ทดสอบระบบ |
นักจัดการงานทั่วไป |
1 |
123456 |
123456 |
0 |
123456 |
123456'and(select'1'from/**/cast(md5(1296833858)as/**/int))>'0 |
0 |
123456 |
123456"and"t"="b |
0 |
123456 |
123456 |
0 |
123456 |
123456/**/and/**/cast(md5('1332424243')as/**/int)>0 |
0 |
123456 |
(select*from(select+sleep(0)union/**/select+1)a) |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../../../../../../../../../../../../../etc/passwd |
123456 |
0 |
123456 |
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1487956919'))) |
0 |
${@var_dump(md5(305084116))}; |
123456 |
0 |
123456 |
(select*from(select+sleep(2)union/**/select+1)a) |
0 |
123456
expr 977533055 + 928787637 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../../../../../../../../../../../../../etc/passwd 123456 |
123456 |
0 |
123456 |
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1515846653')))>'0 |
0 |
|
|
0 |
|
|
0 |
|
|
0 |
งบประมาณ |
หล่อลำ้ |
1 |
555 |
1 |
0 |
555 |
1 |
0 |
555 |
1 |
0 |
555 |
1 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456'and/**/extractvalue(1,concat(char(126),md5(1026719083)))and' |
123456 |
0 |
123456 |
123456 |
0 |
123456"and/**/extractvalue(1,concat(char(126),md5(1288196249)))and" |
123456 |
0 |
123456 |
123456 |
0 |
extractvalue(1,concat(char(126),md5(1674022769))) |
123456 |
0 |
123456 |
123456 |
0 |
123456'and(select'1'from/**/cast(md5(1342869637)as/**/int))>'0 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456/**/and/**/cast(md5('1996040882')as/**/int)>0 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
'+(43346*41063)+' |
0 |
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1230542357'))) |
123456 |
0 |
123456 |
123456 |
0 |
aylwayctfbsmzjgtpluj |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1806883274')))>'0 |
123456 |
0 |
123456 |
123456 |
0 |
'+(40679*42460)+' |
123456 |
0 |
123456鎈'"\( |
123456 |
0 |
123456 |
aylwayctfbsmzjgtpluj |
0 |
123456 |
123456 |
0 |
123456'"\( |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456/**/and+1=1 |
0 |
123456 |
123456/**/and+3=5 |
0 |
123456 |
123456'and'u'='u |
0 |
123456 |
123456'and/**/extractvalue(1,concat(char(126),md5(1972374223)))and' |
0 |
123456 |
123456 |
0 |
123456 |
123456"and/**/extractvalue(1,concat(char(126),md5(1971374002)))and" |
0 |
123456 |
123456'and'd'='m |
0 |
123456 |
extractvalue(1,concat(char(126),md5(1752707196))) |
0 |
123456 |
123456 |
0 |
123456 |
123456"and"n"="n |
0 |
'-var_dump(md5(768668701))-' |
123456 |
0 |
123456|expr 974884559 + 855974810 |
123456 |
0 |
123456 |
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' |
0 |
123456 |
123456 |
0 |
123456 |
123456鎈'"\( |
0 |
./../../../../../../../../../../../../../../../../../../etc/passwd |
123456 |
0 |
123456$(expr 899766061 + 869710509) |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)=' |
0 |
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd |
123456 |
0 |
123456 |
123456'"\( |
0 |
123456&set /A 873689759+890406003 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" |
0 |
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u0 |
123456 |
0 |
123456 |
${@var_dump(md5(692399728))}; |
0 |
123456 |
123456 |
0 |
expr 829325566 + 969538974 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../etc/passwd |
123456 |
0 |
123456 |
123456"and(select*from(select+sleep(2))a/**/union/**/select+1)=" |
0 |
123456 |
'-var_dump(md5(154093822))-' |
0 |
123456 |
123456 |
0 |
123456 |
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ |
0 |
../../../../../../etc/passwd 123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/ |
0 |
./../../../../../../etc/passwd |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 |
0 |
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456
expr 824470410 + 809861250 |
0 |
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd |
123456 |
0 |
123456 |
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456|expr 817290053 + 934066651 |
0 |
/etc/passwd |
123456 |
0 |
123456 |
123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/ |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456$(expr 817120008 + 954806989) |
0 |
123456 |
123456 |
0 |
123456 |
123456'and(select+1)>0waitfor/**/delay'0:0:0 |
0 |
/etc/passwd 123456 |
123456 |
0 |
123456 |
123456 |
0 |
/*1*/{{829043903+938364471}} |
123456 |
0 |
123456 |
123456&set /A 879553548+992254928 |
0 |
123456 |
123456'and(select+1)>0waitfor/**/delay'0:0:2 |
0 |
${969481155+841146902} |
123456 |
0 |
%2fetc%2fpasswd |
123456 |
0 |
123456 |
expr 960159301 + 896000383 |
0 |
123456 |
123456 |
0 |
${885841685+840368603} |
123456 |
0 |
123456 |
123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('t',0) |
0 |
${(818499391+913094989)?c} |
123456 |
0 |
%u2215etc%u2215passwd |
123456 |
0 |
123456 |
123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('p',2) |
0 |
123456 |
123456 |
0 |
123456 |
${928324318+988355570} |
0 |
#set($c=888218691+865414596)${c}$c |
123456 |
0 |
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini |
123456 |
0 |
123456 |
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',0)='g |
0 |
123456 |
123456 |
0 |
<%- 900381200+863300540 %> |
123456 |
0 |
.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini |
123456 |
0 |
123456 |
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('t',2)='t |
0 |
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini |
123456 |
0 |
123456 |
123456 |
0 |
%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u0 |
123456 |
0 |
123456 |
123456 |
0 |
..\..\..\..\..\..\Windows\win.ini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
/*1*/{{901586360+860063802}} |
0 |
123456 |
123456 |
0 |
.\..\..\..\..\..\..\Windows\win.ini |
123456 |
0 |
123456 |
${908471095+961484585} |
0 |
123456 |
123456 |
0 |
..\..\..\..\..\..\Windows\win.ini 123456 |
123456 |
0 |
123456 |
${(947184182+811620871)?c} |
0 |
123456 |
123456 |
0 |
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini |
123456 |
0 |
123456 |
#set($c=988216782+957255769)${c}$c |
0 |
%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
<%- 947177544+981326612 %> |
0 |
../../../../../../../../../../../../../../../../../../Windows/win.ini |
123456 |
0 |
123456 |
123456 |
0 |
./../../../../../../../../../../../../../../../../../../Windows/win.ini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../../../../../../../../../../../../../Windows/win.ini 123456 |
123456 |
0 |
123456 |
123456 |
0 |
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u0 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../Windows/win.ini |
123456 |
0 |
123456 |
123456 |
0 |
./../../../../../../Windows/win.ini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../../../../Windows/win.ini 123456 |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini |
123456 |
0 |
123456 |
123456 |
0 |
WEB-INF/web.xml |
123456 |
0 |
123456 |
123456 |
0 |
WEB-INF/web.xml;123456 |
123456 |
0 |
../WEB-INF/web.xml |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../WEB-INF/web.xml;123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../WEB-INF/web.xml |
123456 |
0 |
123456 |
123456 |
0 |
../../WEB-INF/web.xml;123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../WEB-INF/web.xml |
123456 |
0 |
123456 |
123456 |
0 |
123456 |
123456 |
0 |
../../../WEB-INF/web.xml;123456 |
123456 |
0 |
../../../../WEB-INF/web.xml |
123456 |
0 |
123456/**/and+1=1 |
123456 |
0 |
../../../../WEB-INF/web.xml;123456 |
123456 |
0 |
123456/**/and+0=7 |
123456 |
0 |
123456'and'p'='p |
123456 |
0 |
123456 |
123456 |
0 |
123456'and'x'='s |
123456 |
0 |
123456"and"g"="g |
123456 |
0 |
123456"and"y"="e |
123456 |
0 |
(select*from(select+sleep(0)union/**/select+1)a) |
123456 |
0 |
123456 |
123456 |
0 |
(select*from(select+sleep(2)union/**/select+1)a) |
123456 |
0 |
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' |
123456 |
0 |
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)=' |
123456 |
0 |
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" |
123456 |
0 |
123456"and(select*from(select+sleep(2))a/**/union/**/select+1)=" |
123456 |
0 |
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ |
123456 |
0 |
123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/ |
123456 |
0 |
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 |
123456 |
0 |
123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0 |
123456 |
0 |
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ |
123456 |
0 |
123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/ |
123456 |
0 |
123456'and(select+1)>0waitfor/**/delay'0:0:0 |
123456 |
0 |
123456'and(select+1)>0waitfor/**/delay'0:0:2 |
123456 |
0 |
123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('t',0) |
123456 |
0 |
123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('b',2) |
123456 |
0 |
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('o',0)='o |
123456 |
0 |
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('o',2)='o |
123456 |
0 |