime
	import re
	import sys
	import uuid

	###############################################################################
	# Based off of Daniel Thatcher's guid tool

	//Moved to https://github.com/Incognito-Lab/Frida-WebView-Inspector
	//frida -U <ProcessName> -l iOS_WebViews_inspector.js
	//This Frida script checks if the Webview class is available in the current process. If it is available, it proceeds to use Frida's `choose` method to enumerate all instances of the class, and for each instance it calls the `onMatch` function.
	//After Webview classes instance is initialized, in Frida CLI, `%reload` should be used to reload this script.

	if (ObjC.available) {

	//Check iOS Version
	function iOSVersionFunc() {
	var processInfo = ObjC.classes.NSProcessInfo.processInfo();