Você pode gostar...
search\' and sleep(5) and \'wihh\'=\'wihh
miguel jarego a enfiar
search union all select null,null-- nbqn
search%\' waitfor delay \'0:0:5\' and \'%\'=\'
claudia ferreira
search\' and sleep(5) and \'utnr\'=\'utnr
search\' waitfor delay \'0:0:5\' and \'wbtk\'=\'wbtk
search) waitfor delay \'0:0:5\' and (4321=4321