参考文章
========================================

Tricks
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `sqlmap time based inject 分析 <http://blog.wils0n.cn/archives/178/>`_
- `SQLInjectionWiki <https://github.com/NetSPI/SQLInjectionWiki>`_
- `常见数据库写入Webshell汇总 <https://mp.weixin.qq.com/s/BucCNyCmyATdRENZp0AF2A>`_
- `MSSQL数据库攻击实战指北 <https://mp.weixin.qq.com/s/uENvpPan7aVd7MbSoAT9Dg>`_

Bypass
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `SQL注入ByPass的一些小技巧 <https://mp.weixin.qq.com/s/fSBZPkO0-HNYfLgmYWJKCg>`_
- `Waf Bypass之道 <https://xz.aliyun.com/t/368>`_
- `MySQL Bypass Wiki <https://github.com/aleenzz/MYSQL_SQL_BYPASS_WIKI>`_

NoSQL
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `NoSQL注入的分析和缓解 <http://www.yunweipai.com/archives/14084.html>`_
- `NoSQL注入 <https://mp.weixin.qq.com/s/tG874LNTIdiN7MPtO-hovA>`_

Cheatsheet
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `MSSQL Pentest Cheatsheet <https://github.com/Ignitetechnologies/MSSQL-Pentest-Cheatsheet>`_