【攻略组出品】说出来你们可能不信！一个舒服的男鬼千元足矣

11

$(expr 892613878 + 940499494)

'and/**/extractvalue(1,concat(char(126),md5(1899392079)))and'

"and/**/extractvalue(1,concat(char(126),md5(1655747379)))and"

extractvalue(1,concat(char(126),md5(1731770904)))

'and(select'1'from/**/cast(md5(1728787954)as/**/int))>'0

/**/and/**/cast(md5('1109621853')as/**/int)>0

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1698024954')))

'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1749311497')))>'0

閹

'"\(

'and'e'='e

'and'c'='i

'and'k'='k

'and'f'='s

'and'f'='f

'and'n'='l

'and'a'='a

'and't'='p

"and"f"="f