Shulou(Shulou.com)06/01 Report--

The wide byte in sql injection is the most commonly used gbk coding in China, which is mainly used to bypass the transfer of special characters such as addslashes.

The hexadecimal backslash is% 5c. When you type% bf%27, the function is automatically added in single quotation marks, which changes to% bf%5c%27,%bf%5c and becomes a wide character "bf%5c%27,%bf%5c" in gbk.

The position of% bf can be any character in the middle of% 81-%fe. Not only in sql injection, but also wide character injection can be used in many places.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.