Questions fréquemment posées

1. 123456
2. 123456
3. 123456
4. 123456 expr 863008398 + 859351641
5. 123456
6. 123456
7. ${@var_dump(md5(992907931))};
8. 123456
9. 123456|expr 926136931 + 922477347
10. 123456
11. /*1*/{{968162669+911016720}}
12. 123456
13. '-var_dump(md5(771803048))-'
14. 123456
15. 123456$(expr 980966248 + 821380567)
16. 123456
17. 123456
18. ${971049939+950394691}
19. 123456'and/**/extractvalue(1,concat(char(126),md5(1409691260)))and'
20. ${983975856+943414542}
21. 123456/**/and+1=1
22. 123456&set /A 951509406+885187097
23. 123456
24. ${(853976610+972999348)?c}
25. 123456"and/**/extractvalue(1,concat(char(126),md5(1024217512)))and"
26. 123456/**/and+2=9
27. expr 958163885 + 916880467
28. 123456
29. #set($c=921085224+863402951)${c}$c
30. extractvalue(1,concat(char(126),md5(1919129003)))
31. 123456'and'h'='h
32. 123456
33. <%- 815144672+891657665 %>
34. 123456'and(select'1'from/**/cast(md5(1621378645)as/**/int))>'0
35. 123456'and's'='l
36. 123456
37. 123456/**/and/**/cast(md5('1262334303')as/**/int)>0
38. 123456"and"x"="x
39. 123456
40. convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1350701981')))
41. 123456"and"t"="v
42. 123456
43. 123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1949362359')))>'0
44. 123456
45. 123456
46. 123456鎈'"\(
47. 123456
48. 123456
49. 123456'"\(
50. 123456
51. 123456
52. (select*from(select+sleep(0)union/**/select+1)a)
53. (select*from(select+sleep(2)union/**/select+1)a)
54. 123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
55. 123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
56. 123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
57. 123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="
58. 123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
59. 123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
60. 123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
61. 123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0
62. 123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
63. 123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
64. 123456'and(select+1)>0waitfor/**/delay'0:0:0
65. 123456'and(select+1)>0waitfor/**/delay'0:0:2
66. 123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('m',0)
67. 123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('g',2)
68. 123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n
69. 123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('h',2)='h
70. 123456 expr 976858447 + 941339997
71. 123456
72. 123456
73. 123456|expr 917038124 + 938224343
74. 123456
75. ${@var_dump(md5(893563043))};
76. 123456
77. 123456$(expr 855478030 + 833461577)
78. 123456
79. 123456
80. '-var_dump(md5(393691574))-'
81. 123456'and/**/extractvalue(1,concat(char(126),md5(1514248743)))and'
82. 123456&set /A 996294146+982913072
83. 123456
84. /*1*/{{893378387+903244201}}
85. 123456
86. 123456"and/**/extractvalue(1,concat(char(126),md5(1262775955)))and"
87. expr 814838314 + 962608117
88. 123456
89. ${921620309+835535870}
90. 123456/**/and+2=2
91. ${986647538+848434947}
92. 123456
93. extractvalue(1,concat(char(126),md5(1751127343)))
94. ${(907593706+921754506)?c}
95. 123456/**/and+3=8
96. 123456
97. 123456'and(select'1'from/**/cast(md5(1860961205)as/**/int))>'0
98. #set($c=856627622+868968978)${c}$c
99. 123456'and'w'='w
100. 123456
101. 123456'and'v'='o
102. <%- 979391381+820455009 %>
103. 123456/**/and/**/cast(md5('1759491783')as/**/int)>0
104. 123456
105. convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1858503625')))
106. 123456"and"o"="o
107. 123456
108. 123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1865189357')))>'0
109. 123456"and"t"="f
110. 123456
111. 123456鎈'"\(
112. 123456
113. 123456
114. 123456
115. 123456
116. 123456'"\(
117. 123456
118. 123456
119. (select*from(select+sleep(0)union/**/select+1)a)
120. (select*from(select+sleep(2)union/**/select+1)a)
121. 123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
122. 123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
123. 123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
124. 123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="
125. 123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
126. 123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
127. 123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
128. 123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0
129. 123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
130. 123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
131. 123456'and(select+1)>0waitfor/**/delay'0:0:0
132. 123456'and(select+1)>0waitfor/**/delay'0:0:2
133. 123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('d',0)
134. 123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('a',2)
135. 123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',0)='i
136. 123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('p',2)='p