What sign to use?

This might sound weird, but in SQL we use a lot of sign’s, as for our query to work the signs may differ.

A list of sign’s you can use to make your SQL Injection to work.

1.       - -  (Normally used in basic SQL Injections)

2.       /* (Used to bypass magic quote’s)

3.       –+- (Used in string based SQL Injections)

4.       a)b) (Used in blind SQL Injection mostly, as well for Error based)

5.       # (Used in error based SQL Injections)

6.       -- -- (Used in User Agent SQL Injections)

7.       – a (Used in WAF Bypass)

Now: To figure out which to use?

Some websites will have ‘magic quotes’ on which will filter some characters. Which will make our injection a little bit harder.